Update readme to refenrece upstream

Author: mark.lynch

.github/workflows/release.yaml .github/workflows/publish_charts.yaml.github/workflows/release.yaml renamed to .github/workflows/publish_charts.yaml

@@ -20,4 +20,3 @@ build/_output
 bin/kustomize
 bin/node-specific-sizing
 deploy.yaml
-build.yaml

.gitignore

@@ -7,7 +7,7 @@ Helps you resize pods created by a DaemonSet depending on the amount of allocata
 ### Install
 
 ```bash
-helm repo add node-specific-sizing https://mlladb.github.io/kubernetes-node-specific-sizing/
+helm repo add node-specific-sizing https://manomanotech.github.io/kubernetes-node-specific-sizing/
 helm repo update
 helm repo list
 helm install node-specific-sizing node-specific-sizing/node-specific-sizing --namespace node-specific-sizing --create-namespace

README.md

@@ -1,7 +1,7 @@
 apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
-  name: {{ include "chart.fullname" . }}-mutating-webhook-configuration
+  name: {{ include "chart.fullname" . }}-webhook
   annotations:
     cert-manager.io/inject-ca-from: '{{ .Release.Namespace }}/{{ include "chart.fullname" . }}-serving-cert'
   labels:

charts/node-specific-sizing/templates/mutatingadmissionwebhook.yaml

@@ -1,52 +1,59 @@
 kind: Issuer
 apiVersion: cert-manager.io/v1
 metadata:
-  name: node-specific-sizing-ca-bootstrap
-  namespace: node-specific-sizing
+  name: ca-bootstrap
+  namespace: kube-system
 spec:
   selfSigned: {}
 ---
 kind: Certificate
 apiVersion: cert-manager.io/v1
 metadata:
-  name: node-specific-sizing-ca-root
-  namespace: node-specific-sizing
+  name: ca-root
+  namespace: kube-system
 spec:
-  secretName: node-specific-sizing-ca-root
+  secretName: ca-root
   isCA: true
-  commonName: node-specific-sizing-ca-root
+  commonName: ca-root
   subject:
-    countries: [ "AU" ]
-    organizations: [ "Entain Internal" ]
+    countries: [ "FR" ]
+    organizations: [ "ManoMano Internal" ]
   privateKey:
     algorithm: RSA
     size: 2048
   issuerRef:
     kind: Issuer
-    name: node-specific-sizing-ca-bootstrap
+    name: ca-bootstrap
 ---
 kind: Issuer
 apiVersion: cert-manager.io/v1
 metadata:
-  name: node-specific-sizing-ca-root
-  namespace: node-specific-sizing
+  name: ca-root
+  namespace: kube-system
 spec:
   ca:
-    secretName: node-specific-sizing-ca-root
+    secretName: ca-root
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
+  labels:
+    app.kubernetes.io/component: certificate
+    app.kubernetes.io/created-by: kubernetes-node-specific-sizing
+    app.kubernetes.io/instance: serving-cert
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: certificate
+    app.kubernetes.io/part-of: kubernetes-node-specific-sizing
   name: node-specific-sizing-serving-cert
-  namespace: node-specific-sizing
+  namespace: kube-system
 spec:
   dnsNames:
-    - node-specific-sizing.node-specific-sizing.svc
-    - node-specific-sizing.node-specific-sizing.svc.cluster.local
+    - node-specific-sizing.kube-system.svc
+    - node-specific-sizing.kube-system.svc.cluster.local
   issuerRef:
-    name: node-specific-sizing-ca-root
+    name: ca-root
     kind: Issuer
-  secretName: node-specific-sizing-serving-cert
+  secretName: node-specific-sizing-cert
   isCA: false
   privateKey:
     algorithm: RSA
@@ -58,13 +65,13 @@ kind: Certificate
 apiVersion: cert-manager.io/v1
 metadata:
   name: node-specific-sizing-client-cert
-  namespace: node-specific-sizing
+  namespace: kube-system
 spec:
   issuerRef:
-    name: node-specific-sizing-ca-root
+    name: ca-root
     kind: Issuer
-  commonName: api-server-client-cert-for-node-specific-sizing
-  secretName: node-specific-sizing-client-cert
+  commonName: api-server-client-cert-for-node-specific-sizing.manomano.tech
+  secretName: client-cert
   duration: 2160h
   renewBefore: 360h
   isCA: false

deploy/certmanager.yaml

@@ -11,4 +11,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: node-specific-sizing
-  namespace: node-specific-sizing
+  namespace: kube-system

deploy/clusterrolebinding.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: node-specific-sizing
-  namespace: node-specific-sizing
   labels:
     app: node-specific-sizing
 spec:
@@ -19,7 +18,7 @@ spec:
       terminationGracePeriodSeconds: 10
       containers:
         - name: node-specific-sizing
-          image: ghcr.io/manomanotech/kubernetes-node-specific-sizing:sha-28e2a98
+          image: node-specific-sizing:latest
           imagePullPolicy: IfNotPresent
           env:
           - name: POD_NAMESPACE
@@ -28,12 +27,12 @@ spec:
                 fieldPath: metadata.namespace
           volumeMounts:
             - mountPath: /tmp/k8s-webhook-server/serving-certs
-              name: node-specific-sizing-serving-cert
+              name: cert
               readOnly: true
           securityContext:
             runAsNonRoot: true
       volumes:
-        - name: node-specific-sizing-serving-cert
+        - name: cert
           secret:
             defaultMode: 420
-            secretName: node-specific-sizing-serving-cert
+            secretName: node-specific-sizing-cert

deploy/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: node-specific-sizing
+namespace: kube-system
 
 resources:
 - certmanager.yaml
@@ -10,8 +10,3 @@ resources:
 - serviceaccount.yaml
 - mutatingadmissionwebhook.yaml
 - service.yaml
-
-labels:
-  - pairs:
-      app: node-specific-sizing
-      user: mark-lynch

deploy/kustomization.yaml

@@ -3,7 +3,7 @@ apiVersion: admissionregistration.k8s.io/v1
 metadata:
   name: node-specific-sizing
   annotations:
-    cert-manager.io/inject-ca-from: node-specific-sizing/node-specific-sizing-client-cert
+    cert-manager.io/inject-ca-from: kube-system/node-specific-sizing-client-cert
 webhooks:
   - name: node-specific-sizing.svc.cluster.local
     objectSelector:
@@ -15,7 +15,7 @@ webhooks:
     timeoutSeconds: 2
     clientConfig:
       service:
-        namespace: node-specific-sizing
+        namespace: kube-system
         name: node-specific-sizing
         path: /mutate
     rules: