adrien/ansible-role-k8s-cert-manager
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

update to v0.14.3

Browse source
This commit is contained in:
Adrien Reslinger 2020-04-29 11:10:30 +02:00
parent 099d133e8b
commit b3cb67b84b
31 changed files with 40 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
bin/gen_list.sh
View file

@ -1,5 +1,5 @@
#!/bin/bash #!/bin/bash
CERTMANAGER_VERSION=0.14.2 CERTMANAGER_VERSION=0.14.3
CERTMANAGER_SHORTVERSION="$(echo "${CERTMANAGER_VERSION}" | sed 's/^\(.*\)\.[0-9]$/\1/')" CERTMANAGER_SHORTVERSION="$(echo "${CERTMANAGER_VERSION}" | sed 's/^\(.*\)\.[0-9]$/\1/')"
cd "$(dirname ${0})"/../templates/ cd "$(dirname ${0})"/../templates/
wget https://github.com/jetstack/cert-manager/releases/download/v"${CERTMANAGER_VERSION}"/cert-manager.yaml wget https://github.com/jetstack/cert-manager/releases/download/v"${CERTMANAGER_VERSION}"/cert-manager.yaml

6
templates/0.14/cert-manager-Deployment.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
spec: spec:
replicas: 1 replicas: 1
selector: selector:
@ -26,7 +26,7 @@ spec:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
annotations: annotations:
prometheus.io/path: "/metrics" prometheus.io/path: "/metrics"
prometheus.io/scrape: 'true' prometheus.io/scrape: 'true'
@ -35,7 +35,7 @@ spec:
serviceAccountName: cert-manager serviceAccountName: cert-manager
containers: containers:
- name: cert-manager - name: cert-manager
image: "quay.io/jetstack/cert-manager-controller:v0.14.2" image: "quay.io/jetstack/cert-manager-controller:v0.14.3"
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- --dns01-recursive-nameservers=8.8.8.8:53,1.1.1.1:53 - --dns01-recursive-nameservers=8.8.8.8:53,1.1.1.1:53

2
templates/0.14/cert-manager-Service.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
spec: spec:
type: ClusterIP type: ClusterIP
ports: ports:

2
templates/0.14/cert-manager-ServiceAccount.yaml
View file

@ -11,4 +11,4 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3

2
templates/0.14/cert-manager-cainjector-ClusterRole.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
- apiGroups: ["cert-manager.io"] - apiGroups: ["cert-manager.io"]
resources: ["certificates"] resources: ["certificates"]

2
templates/0.14/cert-manager-cainjector-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

6
templates/0.14/cert-manager-cainjector-Deployment.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
spec: spec:
replicas: 1 replicas: 1
selector: selector:
@ -26,13 +26,13 @@ spec:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
annotations: annotations:
spec: spec:
serviceAccountName: cert-manager-cainjector serviceAccountName: cert-manager-cainjector
containers: containers:
- name: cert-manager - name: cert-manager
image: "quay.io/jetstack/cert-manager-cainjector:v0.14.2" image: "quay.io/jetstack/cert-manager-cainjector:v0.14.3"
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- --v=2 - --v=2

2
templates/0.14/cert-manager-cainjector-ServiceAccount.yaml
View file

@ -10,4 +10,4 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3

2
templates/0.14/cert-manager-cainjector:leaderelection-Role.yaml
View file

@ -11,7 +11,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
# Used for leader election by the controller # Used for leader election by the controller
# TODO: refine the permission to *just* the leader election configmap # TODO: refine the permission to *just* the leader election configmap

2
templates/0.14/cert-manager-cainjector:leaderelection-RoleBinding.yaml
View file

@ -12,7 +12,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "cainjector" app.kubernetes.io/component: "cainjector"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: Role kind: Role

2
templates/0.14/cert-manager-controller-certificates-ClusterRole.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
- apiGroups: ["cert-manager.io"] - apiGroups: ["cert-manager.io"]
resources: ["certificates", "certificates/status", "certificaterequests", "certificaterequests/status"] resources: ["certificates", "certificates/status", "certificaterequests", "certificaterequests/status"]

2
templates/0.14/cert-manager-controller-certificates-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

2
templates/0.14/cert-manager-controller-challenges-ClusterRole.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
# Use to update challenge resource status # Use to update challenge resource status
- apiGroups: ["acme.cert-manager.io"] - apiGroups: ["acme.cert-manager.io"]

2
templates/0.14/cert-manager-controller-challenges-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

2
templates/0.14/cert-manager-controller-clusterissuers-ClusterRole.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
- apiGroups: ["cert-manager.io"] - apiGroups: ["cert-manager.io"]
resources: ["clusterissuers", "clusterissuers/status"] resources: ["clusterissuers", "clusterissuers/status"]

2
templates/0.14/cert-manager-controller-clusterissuers-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

2
templates/0.14/cert-manager-controller-ingress-shim-ClusterRole.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
- apiGroups: ["cert-manager.io"] - apiGroups: ["cert-manager.io"]
resources: ["certificates", "certificaterequests"] resources: ["certificates", "certificaterequests"]

2
templates/0.14/cert-manager-controller-ingress-shim-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

2
templates/0.14/cert-manager-controller-issuers-ClusterRole.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
- apiGroups: ["cert-manager.io"] - apiGroups: ["cert-manager.io"]
resources: ["issuers", "issuers/status"] resources: ["issuers", "issuers/status"]

2
templates/0.14/cert-manager-controller-issuers-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

2
templates/0.14/cert-manager-controller-orders-ClusterRole.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
- apiGroups: ["acme.cert-manager.io"] - apiGroups: ["acme.cert-manager.io"]
resources: ["orders", "orders/status"] resources: ["orders", "orders/status"]

2
templates/0.14/cert-manager-controller-orders-ClusterRoleBinding.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

2
templates/0.14/cert-manager-edit-ClusterRole.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rbac.authorization.k8s.io/aggregate-to-edit: "true" rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-admin: "true" rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules: rules:

2
templates/0.14/cert-manager-view-ClusterRole.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rbac.authorization.k8s.io/aggregate-to-view: "true" rbac.authorization.k8s.io/aggregate-to-view: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true" rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-admin: "true" rbac.authorization.k8s.io/aggregate-to-admin: "true"

6
templates/0.14/cert-manager-webhook-Deployment.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "webhook" app.kubernetes.io/component: "webhook"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
spec: spec:
replicas: 1 replicas: 1
selector: selector:
@ -26,13 +26,13 @@ spec:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "webhook" app.kubernetes.io/component: "webhook"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
annotations: annotations:
spec: spec:
serviceAccountName: cert-manager-webhook serviceAccountName: cert-manager-webhook
containers: containers:
- name: cert-manager - name: cert-manager
image: "quay.io/jetstack/cert-manager-webhook:v0.14.2" image: "quay.io/jetstack/cert-manager-webhook:v0.14.3"
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- --v=2 - --v=2

3
templates/0.14/cert-manager-webhook-MutatingWebhookConfiguration.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "webhook" app.kubernetes.io/component: "webhook"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
annotations: annotations:
cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-tls" cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-tls"
webhooks: webhooks:
@ -20,6 +20,7 @@ webhooks:
- "acme.cert-manager.io" - "acme.cert-manager.io"
apiVersions: apiVersions:
- v1alpha2 - v1alpha2
- v1alpha3
operations: operations:
- CREATE - CREATE
- UPDATE - UPDATE

2
templates/0.14/cert-manager-webhook-Service.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "webhook" app.kubernetes.io/component: "webhook"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
spec: spec:
type: ClusterIP type: ClusterIP
ports: ports:

2
templates/0.14/cert-manager-webhook-ServiceAccount.yaml
View file

@ -10,4 +10,4 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "webhook" app.kubernetes.io/component: "webhook"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3

5
templates/0.14/cert-manager-webhook-ValidatingWebhookConfiguration.yaml
View file

@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "webhook" app.kubernetes.io/component: "webhook"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
annotations: annotations:
cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-tls" cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-tls"
webhooks: webhooks:
@ -30,6 +30,7 @@ webhooks:
- "acme.cert-manager.io" - "acme.cert-manager.io"
apiVersions: apiVersions:
- v1alpha2 - v1alpha2
- v1alpha3
operations: operations:
- CREATE - CREATE
- UPDATE - UPDATE
@ -42,4 +43,4 @@ webhooks:
service: service:
name: cert-manager-webhook name: cert-manager-webhook
namespace: "cert-manager" namespace: "cert-manager"
path: /mutate path: /validate

2
templates/0.14/cert-manager:leaderelection-Role.yaml
View file

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
rules: rules:
# Used for leader election by the controller # Used for leader election by the controller
# TODO: refine the permission to *just* the leader election configmap # TODO: refine the permission to *just* the leader election configmap

2
templates/0.14/cert-manager:leaderelection-RoleBinding.yaml
View file

@ -12,7 +12,7 @@ metadata:
app.kubernetes.io/instance: cert-manager app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "controller" app.kubernetes.io/component: "controller"
helm.sh/chart: cert-manager-v0.14.2 helm.sh/chart: cert-manager-v0.14.3
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: Role kind: Role