Skip to content

feat(shield): add support to cert-manager on cluster-shield #2411

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
Nov 10, 2025
Merged

feat(shield): add support to cert-manager on cluster-shield #2411

Show file tree
Hide file tree
Changes from 8 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
3b933af
feat(shield): add support to cert-manager on cluster-shield
francesco-furlan Oct 17, 2025
0952ad6
docs: update README.md
francesco-furlan Oct 17, 2025
f630b51
chore: split cert_manager validation and cert_manager enabled utilities
francesco-furlan Oct 20, 2025
552a0a0
test: add cert-manager related tests
francesco-furlan Oct 20, 2025
6c44e8f
chore: let's keep tls_certificates.create true when cert_manager is e…
francesco-furlan Oct 22, 2025
7bacee8
chore: rename generate to create
francesco-furlan Oct 23, 2025
7638505
chore(shield): bump version
francesco-furlan Nov 4, 2025
30f978e
chore: add attribution to co-author
francesco-furlan Nov 5, 2025
ef3ba16
docs: applied suggestion of using create= instead of generate is
francesco-furlan Nov 7, 2025
9ce51f0
Merge branch 'main' into feat/shield-add-cert-manager-support
francesco-furlan Nov 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/shield/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,5 +13,5 @@ maintainers:
- name: mavimo
email: [email protected]
type: application
version: 1.22.0
version: 1.23.0
appVersion: "1.0.0"
11 changes: 11 additions & 0 deletions charts/shield/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -221,6 +221,17 @@ The following table lists the configurable parameters of the `shield` chart and
| cluster.validatingwebhookconfiguration.create | Create the validatingwebhookconfiguration resources for the cluster shield | <code>true</code> |
| cluster.tls_certificates.create | Create the TLS certificates for the cluster shield | <code>true</code> |
| cluster.tls_certificates.secret_name | The name of the secret that contains the TLS certificates | <code></code> |
| cluster.tls_certificates.cert_manager.enabled | Enable cert-manager for certificate management | <code>false</code> |
| cluster.tls_certificates.cert_manager.ca.create | Create the CA certificate using cert-manager | <code>false</code> |
| cluster.tls_certificates.cert_manager.ca.secret_template | The template for the CA certificate secret (if generate is true) will automatically add the annotation `cert-manager.io/allow-direct-injection: "true"` if not present | <code>{}</code> |
| cluster.tls_certificates.cert_manager.ca.secret_name | The name of the existing CA certificate secret (if generate is false) has to be annotated with `cert-manager.io/allow-direct-injection: "true"` | <code>""</code> |
| cluster.tls_certificates.cert_manager.ca.secret_namespace | The namespace of the existing CA certificate secret (if generate is false) | <code>""</code> |
| cluster.tls_certificates.cert_manager.issuer.create | Create the Issuer instead of using an existing one | <code>false</code> |
| cluster.tls_certificates.cert_manager.issuer.name | The name of the existing issuer | <code>""</code> |
| cluster.tls_certificates.cert_manager.issuer.kind | The kind of the existing issuer (Issuer, ClusterIssuer) | <code>Issuer</code> |
| cluster.tls_certificates.cert_manager.issuer.group | The group of the existing issuer | <code>cert-manager.io</code> |
| cluster.tls_certificates.cert_manager.duration | Certificate duration (default: 30 days) | <code>"720h"</code> |
| cluster.tls_certificates.cert_manager.renew_before | How long before expiry to renew (default: 15 days) | <code>"360h"</code> |
| cluster.resources.requests.cpu | The CPU request for the cluster shield | <code>500m</code> |
| cluster.resources.requests.memory | The memory request for the cluster shield | <code>512Mi</code> |
| cluster.resources.limits.cpu | The CPU limit for the cluster shield | <code>1500m</code> |
Expand Down
Loading
Loading