renamed controller to operator
This commit is contained in:
parent
b23161a08d
commit
3a61942646
11 changed files with 45 additions and 45 deletions
|
|
@ -1,32 +0,0 @@
|
||||||
# Istio Cert Manager
|
|
||||||
|
|
||||||
The Istio Cert Manager is an addon controller to support Cert-Manager's `ACME HTTP01` Issuer with Istio `Gateway` and `VirtualService` intgration.
|
|
||||||
|
|
||||||
## Install
|
|
||||||
|
|
||||||
Create the Custom Resource Definition:
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl apply -f crd.yaml
|
|
||||||
```
|
|
||||||
|
|
||||||
Grant permissions for the new controller:
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl apply -f rbac.yaml
|
|
||||||
```
|
|
||||||
|
|
||||||
Create the controller pod:
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl apply -f pod.yaml
|
|
||||||
```
|
|
||||||
|
|
||||||
## Cleanup
|
|
||||||
|
|
||||||
```
|
|
||||||
kubectl -n cert-manager exec certman-istio-controller /cleanup.sh
|
|
||||||
kubectl delete -f pod.yaml
|
|
||||||
kubectl delete -f rbac.yaml
|
|
||||||
kubectl delete -f crd.yaml
|
|
||||||
```
|
|
||||||
|
|
@ -1,5 +1,5 @@
|
||||||
CC=docker
|
CC=docker
|
||||||
APP=certman-istio-controller
|
APP=certman-istio-operator
|
||||||
TAG=127.0.0.1:5000/cert/$(APP):$(VERSION)
|
TAG=127.0.0.1:5000/cert/$(APP):$(VERSION)
|
||||||
|
|
||||||
all: build push
|
all: build push
|
||||||
32
testapp/certman-istio-operator/README.md
Normal file
32
testapp/certman-istio-operator/README.md
Normal file
|
|
@ -0,0 +1,32 @@
|
||||||
|
# Istio Cert Manager Operator
|
||||||
|
|
||||||
|
The Istio Cert Manager is an addon operator to support Cert-Manager's `ACME HTTP01` Issuer with Istio `Gateway` and `VirtualService` integration.
|
||||||
|
|
||||||
|
## Install
|
||||||
|
|
||||||
|
Create the Custom Resource Definition:
|
||||||
|
|
||||||
|
```
|
||||||
|
kubectl apply -f crd.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
Grant permissions for the new operator:
|
||||||
|
|
||||||
|
```
|
||||||
|
kubectl apply -f rbac.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
Create the operator pod:
|
||||||
|
|
||||||
|
```
|
||||||
|
kubectl apply -f pod.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
## Cleanup
|
||||||
|
|
||||||
|
```
|
||||||
|
kubectl -n cert-manager exec certman-istio-operator /cleanup.sh
|
||||||
|
kubectl delete -f pod.yaml
|
||||||
|
kubectl delete -f rbac.yaml
|
||||||
|
kubectl delete -f crd.yaml
|
||||||
|
```
|
||||||
|
|
@ -18,7 +18,7 @@ EOF
|
||||||
|
|
||||||
mkmap() {
|
mkmap() {
|
||||||
kubectl apply -f - <<EOF
|
kubectl apply -f - <<EOF
|
||||||
apiVersion: cic.giftfish.de/v1alpha1
|
apiVersion: cio.giftfish.de/v1alpha1
|
||||||
kind: RefMap
|
kind: RefMap
|
||||||
metadata:
|
metadata:
|
||||||
name: "$1"
|
name: "$1"
|
||||||
|
|
@ -1,15 +1,15 @@
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Pod
|
kind: Pod
|
||||||
metadata:
|
metadata:
|
||||||
name: certman-istio-controller
|
name: certman-istio-operator
|
||||||
namespace: cert-manager
|
namespace: cert-manager
|
||||||
labels:
|
labels:
|
||||||
app: certman-istio-controller
|
app: certman-istio-operator
|
||||||
version: v1
|
version: v1
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: certman-istio-controller
|
- name: certman-istio-operator
|
||||||
image: 127.0.0.1:5000/cert/certman-istio-controller:v1
|
image: 127.0.0.1:5000/cert/certman-istio-operator:v1
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
cpu: 100m
|
cpu: 100m
|
||||||
|
|
@ -18,4 +18,4 @@ spec:
|
||||||
cpu: 100m
|
cpu: 100m
|
||||||
memory: 128Mi
|
memory: 128Mi
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
serviceAccountName: certman-istio-controller
|
serviceAccountName: certman-istio-operator
|
||||||
|
|
@ -1,13 +1,13 @@
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: certman-istio-controller
|
name: certman-istio-operator
|
||||||
namespace: cert-manager
|
namespace: cert-manager
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: certman-istio-controller
|
name: certman-istio-operator
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- extensions
|
- extensions
|
||||||
|
|
@ -26,7 +26,7 @@ rules:
|
||||||
- destinationrules
|
- destinationrules
|
||||||
verbs: ["get", "create", "delete"]
|
verbs: ["get", "create", "delete"]
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- cic.giftfish.de
|
- cio.giftfish.de
|
||||||
resources:
|
resources:
|
||||||
- refmaps
|
- refmaps
|
||||||
verbs: ["get", "list", "create", "delete"]
|
verbs: ["get", "list", "create", "delete"]
|
||||||
|
|
@ -34,12 +34,12 @@ rules:
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: certman-istio-controller
|
name: certman-istio-operator
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: certman-istio-controller
|
name: certman-istio-operator
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: certman-istio-controller
|
name: certman-istio-operator
|
||||||
namespace: cert-manager
|
namespace: cert-manager
|
||||||
Loading…
Add table
Add a link
Reference in a new issue