Commit Graph

61 Commits

Author SHA1 Message Date
Benoît Knecht
c39d717cbc deploy/kubernetes: Update snapshot-validation-webhook
Since 4f783f10f added validation for `volumesnapshotclasses`, the
`snapshot-validation-webhook` needs to handle this kind of resource. But
version 5.0.1 doesn't, which leads to failures when updating or creating
`volumesnapshotclasses`.

This commit updates the `snapshot-validation-webhook` version to 6.0.1 in
`deploy/kubernetes/webhook-example/admission-configuration-template`.

Signed-off-by: Benoît Knecht <bknecht@protonmail.ch>
2022-07-06 19:49:30 +02:00
xing-yang
c821877a2e Remove v1beta1 examples 2022-05-22 22:43:11 +00:00
Shawn Hurley
8ae62e79ff Adding webhook RBAC to enable validation of snapshotclasses 2022-05-20 09:25:47 -04:00
Kubernetes Prow Robot
9ffdb95103 Merge pull request #690 from humblec/rbac
replace serviceAccountName key, rbac and cleanup in the code
2022-04-25 07:39:39 -07:00
Kubernetes Prow Robot
e76e438853 Merge pull request #688 from shawn-hurley/update-readme-and-example
Updating readme and webhook tempate to capture changes made for volumesnapshotclasses
2022-04-14 02:24:46 -07:00
Humble Chirammal
59a4882df5 replace deprecated serviceAccount with serviceAccountName key
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-04-13 08:35:27 +05:30
Humble Chirammal
d45bacb34b rbac: remove unwanted RBAC for endpoint leader election
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-04-13 08:35:03 +05:30
Madhu Rajanna
7748d5ffb6 Remove create and delete from csi-snapshotter RBAC
Removed Create and Delete verb for volumesnapshotcontents
Resource in the external-snapshotter-runner clusterRole.
2022-04-11 20:01:44 +05:30
Shawn Hurley
4f783f10fc Updating readme based on new flag for webhook
* Adding volumesnapshotclasses to admission configuration template
2022-04-07 10:39:24 -04:00
andyzhangx
b4c7c83df0 doc: fix spelling issues 2022-02-12 02:09:00 +00:00
Abhishek Jain
fce7295eba Change snapshot controller image version to 5.0.1
Signed-off-by: Abhishek Jain <abjain39@in.ibm.com>
2022-01-27 02:51:22 -08:00
Yashpal Choudhary
d6e1376a41 remove storage class permissions from snapshot controller cluster role 2022-01-14 06:22:29 +05:30
xing-yang
c907f6cdd1 Add changelog for v5.0.0 2021-12-28 15:25:17 +00:00
Kubernetes Prow Robot
7bc7d91810 Merge pull request #585 from nearora-msft/implement-distributed-snapshotting
Implement distributed snapshotting
2021-12-25 06:05:15 -08:00
Ubuntu
21fc337b87 feat: Implement distributed snapshotting 2021-12-24 20:03:31 +00:00
Kubernetes Prow Robot
7cbfc45485 Merge pull request #616 from zhucan/bugfix-615
Rename KUBE_NODE_NAME to NODE_NAME
2021-12-21 19:05:35 -08:00
Kubernetes Prow Robot
fead8458b1 Merge pull request #606 from itspngu/add_kustomization_manifests
Add kustomization manifests to CRDs and controller components
2021-11-29 14:37:21 -08:00
zhucan
4f753c5057 Rename KUBE_NODE_NAME to NODE_NAME
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
2021-11-22 10:37:05 +08:00
Kubernetes Prow Robot
4a9a465a87 Merge pull request #588 from Kartik494/ValidateWebhook
Update CertificateSigningRequest apiversion to V1
2021-11-17 14:01:54 -08:00
Grant Griffiths
d880aa1a74 Bump snapshot-controller and snapshotter deploy to v5-rc1
Signed-off-by: Grant Griffiths <ggriffiths@purestorage.com>
2021-11-15 10:47:50 -08:00
kartik494
f8992bb04d Update CertificateSigningRequest apiversion 2021-11-12 10:07:34 +05:30
itspngu
96fa9c8a10 add bare kustomization manifests to CRDs and controller components 2021-11-08 09:44:17 +00:00
Grant Griffiths
0ccf801780 Add volumesnapshotcontents/status patch rbac
Signed-off-by: Grant Griffiths <ggriffiths@purestorage.com>
2021-09-29 14:25:33 -07:00
Grant Griffiths
2980e22122 Allow csi-snapshotter to patch vsc
Signed-off-by: Grant Griffiths <ggriffiths@purestorage.com>
2021-09-29 13:42:50 -07:00
Grant Griffiths
afff04176d WIP
Signed-off-by: Grant Griffiths <ggriffiths@purestorage.com>
2021-09-23 14:05:17 -07:00
xing-yang
633cef163b Update images to v4.2.1 2021-08-31 00:16:02 +00:00
xing-yang
c879fc3e55 Update manifest 2021-08-16 03:44:54 +00:00
Pranshu Srivastava
b97cf8db35 Fixed some pathnames.
Hi! I encountered some faulty pathnames while going through the Readme, PTAL.
2021-07-13 00:56:33 +05:30
kartik494
70952fde13 Update webhook README 2021-07-07 15:35:09 +05:30
f10atin9
c020e5b763 update webhook.yaml snapshot-validation-webhook image from v4.0.0 to v4.1.1 2021-06-29 23:43:07 +08:00
f10atin9
c9c8c38f8b update set-csi-snapshotter.yaml csi-snapshotter image from v4.0.0 to v4.1.1 2021-06-29 23:40:21 +08:00
Mauricio Poppe
21ded106ea Update sample implementation 2021-04-27 23:32:35 +00:00
Andrei Kvapil
d138216421 upd: more common manifests 2021-01-27 16:47:58 +01:00
xing-yang
7e83f249ae Update README 2020-12-18 04:09:43 +00:00
xing-yang
5069c99ec3 Update controller based on snapshot v1 apis 2020-12-11 21:13:47 +00:00
Kubernetes Prow Robot
d61b728671 Merge pull request #357 from Madhu-1/change-pull-policy
change image pullpolicy from Always to IfNotPresent
2020-11-17 16:50:04 -08:00
Ben Swartzlander
a2666d1ea9 Fix image name for example webhook, and other nitpicks
Also bump example container versions to v3.0.0, and use
k8s.gcr.io/sig-storage instead of quay.io/k8scsi.
2020-09-22 16:40:32 -04:00
Andi Li
06989d7897 Update documentation.
Minor cleanup and change default fail policy and timeout on webhook
config.
2020-08-28 12:06:28 -04:00
Andi Li
42b6b374cf Add phase 1 of validation tightening.
https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/177-volume-snapshot/tighten-validation-webhook-crd.md

1. Ratcheting validation webhook server image
2. Controller labels invalid objects
3. Unit tests for webhook
4. Deployment README and example deployment method with certs
5. Update top-level README

Racheting validation:
1. webhook is strict on create
2. webhook is strict on updates where the existing object passes strict validation
3. webhook is relaxed on updates where the existing object fails strict validation (allows finalizer removal, status update, deletion, etc)

Additionally the validating wehook server will perform immutability
checks on scenario 2 above.
2020-08-27 20:34:21 -04:00
Madhu Rajanna
84333bc84b change image pullpolicy from Always to IfNotPresent 2020-08-13 12:42:01 +05:30
kartik494
6b112307d9 Update controller images to canary 2020-08-05 16:25:47 +05:30
Jason Taylor
0802d19711 Doc updates for controller namespace
Make all namespace settings explicit and add more documentation around
setting appropriate namespace when installing.
2020-05-13 07:07:25 -04:00
xing-yang
5d722431cd Update images 2020-03-05 14:50:19 +00:00
Ben Swartzlander
298e08e262 Small fixes to snapshot-controller YAML
Remove "sidecar" language for the controller.

Update image tag to 2.0.0-rc4 (the latest)

Change imagePullPolicy back to Always
2019-12-30 14:32:57 -05:00
xing-yang
7f0ecc9b8a Update snapshot-controller and csi-snapshotter images to v2.0.0-rc2 2019-11-09 04:05:43 +00:00
xing-yang
6308420635 Split snapshot controller using beta APIs 2019-11-07 16:49:41 +00:00
Xing Yang
0c1faac468 Update VolumeSnapshot CRD version to v1beta
preserveUnknownField set to false, comments updates, adding pull request annotation
more comment updates
VolumeSnapshot comments
rename to VolumeSnapshotClassName
adding license
2019-10-24 16:33:52 -07:00
xing-yang
b641145193 Update images 2019-09-11 18:45:55 +00:00
hoyho
8963b9d75e minimize rbac permission by setting secret as optional 2019-07-06 20:14:57 +08:00
zhucan
10d6437d60 Merge branch 'master' into status-52 2019-05-14 18:26:07 +08:00