kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Bump cert-manager to 1.5.1

This commit is contained in:
Ole Markus With 2021-08-18 20:09:10 +02:00
parent 80b9359500
commit 2288900ae6
11 changed files with 351 additions and 304 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tests/integration/update_cluster/aws-lb-controller/data/aws_s3_bucket_object_minimal.example.com-addons-bootstrap_content
View File

@ -41,7 +41,7 @@ spec:
k8s-addon: dns-controller.addons.k8s.io
- id: k8s-1.16
manifest: certmanager.io/k8s-1.16.yaml
manifestHash: 1a19e2b6a1ace33a7b958184dffb31760c2bffd6fcc9f5cf08f35c5b0e3a3904
manifestHash: a68bcb100322949cf5b5a118db1a5c674d7b56977260e378a19d1d8cfef6f75b
name: certmanager.io
selector: null
- id: k8s-1.9

129
tests/integration/update_cluster/aws-lb-controller/data/aws_s3_bucket_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
View File

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificaterequests.cert-manager.io
spec:
conversion:
@ -959,7 +959,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificates.cert-manager.io
spec:
conversion:
@ -2815,7 +2815,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: challenges.acme.cert-manager.io
spec:
conversion:
@ -6631,7 +6631,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations
by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -6721,7 +6721,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01
challenge records.
properties:
@ -6766,7 +6766,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01
challenge records.
properties:
@ -10276,7 +10276,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: clusterissuers.cert-manager.io
spec:
conversion:
@ -15301,7 +15301,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -15395,7 +15395,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -15441,7 +15441,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -19994,7 +19994,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: issuers.cert-manager.io
spec:
conversion:
@ -25016,7 +25016,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -25110,7 +25110,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -25156,7 +25156,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -29708,7 +29708,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: orders.acme.cert-manager.io
spec:
conversion:
@ -30620,6 +30620,17 @@ status:
---
apiVersion: v1
kind: Namespace
metadata:
creationTimestamp: null
labels:
addon.kops.k8s.io/name: certmanager.io
app.kubernetes.io/managed-by: kops
name: cert-manager
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
@ -30632,7 +30643,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
@ -30650,7 +30661,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
@ -30668,7 +30679,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
@ -30685,7 +30696,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
rules:
- apiGroups:
@ -30764,7 +30775,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
rules:
- apiGroups:
@ -30814,7 +30825,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
rules:
- apiGroups:
@ -30864,7 +30875,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
rules:
- apiGroups:
@ -30936,7 +30947,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
rules:
- apiGroups:
@ -31006,7 +31017,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
rules:
- apiGroups:
@ -31115,7 +31126,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
rules:
- apiGroups:
@ -31189,7 +31200,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
@ -31228,7 +31239,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
name: cert-manager-edit
@ -31270,7 +31281,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
rules:
- apiGroups:
@ -31296,7 +31307,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
rules:
- apiGroups:
@ -31343,7 +31354,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
rules:
- apiGroups:
@ -31366,7 +31377,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31390,7 +31401,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31414,7 +31425,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31438,7 +31449,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31462,7 +31473,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31486,7 +31497,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31510,7 +31521,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31534,7 +31545,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31558,7 +31569,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31582,7 +31593,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31607,7 +31618,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
rules:
@ -31659,7 +31670,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
rules:
@ -31709,7 +31720,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
rules:
@ -31744,7 +31755,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
roleRef:
@ -31769,7 +31780,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
roleRef:
@ -31795,7 +31806,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
roleRef:
@ -31821,7 +31832,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31849,7 +31860,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -31877,7 +31888,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
spec:
@ -31894,7 +31905,7 @@ spec:
app.kubernetes.io/component: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31905,7 +31916,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-cainjector:v1.5.0
image: quay.io/jetstack/cert-manager-cainjector:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
resources: {}
@ -31932,7 +31943,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31953,7 +31964,7 @@ spec:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31966,7 +31977,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-controller:v1.5.0
image: quay.io/jetstack/cert-manager-controller:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
ports:
@ -31996,7 +32007,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -32013,7 +32024,7 @@ spec:
app.kubernetes.io/component: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -32027,7 +32038,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-webhook:v1.5.0
image: quay.io/jetstack/cert-manager-webhook:v1.5.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@ -32080,7 +32091,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:
@ -32123,7 +32134,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:

2
tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_bucket_object_minimal.example.com-addons-bootstrap_content
View File

@ -47,7 +47,7 @@ spec:
k8s-addon: cluster-autoscaler.addons.k8s.io
- id: k8s-1.16
manifest: certmanager.io/k8s-1.16.yaml
manifestHash: 1a19e2b6a1ace33a7b958184dffb31760c2bffd6fcc9f5cf08f35c5b0e3a3904
manifestHash: a68bcb100322949cf5b5a118db1a5c674d7b56977260e378a19d1d8cfef6f75b
name: certmanager.io
selector: null
- id: k8s-1.11

129
tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_bucket_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
View File

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificaterequests.cert-manager.io
spec:
conversion:
@ -959,7 +959,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificates.cert-manager.io
spec:
conversion:
@ -2815,7 +2815,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: challenges.acme.cert-manager.io
spec:
conversion:
@ -6631,7 +6631,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations
by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -6721,7 +6721,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01
challenge records.
properties:
@ -6766,7 +6766,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01
challenge records.
properties:
@ -10276,7 +10276,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: clusterissuers.cert-manager.io
spec:
conversion:
@ -15301,7 +15301,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -15395,7 +15395,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -15441,7 +15441,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -19994,7 +19994,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: issuers.cert-manager.io
spec:
conversion:
@ -25016,7 +25016,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -25110,7 +25110,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -25156,7 +25156,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -29708,7 +29708,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: orders.acme.cert-manager.io
spec:
conversion:
@ -30620,6 +30620,17 @@ status:
---
apiVersion: v1
kind: Namespace
metadata:
creationTimestamp: null
labels:
addon.kops.k8s.io/name: certmanager.io
app.kubernetes.io/managed-by: kops
name: cert-manager
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
@ -30632,7 +30643,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
@ -30650,7 +30661,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
@ -30668,7 +30679,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
@ -30685,7 +30696,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
rules:
- apiGroups:
@ -30764,7 +30775,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
rules:
- apiGroups:
@ -30814,7 +30825,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
rules:
- apiGroups:
@ -30864,7 +30875,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
rules:
- apiGroups:
@ -30936,7 +30947,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
rules:
- apiGroups:
@ -31006,7 +31017,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
rules:
- apiGroups:
@ -31115,7 +31126,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
rules:
- apiGroups:
@ -31189,7 +31200,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
@ -31228,7 +31239,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
name: cert-manager-edit
@ -31270,7 +31281,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
rules:
- apiGroups:
@ -31296,7 +31307,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
rules:
- apiGroups:
@ -31343,7 +31354,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
rules:
- apiGroups:
@ -31366,7 +31377,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31390,7 +31401,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31414,7 +31425,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31438,7 +31449,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31462,7 +31473,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31486,7 +31497,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31510,7 +31521,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31534,7 +31545,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31558,7 +31569,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31582,7 +31593,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31607,7 +31618,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
rules:
@ -31659,7 +31670,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
rules:
@ -31709,7 +31720,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
rules:
@ -31744,7 +31755,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
roleRef:
@ -31769,7 +31780,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
roleRef:
@ -31795,7 +31806,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
roleRef:
@ -31821,7 +31832,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31849,7 +31860,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -31877,7 +31888,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
spec:
@ -31894,7 +31905,7 @@ spec:
app.kubernetes.io/component: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31905,7 +31916,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-cainjector:v1.5.0
image: quay.io/jetstack/cert-manager-cainjector:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
resources: {}
@ -31932,7 +31943,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31953,7 +31964,7 @@ spec:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31966,7 +31977,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-controller:v1.5.0
image: quay.io/jetstack/cert-manager-controller:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
ports:
@ -31996,7 +32007,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -32013,7 +32024,7 @@ spec:
app.kubernetes.io/component: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -32027,7 +32038,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-webhook:v1.5.0
image: quay.io/jetstack/cert-manager-webhook:v1.5.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@ -32080,7 +32091,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:
@ -32123,7 +32134,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:

2
tests/integration/update_cluster/many-addons-ccm/data/aws_s3_bucket_object_minimal.example.com-addons-bootstrap_content
View File

@ -47,7 +47,7 @@ spec:
k8s-addon: cluster-autoscaler.addons.k8s.io
- id: k8s-1.16
manifest: certmanager.io/k8s-1.16.yaml
manifestHash: 1a19e2b6a1ace33a7b958184dffb31760c2bffd6fcc9f5cf08f35c5b0e3a3904
manifestHash: a68bcb100322949cf5b5a118db1a5c674d7b56977260e378a19d1d8cfef6f75b
name: certmanager.io
selector: null
- id: k8s-1.11

129
tests/integration/update_cluster/many-addons-ccm/data/aws_s3_bucket_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
View File

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificaterequests.cert-manager.io
spec:
conversion:
@ -959,7 +959,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificates.cert-manager.io
spec:
conversion:
@ -2815,7 +2815,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: challenges.acme.cert-manager.io
spec:
conversion:
@ -6631,7 +6631,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations
by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -6721,7 +6721,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01
challenge records.
properties:
@ -6766,7 +6766,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01
challenge records.
properties:
@ -10276,7 +10276,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: clusterissuers.cert-manager.io
spec:
conversion:
@ -15301,7 +15301,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -15395,7 +15395,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -15441,7 +15441,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -19994,7 +19994,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: issuers.cert-manager.io
spec:
conversion:
@ -25016,7 +25016,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -25110,7 +25110,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -25156,7 +25156,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -29708,7 +29708,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: orders.acme.cert-manager.io
spec:
conversion:
@ -30620,6 +30620,17 @@ status:
---
apiVersion: v1
kind: Namespace
metadata:
creationTimestamp: null
labels:
addon.kops.k8s.io/name: certmanager.io
app.kubernetes.io/managed-by: kops
name: cert-manager
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
@ -30632,7 +30643,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
@ -30650,7 +30661,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
@ -30668,7 +30679,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
@ -30685,7 +30696,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
rules:
- apiGroups:
@ -30764,7 +30775,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
rules:
- apiGroups:
@ -30814,7 +30825,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
rules:
- apiGroups:
@ -30864,7 +30875,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
rules:
- apiGroups:
@ -30936,7 +30947,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
rules:
- apiGroups:
@ -31006,7 +31017,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
rules:
- apiGroups:
@ -31115,7 +31126,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
rules:
- apiGroups:
@ -31189,7 +31200,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
@ -31228,7 +31239,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
name: cert-manager-edit
@ -31270,7 +31281,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
rules:
- apiGroups:
@ -31296,7 +31307,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
rules:
- apiGroups:
@ -31343,7 +31354,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
rules:
- apiGroups:
@ -31366,7 +31377,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31390,7 +31401,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31414,7 +31425,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31438,7 +31449,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31462,7 +31473,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31486,7 +31497,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31510,7 +31521,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31534,7 +31545,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31558,7 +31569,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31582,7 +31593,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31607,7 +31618,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
rules:
@ -31659,7 +31670,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
rules:
@ -31709,7 +31720,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
rules:
@ -31744,7 +31755,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
roleRef:
@ -31769,7 +31780,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
roleRef:
@ -31795,7 +31806,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
roleRef:
@ -31821,7 +31832,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31849,7 +31860,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -31877,7 +31888,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
spec:
@ -31894,7 +31905,7 @@ spec:
app.kubernetes.io/component: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31905,7 +31916,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-cainjector:v1.5.0
image: quay.io/jetstack/cert-manager-cainjector:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
resources: {}
@ -31932,7 +31943,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31953,7 +31964,7 @@ spec:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31966,7 +31977,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-controller:v1.5.0
image: quay.io/jetstack/cert-manager-controller:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
ports:
@ -31996,7 +32007,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -32013,7 +32024,7 @@ spec:
app.kubernetes.io/component: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -32027,7 +32038,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-webhook:v1.5.0
image: quay.io/jetstack/cert-manager-webhook:v1.5.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@ -32080,7 +32091,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:
@ -32123,7 +32134,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:

2
tests/integration/update_cluster/many-addons/data/aws_s3_bucket_object_minimal.example.com-addons-bootstrap_content
View File

@ -47,7 +47,7 @@ spec:
k8s-addon: cluster-autoscaler.addons.k8s.io
- id: k8s-1.16
manifest: certmanager.io/k8s-1.16.yaml
manifestHash: 1a19e2b6a1ace33a7b958184dffb31760c2bffd6fcc9f5cf08f35c5b0e3a3904
manifestHash: a68bcb100322949cf5b5a118db1a5c674d7b56977260e378a19d1d8cfef6f75b
name: certmanager.io
selector: null
- id: k8s-1.11

129
tests/integration/update_cluster/many-addons/data/aws_s3_bucket_object_minimal.example.com-addons-certmanager.io-k8s-1.16_content
View File

@ -10,7 +10,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificaterequests.cert-manager.io
spec:
conversion:
@ -959,7 +959,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: certificates.cert-manager.io
spec:
conversion:
@ -2815,7 +2815,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: challenges.acme.cert-manager.io
spec:
conversion:
@ -6631,7 +6631,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations
by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -6721,7 +6721,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01
challenge records.
properties:
@ -6766,7 +6766,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01
challenge records.
properties:
@ -10276,7 +10276,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: clusterissuers.cert-manager.io
spec:
conversion:
@ -15301,7 +15301,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -15395,7 +15395,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -15441,7 +15441,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -19994,7 +19994,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: issuers.cert-manager.io
spec:
conversion:
@ -25016,7 +25016,7 @@ spec:
description: Configures cert-manager to attempt to complete
authorizations by performing the DNS01 challenge flow.
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns)
API to manage DNS01 challenge records.
properties:
@ -25110,7 +25110,7 @@ spec:
- clientTokenSecretRef
- serviceConsumerDomain
type: object
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage
DNS01 challenge records.
properties:
@ -25156,7 +25156,7 @@ spec:
- resourceGroupName
- subscriptionID
type: object
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage
DNS01 challenge records.
properties:
@ -29708,7 +29708,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: orders.acme.cert-manager.io
spec:
conversion:
@ -30620,6 +30620,17 @@ status:
---
apiVersion: v1
kind: Namespace
metadata:
creationTimestamp: null
labels:
addon.kops.k8s.io/name: certmanager.io
app.kubernetes.io/managed-by: kops
name: cert-manager
---
apiVersion: v1
automountServiceAccountToken: true
kind: ServiceAccount
@ -30632,7 +30643,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
@ -30650,7 +30661,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
@ -30668,7 +30679,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
@ -30685,7 +30696,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
rules:
- apiGroups:
@ -30764,7 +30775,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
rules:
- apiGroups:
@ -30814,7 +30825,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
rules:
- apiGroups:
@ -30864,7 +30875,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
rules:
- apiGroups:
@ -30936,7 +30947,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
rules:
- apiGroups:
@ -31006,7 +31017,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
rules:
- apiGroups:
@ -31115,7 +31126,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
rules:
- apiGroups:
@ -31189,7 +31200,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
@ -31228,7 +31239,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
name: cert-manager-edit
@ -31270,7 +31281,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
rules:
- apiGroups:
@ -31296,7 +31307,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
rules:
- apiGroups:
@ -31343,7 +31354,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
rules:
- apiGroups:
@ -31366,7 +31377,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31390,7 +31401,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-issuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31414,7 +31425,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-clusterissuers
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31438,7 +31449,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificates
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31462,7 +31473,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-orders
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31486,7 +31497,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-challenges
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31510,7 +31521,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-ingress-shim
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31534,7 +31545,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-approve:cert-manager-io
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31558,7 +31569,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-controller-certificatesigningrequests
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31582,7 +31593,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:subjectaccessreviews
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -31607,7 +31618,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
rules:
@ -31659,7 +31670,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
rules:
@ -31709,7 +31720,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
rules:
@ -31744,7 +31755,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector:leaderelection
namespace: kube-system
roleRef:
@ -31769,7 +31780,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager:leaderelection
namespace: kube-system
roleRef:
@ -31795,7 +31806,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook:dynamic-serving
namespace: kube-system
roleRef:
@ -31821,7 +31832,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31849,7 +31860,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -31877,7 +31888,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-cainjector
namespace: kube-system
spec:
@ -31894,7 +31905,7 @@ spec:
app.kubernetes.io/component: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cainjector
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31905,7 +31916,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-cainjector:v1.5.0
image: quay.io/jetstack/cert-manager-cainjector:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
resources: {}
@ -31932,7 +31943,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager
namespace: kube-system
spec:
@ -31953,7 +31964,7 @@ spec:
app.kubernetes.io/component: controller
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: cert-manager
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -31966,7 +31977,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-controller:v1.5.0
image: quay.io/jetstack/cert-manager-controller:v1.5.1
imagePullPolicy: IfNotPresent
name: cert-manager
ports:
@ -31996,7 +32007,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
namespace: kube-system
spec:
@ -32013,7 +32024,7 @@ spec:
app.kubernetes.io/component: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
spec:
containers:
- args:
@ -32027,7 +32038,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: quay.io/jetstack/cert-manager-webhook:v1.5.0
image: quay.io/jetstack/cert-manager-webhook:v1.5.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@ -32080,7 +32091,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:
@ -32123,7 +32134,7 @@ metadata:
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/managed-by: kops
app.kubernetes.io/name: webhook
app.kubernetes.io/version: v1.5.0
app.kubernetes.io/version: v1.5.1
name: cert-manager-webhook
webhooks:
- admissionReviewVersions:

127
upup/models/cloudup/resources/addons/certmanager.io/k8s-1.16.yaml.template
View File

@ -1,5 +1,3 @@
# Sourced from the release page of cert-manager 1.15
#
# Copyright The cert-manager Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
@ -27,7 +25,7 @@ metadata:
app.kubernetes.io/name: 'cert-manager'
app.kubernetes.io/instance: 'cert-manager'
# Generated labels
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
group: cert-manager.io
names:
@ -761,7 +759,7 @@ metadata:
app.kubernetes.io/name: 'cert-manager'
app.kubernetes.io/instance: 'cert-manager'
# Generated labels
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
group: cert-manager.io
names:
@ -2088,7 +2086,7 @@ metadata:
app.kubernetes.io/name: 'cert-manager'
app.kubernetes.io/instance: 'cert-manager'
# Generated labels
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
group: acme.cert-manager.io
names:
@ -4111,7 +4109,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations by performing the DNS01 challenge flow.
type: object
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage DNS01 challenge records.
type: object
required:
@ -4179,7 +4177,7 @@ spec:
type: string
serviceConsumerDomain:
type: string
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01 challenge records.
type: object
required:
@ -4217,7 +4215,7 @@ spec:
tenantID:
description: when specifying ClientID and ClientSecret then this field is also needed
type: string
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01 challenge records.
type: object
required:
@ -5970,7 +5968,7 @@ metadata:
app.kubernetes.io/name: 'cert-manager'
app.kubernetes.io/instance: 'cert-manager'
# Generated labels
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
group: cert-manager.io
names:
@ -8452,7 +8450,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations by performing the DNS01 challenge flow.
type: object
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage DNS01 challenge records.
type: object
required:
@ -8520,7 +8518,7 @@ spec:
type: string
serviceConsumerDomain:
type: string
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01 challenge records.
type: object
required:
@ -8558,7 +8556,7 @@ spec:
tenantID:
description: when specifying ClientID and ClientSecret then this field is also needed
type: string
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01 challenge records.
type: object
required:
@ -10701,7 +10699,7 @@ metadata:
app.kubernetes.io/name: 'cert-manager'
app.kubernetes.io/instance: 'cert-manager'
# Generated labels
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
group: cert-manager.io
names:
@ -13183,7 +13181,7 @@ spec:
description: Configures cert-manager to attempt to complete authorizations by performing the DNS01 challenge flow.
type: object
properties:
acmedns:
acmeDNS:
description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage DNS01 challenge records.
type: object
required:
@ -13251,7 +13249,7 @@ spec:
type: string
serviceConsumerDomain:
type: string
azuredns:
azureDNS:
description: Use the Microsoft Azure DNS API to manage DNS01 challenge records.
type: object
required:
@ -13289,7 +13287,7 @@ spec:
tenantID:
description: when specifying ClientID and ClientSecret then this field is also needed
type: string
clouddns:
cloudDNS:
description: Use the Google Cloud DNS API to manage DNS01 challenge records.
type: object
required:
@ -15432,7 +15430,7 @@ metadata:
app.kubernetes.io/name: 'cert-manager'
app.kubernetes.io/instance: 'cert-manager'
# Generated labels
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
group: acme.cert-manager.io
names:
@ -16102,6 +16100,11 @@ status:
conditions: []
storedVersions: []
---
apiVersion: v1
kind: Namespace
metadata:
name: cert-manager
---
# Source: cert-manager/templates/cainjector-serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
@ -16114,7 +16117,7 @@ metadata:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
---
# Source: cert-manager/templates/serviceaccount.yaml
apiVersion: v1
@ -16128,7 +16131,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
---
# Source: cert-manager/templates/webhook-serviceaccount.yaml
apiVersion: v1
@ -16142,7 +16145,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
---
# Source: cert-manager/templates/cainjector-rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1
@ -16154,7 +16157,7 @@ metadata:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["cert-manager.io"]
resources: ["certificates"]
@ -16189,7 +16192,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["cert-manager.io"]
resources: ["issuers", "issuers/status"]
@ -16215,7 +16218,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["cert-manager.io"]
resources: ["clusterissuers", "clusterissuers/status"]
@ -16241,7 +16244,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["cert-manager.io"]
resources: ["certificates", "certificates/status", "certificaterequests", "certificaterequests/status"]
@ -16276,7 +16279,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["acme.cert-manager.io"]
resources: ["orders", "orders/status"]
@ -16314,7 +16317,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
# Use to update challenge resource status
- apiGroups: ["acme.cert-manager.io"]
@ -16374,7 +16377,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["cert-manager.io"]
resources: ["certificates", "certificaterequests"]
@ -16411,7 +16414,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rbac.authorization.k8s.io/aggregate-to-view: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-admin: "true"
@ -16433,7 +16436,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:
@ -16455,7 +16458,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cert-manager"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["cert-manager.io"]
resources: ["signers"]
@ -16475,7 +16478,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cert-manager"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["certificates.k8s.io"]
resources: ["certificatesigningrequests"]
@ -16501,7 +16504,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: ["authorization.k8s.io"]
resources: ["subjectaccessreviews"]
@ -16517,7 +16520,7 @@ metadata:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16537,7 +16540,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16557,7 +16560,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16577,7 +16580,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16597,7 +16600,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16617,7 +16620,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16637,7 +16640,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16657,7 +16660,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cert-manager"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16677,7 +16680,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cert-manager"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16697,7 +16700,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
@ -16720,7 +16723,7 @@ metadata:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
# Used for leader election by the controller
# cert-manager-cainjector-leader-election is used by the CertificateBased injector controller
@ -16754,7 +16757,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
# Used for leader election by the controller
# See also: https://github.com/kubernetes-sigs/controller-runtime/pull/1144#discussion_r480173688
@ -16784,7 +16787,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
rules:
- apiGroups: [""]
resources: ["secrets"]
@ -16809,7 +16812,7 @@ metadata:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
@ -16832,7 +16835,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
@ -16854,7 +16857,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
@ -16876,7 +16879,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
type: ClusterIP
ports:
@ -16900,7 +16903,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
type: ClusterIP
ports:
@ -16924,7 +16927,7 @@ metadata:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
replicas: 1
selector:
@ -16939,20 +16942,20 @@ spec:
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "cainjector"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
nodeSelector:
node-role.kubernetes.io/master: ""
priorityClassName: system-cluster-critical
serviceAccountName: cert-manager-cainjector
securityContext:
runAsNonRoot: true
serviceAccountName: cert-manager-cainjector
tolerations:
- key: node-role.kubernetes.io/master
operator: Exists
containers:
- name: cert-manager
image: "quay.io/jetstack/cert-manager-cainjector:v1.5.0"
image: "quay.io/jetstack/cert-manager-cainjector:v1.5.1"
imagePullPolicy: IfNotPresent
args:
- --v=2
@ -16976,7 +16979,7 @@ metadata:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
replicas: 1
selector:
@ -16991,7 +16994,7 @@ spec:
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "controller"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
annotations:
prometheus.io/path: "/metrics"
prometheus.io/scrape: 'true'
@ -17008,7 +17011,7 @@ spec:
operator: Exists
containers:
- name: cert-manager
image: "quay.io/jetstack/cert-manager-controller:v1.5.0"
image: "quay.io/jetstack/cert-manager-controller:v1.5.1"
imagePullPolicy: IfNotPresent
args:
- --v=2
@ -17042,7 +17045,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
replicas: 1
selector:
@ -17057,7 +17060,7 @@ spec:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
spec:
nodeSelector:
node-role.kubernetes.io/master: ""
@ -17070,7 +17073,7 @@ spec:
operator: Exists
containers:
- name: cert-manager
image: "quay.io/jetstack/cert-manager-webhook:v1.5.0"
image: "quay.io/jetstack/cert-manager-webhook:v1.5.1"
imagePullPolicy: IfNotPresent
args:
- --v=2
@ -17120,7 +17123,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
annotations:
cert-manager.io/inject-ca-from-secret: "kube-system/cert-manager-webhook-ca"
webhooks:
@ -17169,7 +17172,7 @@ metadata:
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
app.kubernetes.io/version: "v1.5.0"
app.kubernetes.io/version: "v1.5.1"
annotations:
cert-manager.io/inject-ca-from-secret: "kube-system/cert-manager-webhook-ca"
webhooks:

2
upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.18/manifest.yaml
View File

@ -54,7 +54,7 @@ spec:
k8s-app: metrics-server
- id: k8s-1.16
manifest: certmanager.io/k8s-1.16.yaml
manifestHash: 1a19e2b6a1ace33a7b958184dffb31760c2bffd6fcc9f5cf08f35c5b0e3a3904
manifestHash: a68bcb100322949cf5b5a118db1a5c674d7b56977260e378a19d1d8cfef6f75b
name: certmanager.io
selector: null
- id: v1.15.0

2
upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml
View File

@ -48,7 +48,7 @@ spec:
k8s-app: metrics-server
- id: k8s-1.16
manifest: certmanager.io/k8s-1.16.yaml
manifestHash: 1a19e2b6a1ace33a7b958184dffb31760c2bffd6fcc9f5cf08f35c5b0e3a3904
manifestHash: a68bcb100322949cf5b5a118db1a5c674d7b56977260e378a19d1d8cfef6f75b
name: certmanager.io
selector: null
- id: v1.15.0