ContainerImage.Pinniped/deploy/concierge
Matt Moyer 2843c4f8cb
Refactor kube-cert-agent controllers to use a Deployment.
This is a relatively large rewrite of much of the kube-cert-agent controllers. Instead of managing raw Pod objects, they now create a single Deployment and let the builtin k8s controller handle it from there.

This reduces the amount of code we need and should handle a number of edge cases better, especially those where a Pod becomes "wedged" and needs to be recreated.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-04-26 08:19:45 -06:00
..
authentication.concierge.pinniped.dev_jwtauthenticators.yaml Generated 2021-02-10 21:52:09 -05:00
authentication.concierge.pinniped.dev_webhookauthenticators.yaml Generated 2021-02-10 21:52:09 -05:00
config.concierge.pinniped.dev_credentialissuers.yaml Fix a copy-paste typo in the ImpersonationProxyInfo JSON field name. 2021-03-12 13:24:05 -06:00
deployment.yaml Use TokenCredentialRequest instead of base64 token with impersonator 2021-03-10 10:30:06 -08:00
helpers.lib.yaml deploy: wire API group suffix through YTT templates 2021-01-19 17:23:06 -05:00
rbac.yaml Refactor kube-cert-agent controllers to use a Deployment. 2021-04-26 08:19:45 -06:00
README.md Restructure docs into new layout. 2021-02-23 11:11:07 -06:00
values.yaml fix a typo in some comments 2021-03-22 09:34:58 -07:00
z0_crd_overlay.yaml deploy: wire API group suffix through YTT templates 2021-01-19 17:23:06 -05:00

Pinniped Concierge Deployment

See the how-to guide for details.