Oliver Bähler and Dario Tranchitella
21c0d04ead
fix(controller): respect group quotas for number of operating system threads allocated to goroutines
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2023-11-30 14:47:30 +01:00
Oliver Bähler and Dario Tranchitella
c58b46cedf
feat(tenant): add label with tenant name for each tenant
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2023-11-29 07:24:27 +01:00
Dario Tranchitella
0241603f2b
feat!: deprecating v1alpha1 api
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-11-26 17:16:33 +01:00
Dario Tranchitella and Giuseppe Chiesa
d94430466e
feat: additional metadata for pods
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
Co-authored-by: Giuseppe Chiesa <mail@giuseppechiesa.it >
2023-11-24 11:10:42 +01:00
Oliver Bähler and Dario Tranchitella
cde44ba14e
fix(controller): copy ownerreference from oldNs on namespace UPDATE admission requests
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2023-11-09 13:59:21 +01:00
Dario Tranchitella
364332c380
deps(controller-runtime): upgrading to v0.16.3
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-24 10:00:46 +02:00
Dario Tranchitella
0830b3629e
chore(header): moving to new neutral organization
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-16 21:29:23 +02:00
Dario Tranchitella
d7a48d771f
refactor: moving to new neutral organization
...
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu >
2023-10-16 21:29:23 +02:00
Dario Tranchitella
5457df7e96
refactor(deps): updating to controller-runtime 0.15.0
2023-05-25 14:36:48 +02:00
Dario Tranchitella
65d5b24896
feat: blocking replicated resources write ops by tenant owners
2023-03-28 12:56:58 +02:00
Zadkiel Aharonian and Dario Tranchitella
010ed41ca7
feat(manager): allow customization of the webhook port
2023-03-04 11:58:32 +01:00
Dario Tranchitella
89348c9499
chore(golangci-lint): updating to latest version and code alignement
2023-03-02 15:32:47 +01:00
Dario Tranchitella
ea88b102e5
feat: pv labelling and preventing cross-tenant mount
2023-01-26 09:31:16 +01:00
Oliver Bähler and Dario Tranchitella
ab0fe91c58
feat: add defaults handler
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2023-01-14 15:51:01 +01:00
Oliver Bähler and GitHub
79391f863a
feat: add runtimeclass control
...
Signed-off-by: Oliver Baehler <oliver.baehler@hotmail.com >
2022-12-28 15:01:28 +01:00
Dario Tranchitella
43bd2491ae
refactor(api): switching to v1beta2 as storage version
2022-12-27 17:53:17 +01:00
b1ec9fed50
feat: refactor resources controller
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2022-12-26 14:27:26 +01:00
Dario Tranchitella
503e3fc1d0
feat: globaltenantresource and tenantresource reconciliation
2022-12-26 14:27:26 +01:00
Dario Tranchitella
bca70e634d
feat: introducing v1beta2 api group
2022-12-26 14:27:26 +01:00
Dario Tranchitella
75525ac192
fix: preventing serviceaccount privilege escalation
2022-12-02 15:19:06 +01:00
Dario Tranchitella
098a74b565
refactor(capsuleconfiguration): allowing to skip tls reconciler
2022-07-26 17:48:58 +02:00
Oliver Bähler and Dario Tranchitella
cac2920827
feat: grant global patch privileges and add patch handler
2022-06-09 18:32:39 +00:00
Maksim Fedotov and Dario Tranchitella
f1dc028649
feat: generate TLS certificates before starting controllers
2022-06-08 11:12:35 +00:00
Maksim Fedotov and Dario Tranchitella
82b58d7d53
feat: refactor capsule TLS certificates management
2022-06-08 11:12:35 +00:00
Maksim Fedotov and Dario Tranchitella
1af56b736b
feat: support cert-manager for generating tls and ca
2022-05-23 07:17:20 +00:00
Maksim Fedotov and Dario Tranchitella
23564f8e40
feat: protected tenant annotation
2022-05-18 18:06:10 +02:00
Dario Tranchitella
49e76f7f93
style: linters refactoring
2022-05-05 13:33:39 +00:00
Dario Tranchitella
f4ac85dfed
refactor: using k8s client scheme
2022-05-05 13:33:39 +00:00
Dario Tranchitella
345836630c
refactor: avoiding using background context
2022-05-05 13:33:39 +00:00
Davide Imola and Dario Tranchitella
7b3b0d6504
fix: using configuration for tls and ca secret names
2022-03-31 13:02:25 +00:00
Pandry and Dario Tranchitella
d4a5f3beca
fix: validate regex patterns in annotations #510
2022-02-22 06:11:49 +00:00
Dario Tranchitella
e53911942d
feat: limiting amount of resources deployed in a tenant
2021-12-23 11:39:34 +00:00
Dario Tranchitella
778fb4bcc2
fix: starting all controllers only when certificates are generated
...
This is going to solve the issue when upgrading Capsule <v0.1.0 to
>=v0.1.0: due to a resource reflector many warning were polluting the
reconciliation loop and causing unmarshaling errors.
Additionally, just the CA secret was checked before starting the
Operator, when also the TLS is requested for the webhooks, along with
the `/convert` one that is used for the CR version conversion.
2021-12-21 06:45:16 +00:00
Oliver Bähler and Dario Tranchitella
5c7804e1bf
fix: add rolebinding validation against rfc-1123 dns for sa subjects
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2021-11-12 11:22:26 +01:00
Maksim Fedotov and Dario Tranchitella
ec715d2e8f
fix: do not register tenant controller\webhook\indexer until CA is created
2021-11-06 16:34:22 +01:00
14f9686bbb
Forbidden node labels and annotations ( #464 )
...
* feat: forbidden node labels and annotations
* test(e2e): forbidden node labels and annotations
* build(kustomize): forbidden node labels and annotations
* build(helm): forbidden node labels and annotations
* build(installer): forbidden node labels and annotations
* chore(make): forbidden node labels and annotations
* docs: forbidden node labels and annotations
* test(e2e): forbidden node labels and annotations. Use EventuallyCreation func
* feat: forbidden node labels and annotations. Check kubernetes version
* test(e2e): forbidden node labels and annotations. Check kubernetes version
* docs: forbidden node labels and annotations. Version restrictions
* feat: forbidden node labels and annotations. Do not update deepcopy functions
* docs: forbidden node labels and annotations. Use blockquotes for notes
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2021-11-02 20:01:53 +03:00
Maksim Fedotov and Dario Tranchitella
a14c7609df
feat: namespace labeling for tenant owners
2021-09-23 14:10:24 +02:00
alegrey91 and Dario Tranchitella
196e3c910d
feat: add deny-wildcard annotation
2021-09-21 19:14:49 +02:00
Dario Tranchitella
26965a5ea2
fix: skipping indexer if error is a NoKindMatch
2021-09-17 15:43:42 +02:00
Dario Tranchitella
94c6a64fcb
fix: validating Tenant owner name when is a ServiceAccount
2021-09-04 14:17:06 +02:00
Dario Tranchitella
df08c9e63e
refactor: hostname collision is now managed at Tenant level
2021-08-12 19:30:27 +02:00
Dario Tranchitella
09277e9f3d
feat: Ingress hostname collision scope at Tenant level
2021-08-12 19:30:27 +02:00
ddb9ffd79e
refactor: split tenant controller to separate files
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2021-08-07 21:37:48 +02:00
Maksim Fedotov and Dario Tranchitella
cae65c9f84
fix: capsuleconfiguration controller package name should be config instead of rbac
2021-08-07 20:40:08 +02:00
Maksim Fedotov and Dario Tranchitella
e6b433dcd7
feat(v1beta1): update code to use v1beta1 version
2021-07-02 10:14:06 +02:00
Dario Tranchitella
ac6af13b07
feat(v1beta1): registering conversion webhook
2021-07-02 10:14:06 +02:00
Dario Tranchitella
8fb4b7d4a1
feat: scaffolding v1beta1 Tenant version
2021-07-02 10:14:06 +02:00
Dario Tranchitella
ba07f99c6e
refactor!: using multiple handers per route
2021-06-27 22:36:55 +02:00
Dario Tranchitella
7574335a8a
refactor: using separated webhooks for Namespace handling
2021-06-24 13:47:43 +02:00
Dario Tranchitella
5de0a6d712
# This is a combination of 2 commits.
...
# This is the 1st commit message:
feat: cordoning Tenant webhook
# The commit message #2 will be skipped:
# 5cc
2021-06-24 13:47:43 +02:00
