Dario Tranchitella
65d5b24896
feat: blocking replicated resources write ops by tenant owners
2023-03-28 12:56:58 +02:00
Zadkiel Aharonian
010ed41ca7
feat(manager): allow customization of the webhook port
2023-03-04 11:58:32 +01:00
Dario Tranchitella
89348c9499
chore(golangci-lint): updating to latest version and code alignement
2023-03-02 15:32:47 +01:00
Dario Tranchitella
ea88b102e5
feat: pv labelling and preventing cross-tenant mount
2023-01-26 09:31:16 +01:00
Oliver Bähler
ab0fe91c58
feat: add defaults handler
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2023-01-14 15:51:01 +01:00
Oliver Bähler
79391f863a
feat: add runtimeclass control
...
Signed-off-by: Oliver Baehler <oliver.baehler@hotmail.com >
2022-12-28 15:01:28 +01:00
Dario Tranchitella
43bd2491ae
refactor(api): switching to v1beta2 as storage version
2022-12-27 17:53:17 +01:00
Max Fedotov
b1ec9fed50
feat: refactor resources controller
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2022-12-26 14:27:26 +01:00
Dario Tranchitella
503e3fc1d0
feat: globaltenantresource and tenantresource reconciliation
2022-12-26 14:27:26 +01:00
Dario Tranchitella
bca70e634d
feat: introducing v1beta2 api group
2022-12-26 14:27:26 +01:00
Dario Tranchitella
75525ac192
fix: preventing serviceaccount privilege escalation
2022-12-02 15:19:06 +01:00
Dario Tranchitella
098a74b565
refactor(capsuleconfiguration): allowing to skip tls reconciler
2022-07-26 17:48:58 +02:00
Oliver Bähler
cac2920827
feat: grant global patch privileges and add patch handler
2022-06-09 18:32:39 +00:00
Maksim Fedotov
f1dc028649
feat: generate TLS certificates before starting controllers
2022-06-08 11:12:35 +00:00
Maksim Fedotov
82b58d7d53
feat: refactor capsule TLS certificates management
2022-06-08 11:12:35 +00:00
Maksim Fedotov
1af56b736b
feat: support cert-manager for generating tls and ca
2022-05-23 07:17:20 +00:00
Maksim Fedotov
23564f8e40
feat: protected tenant annotation
2022-05-18 18:06:10 +02:00
Dario Tranchitella
49e76f7f93
style: linters refactoring
2022-05-05 13:33:39 +00:00
Dario Tranchitella
f4ac85dfed
refactor: using k8s client scheme
2022-05-05 13:33:39 +00:00
Dario Tranchitella
345836630c
refactor: avoiding using background context
2022-05-05 13:33:39 +00:00
Davide Imola
7b3b0d6504
fix: using configuration for tls and ca secret names
2022-03-31 13:02:25 +00:00
Pandry
d4a5f3beca
fix: validate regex patterns in annotations #510
2022-02-22 06:11:49 +00:00
Dario Tranchitella
e53911942d
feat: limiting amount of resources deployed in a tenant
2021-12-23 11:39:34 +00:00
Dario Tranchitella
778fb4bcc2
fix: starting all controllers only when certificates are generated
...
This is going to solve the issue when upgrading Capsule <v0.1.0 to
>=v0.1.0: due to a resource reflector many warning were polluting the
reconciliation loop and causing unmarshaling errors.
Additionally, just the CA secret was checked before starting the
Operator, when also the TLS is requested for the webhooks, along with
the `/convert` one that is used for the CR version conversion.
2021-12-21 06:45:16 +00:00
Oliver Bähler
5c7804e1bf
fix: add rolebinding validation against rfc-1123 dns for sa subjects
...
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com >
2021-11-12 11:22:26 +01:00
Maksim Fedotov
ec715d2e8f
fix: do not register tenant controller\webhook\indexer until CA is created
2021-11-06 16:34:22 +01:00
Maxim Fedotov
14f9686bbb
Forbidden node labels and annotations ( #464 )
...
* feat: forbidden node labels and annotations
* test(e2e): forbidden node labels and annotations
* build(kustomize): forbidden node labels and annotations
* build(helm): forbidden node labels and annotations
* build(installer): forbidden node labels and annotations
* chore(make): forbidden node labels and annotations
* docs: forbidden node labels and annotations
* test(e2e): forbidden node labels and annotations. Use EventuallyCreation func
* feat: forbidden node labels and annotations. Check kubernetes version
* test(e2e): forbidden node labels and annotations. Check kubernetes version
* docs: forbidden node labels and annotations. Version restrictions
* feat: forbidden node labels and annotations. Do not update deepcopy functions
* docs: forbidden node labels and annotations. Use blockquotes for notes
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2021-11-02 20:01:53 +03:00
Maksim Fedotov
a14c7609df
feat: namespace labeling for tenant owners
2021-09-23 14:10:24 +02:00
alegrey91
196e3c910d
feat: add deny-wildcard annotation
2021-09-21 19:14:49 +02:00
Dario Tranchitella
26965a5ea2
fix: skipping indexer if error is a NoKindMatch
2021-09-17 15:43:42 +02:00
Dario Tranchitella
94c6a64fcb
fix: validating Tenant owner name when is a ServiceAccount
2021-09-04 14:17:06 +02:00
Dario Tranchitella
df08c9e63e
refactor: hostname collision is now managed at Tenant level
2021-08-12 19:30:27 +02:00
Dario Tranchitella
09277e9f3d
feat: Ingress hostname collision scope at Tenant level
2021-08-12 19:30:27 +02:00
Maxim Fedotov
ddb9ffd79e
refactor: split tenant controller to separate files
...
Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net >
2021-08-07 21:37:48 +02:00
Maksim Fedotov
cae65c9f84
fix: capsuleconfiguration controller package name should be config instead of rbac
2021-08-07 20:40:08 +02:00
Maksim Fedotov
e6b433dcd7
feat(v1beta1): update code to use v1beta1 version
2021-07-02 10:14:06 +02:00
Dario Tranchitella
ac6af13b07
feat(v1beta1): registering conversion webhook
2021-07-02 10:14:06 +02:00
Dario Tranchitella
8fb4b7d4a1
feat: scaffolding v1beta1 Tenant version
2021-07-02 10:14:06 +02:00
Dario Tranchitella
ba07f99c6e
refactor!: using multiple handers per route
2021-06-27 22:36:55 +02:00
Dario Tranchitella
7574335a8a
refactor: using separated webhooks for Namespace handling
2021-06-24 13:47:43 +02:00
Dario Tranchitella
5de0a6d712
# This is a combination of 2 commits.
...
# This is the 1st commit message:
feat: cordoning Tenant webhook
# The commit message #2 will be skipped:
# 5cc
2021-06-24 13:47:43 +02:00
Dario Tranchitella
531cc4cf14
refactor: renaming Tenant webhook handler
2021-06-24 13:47:43 +02:00
Dario Tranchitella
accd9ca038
feat: emitting events for policies violations
2021-06-15 21:42:39 +02:00
Dario Tranchitella
630e802708
feat: image PullPolicy webhook enforcer
2021-06-14 10:53:55 +02:00
Dario Tranchitella
9c8b0377dc
feat: emitting events for Tenant operations
2021-06-06 22:18:51 +02:00
Dario Tranchitella
7c1592e739
chore(license): switching over SPDX license header ( #280 )
2021-06-03 19:46:20 +02:00
Dario Tranchitella
3570b02427
feat!: using CapsuleConfiguration CRD with reload at runtime
2021-05-31 16:15:44 +02:00
Dario Tranchitella
0481822555
feat: enforcing Pod Priority Class
2021-05-29 00:31:17 +02:00
Maksim Fedotov
3c9895e498
feat: use multiple groups as capsule-user-group
2021-05-25 14:46:05 +02:00
Ludovico Russo
7994ae1da1
refactor: better name variables in main.go
2021-05-04 17:49:13 +02:00
