@@ -70,30 +70,21 @@ cluster-up: deploy-config
7070cluster-down : delete-config
7171
7272prep-config :
73- @echo ' Generating certs and deploying into active cluster...'
73+ @echo ' Deploying into active cluster...'
7474 cat deploy/deployment-base.yaml | sed -e " s|IMAGE|${IMAGE} |g" | tee deploy/deployment.yaml
75- cat deploy/mutatingwebhook.yaml | hack/webhook-patch-ca-bundle.sh > deploy/mutatingwebhook-ca-bundle.yaml
7675
7776deploy-config : prep-config
7877 @echo ' Applying configuration to active cluster...'
7978 kubectl apply -f deploy/auth.yaml
8079 kubectl apply -f deploy/deployment.yaml
8180 kubectl apply -f deploy/service.yaml
82- kubectl apply -f deploy/mutatingwebhook-ca-bundle.yaml
83- until kubectl get csr -o \
84- jsonpath=' {.items[?(@.spec.username=="system:serviceaccount:default:pod-identity-webhook")].metadata.name}' | \
85- grep -m 1 " csr-" ; \
86- do echo " Waiting for CSR to be created" && sleep 1 ; \
87- done
88- kubectl certificate approve $$(kubectl get csr -o jsonpath='{.items[?(@.spec.username=="system:serviceaccount:default:pod-identity-webhook" ) ].metadata.name}' )
8981
9082delete-config :
9183 @echo ' Tearing down mutating controller and associated resources...'
92- kubectl delete -f deploy/mutatingwebhook-ca-bundle.yaml
9384 kubectl delete -f deploy/service.yaml
9485 kubectl delete -f deploy/deployment.yaml
9586 kubectl delete -f deploy/auth.yaml
96- kubectl delete secret pod-identity-webhook
87+ kubectl delete secret pod-identity-webhook-cert
9788
9889clean ::
9990 rm -rf ./amazon-eks-pod-identity-webhook
0 commit comments