Dario Tranchitella
ea599ba6e6
Supporting additional Role Bindings per Tenant ( #133 )
...
* Enabling Capsule to run on a cluster with PodSecurityPolicy enabled
* Supporting additional Role Binding per Tenant
* Documenting the additionalRoleBindings specification
2020-11-16 13:51:44 +01:00
Maxim Fedotov
078588acb5
migrating service webhook to controller p1 ( #130 )
...
migrating service webhook to controller p2
migrating service webhook to controller p3. add tests
Using an abstract reconciler to avoid copy/paste code
update tests. remove service_labels webhook. fix bug in sync labels\endpoint func
apply review notes
disable EndpointSlicesLabelsReconciler for kubernetes versions <=1.16
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-11-10 19:43:30 +03:00
Dario Tranchitella
2c54d91306
Enforcing back tenant selection using closest match ( #129 )
2020-11-05 11:20:48 +01:00
Dario Tranchitella
e764b976aa
Allowing dash on Tenant namespace ( #118 )
...
* Allowing dashes in the Tenant name as DNS RFC-1123
* Allowing force tenant prefix with Namespaces with dash
2020-10-31 19:43:46 +01:00
Dario Tranchitella
2af568f0ed
Making e2e tests less flaky ( #121 )
2020-10-31 12:28:17 +01:00
Dario Tranchitella
ee6e3aa0df
Using matrix strategy for e2e on multiple k8s versions ( #111 )
...
* Using matrix strategy for e2e on multiple k8s versions
* EndpointSlice version support according to Kubernetes release
* Utility helper for testing various Kubernetes versions
2020-10-29 09:39:22 +01:00
Dario Tranchitella
a7f7c00558
Supporting ingresses.networking.k8s.io/v1 ( #110 )
...
* Updating to controller-runtime v0.7.0-alpha.4 and k8s 0.19.3
* Implementing ingresses.networking.k8s.io/v1
* Aligning to latest zap signatures
2020-10-23 21:19:14 +02:00
Dario Tranchitella
b0310cd42f
Handling all the events from Storage and Ingress classes ( #108 )
2020-10-17 14:40:07 +02:00
Maxim Fedotov
875650f185
Regexp support for Ingress and Storage classes ( #89 )
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-15 11:08:14 +02:00
Dario Tranchitella
9d0a7a78c1
Making CR/CRB names conforming to Kubernetes naming requirements ( #91 )
2020-09-12 12:14:52 +02:00
Maxim Fedotov
303fc4d69c
Support Groups as Subject Kind for Tenant Namespace RoleBindings created by Capsule ( #71 )
...
Modified CRD to support Owner struct.
Added Tenant name validation webhook.
Rewrote owner_reference hook logic.
Updated and added new e2e tests.
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-10 17:02:22 +02:00
Maxim Fedotov
e8362f739f
Add Service labelling and annotating webhook ( #84 )
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2020-09-10 11:56:51 +02:00
Dario Tranchitella
a4b0c0fe27
Using HTTP handlers as closures ( #82 )
...
* Using HTTP handlers as closures
* Avoiding variable shadowing
* Optimizing Ingress webhook
* Missing license header
2020-09-09 13:33:25 +02:00
Dario Tranchitella
ee0261c069
Providing namespace metadata additional labels and annotations ( #80 )
2020-09-07 15:09:34 +02:00
Maxim Fedotov
a99153cbe7
Add protected-namespace-regex ( #73 )
2020-09-02 12:43:02 +02:00
Maxim Fedotov
164431959c
Add capsule-user-group CLI flag ( #67 )
...
* add capsule-user-group param
* Implementing RBAC controller
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
Co-authored-by: Dario Tranchitella <dario@tranchitella.eu >
2020-09-01 12:15:48 +02:00
Dario Tranchitella
0f935d53b7
Giving priority to IngressClassName rather than annotation ( #64 )
...
* IngressclassName has priority over Annotation
* Covering further cases for the Ingress Class
* Forcing to use 1.18 during e2e tests
2020-08-22 12:34:53 +02:00
Dario Tranchitella
e481a4ff5f
Implementing e2e during CI ( #62 )
2020-08-21 22:45:19 +02:00
Dario Tranchitella
9969864141
Scaffolding e2e testing ( #56 )
...
* Implementing generic e2e features
* Adding changes upon e2e benchmarking
2020-08-21 14:55:48 +02:00
