ContainerImage.Pinniped/deploy
Andrew Keesler 6b90dc8bb7
Auto-rotate serving certificate
The rotation is forced by a new controller that deletes the serving cert
secret, as other controllers will see this deletion and ensure that a new
serving cert is created.

Note that the integration tests now have an addition worst case runtime of
60 seconds. This is because of the way that the aggregated API server code
reloads certificates. We will fix this in a future story. Then, the
integration tests should hopefully get much faster.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-08-20 10:03:36 -04:00
..
crd.yaml Update a CRD validation 2020-08-17 16:29:21 -07:00
deployment.yaml Switch back to an exec-based approach to grab the controller-manager CA. (#65) 2020-08-19 13:21:07 -05:00
rbac.yaml Auto-rotate serving certificate 2020-08-20 10:03:36 -04:00
README.md Standardize whitespace/newlines for consistency. 2020-08-14 14:42:49 -05:00
values.yaml Set the type on the image pull Secret 2020-08-13 13:34:23 -07:00

Deploying

This example deployment uses ytt and kapp from k14s.io.

If you would rather not install these command-line tools directly on your machine, you can use alternatively get the most recent version of this container image: https://hub.docker.com/r/k14s/image/tags

  1. Fill in the values in values.yml
  2. In a terminal, cd to this deploy directory
  3. Run: ytt --file . | kapp deploy --yes --app placeholder-name --diff-changes --file -