Skip to content

lorenzo-maffeo-SAP/gardener-extension-shoot-cert-service

This branch is 59 commits behind gardener/gardener-extension-shoot-cert-service:master.

Folders and files

NameName
Last commit message
Last commit date
Mar 25, 2024
Jan 15, 2024
Feb 29, 2024
Feb 29, 2024
May 24, 2024
Feb 29, 2024
May 24, 2024
May 24, 2024
May 3, 2024
May 24, 2024
May 10, 2024
Feb 29, 2024
Aug 21, 2023
Sep 29, 2023
Jan 31, 2023
Mar 10, 2020
Feb 29, 2024
May 8, 2024
Feb 29, 2024
Feb 29, 2024
Feb 29, 2024
May 24, 2024
May 24, 2024
May 24, 2024

Repository files navigation

REUSE status CI Build status Go Report Card

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Its main principle is to leverage Kubernetes concepts for all of its tasks.

Recently, most of the vendor specific logic has been developed in-tree. However, the project has grown to a size where it is very hard to extend, maintain, and test. With GEP-1 we have proposed how the architecture can be changed in a way to support external controllers that contain their very own vendor specifics. This way, we can keep Gardener core clean and independent.

Configuration

Example configuration for this extension controller:

apiVersion: shoot-cert-service.extensions.config.gardener.cloud/v1alpha1
kind: Configuration
issuerName: gardener
restrictIssuer: true # restrict issuer to any sub-domain of shoot.spec.dns.domain (default)
acme:
  email: [email protected]
  server: https://acme-v02.api.letsencrypt.org/directory
# privateKey: | # Optional key for Let's Encrypt account.
#   -----BEGIN BEGIN RSA PRIVATE KEY-----
#   ...
#   -----END RSA PRIVATE KEY-----

Extension-Resources

Example extension resource:

apiVersion: extensions.gardener.cloud/v1alpha1
kind: Extension
metadata:
  name: "extension-certificate-service"
  namespace: shoot--project--abc
spec:
  type: shoot-cert-service

When an extension resource is reconciled, the extension controller will create an instance of Cert-Management as well as an Issuer with the ACME information provided in the configuration above. These resources are placed inside the shoot namespace on the seed. Also, the controller takes care about generating necessary RBAC resources for the seed as well as for the shoot.

Please note, this extension controller relies on the Gardener-Resource-Manager to deploy k8s resources to seed and shoot clusters, i.e. it never deploys them directly.

How to start using or developing this extension controller locally

You can run the controller locally on your machine by executing make start. Please make sure to have the kubeconfig to the cluster you want to connect to ready in the ./dev/kubeconfig file. Static code checks and tests can be executed by running make verify. We are using Go modules for Golang package dependency management and Ginkgo/Gomega for testing.

Feedback and Support

Feedback and contributions are always welcome. Please report bugs or suggestions as GitHub issues or join our Slack channel #gardener (please invite yourself to the Kubernetes workspace here).

Learn more!

Please find further resources about out project here:

About

Gardener extension controller for certificate services for shoot clusters.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Go 73.5%
  • Shell 16.1%
  • Makefile 3.6%
  • Python 3.0%
  • Smarty 2.2%
  • Mustache 1.0%
  • Dockerfile 0.6%