github/kamaji
1
0
Fork 0
mirror of https://github.com/clastix/kamaji.git synced 2026-08-26 00:47:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,094 Commits 7 Branches 137 Tags
master
Commit Graph
56 Commits
Author SHA1 Message Date
Peter Bangert 4b6cfef5e8 feat(k8s): support gateway-api 1.5.1 (#1162) 2026-06-02 16:40:28 +02:00
Harshavardhan K ea52b7b8d3 fix konnectivity kubeconfig ca drift (#1152) 2026-05-14 06:49:56 +02:00
Adriano Pezzutoandbsctl e51909fae3 feat: add advertiseAddress to NetworkProfile for split management/tenant addressing (#1111) 
* add advertiseAddress to NetworkProfileSpec

* use advertiseAddress for --advertise-address

* regenerate CRDs with advertiseAddress

* regenerate API docs

---------

Co-authored-by: bsctl <bsctl@clastix.io>
 2026-03-30 09:36:09 +02:00
Patryk Rostkowski 1d05f2bb4c fix: strip load balancer ports before updating TenantControlPlane status (#1082) 
Signed-off-by: Patryk Rostkowski <patrostkowski@gmail.com>
 2026-02-21 10:45:43 +01:00
Parth Yadav cc8a8e14fd fix(gateway): allow explicit parentRefs for kube-apiserver TLSRoute (#1074) 
Previously, when Kamaji created TLSRoutes for the kube-apiserver and
konnectivity, it automatically set the parentRefs `port` and `sectionName`,
overriding any user-provided values via TCP spec. This prevented users
from targeting specific Gateway listeners.

This change allows users to explicitly define parentRefs for the
kube-apiserver TLSRoute through `TCP.spec.controlPlane.gateway.parentRefs`.

The konnectivity TLSRoute behavior remains unchanged.

Signed-off-by: Parth Yadav <parth@coredge.io>
 2026-02-18 18:45:23 +01:00
Parth Yadav 87242ff005 feat: extend Gateway API support to Konnectivity addons (#1054) 
This change extends Gateway API support to Konnectivity addons.
When `spec.controlPlane.gateway` is configured and Konnectivity addon is
enabled, Kamaji automatically creates two TLSRoutes:
1. A Control plane TLSRoute (port 6443, sectionName "kube-apiserver")
2. A Konnectivity TLSRoute (port 8132, sectionName "konnectivity-server")

Both routes use the hostname specified in `gateway.hostname` and reference
the same Gateway resource via `parentRefs`, with `port` and `sectionName`
set automatically by Kamaji.

This patch also adds CEL validation to prevent users from specifying
`port` or `sectionName` in Gateway `parentRefs`, as these fields are now
managed automatically by Kamaji.

Signed-off-by: Parth Yadav <parth@coredge.io>
 2026-01-11 11:31:24 +01:00
Michał Matuszak 11c315289c feat: Make replicas optional for Konnectivity Agent mode Deployment (#1041) 2026-01-04 19:26:57 +01:00
Syed Azeez 0428024946 fix(metrics): resolve workqueue metrics initialization conflict (#1044) 
Signed-off-by: Azeez Syed <syedazeez337@gmail.com>
 2026-01-04 19:24:43 +01:00
Loïc Brun 285cef0f02 fix(konnectivity): rotate certicate during certificate authority rotation (#976) 2025-10-02 16:17:59 +02:00
Dario Tranchitella 2a7749839e feat!: inflecting version for konnectivity components from tcp (#934) 
* feat(api)!: inflecting version for konnectivity components from tcp

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* feat: inflecting version for konnectivity components from tcp

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* docs(konnectivity): warning about missing container artefacts

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-09-10 12:19:33 +02:00
Dario Tranchitella 1a0858d350 fix: konnectivity logs and nil pointer dereference (#951) 
* fix(konnectivity): avoiding nil pointer reconcile for agent

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* fix(log): ignoring not found errors for konnectivity cleanup

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-09-07 11:02:44 +02:00
Mateusz Kwiatkowski f52fe45c46 feat: add hostNetwork support for the Konnectivity Agent (#883) 
This commit extends CRD API: Added hostNetwork field to KonnectivityAgentSpec struct.
It's false by default so it's backwards compatible.

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-07-30 22:31:38 +02:00
Dario Tranchitella 5e68fd8fe0 fix: honouring certificate expiratin threshold (#886) 
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-07-28 09:40:16 +02:00
Dario Tranchitella cac1631523 feat: rotating certificates via annotation (#877) 
* fix(kubeconfig): checking certificate authority data for validity

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* feat: rotating certificates via annotation

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* docs: rotating certificates via annotation

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-07-21 09:23:29 +02:00
Dario Tranchitella d1eb860918 feat!: support for konnectivity deployment mode (#875) 
* feat(konnectivity): support for deployment mode

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* feat(helm)!: support for konnectivity deployment mode

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* chore(sample): support for konnectivity deployment mode

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* docs: support for konnectivity deployment mode

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-07-21 09:21:35 +02:00
Dario Tranchitella eeb12c232b feat(metrics): exposing resource handlers time bucket (#836) 
* refactor: static names and avoiding clash

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* feat(metrics): exposing resource handlers time bucket

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2025-06-10 17:28:10 +02:00
Dario Tranchitella 2b17282b0e chore(go): bumping up to go1.23 (#643) 
* chore(go): bumping up to go1.23

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

* chore(golangci-lint): bumping up to v1.62.2

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>

---------

Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2024-12-01 16:09:26 +01:00
Dario Tranchitella 08272fc37d fix: konnectivity clean-up and status updates (#574) 
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2024-09-10 12:22:15 +02:00
Dario Tranchitella 90aef60c18 feat: konnectivity agent tolerations support 
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2024-05-09 11:36:07 +02:00
Jason WitkowskiandJason Witkowski cec4f9136d fix: konnectivity extra args override 
Co-authored-by: Jason Witkowski <jwitkowski@zscaler.com>
 2024-03-04 11:31:10 +01:00
Dario Tranchitella 755cc5bacd refactor(golangci-lint): aligning to new linters 
Signed-off-by: Dario Tranchitella <dario@tranchitella.eu>
 2023-12-15 13:02:49 +01:00
Dario Tranchitella 7e94ecdbab feat: kubeconfig and certificates rotation 2023-08-03 18:03:54 +02:00
Dario Tranchitella eee62032de refactor: ensuring owner reference and labels with controller label 2023-08-03 18:03:54 +02:00
Dario Tranchitellaandjds 8f57ff407e fix(konnectivity): setting service nodeport 
Co-authored-by: jds <jds9090@kinx.net>
 2023-07-04 07:19:37 +02:00
Dario Tranchitella 14c96b034a refactor(builder): abstracting deployment builders 2023-06-05 17:03:35 +02:00
Matteo Ruina d06affc216 feat: tcp deployment mangling 2023-05-30 16:00:11 +02:00
Dario Tranchitella a8a41951cb refactor!: keeping labels consistent 
The label kamaji.clastix.io/soot is deprecated in favour of
kamaji.clastix.io/name, every external resource referring to this must
be aligned prior to updating to this version.
 2023-02-13 11:24:36 +01:00
Dario Tranchitella a0485c338b refactor(checksum): using helper functions 2023-02-10 15:31:28 +01:00
Dario Tranchitella 6e6ea0189f refactor(k8s): upgrade to 1.26 2022-12-17 15:57:47 +01:00
Dario Tranchitella 11f800063f fix(konnectivity): typo in ca-cert cli flag 2022-12-14 12:22:49 +01:00
Dario Tranchitella e11b459a3d fix(konnectivity): reconciliation failed and in loop 2022-12-14 12:22:49 +01:00
Dario Tranchitella 4c51eafc90 feat(konnectivity): reconciliation performed by soot manager 2022-12-12 16:22:36 +01:00
Dario Tranchitella 7f49fc6125 refactor(konnectivity): removing default logging options 
verbosity and logtostderr can now be enforced using the extra args
struct member for the server, and the agent as well.
 2022-12-08 14:23:31 +01:00
Dario Tranchitella c00df62ff7 feat(konnectivity)!: support for extra args 2022-12-08 14:23:31 +01:00
Dario Tranchitella 5241fa64ed refactor(konnectivity)!: decoupling agent and server structs 2022-12-08 14:23:31 +01:00
Dario Tranchitella 90b2ca1bab fix(konnectivity): clean-up upon toggling addon 
The TCP Deployment container kube-apiserver is deeply hacked with extra
details for konnectivity: most of them weren't cleaned-up properly, and
the function wasn't entirely idempotent in toggling the feature.

This fix is addressing this situation, and rearranging the code
according to the latest polish.
 2022-09-12 09:38:36 +02:00
Dario Tranchitella df8ca7c1d1 refactor: checksum for configmap and secret data 2022-09-12 09:38:36 +02:00
Dario Tranchitella 65519d4f22 refactor: using kamaji prefix for checksum annotation 2022-09-12 09:38:36 +02:00
Dario Tranchitella 41eddc0462 refactor(crypto): eliminating bloated certs functions 2022-09-12 09:38:36 +02:00
Dario Tranchitella 0c8a16d604 refactor(utils): encode to yaml uses the non deprecated serializer 2022-09-12 09:38:36 +02:00
Dario Tranchitella b7adb314ad refactor: logging errors with stacktrace 
Using the log facade and logging the error directly in the resource
handler we're getting a more detailed overview of the errors, along with
other metadata useful to understand quicker where the reconciliation
failed.
 2022-09-12 09:38:36 +02:00
Dario Tranchitella e089f0ad9a chore: pointer.Int32Ptr is deprecated in favor of pointer.Int32 2022-09-12 09:38:36 +02:00
Dario Tranchitella 8273d7c7b4 chore(golangci-lint): updating to v1.49.0 2022-08-27 15:16:31 +02:00
Dario Tranchitella 1ddaeccc94 feat: storage homogeneity 2022-08-27 15:16:31 +02:00
Dario Tranchitella 2c963881ab feat: using datastore api for backing storage driver 2022-08-26 22:05:59 +02:00
Dario Tranchitella 0954ae7494 feat: checksum for status 2022-08-23 08:48:56 +02:00
Dario Tranchitella 62129f3f0c fix: avoiding nil pointer dereference when cleaning up konnectivity server service 2022-07-21 13:33:57 +00:00
Dario Tranchitella 161f43ed58 refactor: unique service for tcp and konnectivity server 2022-07-18 20:13:43 +00:00
Dario Tranchitella 5ecc9aace0 fix(konnectivity): using the announced address of the tcp 2022-07-18 19:03:56 +00:00
Dario Tranchitella e1bb7dc96f refactor: decoupling konnectivity from tcp k8s deployment handler 2022-07-18 17:09:41 +00:00