Commit Graph

28 Commits

Author SHA1 Message Date
mowangdk
f83e81a856 chore: Adopt kubernetes recommand label 2023-08-26 12:39:40 +08:00
Niels de Vos
926df0c8c4 add "document-start" 1st line to all yaml files
The YAML Specification requires three daashes `---` as marker for the
start of a content block. That means, each YAML file needs to start with
`---` on the first line (or after initial comments).

See-also: https://yaml.org/
2023-05-25 18:13:50 +02:00
Rakshith R
a3cb5a927f add groupsnapshot related webhooks 2023-05-08 18:25:23 +05:30
xing-yang
4e1e4eaafc Update images to v6.2.1 2023-02-06 09:35:53 -05:00
Sebastian Hasler
1defd007af fix certificate generation in webhook example
After bb957259da the script was broken. This commit fixes this by
respecting the format of TLS-type secrets in the script, too.
2022-12-06 18:14:03 +01:00
haslersn
bb957259da Make webhook example compatible with TLS secrets
Kubernetes has a builtin Secret type `kubernetes.io/tls` which uses the keys `tls.crt` and `tls.key`.
2022-11-27 13:37:17 +01:00
Raunak Pradip Shah
71622a2c55 Update snapshotter tags to v6.1.0 2022-09-23 08:54:16 +05:30
Aditya Chudiwal
40563eee4f use registry.k8s.io for deployment 2022-09-04 21:52:58 +05:30
Kubernetes Prow Robot
04006d297c Merge pull request #734 from RaunakShah/rm-v1beta1-webhook
Remove v1beta1 from admission config template
2022-07-07 11:50:38 -07:00
Benoît Knecht
c39d717cbc deploy/kubernetes: Update snapshot-validation-webhook
Since 4f783f10f added validation for `volumesnapshotclasses`, the
`snapshot-validation-webhook` needs to handle this kind of resource. But
version 5.0.1 doesn't, which leads to failures when updating or creating
`volumesnapshotclasses`.

This commit updates the `snapshot-validation-webhook` version to 6.0.1 in
`deploy/kubernetes/webhook-example/admission-configuration-template`.

Signed-off-by: Benoît Knecht <bknecht@protonmail.ch>
2022-07-06 19:49:30 +02:00
Raunak Pradip Shah
13f9daa54e Remove v1beta1 from admission config template 2022-06-08 11:01:02 +05:30
xing-yang
c821877a2e Remove v1beta1 examples 2022-05-22 22:43:11 +00:00
Shawn Hurley
8ae62e79ff Adding webhook RBAC to enable validation of snapshotclasses 2022-05-20 09:25:47 -04:00
Shawn Hurley
4f783f10fc Updating readme based on new flag for webhook
* Adding volumesnapshotclasses to admission configuration template
2022-04-07 10:39:24 -04:00
andyzhangx
b4c7c83df0 doc: fix spelling issues 2022-02-12 02:09:00 +00:00
Abhishek Jain
fce7295eba Change snapshot controller image version to 5.0.1
Signed-off-by: Abhishek Jain <abjain39@in.ibm.com>
2022-01-27 02:51:22 -08:00
xing-yang
c907f6cdd1 Add changelog for v5.0.0 2021-12-28 15:25:17 +00:00
kartik494
f8992bb04d Update CertificateSigningRequest apiversion 2021-11-12 10:07:34 +05:30
xing-yang
633cef163b Update images to v4.2.1 2021-08-31 00:16:02 +00:00
xing-yang
c879fc3e55 Update manifest 2021-08-16 03:44:54 +00:00
Pranshu Srivastava
b97cf8db35 Fixed some pathnames.
Hi! I encountered some faulty pathnames while going through the Readme, PTAL.
2021-07-13 00:56:33 +05:30
kartik494
70952fde13 Update webhook README 2021-07-07 15:35:09 +05:30
f10atin9
c020e5b763 update webhook.yaml snapshot-validation-webhook image from v4.0.0 to v4.1.1 2021-06-29 23:43:07 +08:00
xing-yang
7e83f249ae Update README 2020-12-18 04:09:43 +00:00
xing-yang
5069c99ec3 Update controller based on snapshot v1 apis 2020-12-11 21:13:47 +00:00
Ben Swartzlander
a2666d1ea9 Fix image name for example webhook, and other nitpicks
Also bump example container versions to v3.0.0, and use
k8s.gcr.io/sig-storage instead of quay.io/k8scsi.
2020-09-22 16:40:32 -04:00
Andi Li
06989d7897 Update documentation.
Minor cleanup and change default fail policy and timeout on webhook
config.
2020-08-28 12:06:28 -04:00
Andi Li
42b6b374cf Add phase 1 of validation tightening.
https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/177-volume-snapshot/tighten-validation-webhook-crd.md

1. Ratcheting validation webhook server image
2. Controller labels invalid objects
3. Unit tests for webhook
4. Deployment README and example deployment method with certs
5. Update top-level README

Racheting validation:
1. webhook is strict on create
2. webhook is strict on updates where the existing object passes strict validation
3. webhook is relaxed on updates where the existing object fails strict validation (allows finalizer removal, status update, deletion, etc)

Additionally the validating wehook server will perform immutability
checks on scenario 2 above.
2020-08-27 20:34:21 -04:00