Skip to content

feat(shield): add support to cert-manager on cluster-shield #2411

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 7 commits into
base: main
Choose a base branch
from
Draft

feat(shield): add support to cert-manager on cluster-shield #2411

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
a6d8e04
feat(shield): add support to cert-manager on cluster-shield
francesco-furlan Oct 17, 2025
62743c3
docs: update README.md
francesco-furlan Oct 17, 2025
f2383cf
chore: split cert_manager validation and cert_manager enabled utilities
francesco-furlan Oct 20, 2025
637a51c
test: add cert-manager related tests
francesco-furlan Oct 20, 2025
8c3479f
chore: bump shield chart
francesco-furlan Oct 20, 2025
1f5f90e
chore: let's keep tls_certificates.create true when cert_manager is e…
francesco-furlan Oct 22, 2025
1d6d15c
chore: rename generate to create
francesco-furlan Oct 23, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/shield/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,5 +13,5 @@ maintainers:
- name: mavimo
email: [email protected]
type: application
version: 1.21.2
version: 1.22.0
appVersion: "1.0.0"
11 changes: 11 additions & 0 deletions charts/shield/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -219,6 +219,17 @@ The following table lists the configurable parameters of the `shield` chart and
| cluster.validatingwebhookconfiguration.create | Create the validatingwebhookconfiguration resources for the cluster shield | <code>true</code> |
| cluster.tls_certificates.create | Create the TLS certificates for the cluster shield | <code>true</code> |
| cluster.tls_certificates.secret_name | The name of the secret that contains the TLS certificates | <code></code> |
| cluster.tls_certificates.cert_manager.enabled | Enable cert-manager for certificate management | <code>false</code> |
| cluster.tls_certificates.cert_manager.ca.create | Create the CA certificate using cert-manager | <code>false</code> |
| cluster.tls_certificates.cert_manager.ca.secret_template | The template for the CA certificate secret (if generate is true) will automatically add the annotation `cert-manager.io/allow-direct-injection: "true"` if not present | <code>{}</code> |
| cluster.tls_certificates.cert_manager.ca.secret_name | The name of the existing CA certificate secret (if generate is false) has to be annotated with `cert-manager.io/allow-direct-injection: "true"` | <code>""</code> |
| cluster.tls_certificates.cert_manager.ca.secret_namespace | The namespace of the existing CA certificate secret (if generate is false) | <code>""</code> |
| cluster.tls_certificates.cert_manager.issuer.create | Create the Issuer instead of using an existing one | <code>false</code> |
| cluster.tls_certificates.cert_manager.issuer.name | The name of the existing issuer | <code>""</code> |
| cluster.tls_certificates.cert_manager.issuer.kind | The kind of the existing issuer (Issuer, ClusterIssuer) | <code>Issuer</code> |
| cluster.tls_certificates.cert_manager.issuer.group | The group of the existing issuer | <code>cert-manager.io</code> |
| cluster.tls_certificates.cert_manager.duration | Certificate duration (default: 30 days) | <code>"720h"</code> |
| cluster.tls_certificates.cert_manager.renew_before | How long before expiry to renew (default: 15 days) | <code>"360h"</code> |
| cluster.resources.requests.cpu | The CPU request for the cluster shield | <code>500m</code> |
| cluster.resources.requests.memory | The memory request for the cluster shield | <code>512Mi</code> |
| cluster.resources.limits.cpu | The CPU limit for the cluster shield | <code>1500m</code> |
Expand Down
Loading
Loading