Dario Tranchitella
0830b3629e
chore(header): moving to new neutral organization
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-16 21:29:23 +02:00
Dario Tranchitella
d7a48d771f
refactor: moving to new neutral organization
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-16 21:29:23 +02:00
Dario Tranchitella
37455417bc
fix: resource quota annotations key max length support
2023-09-26 17:39:20 +02:00
Dario Tranchitella
ffa4a47e6b
fix(gosec): implicit memory aliasing in for loop
2023-08-19 09:20:15 +02:00
Max Fedotov and Dario Tranchitella
45ad56c586
fix: remove ownerReferences from tenantResource namespacedItems before applying them
2023-06-27 19:05:56 +02:00
Dario Tranchitella
809fa11741
refactor(golint): removing deprecated functions
2023-05-25 14:36:48 +02:00
Dario Tranchitella
5457df7e96
refactor(deps): updating to controller-runtime 0.15.0
2023-05-25 14:36:48 +02:00
Max Fedotov and Dario Tranchitella
e15773e811
fix: missing v1beta2 version for CRD ConversionReviewVersions
2023-04-25 12:41:44 +02:00
Dario Tranchitella
65d5b24896
feat: blocking replicated resources write ops by tenant owners
2023-03-28 12:56:58 +02:00
Dario Tranchitella
89348c9499
chore(golangci-lint): updating to latest version and code alignement
2023-03-02 15:32:47 +01:00
Dario Tranchitella
8e7078ad4f
feat: template support for rawitems
...
Allowed template values:
- `{{ tenant.name }}` for the Tenant name managing the Namespace
- `{{ namespace }}` for the Namespace where the resource is replicated
2023-02-16 09:20:42 +01:00
Dario Tranchitella
4e5c00fa65
refactor: optimizing processing of tenant resources per namespace
2023-02-16 09:20:42 +01:00
Dario Tranchitella
d63a9a0ca6
fix: creation of namespaced resources backed by cache
2023-02-16 09:20:42 +01:00
Dario Tranchitella
de587919f8
fix(tenantresources): using actual resourceversion during createorupdate
2023-01-31 16:57:07 +01:00
Dario Tranchitella
ea88b102e5
feat: pv labelling and preventing cross-tenant mount
2023-01-26 09:31:16 +01:00
Oliver Bähler and Dario Tranchitella
9f10923d21
fix: use v1beta2 for capsuleconfiguration kind
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2022-12-29 17:49:45 +01:00
Dario Tranchitella
43bd2491ae
refactor(api): switching to v1beta2 as storage version
2022-12-27 17:53:17 +01:00
b1ec9fed50
feat: refactor resources controller
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2022-12-26 14:27:26 +01:00
Dario Tranchitella
503e3fc1d0
feat: globaltenantresource and tenantresource reconciliation
2022-12-26 14:27:26 +01:00
Dario Tranchitella
4835b94839
style: conforming go files headers
2022-12-26 14:27:26 +01:00
Dario Tranchitella
cf52924870
refactor: abstracting types used by several api versions
2022-12-26 14:27:26 +01:00
Dario Tranchitella
d20e466732
feat: support for ca update on crds objects
2022-12-26 14:27:26 +01:00
Dario Tranchitella
fb5c1a1fa6
feat: supporting k8s >= 1.25
2022-12-18 11:20:25 +01:00
Dario Tranchitella
75525ac192
fix: preventing serviceaccount privilege escalation
2022-12-02 15:19:06 +01:00
Alessio Pragliola and Dario Tranchitella
ede96f5cf4
fix: service controller not skipping sentinel errs
2022-10-14 20:21:32 +02:00
Dario Tranchitella
098a74b565
refactor(capsuleconfiguration): allowing to skip tls reconciler
2022-07-26 17:48:58 +02:00
Dario Tranchitella
ab750141c6
refactor: support for rfc 1123 for tenant owners cluster roles overrides
2022-06-29 10:53:35 +00:00
Dario Tranchitella
e15191c2a0
refactor: sentinel error for running in out of cluster mode
2022-06-29 08:31:21 +00:00
Oliver Bähler and Dario Tranchitella
cac2920827
feat: grant global patch privileges and add patch handler
2022-06-09 18:32:39 +00:00
Dario Tranchitella
4f55dd8db8
refactor: removing unrequired verb for clusterrole namespace deleter
2022-06-09 18:30:52 +00:00
Maksim Fedotov and Dario Tranchitella
f1dc028649
feat: generate TLS certificates before starting controllers
2022-06-08 11:12:35 +00:00
Maksim Fedotov and Dario Tranchitella
82b58d7d53
feat: refactor capsule TLS certificates management
2022-06-08 11:12:35 +00:00
song and Dario Tranchitella
b9fc50861b
style: removing unused struct field
2022-05-24 15:31:24 +00:00
Dario Tranchitella
9f6883d309
fix: formatting error message for service-related objects
2022-05-05 13:33:39 +00:00
Dario Tranchitella
49e76f7f93
style: linters refactoring
2022-05-05 13:33:39 +00:00
Dario Tranchitella
9d69770888
style: fixing linters issues
2022-05-05 13:33:39 +00:00
Dario Tranchitella
f4ac85dfed
refactor: using k8s client scheme
2022-05-05 13:33:39 +00:00
Dario Tranchitella
cb4289d45b
refactor: using kubernetes tls secret key names
2022-05-05 13:33:39 +00:00
Dario Tranchitella
01197892a4
refactor: optimizing watchers predicates
2022-05-05 13:33:39 +00:00
Dario Tranchitella
345836630c
refactor: avoiding using background context
2022-05-05 13:33:39 +00:00
Dario Tranchitella
9fd18db5a5
feat: dynamic cluster roles for tenant owners
2022-04-14 14:35:59 +00:00
Dario Tranchitella
cb3ce372b9
fix: ensuring ca bundle replication upon helm upgrade
2022-04-14 14:10:32 +00:00
Davide Imola and Dario Tranchitella
569d803e95
fix: using configuration for mutating and validating webhooks
2022-03-31 13:02:25 +00:00
Davide Imola and Dario Tranchitella
7b3b0d6504
fix: using configuration for tls and ca secret names
2022-03-31 13:02:25 +00:00
19aff8c882
fix: ignore NotFound error in ServiceLabelsReconciler ( #494 )
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2021-12-29 18:26:45 +02:00
Dario Tranchitella
e53911942d
feat: limiting amount of resources deployed in a tenant
2021-12-23 11:39:34 +00:00
Dario Tranchitella
778fb4bcc2
fix: starting all controllers only when certificates are generated
...
This is going to solve the issue when upgrading Capsule <v0.1.0 to
>=v0.1.0: due to a resource reflector many warning were polluting the
reconciliation loop and causing unmarshaling errors.
Additionally, just the CA secret was checked before starting the
Operator, when also the TLS is requested for the webhooks, along with
the `/convert` one that is used for the CR version conversion.
2021-12-21 06:45:16 +00:00
Oliver Bähler and Dario Tranchitella
5c7804e1bf
fix: add rolebinding validation against rfc-1123 dns for sa subjects
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2021-11-12 11:22:26 +01:00
Oliver Bähler and Dario Tranchitella
c4481f26f7
docs: additions to dev-guide
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2021-11-12 11:22:26 +01:00
Maksim Fedotov and Dario Tranchitella
ec715d2e8f
fix: do not register tenant controller\webhook\indexer until CA is created
2021-11-06 16:34:22 +01:00
