Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: [experimental] create TLS certificate via code & save it in a PersistentVolume #421

Draft
wants to merge 9 commits into
base: main
Choose a base branch
from
Draft

refactor: [experimental] create TLS certificate via code & save it in a PersistentVolume #421

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
92da246
mounted and shared perssitentvolume to webhook deployment
royhadad Jul 13, 2023
79637ec
first draft, generating the certificate if it is missing and activati…
royhadad Jul 13, 2023
bd9a000
Merge branch 'main' of github.com:datreeio/admission-webhook-datree i…
royhadad Jul 13, 2023
2df7c90
add the validatingWEbhookConfiguration disabler and permissions
royhadad Jul 13, 2023
7eb545c
wip
royhadad Jul 13, 2023
ef5643a
works
royhadad Jul 13, 2023
8d7481c
refactor: extract some variables
royhadad Jul 13, 2023
cdd567c
fix: update CA organization
royhadad Jul 16, 2023
7d91169
fix: duration
royhadad Jul 16, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
fix: duration
  • Loading branch information
@royhadad
royhadad committed Jul 16, 2023
commit 7d91169d6bd70f362c940a055c743f0a2df963bd
2 changes: 1 addition & 1 deletion pkg/cert-manager/cert-manager.go
View file
Original file line number Diff line number Diff line change
@@ -54,7 +54,7 @@ func generateCertificates() {
Organization: []string{"/CN=Datree Admission Controller Webhook CA"},
},
NotBefore: time.Now(),
NotAfter: time.Now().AddDate(1, 0, 0),
NotAfter: time.Now().AddDate(5, 0, 0),
IsCA: true,
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth, x509.ExtKeyUsageServerAuth},
KeyUsage: x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,