Commit Graph

219 Commits

Author SHA1 Message Date
Max Jonas Werner 454790cee4
feat: add sourceRef.name column to Kustomization print columns
closes #556

Signed-off-by: Max Jonas Werner <mail@makk.es>
2022-02-01 16:35:13 +01:00
Stefan Prodan d188195def
Release v0.20.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-02-01 10:01:01 +02:00
Stefan Prodan ea95f0c85c
Update source-controller/api to v0.21.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-31 12:07:33 +02:00
Stefan Prodan 38541078fa
Revoke kubectl managed fields ownership
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-31 11:25:11 +02:00
Max Voitko 7a511efe38 Fix the missing protocol for the first port in manager config
Signed-off-by: Maksym Voitko <max.voitko@gmail.com>
2022-01-25 00:36:34 +02:00
Sanskar Jaiswal c0d5eeea2d drop capabilities, enable seccomp and enforce runAsNonRoot
Further restricts the SecurityContext that the controller runs under, by enabling the default seccomp profile and dropping all linux capabilities.
This was set at container-level to ensure backwards compatibility with use cases in which sidecars are injected into the source-controller pod
without setting less restrictive settings.
Add a uid and gid for the container to enforce runAsNonRoot and ensure
the use of non root users.

BREAKING CHANGES:
1) The use of new seccomp API requires Kubernetes 1.19.
2) the controller container is now executed under 65534:65534 (userid:groupid).
   This change may break deployments that hard-coded the user name 'controller' in their PodSecurityPolicy.

Signed-off-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works>
Co-authored-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-19 12:54:29 +05:30
Stefan Prodan 57cf14430d
Release v0.19.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-13 19:54:39 +02:00
Stefan Prodan d4e13e5c0c
Release v0.19.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-10 15:29:01 +02:00
Stefan Prodan 5466544f7f
Update source-controller/api to v0.20.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-05 17:33:47 +02:00
Aurel Canciu ec9fdb1550
Update flux pkg components
Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>
2021-12-20 14:50:41 +01:00
Stefan Prodan 5b95d1d667
Release v0.18.2
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-12-09 17:40:57 +02:00
Stefan Prodan 24bdda0c1c
Update dependencies
- fluxcd/pkg/ssa v0.6.0
- fluxcd/source-controller/api v0.19.1
- github.com/opencontainers/runc to v1.0.3 (fix CVE-2021-43784)

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-12-09 11:47:50 +02:00
Stefan Prodan 6e2c38ce90
Release v0.18.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-23 15:42:33 +02:00
Stefan Prodan 5e9c75b847
Update source-controller/api to v0.19.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-23 14:43:21 +02:00
Stefan Prodan 5b0734b50f
Release v0.18.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-12 16:38:18 +02:00
Stefan Prodan e9c002cf62
Update source-controller/api to v0.18.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-12 15:32:38 +02:00
Stefan Prodan 8eac59574f
Release v0.17.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-09 14:18:49 +02:00
Stefan Prodan 76eb4833d2
Release v0.16.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-19 11:50:13 +03:00
Stefan Prodan 7a26305dc8
Fix cluster scope detection of applied objects
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-19 09:34:18 +03:00
Stefan Prodan 3a67da5d8e
Release v0.15.5
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-13 13:26:37 +03:00
Stefan Prodan a596394fde
Release v0.15.4
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-12 12:12:41 +03:00
Stefan Prodan aae8cbd684
Release v0.15.3
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-11 18:23:22 +03:00
Stefan Prodan 1edd9207fc
Release v0.15.2
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-10 15:48:24 +03:00
Stefan Prodan 481f8af7fa
Release v0.15.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-08 18:17:51 +03:00
Stefan Prodan 2c223b44e8
Bump image tag to v0.15.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-08 14:09:29 +03:00
Stefan Prodan 7c635c53fa
Release v0.15.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-08 13:49:28 +03:00
Stefan Prodan 51a7189087
Restore `spec.validation` and mark it as deprecated
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-07 14:17:02 +03:00
Stefan Prodan 9c533e4a52
Run SSA resource manager tests in CI
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-09-30 18:35:40 +03:00
Stefan Prodan 9c8f284b7f
Add `spec.wait` usage to the API docs
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-09-30 18:35:40 +03:00
Stefan Prodan 468f00e416
Implement health checking for all resources
- Add `.spec.wait` optional boolean field to API
- Wait for all applied resources to become ready when `.spec.wait` is set to `true`

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-09-30 18:35:39 +03:00
Stefan Prodan 8baead9b2e
Add e2e test for CRDs+CRs reconciliation using cert-manager
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-09-30 18:35:39 +03:00
Stefan Prodan 7ffe62b8e7
Introduce v1beta2 API
Changes from v1beta1:
- `spec.validation` removed (server-side validation is implicit)
- `spec.status.snapshot` replaced by `spec.status.inventory`
- `spec.patchesStrategicMerge` deprecated in favour of `spec.patches`
- `spec.patchesJson6902` deprecated in favour of `spec.patches`

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-09-30 18:33:26 +03:00
Stefan Prodan 54efaca039
Release v0.14.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-09-09 15:21:36 +03:00
Max Jonas Werner d7690d8564
feat: set default observedGeneration to -1 on Kustomizations
This is a follow-up to
https://github.com/fluxcd/helm-controller/pull/294, porting the same
code to the kustomize-controller so that all Flux 2 controllers work
the same way in this regard.

Signed-off-by: Max Jonas Werner <mail@makk.es>
2021-08-27 17:15:24 +02:00
Stefan Prodan 053f68b8ff
Release v0.14.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-08-26 11:37:05 +03:00
Stefan Prodan 0e55929c95
Release v0.13.3
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-08-05 16:12:19 +03:00
Stefan Prodan c89374c758
Update source-controller/api to v0.15.4
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-08-05 15:41:07 +03:00
Stefan Prodan 59ccfb0601
Release v0.13.2
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-07-05 14:31:51 +03:00
Stefan Prodan 1445b7e066
Release v0.13.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-30 13:32:29 +03:00
Stefan Prodan 4f4106bfa1
Update kubectl to v1.21.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-30 11:38:54 +03:00
Stefan Prodan 2370360c10
Add the generic patch field to the API spec docs
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-18 10:42:34 +03:00
Stefan Prodan 9d323aa686
Release v0.13.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-14 16:37:11 +03:00
Stefan Prodan 6672928023
Merge pull request #364 from Kissy/generic-patches
Add support for in-line generic patches to Flux Kustomization API
2021-06-14 14:28:15 +03:00
Stefan Prodan f8cac4a35d
Add missing ConfigMap RBAC
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-14 13:41:14 +03:00
Guillaume Le Biller b797eac907
Implement generic patches in Kustomization
Allow patching multiple resources instead of a single existing one as
StrategicMerge & JSON6902 are forced to target existing named resources.

Signed-off-by: Guillaume Le Biller <glebiller@Traveldoo.com>
2021-06-11 09:04:37 +02:00
Stefan Prodan 1202cc157b
Update source-controller/api to v0.14.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-09 17:35:47 +03:00
Stefan Prodan dce166f7a6
Update controller-runtime and controller-gen
- Bump controller-runtime to v0.9.0
- Bump controller-gen to v0.5.0
- Use Environment.AddUser to generate the envtest cluster admin kubeconfig

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-08 20:34:16 +03:00
Stefan Prodan f14354300a
Release v0.12.2
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-02 18:58:27 +03:00
Stefan Prodan 71f0d981f8
Release v0.12.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-05-26 17:09:59 +03:00
Stefan Prodan 3bb5bece0c
Update source-controller/api to v0.13.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-05-26 16:46:11 +03:00