github.com/cert-manager/csi-lib commits | Ecosyste.ms: OpenCollective

Add option to skip blocking pod startup if driver is not ready to create a request yet

Signed-off-by: James Munnelly <[email protected]>

82b787eb5b263f8384c126e75662273a01bc35f2 authored over 2 years ago by James Munnelly <[email protected]>

Merge pull request #19 from wallrj/cert-manager-1.7

Update to cert-manager 1.7

34ffa3852ad37eda55542b48a6bb162b790305b5 authored over 2 years ago by jetstack-bot <[email protected]>

Update to cert-manager v1.7.1

Signed-off-by: Richard Wall <[email protected]>

714937d503bb66494e4299ef5346282d6e0aa5ed authored almost 3 years ago by Richard Wall <[email protected]>

Update to Go 1.17

Signed-off-by: Richard Wall <[email protected]>

0df2ab91a9033c98c50142fd2d446fb7d32c9b87 authored almost 3 years ago by Richard Wall <[email protected]>

Refactor to use new logr.Logger struct

Signed-off-by: Richard Wall <[email protected]>

277e4a6595c0d99786b5c81139c9304fb03df864 authored almost 3 years ago by Richard Wall <[email protected]>

go mod tidy

Signed-off-by: Richard Wall <[email protected]>

a21f27dfda87509047af694ea2bfa7268e011560 authored almost 3 years ago by Richard Wall <[email protected]>

Depend on cert-manager 1.7

Signed-off-by: Richard Wall <[email protected]>

c1bd3306f5792a112f9433dfb16c43506520044f authored almost 3 years ago by Richard Wall <[email protected]>

Merge pull request #17 from JoshVanL/client-for-metadata-token-request-empty-aud

Adds ClientForMetadataTokenRequestEmptyAud and EmptyAudienceTokenFromMetadata

fe9b5eff41b7a867e93102b4e7cf7847b40aa23c authored over 3 years ago by jetstack-bot <[email protected]>

Adds ClientForMetadataTokenRequestEmptyAud and

EmptyAudienceTokenFromMetadata manager/util package helper funcs for
building clients and parsing...

2015a7ff1e0e9028dcdc50aaa9b7686910a48764 authored over 3 years ago by joshvanl <[email protected]>

Merge pull request #12 from JoshVanL/storage-write-files-fsUser

Allow storage implementations to optionally specifiy an fsGroup GID when writing files.

dd8ae5d66f5301940c865704f3e91992ab3bc4d6 authored over 3 years ago by jetstack-bot <[email protected]>

Merge pull request #16 from JoshVanL/spelling-client-for-metadata

Fix spelling of manager interface ClientForMetadata

e867e0329f485198adc875368678b9ce1952307a authored over 3 years ago by jetstack-bot <[email protected]>

Fix spelling of manager interface ClientForMetadata

Signed-off-by: joshvanl <[email protected]>

6bd9d2d164e9c8d740cc9cbf75802fc0d4556fab authored over 3 years ago by joshvanl <[email protected]>

Update integration tests to use new WriteFiles signature

Signed-off-by: joshvanl <[email protected]>

1e7b555b66bdf7bf56b57050ec7552ba49323dfa authored over 3 years ago by joshvanl <[email protected]>

Update integration tests to use nil fsUser when calling WriteFiles

Signed-off-by: joshvanl <[email protected]>

25e114f24c402b374ea9f6d5eed4232d7f38e948 authored over 3 years ago by joshvanl <[email protected]>

Adds fs-user volume attribute option to pass fsUser to WriteFiles

Signed-off-by: joshvanl <[email protected]>

7aa98f1ec5ebdf091eae23c35d5e18ae8b58d0ec authored over 3 years ago by joshvanl <[email protected]>

Revert FsGroupAttribute to a string const

Signed-off-by: joshvanl <[email protected]>

e4f097e30ebfe1ccd93750db5d4fc4cf0ba9b2d5 authored over 3 years ago by joshvanl <[email protected]>

Change filesystem storage implementation to allow passing a fsUser uid.

Chmod volume data directory is fsUser is defined.

Signed-off-by: joshvanl <vleeuwenjoshua@gmail....

103035a021b062f845fc05937b28af69ba911286 authored over 3 years ago by joshvanl <[email protected]>

Update storage interface WriteFiles to allow passing an optional fsUser

UID

Signed-off-by: joshvanl <[email protected]>

99d9337977e07227addb0cdfb3b91564c0029865 authored over 3 years ago by joshvanl <[email protected]>

Update memory storage implementation to use new WriteFiles signature.

Does no support setting custom fsUsers

Signed-off-by: joshvanl <[email protected]>

512fdc8f1502a7f697fd113d4d6fc895e9eaa153 authored over 3 years ago by joshvanl <[email protected]>

Update atomic writer to allow setting FsGroup

Signed-off-by: joshvanl <[email protected]>

953c6b95cdee023d7e328e6476bd603f1cebfc1e authored over 3 years ago by joshvanl <[email protected]>

Update example to expose the fs-group volume attribute

Signed-off-by: joshvanl <[email protected]>

338e5d65be853f8b0212c72a186d993e7a33b739 authored over 3 years ago by joshvanl <[email protected]>

Change Chown to point to the real files just written by the atomic

writter

Signed-off-by: joshvanl <[email protected]>

dc342777eb38f2b2cdb5d7c9b2bcd3986306ea47 authored over 3 years ago by joshvanl <[email protected]>

Update filesystem to chmod the data dir and enforce gid limits

Signed-off-by: joshvanl <[email protected]>

867550366e907b5d2bf9242751c376a9261730ae authored over 3 years ago by joshvanl <[email protected]>

Revert atomic_writer to original state

Signed-off-by: joshvanl <[email protected]>

240f9aa5c3f816e1235d4cba82ccf3fd3246bb8f authored over 3 years ago by joshvanl <[email protected]>

Change example deployment to use fs-group

Signed-off-by: joshvanl <[email protected]>

0e6cff8e787dd7fcf2c7995ab7997d21bcf9ceac authored over 3 years ago by joshvanl <[email protected]>

Adds fsGroup options to filesystem

Signed-off-by: joshvanl <[email protected]>

62ced5a7fcfc41176c7e99c32fd9df07efd2aadf authored over 3 years ago by joshvanl <[email protected]>

Update in-memory storage implementation to accept new WriteFiles

Signed-off-by: joshvanl <[email protected]>

04caec6b89cd8c4f63359301907d57ee18bae621 authored over 3 years ago by joshvanl <[email protected]>

Update DataWriter WriteFiles func to accept a metadata, rather than

volume ID

Signed-off-by: joshvanl <[email protected]>

52d5196a673310ec228d06c6120c81fab7570d4a authored over 3 years ago by joshvanl <[email protected]>

Update deployment example to include user and group to the pod's

security context, along with setting the fs-user in volume attributes

Signed-off-by: joshvanl <v...

55090e15588c600375c7a6c873950a6c44b698ae authored over 3 years ago by joshvanl <[email protected]>

Merge pull request #14 from munnerz/exp-comments

Add extra comments to exponential backoff code

9bbe96e957a3202eca8a1c3619aa568c5b6a8f98 authored over 3 years ago by jetstack-bot <[email protected]>

Add extra comments to exponential backoff code

Signed-off-by: James Munnelly <[email protected]>

d1acb7e9fbc7d545833549add43042bee996c590 authored over 3 years ago by James Munnelly <[email protected]>

Merge pull request #7 from munnerz/u-exp-backoff

Add exponential back-off when issuance fails

0c52580e89e0ff2f7cc2fff8578cd688b0272a2a authored over 3 years ago by jetstack-bot <[email protected]>

Set back-off Step value to MaxInt32

Signed-off-by: James Munnelly <[email protected]>

e3ff180c3224006fffad1080ee2143e239b1c734 authored over 3 years ago by James Munnelly <[email protected]>

Add exponential back-off when issuance fails

Signed-off-by: James Munnelly <[email protected]>

b48eef741f6160b7e4eead7b6e67a505eb241367 authored over 3 years ago by James Munnelly <[email protected]>

Merge pull request #13 from JoshVanL/internal-cc-headers

Adds missing copy write headers to internal go package files

6fc2f55e8edd0c470a9345ea04e17e02030ee22e authored over 3 years ago by jetstack-bot <[email protected]>

Adds missing copy write headers to internal go files

Signed-off-by: joshvanl <[email protected]>

63ea34a07368eebc26e8d929a66e0fd6d3e1e764 authored over 3 years ago by joshvanl <[email protected]>

Merge pull request #11 from JoshVanL/fix-data-root-error-message

Fix spelling for error message -data-root not defined

55b45c857e97da4ac3b1d7581495e085aed35bd0 authored over 3 years ago by jetstack-bot <[email protected]>

Fix spelling for error message -data-root not defined

Signed-off-by: joshvanl <[email protected]>

dd4608e137416f6d5bd659deef275b4d28a8c539 authored over 3 years ago by joshvanl <[email protected]>

Merge pull request #9 from JoshVanL/create-client

Adds ClientForMatadataFunc to manager

59cb7b33033ef0f21cfa070b5327fab75c0e6ed2 authored over 3 years ago by jetstack-bot <[email protected]>

Change CreateClientFor to ClientForMatadataFunc, changes inmemory store

to write on metadata changes

Signed-off-by: joshvanl <[email protected]>

ad33b07a88372b70189dc407b5f20a54fc5f3ce8 authored over 3 years ago by joshvanl <[email protected]>

Merge pull request #10 from SgtCoDFish/securitymd

Add security reporting info for csi-lib

4209d52c16a0efa44477cd3b80b7c847c2b02d47 authored over 3 years ago by jetstack-bot <[email protected]>

Set success to true when targetPath is already a bind mount

Signed-off-by: joshvanl <[email protected]>

1936d0f86b1541003c069296049a4a5e548e2b1b authored over 3 years ago by joshvanl <[email protected]>

add security reporting info for csi-lib

Signed-off-by: Ashley Davis <[email protected]>

a98979bc85669749b34867f334a734c388e093dc authored over 3 years ago by Ashley Davis <[email protected]>

Overwrite existing meta when volume context has changed, instead of

writing a blank meta which causes re-issuance

Signed-off-by: joshvanl <[email protected]>

95669d612d1d13e838d26fcdfb6f8d3ab413522c authored over 3 years ago by joshvanl <[email protected]>

Adds CreateClient to manager for optionally changing the

CertificateRequest creator clientto modify the requestor

Signed-off-by: joshvanl <vleeuwenjoshua...

299c02b23788bca47e6f10dde57482e712b9684c authored over 3 years ago by joshvanl <[email protected]>

Merge pull request #3 from munnerz/cleanup-crs-u

Support deleting/cleaning up CertificateRequest objects for volumes

c1463aa8cfbdc0bade19696bfb2ee9041d116751 authored over 3 years ago by jetstack-bot <[email protected]>

Merge pull request #6 from munnerz/pem-not-der

Expect PEM data to be returned by SignRequestFunc instead of DER

82c7313afa8a2128961835f87a191f2102c987c5 authored over 3 years ago by jetstack-bot <[email protected]>

Default MaxRequestsPerVolume to 1 if not set

Signed-off-by: James Munnelly <[email protected]>

0e478d2d62396807a060dc55f29a8ef721e2c577 authored over 3 years ago by James Munnelly <[email protected]>

Merge pull request #5 from munnerz/boilerplate-always

Add verify-boilerplate.sh to verify-all.sh

031cdcdf3fb45d6d7ac716fc76ad08cab8182138 authored over 3 years ago by jetstack-bot <[email protected]>

Expect PEM data to be returned by SignRequestFunc instead of DER

Signed-off-by: James Munnelly <[email protected]>

8c802851617dafcc53a852b44e5b5d6852b7e66a authored over 3 years ago by James Munnelly <[email protected]>

Add verify-boilerplate.sh to verify-all.sh

Signed-off-by: James Munnelly <[email protected]>

f3d1c7b134b5e4deb3113a91c596205ce1939c9b authored over 3 years ago by James Munnelly <[email protected]>

Merge pull request #4 from munnerz/ci

Add basic CI testing & verification scripts

5a32cee5ad82cb4ff06e42d1eed6298a48bc3388 authored over 3 years ago by jetstack-bot <[email protected]>

Add LICENSE file

Signed-off-by: James Munnelly <[email protected]>

7ca4eeea6401343ed581adedb7ff3b7401882bb8 authored over 3 years ago by James Munnelly <[email protected]>

Fix data race in memory based storage implementation

Signed-off-by: James Munnelly <[email protected]>

9083475ab20491a7149638e7e3ee2a0e0fc4221c authored over 3 years ago by James Munnelly <[email protected]>

Run hack/update-gofmt.sh

Signed-off-by: James Munnelly <[email protected]>

97570d70d46aaaa232c32323deb010e3a6dc837a authored over 3 years ago by James Munnelly <[email protected]>

Fix up boilerplate headers

Signed-off-by: James Munnelly <[email protected]>

884dbc2e63b933705106f6ac66d6e037fa8bfd92 authored over 3 years ago by James Munnelly <[email protected]>

Run go test in verify-all.sh

Signed-off-by: James Munnelly <[email protected]>

adeee488c58dbff59247044998e2e9a35f7d2a64 authored over 3 years ago by James Munnelly <[email protected]>

Add boilerplate checking scripts

Signed-off-by: James Munnelly <[email protected]>

6a5ed4ce9177b01af834c709781903ea59c3d543 authored over 3 years ago by James Munnelly <[email protected]>

Add gofmt verification scripts

Signed-off-by: James Munnelly <[email protected]>

82a3125a86d8cecd4db860bd65f96a75214e5672 authored over 3 years ago by James Munnelly <[email protected]>

Only maintain a limited number of CertificateRequest resources for each volume

Signed-off-by: James Munnelly <[email protected]>

43816dc88b4f1489270a920d26198590479ad795 authored over 3 years ago by James Munnelly <[email protected]>

Log message when deleting CRs

Signed-off-by: James Munnelly <[email protected]>

f5c697dc37157ee0d414097c6e87f74df6109096 authored over 3 years ago by James Munnelly <[email protected]>

Use node name hash selector in informer watch

Signed-off-by: James Munnelly <[email protected]>

cf2c86ff0dded3a79ac853842c4d08fb5ff428aa authored over 3 years ago by James Munnelly <[email protected]>

Fix typo

Signed-off-by: James Munnelly <[email protected]>

c0f4dc0b5c92d21afef11e2a66a2aa3ffc5d9c5f authored over 3 years ago by James Munnelly <[email protected]>

Add integration test for cleaning up old CRs

Signed-off-by: James Munnelly <[email protected]>

f45370b8f782db9432a7aeae3eab4a0f8cba8669 authored over 3 years ago by James Munnelly <[email protected]>

Create internal/api package holding consts and api utilities

Signed-off-by: James Munnelly <[email protected]>

1e2c41b8db4f2e162071889f6fff6c8197da3638 authored over 3 years ago by James Munnelly <[email protected]>

Merge pull request #2 from munnerz/init

Push initial csi-lib code/implementation

a93a9851d45468317864e8f1e3f1a090880232c4 authored over 3 years ago by jetstack-bot <[email protected]>

Create OWNERS

c42dc1597cf92cd1c04fb0c1d368d2eea29debf4 authored over 3 years ago by James Munnelly <[email protected]>

Implement NodeGetCapabilities

Signed-off-by: James Munnelly <[email protected]>

69d86abd7f3d3ae382da190014063b5643fb5f10 authored over 3 years ago by James Munnelly <[email protected]>

Use informer + lister for API reads

Signed-off-by: James Munnelly <[email protected]>

8bba564a23e9edcf51317c1962a945f1215995f7 authored over 3 years ago by James Munnelly <[email protected]>

initial commit

Signed-off-by: James Munnelly <[email protected]>

0dcc9651606f620425ea502f64ef4f8184c96d16 authored over 3 years ago by James Munnelly <[email protected]>

Add README.md

Signed-off-by: James Munnelly <[email protected]>

a7f224c31a6fa6ead9bf856dbf18370f3680cb0a authored over 3 years ago by James Munnelly <[email protected]>

Add notes on node name hasing, pod UIDs, CR name generation and the option of a single global controller

Signed-off-by: James Munnelly <[email protected]>

de33ea0579ae06fa64feb41b4c26febb6c44ae9f authored over 3 years ago by James Munnelly <[email protected]>

Fix up storage tests

Signed-off-by: James Munnelly <[email protected]>

2ebede8b3bdfeabb7e3db481b997f07446f0447f authored over 3 years ago by James Munnelly <[email protected]>

Require readOnly: true is set on Pod volume

Signed-off-by: James Munnelly <[email protected]>

082d220d6eb476f4e5a8ee964ad724d55f74bd8f authored over 3 years ago by James Munnelly <[email protected]>

Add integration tests

Signed-off-by: James Munnelly <[email protected]>

e695fb61e8ef0f752449170481a51ba755a3dca0 authored over 3 years ago by James Munnelly <[email protected]>

Add design document for certificaterequest management

Signed-off-by: James Munnelly <[email protected]>

f8e5a144a198567beb95a88043a0167244238cca authored over 3 years ago by James Munnelly <[email protected]>

Minor rewording

Signed-off-by: James Munnelly <[email protected]>

59734c19c007ac0ec5f93de5d83be549da975c19 authored over 3 years ago by James Munnelly <[email protected]>

Refactor driver instantiation for easier testing

Signed-off-by: James Munnelly <[email protected]>

6ec96755fd97ecff2259e6eb9d68302ccb2b7a30 authored over 3 years ago by James Munnelly <[email protected]>

example: set 'readOnly' field on CSI volume

Signed-off-by: James Munnelly <[email protected]>

3bdc9d85beb0ed213357b4b580cb41ea8fe0fa2c authored over 3 years ago by James Munnelly <[email protected]>

Add missing test/log package

Signed-off-by: James Munnelly <[email protected]>

fe8e257562f937fb8c1792d087e4f250f38c823a authored over 3 years ago by James Munnelly <[email protected]>

Clean up partially complete NodePublishVolume upon failure

Signed-off-by: James Munnelly <[email protected]>

f9b610a9840dd3e6dfd64c1035543107ae01f12e authored over 3 years ago by James Munnelly <[email protected]>

Mount tmpfs in data directory on startup

Signed-off-by: James Munnelly <[email protected]>

3aa7f2ef593b5bc08ec917d5a96b00dd03bbfd1c authored over 3 years ago by James Munnelly <[email protected]>

Switch to k8s.io/mount-utils

Signed-off-by: James Munnelly <[email protected]>

0f26c97705ee0ce9cf5f73e0ffc61e63ab20b1fa authored over 3 years ago by James Munnelly <[email protected]>

Switch to using fnv hashes of both node id and volume id

Signed-off-by: James Munnelly <[email protected]>

95481236cce3460c7956d86e88be024a0dd4f84f authored over 3 years ago by James Munnelly <[email protected]>

Rename CSIAttributes->VolumeContext and don't persist PublishContext

Signed-off-by: James Munnelly <[email protected]>

b6609535308d798b29131836640ea70d7e3ad517 authored over 3 years ago by James Munnelly <[email protected]>

Remove uses of glog

Signed-off-by: James Munnelly <[email protected]>

c371c992cc2ddef91ba3711739d7d47137a49d01 authored over 3 years ago by James Munnelly <[email protected]>

Improve error logging for unimplemented methods

Signed-off-by: James Munnelly <[email protected]>

799d8f8d18ad8f12cb5233c8d8739ee0b693cdc9 authored over 3 years ago by James Munnelly <[email protected]>

Use mount.IsNotMountPoint instead of List directly

Signed-off-by: James Munnelly <[email protected]>

44a2a44e768b7bb95b62b8572fcb84ddf329faea authored over 3 years ago by James Munnelly <[email protected]>

Sort imports

Signed-off-by: James Munnelly <[email protected]>

db8bd70f26b099b9979ddc32e529c36b66dc40ba authored over 3 years ago by James Munnelly <[email protected]>

Create test/util package

Signed-off-by: James Munnelly <[email protected]>

1b00c9637b47dd33415a9c53d9a785e422e5c861 authored over 3 years ago by James Munnelly <[email protected]>

Minor comment update

Signed-off-by: James Munnelly <[email protected]>

6a2a679f7cf063b2bc93ea7a1ac0393c22cd2170 authored over 3 years ago by James Munnelly <[email protected]>

Create README.md

3c4ebfe5aa5d0f222199c1d1027722b0c8a404ae authored over 3 years ago by James Munnelly <[email protected]>