Skip to content

Commit fc196d2

Browse files
committed
chore: Grammar corrections
Signed-off-by: Peter Fiddes <[email protected]>
1 parent 04494ac commit fc196d2

File tree

1 file changed

+23
-22
lines changed

1 file changed

+23
-22
lines changed

content/announcements/2025-09-01-trust-manager-clusterbundle.md renamed to content/announcements/2025-09-05-trust-manager-clusterbundle.md

Lines changed: 23 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2,16 +2,16 @@
22
slug: trust-manager-clusterbundle-future
33
title: trust-manager is moving the ClusterBundle
44
description: A look at how trust-manager is moving to ClusterBundle and the impact for you
5-
date: "2025-09-01T12:00:00Z"
5+
date: "2025-09-05T12:00:00Z"
66
---
77

88
We would like to share details about a major upcoming change to [trust-manager](github.com/cert-manager/trust-manager).
99

1010
## TL;DR
1111

12-
- trust-manager will move it's current functionality from the `Bundle` resource to a new `ClusterBundle` resource.
13-
- You will need to replace `Bundle` YAML with `ClusterBundle` YAML which will have a similar but different specification.
14-
- In the future `Bundle` may return as a namespace scoped CRD.
12+
- trust-manager will move its current functionality from the `Bundle` resource to a new `ClusterBundle` resource.
13+
- You will need to replace `Bundle` YAML with `ClusterBundle` YAML, which will have a similar but different specification.
14+
- In the future, `Bundle` may return as a namespace-scoped CRD.
1515

1616
## Current State
1717

@@ -24,7 +24,7 @@ NAME SHORTNAMES APIVERSION
2424
bundles trust.cert-manager.io/v1alpha1 false Bundle
2525
```
2626

27-
If you are familiar with the sister project cert-manager you might well expect to see a `ClusterBundle`, based on the existing usage of `Issuer` being namespaced and `ClusterIssuer` being cluster scoped.
27+
If you are familiar with the sister project cert-manager you might well expect to see a `ClusterBundle`, based on the existing usage of `Issuer` being namespaced and `ClusterIssuer` being cluster-scoped.
2828

2929
```sh
3030
NAME SHORTNAMES APIVERSION NAMESPACED KIND
@@ -39,17 +39,17 @@ This may be confusing to new trust-manager users or at least feels a little inco
3939

4040
Simply put, trust-manager is moving to using a `ClusterBundle` by default.
4141
This more accurately reflects the scope of the current `Bundle` resource.
42-
Similarly this more closely ties with the Kubernetes native `ClusterTrustBundle` resource, which also acts as a cluster-level resource.
42+
This more closely ties with the Kubernetes native `ClusterTrustBundle` resource, which also acts as a cluster-level resource.
4343
More details on this can be [found here](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#cluster-trust-bundles).
4444

45-
For trust-manager users this means:
45+
For trust-manager users, this means:
4646

47-
1) Deprecating and ultimately removing `Bundle` resource and the API group `trust.cert-manager.io/v1alpha1`.
47+
1) Deprecating and ultimately removing the `Bundle` resource and the API group `trust.cert-manager.io/v1alpha1`.
4848
1) Creating `ClusterBundle` in the API group `trust-manager.io/v1alpha2` as the new default.
4949

5050
Checkout [API Changes](#api-changes) for more details on what this means.
5151

52-
Eventually you will see something like this after installing trust-manager and listing `api-resource`:
52+
Eventually, you will see something like this after installing trust-manager and listing `api-resource`:
5353

5454
```sh
5555
> kubectl api-resources
@@ -59,7 +59,7 @@ clusterbundles trust-manager.io/v1a
5959

6060
### Minimal Example
6161

62-
For simpler setups such as just public CAs the change should be fairly minimal. So if you currently had:
62+
For simpler setups, such as only public CAs, the change should be fairly minimal. So if you currently have:
6363

6464
```yaml
6565
apiVersion: trust.cert-manager.io/v1alpha1
@@ -102,33 +102,34 @@ kubectl apply -f https://raw.githubusercontent.com/cert-manager/trust-manager/re
102102
kubectl explain clusterbundles.trust-manager.io.spec
103103
```
104104

105-
Don't forget to clean up as the resource is not released!
105+
Don't forget to clean up, as the resource is not released!
106106

107107
```sh
108108
kubectl delete -f https://raw.githubusercontent.com/cert-manager/trust-manager/refs/heads/main/deploy/crds/trust-manager.io_clusterbundles.yaml
109109
```
110110

111111
### API Changes
112112

113-
In the API change there are two key elements to consider:
113+
In the API change, there are two key elements to consider:
114114

115115
1) The API group is changing from `trust.cert-manager.io` to `trust-manager.io`.
116116
1) The API version is going from `v1alpha1` to `v1alpha2`.
117117

118-
The changing of the group `trust.cert-manager.io` to `trust-manager.io` is a shortening of the overall URL but also reflects the general move towards trust-manager being a completely independent project to cert-manager.
118+
The changing of the group `trust.cert-manager.io` to `trust-manager.io` is a shortening of the overall URL, but also reflects the general move towards trust-manager being a completely independent project to cert-manager.
119119
While both projects are maintained by the same set of awesome maintainers, we fundamentally believe that one project should be able to exist without the other, reducing the overall tooling you might need in your cluster.
120-
A key part of making the projects independent is removing the need for webhooks and therefore certificates to secure that webhook communication.
120+
A key part of making the projects independent is removing the need for webhooks, and therefore removing the certificates needed to secure that webhook communication.
121121
Kubernetes advances in [Server Side Apply](https://kubernetes.io/docs/reference/using-api/server-side-apply/) (SSA) and [Common Expression Language](https://kubernetes.io/docs/reference/using-api/cel/)e (CEL) make it much easier to perform resource validation with the Kubernetes components, without having to hand that off to a webhook service to do the resource validation.
122-
That's a different goal and we are not at that state of independence right now but look out for a future post exploring that topic.
122+
That's a different goal, and we are not at that state of independence right now.
123+
Look out for a future post exploring that topic.
123124

124125
The API version change has meaning worth considering too. It is still an `alpha` level resource!
125126
This means that the resource specification could still change in a backwards incompatible way if there was a need.
126-
In practice we likely will be much safer and considerate of any specification change.
127+
In practice, we will likely be much safer and considerate of any specification change.
127128
Just look at the effort the maintainers have gone to with this change alone, for an alpha level resource.
128-
We all understand the frustration of things changing especially when we work with so many CRDs from many different projects.
129+
We all understand the frustration of things changing, especially when we work with so many CRDs from many different projects.
129130
That plays a big part in our mindset to try and make changes in a way that impact users as minimally as possible.
130131

131-
## Impact To You
132+
## Impact On You
132133

133134
The migration of resources from old to new will be assisted by a new conversion controller.
134135

@@ -156,13 +157,13 @@ Take this with a pinch of salt, but the current vision for trust-manager after `
156157

157158
## Getting Involved
158159

159-
cert-manager maintained projects really are open to all as CNCF projects.
160+
cert-manager maintained projects are open to everyone as CNCF projects.
160161
We welcome all feedback and contributions on the proposed `ClusterBundle` API and to our projects more generally.
161162

162163
### Help Needed
163164

164165
If you have the time, there is still a lot of work to get us to the future state where `ClusterBundle` is the default.
165-
Things needed include but are not limited to:
166+
Things needed include, but are not limited to:
166167

167168
- Website documentation updates
168169
- Migration guidance
@@ -176,7 +177,7 @@ See our [website docs](../docs/contributing/README.md), or come join us on [slac
176177

177178
### References
178179

179-
To find out more about this change and others, here's some starting points:
180+
To find out more about this change and others, here are some starting points:
180181

181182
- [Design document for `ClusterBundle` name change](https://github.com/cert-manager/trust-manager/blob/main/design/20241124-rename-bunde-to-clusterbundle.md)
182183
- [A more technical implementation plan](https://github.com/cert-manager/trust-manager/issues/242)
@@ -186,4 +187,4 @@ To find out more about this change and others, here's some starting points:
186187
We would like to thank two maintainers in particular for their substantial contributions to `ClusterBundles`:
187188

188189
- Firstly [Erik](https://github.com/erikgb) for being the driving force and contributor behind this change.
189-
- And [Ashley](https://github.com/sgtcodfish) for reviewing, supporting and being the main point of contact on all things trust-manager related.
190+
- And [Ashley](https://github.com/sgtcodfish) for reviewing, supporting, and being the main point of contact on all things trust-manager related.

0 commit comments

Comments
 (0)