Skip to content

Conversation

@simu
Copy link
Member

@simu simu commented Jan 24, 2023

Replaces #1

Checklist

  • PR contains a single logical change (to build a better changelog).
  • Update the documentation.
  • Categorize the PR by setting a good title and adding one of the labels:
    bug, enhancement, documentation, change, breaking, dependency
    as they show up in the changelog.
  • Link this PR to related issues or PRs.

@simu simu added the enhancement New feature or request label Jan 24, 2023
Template version: main (804e9c7)
@simu simu force-pushed the initial-implementation branch from dd4bc2d to 14bd0ae Compare January 24, 2023 09:53
@simu
Copy link
Member Author

simu commented Jan 24, 2023

TODO:

  • Add option to provide own serving certificate for webhook (e.g. in vcluster, where we don't install cert-manager by default)
  • Finalize decision and component library implementation with regard to fine-grained vs component-wide RBAC

@simu simu force-pushed the initial-implementation branch from 8d0ae99 to 0bb025b Compare January 24, 2023 13:49
@simu simu force-pushed the initial-implementation branch from 0bb025b to c444ba0 Compare January 24, 2023 15:44
@simu simu requested a review from bastjan January 24, 2023 16:19
simu added 9 commits January 25, 2023 10:42
We copy the resource-locker component library, and update the
implementation to generate patch-operator custom resources instead.

The additional file `patch-operator-migrate.libsonnet` could be used to
provide a transitional `resource-locker.libjsonnet`, if we update
Commodore to allow components to steal library prefixes from deprecated
components.
Instead, we create a single service account which is granted the cluster
role `cluster-admin` by default. The service account name, and granted
role can be customized through the component parameters.
We also add a postprocessing filter to ensure that the cert-manager
certificate and the openshift serving certificate annotation don't use
the same secret name.
Rendered from template version: main (804e9c7)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants