Dario Tranchitella
3afee659ff
chore(kustomize): new CRD and webhooks for admission/v1
2021-05-14 13:55:51 +02:00
Dario Tranchitella
82ae78b704
chore(kustomize): deprecating metrics RBAC proxy
2021-05-08 14:51:55 +02:00
Dario Tranchitella and GitHub
d8449fee24
Helm and Kustomize to v0.0.5 ( #239 )
...
* build(kustomize): ready for v0.0.5
* build(helm): ready for release v0.0.5
2021-03-20 17:25:56 +01:00
Dario Tranchitella and GitHub
16906db309
Validating Tenant also on UPDATE ( #191 )
2021-01-21 07:11:59 +01:00
Dario Tranchitella and GitHub
d3f3f93a24
CRD schema do not must preserving unknown fields ( #188 )
2021-01-15 09:44:04 +01:00
Dario Tranchitella and GitHub
24bd363ee0
Updating v0.0.4 also for Kustomization installation ( #186 )
2021-01-14 19:22:14 +01:00
Dario Tranchitella and GitHub
d2700556dd
Adding linters and aligning code ( #169 )
...
* Adding linters and aligning code
* Aligning ingressHostnames to AllowedListSpec
2021-01-13 23:49:11 +01:00
89c66de7c6
Implementing allowed Ingress hostnames ( #162 )
...
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2021-01-13 22:18:09 +01:00
Dario Tranchitella and GitHub
98e441f1e9
Enforcing Service external IPs ( #161 )
2020-12-11 19:17:46 +01:00
Dario Tranchitella and GitHub
007bdff512
Only owner Tenant specification key is mandatory ( #153 )
...
* Only Tenant owner specification key is mandatory
* Increasing default timeout to avoid e2e flakiness on GH Actions
* Ensuring also empty Namespace annotations and labels
2020-12-11 15:47:29 +01:00
Dario Tranchitella and GitHub
0641350575
Releasing v0.0.3 ( #144 )
2020-11-25 17:15:20 +01:00
Dario Tranchitella and GitHub
5aed7a01d5
Enforcing container registry via list or regex ( #142 )
...
Adding also NamespaceSelector to specific webhooks in order to decrease
the chance ov breaking other critical Namespaces in case of Capsule
failures.
2020-11-24 00:40:40 +01:00
Dario Tranchitella and GitHub
6541f19b67
Automating version pick-up according to current git version and minor Kustomize hotfixes ( #135 )
2020-11-17 19:20:31 +01:00
Dario Tranchitella and GitHub
45709f7bd3
Providing additional print column for the nodeSelector Tenant spec ( #138 )
2020-11-17 16:58:03 +01:00
Dario Tranchitella and GitHub
2d628e1cd0
Upgrading GitHub actions ( #136 )
...
* New KinD GitHub action
* Upgrading golangci-lint
2020-11-17 09:27:53 +01:00
Dario Tranchitella and GitHub
ea599ba6e6
Supporting additional Role Bindings per Tenant ( #133 )
...
* Enabling Capsule to run on a cluster with PodSecurityPolicy enabled
* Supporting additional Role Binding per Tenant
* Documenting the additionalRoleBindings specification
2020-11-16 13:51:44 +01:00
078588acb5
migrating service webhook to controller p1 ( #130 )
...
migrating service webhook to controller p2
migrating service webhook to controller p3. add tests
Using an abstract reconciler to avoid copy/paste code
update tests. remove service_labels webhook. fix bug in sync labels\endpoint func
apply review notes
disable EndpointSlicesLabelsReconciler for kubernetes versions <=1.16
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-11-10 19:43:30 +03:00
Dario Tranchitella and GitHub
0ce901f8dd
Using latest current version rather than latest tag ( #127 )
2020-11-02 16:35:21 +01:00
Dario Tranchitella and GitHub
a7f7c00558
Supporting ingresses.networking.k8s.io/v1 ( #110 )
...
* Updating to controller-runtime v0.7.0-alpha.4 and k8s 0.19.3
* Implementing ingresses.networking.k8s.io/v1
* Aligning to latest zap signatures
2020-10-23 21:19:14 +02:00
Dario Tranchitella and GitHub
aee6e72f1e
Adding StorageClassesSpec and IngressClassesSpec to Tenant example ( #97 )
2020-09-16 20:50:15 +02:00
Dario Tranchitella and GitHub
3cae5e9c8c
Upgrading to latest Kubernetes libraries ( #92 )
2020-09-15 11:55:02 +02:00
875650f185
Regexp support for Ingress and Storage classes ( #89 )
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-15 11:08:14 +02:00
303fc4d69c
Support Groups as Subject Kind for Tenant Namespace RoleBindings created by Capsule ( #71 )
...
Modified CRD to support Owner struct.
Added Tenant name validation webhook.
Rewrote owner_reference hook logic.
Updated and added new e2e tests.
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-10 17:02:22 +02:00
e8362f739f
Add Service labelling and annotating webhook ( #84 )
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-10 11:56:51 +02:00
Dario Tranchitella and GitHub
a4b0c0fe27
Using HTTP handlers as closures ( #82 )
...
* Using HTTP handlers as closures
* Avoiding variable shadowing
* Optimizing Ingress webhook
* Missing license header
2020-09-09 13:33:25 +02:00
Dario Tranchitella and GitHub
12b1338dad
Making Namespace no more hard-coded ( #83 )
2020-09-09 13:33:03 +02:00
Dario Tranchitella and GitHub
ee0261c069
Providing namespace metadata additional labels and annotations ( #80 )
2020-09-07 15:09:34 +02:00
164431959c
Add capsule-user-group CLI flag ( #67 )
...
* add capsule-user-group param
* Implementing RBAC controller
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2020-09-01 12:15:48 +02:00
Dario Tranchitella and GitHub
ef51e6dee0
Adding zap controlled by CLI flags ( #47 )
...
* Adding zap controlled by CLI flags
* Updating contributing for further logs
2020-08-07 15:42:07 +02:00
Dario Tranchitella and GitHub
272bbf261e
Providing shortName tnt for Tenant ( #45 )
2020-08-07 12:12:28 +02:00
Dario Tranchitella and GitHub
38cd3be71a
Programmatic Tenant prefix for the Capsule namespaces ( #41 )
2020-08-07 10:25:05 +02:00
Dario Tranchitella and GitHub
941bddb81d
Adding additional printer columns ( #40 )
2020-08-06 13:43:22 +02:00
Dario Tranchitella and GitHub
5d20d515a7
Migrating from OperatorSDK 0.18 to 0.19 ( #23 )
2020-08-04 16:30:28 +02:00
Dario Tranchitella
