James Munnelly
f2f3aee50d
Update codebase for new API group
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-23 12:06:13 +01:00
James Munnelly
bf9fbea23f
Update codebase for new meta apigroup
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 19:25:04 +01:00
James Munnelly
58754abf37
Refactor codebase for v1alpha2
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly
e5f3b46018
Update OwningCertForSecret to use annotations to discover owner
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 15:35:46 +01:00
James Munnelly
dbf3258f4c
Move cainjector annotations into apis package
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 19:36:56 +01:00
James Munnelly
9b5f2bf669
Address review comments
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 13:02:14 +01:00
James Munnelly
6967baad8e
Only allow injecting from Secrets that have the AllowsInjectionFromSecretAnnotation annotation
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:03 +01:00
James Munnelly
dd66c11115
Extend cainjector to support injecting from secrets
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:01 +01:00
James Munnelly
ce475e1640
Move TLSCAKey to v1alpha1 package
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 01:21:15 +01:00
Solly Ross
dc613f5dc3
[CA Injector] Don't requeue on deletes
...
We need to silently ignore non-found on the initial get, otherwise we'll
requeue on deletes.
Signed-off-by: Solly Ross <sollyross@google.com>
2019-06-13 13:31:42 -07:00
Solly Ross
95ac5a498c
Add support for CRDs to the CA injector
...
This adds support for the CRD conversion webhook configuration to the CA
injector controller.
Signed-off-by: Solly Ross <sollyross@google.com>
2019-06-13 13:31:42 -07:00
James Munnelly
25af59a0d5
Use v1beta1 API version in cainjector controller
...
This resolves issues when running the cainjector on Kubernetes 1.9,
as the 1.9 apiserver is not aware of the 'v1' API version.
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-24 11:19:24 +01:00
James Munnelly
6b24e9c966
Update cainjector
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly
1618ebde43
Fix loading apiserver caBundle
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-28 19:34:40 +00:00
James Munnelly
b34adf88ff
cainjector: support injecting apiserver ca
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-28 16:45:26 +00:00
Solly Ross
42248a91d7
CA Injector Controller
...
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.
Signed-off-by: Solly Ross <sollyross@google.com>
2019-02-26 21:47:34 -08:00