Dario Tranchitella
bdce4a7b4f
doc: documenting --allow-tenant-ingress-hostnames-collision new CLI flag
2021-03-06 16:58:44 +01:00
Dario Tranchitella
0dedd48789
test: new flag --allow-tenant-ingress-hostnames-collision
2021-03-06 16:58:44 +01:00
Dario Tranchitella
dfb7a5e227
feat: allowing Tenants with collided Ingress hostnames
...
A new flag (`--allow-tenant-ingress-hostnames-collision`) is added,
defaulted to false: when toggled, Capsule will not check if each
declared hostname in `.spec.IngressHostnames.allowed` is already in use
on any other Tenant.
2021-03-06 16:58:44 +01:00
Dario Tranchitella
d78bcd8b00
test(e2e): using default timeout and interval periods
2021-03-06 15:57:25 +01:00
Dario Tranchitella
0cad87e1ed
test(e2e): avoiding reaping of unhealthy nodes blocking CI
2021-03-06 15:57:25 +01:00
Dario Tranchitella
74b0594cf4
feat(helm): customizable liveness and readiness probes
2021-03-06 15:57:25 +01:00
Dario Tranchitella
7fef4e5237
bug: type-switching on Ingress webhook for hostname collision
2021-03-06 15:06:18 +01:00
Dario Tranchitella
4a7c522eb5
bug: disabling ingresses.networking.k8s.io indexers on k8s < 1.19
2021-03-06 15:06:18 +01:00
Dario Tranchitella
8319bd3a85
build(helm): support for allow Ingress hostname collision
2021-03-05 22:50:35 +01:00
Dario Tranchitella
5d3770ae8d
doc: documenting --allow-ingress-hostname-collision CLI flag
2021-03-05 22:50:35 +01:00
Dario Tranchitella
3fa78ea3df
test: testing Ingress hostname collision
2021-03-05 22:50:35 +01:00
Dario Tranchitella
4fbede0989
feat: Ingress hostnames collision check
...
Disabled by default to avoid breaking changes for upcoming release,
although minor will be enabled by default.
Using the new `--allow-ingress-hostname-collision` flag Capsule can
ignore the Ingress hostnames collision allowing the Cluster
Administrator to put in place a non-opinionated hostnames allocation.
2021-03-05 22:50:35 +01:00
Davide Imola
d7b19a4930
build: using Docker build args for build metadata ( #217 )
2021-03-05 21:02:41 +01:00
Dario Tranchitella
452bceff34
fix: additional metadata must be controlled just from Tenant manifest ( #211 )
2021-03-04 10:02:14 +01:00
Erin Corson
2ea36db5d6
fix(typo): fixing typo in several webhook error messages ( #212 )
...
Co-authored-by: Erin Corson <ecorson@vmware.com >
2021-03-04 08:24:11 +01:00
Davide Imola
737b6ce65a
Fix link to script ( #210 )
2021-03-01 22:50:24 +01:00
Unai Arríen
666faeb72a
build(helm): making customizable components Docker images ( #209 )
2021-03-01 17:26:43 +01:00
Don High
4f34483dee
Documentation Spelling Mistakes #197 ( #203 )
...
* Update README.md
Proof Read the README.md
* Update index.md
Proof Read index.md
* Update overview.md
Proof Read overview.md
* Update onboarding.md
Proof Read onboarding.md
* Update create-namespaces.md
Proof Read create-namespaces.md
* Update permissions.md
Proof Read permissons.md
* Update resources-quota-limits.md
Proof Read resources-quota-limits.md
* Update nodes-pool.md
Proof Read nodes-pool.md
* Update ingress-classes.md
Proof Read ingress-classes.md
* Update ingress-hostnames.md
Proof Read ingress-hostnames.md
* Update storage-classes.md
Proof Read storage-classes.md
* Update images-registries.md
Proof Read images-registries.md
* Update custom-resources.md
Proof Read custom-resources.md
* Update multiple-tenants.md
Proof Read multiple-tenants.md
* Update README.md
Updated the Suggested text
* Update README.md
Made the correction
* Update docs/operator/use-cases/images-registries.md
Co-authored-by: Don High <donghigh@yahoo.com >
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2021-02-19 11:40:20 +01:00
Erin Corson
e3b927f112
some typos and whatnot ( #201 )
...
Co-authored-by: Erin Corson <ecorson@vmware.com >
2021-02-16 22:18:02 +01:00
Dario Tranchitella
d9220f1e15
build(helm): avoiding deletion of Capsule secrets on Helm upgrade ( #194 )
2021-02-08 17:23:44 +01:00
Dario Tranchitella
f03e36e774
test: creating namespace and forcing upload of last built image ( #195 )
2021-02-08 17:19:23 +01:00
Brian Fox
7c30390206
docs: fix type in README.md ( #198 )
2021-02-03 16:00:18 +01:00
Dario Tranchitella
16906db309
Validating Tenant also on UPDATE ( #191 )
v0.0.5-rc1
2021-01-21 07:11:59 +01:00
Adriano Pezzuto
d25ed7f2df
Helm Chart icon fix ( #192 )
2021-01-16 14:01:13 +01:00
Dario Tranchitella
51f5bec5a6
Fixing the IngressClass return logic breaking Hostnames check ( #185 )
2021-01-15 09:45:09 +01:00
Dario Tranchitella
d3f3f93a24
CRD schema do not must preserving unknown fields ( #188 )
2021-01-15 09:44:04 +01:00
Dario Tranchitella
24bd363ee0
Updating v0.0.4 also for Kustomization installation ( #186 )
2021-01-14 19:22:14 +01:00
Dario Tranchitella
504241a948
Bumping Capsule to v0.0.4 ( #183 )
2021-01-14 00:00:02 +01:00
Dario Tranchitella
d2700556dd
Adding linters and aligning code ( #169 )
...
* Adding linters and aligning code
* Aligning ingressHostnames to AllowedListSpec
v0.0.4
2021-01-13 23:49:11 +01:00
Paolo Carta
89c66de7c6
Implementing allowed Ingress hostnames ( #162 )
...
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2021-01-13 22:18:09 +01:00
Adriano Pezzuto
a2109b74ef
add architecture diagram in readme ( #182 )
2021-01-07 19:23:38 +01:00
Maxim Fedotov
4dc92451ea
IsInCapsuleGroup binary search is case-sensitive broken ( #181 )
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2021-01-05 13:10:27 +01:00
Adriano Pezzuto
46a7a0b917
Update documentation with capsule-proxy ( #179 )
...
* update docs for capsule-proxy
* update docs with minor enhancements
* fix broken link
2021-01-02 14:20:57 +01:00
Geofrey Ernest
1ed5d703e6
Short circuit error returns ( #175 )
2020-12-23 15:08:15 +01:00
Dario Tranchitella
cb986384db
Letting tests to accept eventually value, rather than strict expectation ( #176 )
2020-12-23 10:49:14 +01:00
Dario Tranchitella
49c8131eb5
Adding k8s 1.20 to E2E testing matrix and updating 1.19 to latest stable release ( #171 )
2020-12-20 23:47:34 +01:00
Dario Tranchitella
82bbd238fb
Making tests less flaky ( #172 )
2020-12-20 23:29:54 +01:00
Dario Tranchitella
03eb6e633e
No loop on ResourceQuota outer updates and error handling improvements ( #168 )
...
* Avoiding loop on updating outer resource quota
* Using retryOnConflict on Tenant status update
* Using errgroup instead of bare go routines
* Testing Namespace Capsule default label presence
2020-12-20 12:25:41 +01:00
Adriano Pezzuto
6e24aad094
Improve documentation ( #146 )
...
* move docs in a separate folder
* review of readme and add faq
* rewrite use cases
* more use cases
* add new project logo
* minor improvements
2020-12-15 00:03:07 +01:00
bsctl
aa6881e32e
delete conflicting doc files
2020-12-15 00:00:17 +01:00
Dario Tranchitella
98e441f1e9
Enforcing Service external IPs ( #161 )
2020-12-11 19:17:46 +01:00
Dario Tranchitella
007bdff512
Only owner Tenant specification key is mandatory ( #153 )
...
* Only Tenant owner specification key is mandatory
* Increasing default timeout to avoid e2e flakiness on GH Actions
* Ensuring also empty Namespace annotations and labels
2020-12-11 15:47:29 +01:00
Dario Tranchitella
a3c77b3531
Enhancing Helm Chart lifecycle ( #156 )
2020-12-10 14:21:41 +01:00
Dario Tranchitella
3e38884a6c
Annotating Tenant's Namespaces with allowed registries ( #154 )
...
* Updating allowed registries docs w/ Namespace annotations
2020-12-09 15:20:14 +01:00
Dario Tranchitella
40130696bb
Annotating ResourceQuota with Hard quota ( #158 )
2020-12-09 15:19:16 +01:00
Dario Tranchitella
12a8c469e8
Requiring Helm Chart version
2020-12-06 02:26:37 +01:00
Dario Tranchitella
27cdd84b3b
Updating Helm instructions ( #149 )
2020-12-01 23:43:35 +01:00
Dario Tranchitella
f6fd0cfe3f
Helm Charts are now inside of the repository ( #147 )
...
* Adding Helm chart source
* Pointing to new Chart location
* Setting GitHub Action for remote Helm Chart release
* Updating Go dependencies
* Using Helm as default installation tool
* Separating diff and e2e jobs
* Aligning tests to Helm labels
* Checking fmt and vet, and fixing it
* We don't need limits on E2E
2020-12-01 23:30:31 +01:00
Dario Tranchitella
0641350575
Releasing v0.0.3 ( #144 )
v0.0.3
2020-11-25 17:15:20 +01:00
Dario Tranchitella
5aed7a01d5
Enforcing container registry via list or regex ( #142 )
...
Adding also NamespaceSelector to specific webhooks in order to decrease
the chance ov breaking other critical Namespaces in case of Capsule
failures.
2020-11-24 00:40:40 +01:00