Comments (7)
Cool, thanks @keithmattix. I have a branch at work in the background
Will likely cover the following cases:
- Empty revision list
[]
->""
- Default in the revision list gets converted
"default"
->""
- Multiple revisions would produce
["default", "foo", "bar"]
->"", "foo", "bar"
Do we need to account for the case where the Helm revision value has both ""
and "default"
? This would produce a Certificate with DNS that has duplicate entries. Maybe this is fine, but can spend some time to remove duplicates in the helm template logic (
from istio-csr.
You could probably just use the uniq
function in Helm to filter the list before looping over it right?
from istio-csr.
Hi @keithmattix, could you expand a bit on what you mean by revision
, do you mean the revisionHistoryLimit
?
from istio-csr.
Thanks for the response @JoshVanL; sorry I should've been more clear. I'm referring to Istio revisions for use with canary upgrades.
from istio-csr.
Thanks @keithmattix, wasn't familiar of this feature with istio but is pretty cool!
Would exposing something like app.istioRevision
in the helm chart make sense here?
/kind feature
/assign
from istio-csr.
@JoshVanL: The label(s) kind/feature
cannot be applied, because the repository doesn't have them.
In response to this:
Thanks @keithmattix, wasn't familiar of this feature with istio but is pretty cool!
Would exposing something like
app.istioRevision
in the helm chart make sense here?/kind feature
/assign
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from istio-csr.
Yes, I think something like that could work! It would probably need to be a list/array since one would generally have multiple revisions in a cluster during a canary upgrade. app.istioRevisions
would probably suffice.
from istio-csr.
Related Issues (20)
- Namespace cannot be overwritten with helm template HOT 3
- It is possible to have several CAs within the same cluster. HOT 3
- Invalid certificate chain when using Vault with Intermediate CA HOT 4
- Add imagepull secret parameter for istio-csr helm chart
- updating ConfigMap data doesn't stop HOT 6
- Istio + AWS PCA reports - no subject HOT 3
- Issue while setup istio-CSR HOT 3
- certificateDuration is not used for the Istio CSR generated certificate requests HOT 2
- Unable to start istio-ingressgateway unknown service istio.v1.auth.IstioCertificateService HOT 5
- cant install chart v0.5.0 HOT 6
- Metrics scraped twice
- Subject Name in CSR HOT 1
- Allow changing the default istio namespace, independent of issuer HOT 2
- istio-csr should seperate leases role permissions from cert-manager issuer namespace
- Third-party JWT issue HOT 1
- add the compatibility matrix for Kubernetes versions to README
- Add ability to annotate certificate requests generateed by istio-csr HOT 1
- Add custom annotations to deployment HOT 3
- charts.jetstack.io beding cluster presents a challenge and breaks deployment
- istio-csr vault integration - permission denied - Vault failed to sign certificate HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from istio-csr.