-
Notifications
You must be signed in to change notification settings - Fork 829
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Generate Certs for Mutation/Validatiion Webhooks #214
Generate Certs for Mutation/Validatiion Webhooks #214
Conversation
Build Succeeded 👏 Build Id: 6081f0dd-e859-4fab-93dc-44471ab1826b The following development artifacts have been built, and will exist for the next 30 days:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we need some documentation added to the install.yaml stating the the install.yaml doesn't generate certs? something to that effect? (not sure what the right language would be)
install/helm/README.md
Outdated
@@ -78,6 +78,7 @@ The following tables lists the configurable parameters of the Agones chart and t | |||
| `agones.controller.healthCheck.failureThreshold` | Number of times before giving up (in seconds) | `3` | | |||
| `agones.controller.healthCheck.timeoutSeconds` | Number of seconds after which the probe times out (in seconds) | `1` | | |||
| `agones.controller.resources` | Controller resource requests/limit | `{}` | |||
| `agones.controller.generateTls` | Set to true to generate tls certificates or false to provide your own certificates in `certs/*` | `true` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Small thing, but:
Tls => TLS, since it's an acronym?
Just ran through a quick e2e test - all worked great. So outside of the couple of questions above, this LGTM. |
3223594
to
350642e
Compare
- Add the ability to generate tls cert from helm for webhooks. - By default it's on but you can pass your own certificates. - Target gen-install use our default certificate to stay idempotent - certificates are passed by kubernetes secrets. - Remove certs from controller container (Dockerfile) - Add a target to remove gcloud deployment, usefull to reset - Update helm chart documentation - Generate new install.yaml - update installation documentation
350642e
to
49fcccc
Compare
Requested changes are in ! |
Build Succeeded 👏 Build Id: 26efb404-923f-499b-a066-b91f23e223bb The following development artifacts have been built, and will exist for the next 30 days:
|
Build Succeeded 👏 Build Id: 91634ae6-caf9-4568-9f0d-77c9e603464a The following development artifacts have been built, and will exist for the next 30 days:
|
Build Succeeded 👏 Build Id: 5e8ed247-62a0-484a-a311-94212f88d111 The following development artifacts have been built, and will exist for the next 30 days:
|
Build Succeeded 👏 Build Id: 5fb6bdc3-98c5-4f83-96fa-1fea41fa1ea2 The following development artifacts have been built, and will exist for the next 30 days:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
Tested on GKE !
Closes #169