Azure
/
azure-workload-identity
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

release: update manifest and helm charts for v0.7.0 (#299) 

Co-authored-by: chewong <chewong@users.noreply.github.com>
This commit is contained in:
github-actions[bot] 2021-12-14 23:05:30 +00:00 коммит произвёл GitHub
Родитель 9a475482e0
Коммит 5ef06e09bf
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
17 изменённых файлов: 25 добавлений и 25 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

2
Makefile
Просмотреть файл

@ -2,7 +2,7 @@ REGISTRY ?= mcr.microsoft.com/oss/azure/workload-identity
PROXY_IMAGE_NAME := proxy PROXY_IMAGE_NAME := proxy
INIT_IMAGE_NAME := proxy-init INIT_IMAGE_NAME := proxy-init
WEBHOOK_IMAGE_NAME := webhook WEBHOOK_IMAGE_NAME := webhook
IMAGE_VERSION ?= v0.6.0 IMAGE_VERSION ?= v0.7.0
ORG_PATH := github.com/Azure ORG_PATH := github.com/Azure
PROJECT_NAME := azure-workload-identity PROJECT_NAME := azure-workload-identity

4
charts/workload-identity-webhook/Chart.yaml
Просмотреть файл

@ -2,8 +2,8 @@ apiVersion: v2
name: workload-identity-webhook name: workload-identity-webhook
description: A Helm chart to install the azure-workload-identity webhook description: A Helm chart to install the azure-workload-identity webhook
type: application type: application
version: 0.6.0 version: 0.7.0
appVersion: v0.6.0 appVersion: v0.7.0
home: https://github.com/Azure/azure-workload-identity home: https://github.com/Azure/azure-workload-identity
sources: sources:
- https://github.com/Azure/azure-workload-identity - https://github.com/Azure/azure-workload-identity

2
charts/workload-identity-webhook/README.md
Просмотреть файл

@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
| replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` | | replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` |
| image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` | | image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
| image.pullPolicy | Image pullPolicy | `IfNotPresent` | | image.pullPolicy | Image pullPolicy | `IfNotPresent` |
| image.release | The image release tag to use | Current release version: `v0.6.0` | | image.release | The image release tag to use | Current release version: `v0.7.0` |
| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` | | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
| arcCluster | Specify if it runs on Arc cluster | `false` | | arcCluster | Specify if it runs on Arc cluster | `false` |
| resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi | | resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi |

2
charts/workload-identity-webhook/values.yaml
Просмотреть файл

@ -9,7 +9,7 @@ image:
repository: mcr.microsoft.com/oss/azure/workload-identity/webhook repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion. # Overrides the image tag whose default is the chart appVersion.
release: v0.6.0 release: v0.7.0
nodeSelector: nodeSelector:
kubernetes.io/os: linux kubernetes.io/os: linux
arcCluster: false arcCluster: false

2
config/manager/kustomization.yaml
Просмотреть файл

@ -5,7 +5,7 @@ kind: Kustomization
images: images:
- name: manager - name: manager
newName: mcr.microsoft.com/oss/azure/workload-identity/webhook newName: mcr.microsoft.com/oss/azure/workload-identity/webhook
newTag: v0.6.0 newTag: v0.7.0
configMapGenerator: configMapGenerator:
- literals: - literals:
- AZURE_TENANT_ID="${AZURE_TENANT_ID}" - AZURE_TENANT_ID="${AZURE_TENANT_ID}"

8
deploy/azure-wi-webhook.yaml
Просмотреть файл

@ -100,8 +100,8 @@ subjects:
--- ---
apiVersion: v1 apiVersion: v1
data: data:
AZURE_ENVIRONMENT: <replace with Azure Environment Name> AZURE_ENVIRONMENT: ${AZURE_ENVIRONMENT:-AzurePublicCloud}
AZURE_TENANT_ID: <replace with Azure Tenant ID> AZURE_TENANT_ID: ${AZURE_TENANT_ID}
kind: ConfigMap kind: ConfigMap
metadata: metadata:
labels: labels:
@ -150,7 +150,7 @@ spec:
spec: spec:
containers: containers:
- args: - args:
- --arc-cluster=false - --arc-cluster=${ARC_CLUSTER:-false}
command: command:
- /manager - /manager
env: env:
@ -162,7 +162,7 @@ spec:
envFrom: envFrom:
- configMapRef: - configMapRef:
name: azure-wi-webhook-config name: azure-wi-webhook-config
image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.6.0 image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.7.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
httpGet: httpGet:

2
docs/book/src/installation/azwi.md
Просмотреть файл

@ -12,7 +12,7 @@
### `go install` ### `go install`
```bash ```bash
go install github.com/Azure/azure-workload-identity/cmd/azwi@v0.6.0 go install github.com/Azure/azure-workload-identity/cmd/azwi@v0.7.0
``` ```
### Homebrew (MacOS only) ### Homebrew (MacOS only)

2
docs/book/src/installation/mutating-admission-webhook.md
Просмотреть файл

@ -71,7 +71,7 @@ The deployment YAML contains the environment variables we defined above and we r
Install the webhook using the deployment YAML via `kubectl apply -f` and `envsubst`: Install the webhook using the deployment YAML via `kubectl apply -f` and `envsubst`:
```bash ```bash
curl -s https://github.com/Azure/azure-workload-identity/releases/download/v0.6.0/azure-wi-webhook.yaml | envsubst | kubectl apply -f - curl -s https://github.com/Azure/azure-workload-identity/releases/download/v0.7.0/azure-wi-webhook.yaml | envsubst | kubectl apply -f -
``` ```
<details> <details>

4
examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml
Просмотреть файл

@ -8,7 +8,7 @@ spec:
serviceAccountName: workload-identity-sa serviceAccountName: workload-identity-sa
initContainers: initContainers:
- name: init-networking - name: init-networking
image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.6.0 image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.7.0
securityContext: securityContext:
capabilities: capabilities:
add: add:
@ -26,6 +26,6 @@ spec:
ports: ports:
- containerPort: 80 - containerPort: 80
- name: proxy - name: proxy
image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.6.0 image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.7.0
ports: ports:
- containerPort: 8000 - containerPort: 8000

4
manifest_staging/charts/workload-identity-webhook/Chart.yaml
Просмотреть файл

@ -2,8 +2,8 @@ apiVersion: v2
name: workload-identity-webhook name: workload-identity-webhook
description: A Helm chart to install the azure-workload-identity webhook description: A Helm chart to install the azure-workload-identity webhook
type: application type: application
version: 0.6.0 version: 0.7.0
appVersion: v0.6.0 appVersion: v0.7.0
home: https://github.com/Azure/azure-workload-identity home: https://github.com/Azure/azure-workload-identity
sources: sources:
- https://github.com/Azure/azure-workload-identity - https://github.com/Azure/azure-workload-identity

2
manifest_staging/charts/workload-identity-webhook/README.md
Просмотреть файл

@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
| replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` | | replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` |
| image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` | | image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
| image.pullPolicy | Image pullPolicy | `IfNotPresent` | | image.pullPolicy | Image pullPolicy | `IfNotPresent` |
| image.release | The image release tag to use | Current release version: `v0.6.0` | | image.release | The image release tag to use | Current release version: `v0.7.0` |
| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` | | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
| arcCluster | Specify if it runs on Arc cluster | `false` | | arcCluster | Specify if it runs on Arc cluster | `false` |
| resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi | | resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi |

2
manifest_staging/charts/workload-identity-webhook/values.yaml
Просмотреть файл

@ -9,7 +9,7 @@ image:
repository: mcr.microsoft.com/oss/azure/workload-identity/webhook repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion. # Overrides the image tag whose default is the chart appVersion.
release: v0.6.0 release: v0.7.0
nodeSelector: nodeSelector:
kubernetes.io/os: linux kubernetes.io/os: linux
arcCluster: false arcCluster: false

2
manifest_staging/deploy/azure-wi-webhook.yaml
Просмотреть файл

@ -162,7 +162,7 @@ spec:
envFrom: envFrom:
- configMapRef: - configMapRef:
name: azure-wi-webhook-config name: azure-wi-webhook-config
image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.6.0 image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.7.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
httpGet: httpGet:

4
test/e2e/e2e_test.go
Просмотреть файл

@ -17,8 +17,8 @@ import (
func init() { func init() {
flag.BoolVar(&arcCluster, "e2e.arc-cluster", false, "Running on an arc-enabled cluster") flag.BoolVar(&arcCluster, "e2e.arc-cluster", false, "Running on an arc-enabled cluster")
flag.StringVar(&tokenExchangeE2EImage, "e2e.token-exchange-image", "aramase/msal-go:v0.6.0", "The image to use for token exchange tests") flag.StringVar(&tokenExchangeE2EImage, "e2e.token-exchange-image", "aramase/msal-go:v0.6.0", "The image to use for token exchange tests")
flag.StringVar(&proxyInitImage, "e2e.proxy-init-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.6.0", "The proxy-init image") flag.StringVar(&proxyInitImage, "e2e.proxy-init-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.7.0", "The proxy-init image")
flag.StringVar(&proxyImage, "e2e.proxy-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.6.0", "The proxy image") flag.StringVar(&proxyImage, "e2e.proxy-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.7.0", "The proxy image")
// This is only required because webhook v0.6.0 uses 86400 for default token expiration and we are running upgrade tests. // This is only required because webhook v0.6.0 uses 86400 for default token expiration and we are running upgrade tests.
// TODO(aramase): remove this flag after v0.7.0 release // TODO(aramase): remove this flag after v0.7.0 release
flag.DurationVar(&serviceAccountTokenExpiration, "e2e.service-account-token-expiration", time.Duration(webhook.DefaultServiceAccountTokenExpiration)*time.Second, "The service account token expiration") flag.DurationVar(&serviceAccountTokenExpiration, "e2e.service-account-token-expiration", time.Duration(webhook.DefaultServiceAccountTokenExpiration)*time.Second, "The service account token expiration")

4
third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml поставляемый
Просмотреть файл

@ -2,8 +2,8 @@ apiVersion: v2
name: workload-identity-webhook name: workload-identity-webhook
description: A Helm chart to install the azure-workload-identity webhook description: A Helm chart to install the azure-workload-identity webhook
type: application type: application
version: 0.6.0 version: 0.7.0
appVersion: v0.6.0 appVersion: v0.7.0
home: https://github.com/Azure/azure-workload-identity home: https://github.com/Azure/azure-workload-identity
sources: sources:
- https://github.com/Azure/azure-workload-identity - https://github.com/Azure/azure-workload-identity

2
third_party/open-policy-agent/gatekeeper/helmify/static/README.md поставляемый
Просмотреть файл

@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
| replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` | | replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` |
| image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` | | image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
| image.pullPolicy | Image pullPolicy | `IfNotPresent` | | image.pullPolicy | Image pullPolicy | `IfNotPresent` |
| image.release | The image release tag to use | Current release version: `v0.6.0` | | image.release | The image release tag to use | Current release version: `v0.7.0` |
| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` | | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
| arcCluster | Specify if it runs on Arc cluster | `false` | | arcCluster | Specify if it runs on Arc cluster | `false` |
| resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi | | resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi |

2
third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml поставляемый
Просмотреть файл

@ -9,7 +9,7 @@ image:
repository: mcr.microsoft.com/oss/azure/workload-identity/webhook repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion. # Overrides the image tag whose default is the chart appVersion.
release: v0.6.0 release: v0.7.0
nodeSelector: nodeSelector:
kubernetes.io/os: linux kubernetes.io/os: linux
arcCluster: false arcCluster: false