-
Notifications
You must be signed in to change notification settings - Fork 331
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add SinkCACerts to SourceStatus #2733
Conversation
@Rahul-Kumar-prog: The label(s) In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Welcome @Rahul-Kumar-prog! It looks like this is your first PR to knative/pkg 🎉 |
Hi @Rahul-Kumar-prog. Thanks for your PR. I'm waiting for a knative member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
@pierDipi I added this PR body through docs have a look and let me know because currently I don't know how to write a perfect PR body so I am sorry. let me know if anything I can do to improve myself. |
Thanks for the PR @Rahul-Kumar-prog! Also, it would be great if you would simplify the description to something like Fixes #2732
Added `SinkCACerts` to source status
## Proposed Changes
<!-- Please categorize your changes:
- :gift: Add new feature
- :bug: Fix bug
- :broom: Update or clean up current behavior
- :wastebasket: Remove feature or internal logic
-->
- :gift: Add new feature
- Added support for storing the CA certs of the resolved sink's destination
/kind feature Also, you may add this to the release note
|
Thankyou @vishal-chdhry for suggesting these corrections. |
/ok-to-test |
Thanks @Rahul-Kumar-prog |
@Rahul-Kumar-prog you need to run |
@pierDipi I have to run this here ? |
on your local computer |
@pierDipi after that what should I need to do ? |
once you run |
@vishal-chdhry this |
@Rahul-Kumar-prog
You should run it everytime you change a type definition |
@vishal-chdhry is there any resources to understand. |
@Rahul-Kumar-prog Yes! you can look into the file here: https://github.com/knative/pkg/blob/main/hack/update-codegen.sh |
Co-authored-by: Pierangelo Di Pilato <pierangelodipilato@gmail.com>
Codecov ReportPatch coverage has no change and project coverage change:
Additional details and impacted files@@ Coverage Diff @@
## main #2733 +/- ##
==========================================
- Coverage 81.53% 81.50% -0.03%
==========================================
Files 163 163
Lines 10018 10018
==========================================
- Hits 8168 8165 -3
- Misses 1606 1608 +2
- Partials 244 245 +1
☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
/approve
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: pierDipi, Rahul-Kumar-prog The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Thanks @Rahul-Kumar-prog |
Fixes #2732
Added
SinkCACerts
to source statusProposed Changes
/kind feature
Add SinkCACerts to SourceStatus
SinkCACerts are certification authority CA certificates in the SourceStatus. so that we store the CA certs of the resolved sink's destination.
Reason to Implement SinkCACerts because :
currently, the addressable contract provides a single HTTP(s) URL.
HTTPS endpoints with certificates signed by cluster internal certification author (CA) need to provide the CA certificates so that clients can call HTTPS addressables without disabling client side certificates checks.
The new addressable contract will have an additional CACerts field to allow Addressable resources (Broker, Channel, and Sinks) to provide their CA certificates.
Addressable provides a generic mechanism for a custom resource
definition to indicate a destination for message delivery.
Addressable is the schema for the destination information. This is
typically stored in the object's
status
, as this information maybe generated by the controller.
Release Note
Docs