15 Commits

Author SHA1 Message Date
Nandaja Varma
c3c46c5243
Remove unnecessary source array from trust manager objects (#18469) 2023-08-09 15:27:35 +02:00
Manuel Alejandro de Brito Fontes
de4bbbea1c
Add a new trust bundle for custom SSL certificates (#18450)
* Add a new trust bundle for custom SSL certificates

* Mount the customer certificate in the workspace

* Use the custom certificate in components

* Cleanup

* Set env variables and mount the crt in a different file

* rename custom ca cert file name

* Fix the filename in env vars

* Enable custom SSL certificate conditionally

---------

Co-authored-by: nandajavarma <nandaja.varma@gmail.com>
2023-08-08 16:46:34 +02:00
Nandaja Varma
604febefd9
Support custom CA in trust-manager (#18397) 2023-08-02 15:19:27 +08:00
Manuel Alejandro de Brito Fontes
541f6f65c5
Remove unused PodSecurityPolicy feature (#17176) 2023-04-13 22:13:53 +02:00
Gero Posmyk-Leinemann
8bd18bf360
[installer] Allow to override the namespace where certmanager is installed (#16947) 2023-03-21 15:56:13 +01:00
Manuel Alejandro de Brito Fontes
5b30eb5b8c
Remove unused caCertSecret (#16793)
* Add trust.cert-manager.io for to bundle CA certificates

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Configure CA volume and volumemount in components

* Update ws-manager golden files

* Deploy trust manager in preview

* Remove duplicated volume

* Update installer golden files

* Generate a bundle only for registry-facade

* Update golden files

* Fix initcontainer volume mounts

* Update golden files

* Fix registry-facade certificate

* Update golden files

* Disable skip_verify

* Enable force conflict with apply server side

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Avoid random werft namespace errors

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

---------

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-03-21 11:44:13 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Simon Emms
7cee528fb8 [installer]: conditionally remove podsecuritypolicies 2022-08-24 13:32:40 +02:00
Simon Emms
36adc7d118 Revert "[installer]: remove all podsecuritypolicies"
This reverts commit 1c6693b8481141364d41c3428a99c0bc655556a7.
2022-08-23 20:42:39 +02:00
Simon Emms
e6849ab09f Revert "[installer]: remove all references to pod security policies"
This reverts commit 8063b1052a1fb8519869f4089abe4c7e0f8f1b5a.
2022-08-23 20:42:39 +02:00
Simon Emms
8063b1052a [installer]: remove all references to pod security policies 2022-08-22 15:00:39 +02:00
Simon Emms
1c6693b848 [installer]: remove all podsecuritypolicies
This is deprecated in kubernetes 1.21 and removed in 1.25 and it's not
really used in this setup
2022-08-22 15:00:39 +02:00
Simon Emms
3aa56e64b4 [installer]: set secretTemplate for certs
This allows them to be picked up by the KOTS support bundle
2022-07-21 11:15:16 -03:00
Manuel Alejandro de Brito Fontes
29f2c2356f [installer] Registry facade should not use a port from node ports range 2022-03-04 20:40:11 +05:30
Simon Emms
4820e804bb [installer]: move to /install 2022-02-22 17:03:02 +05:30