feat: cert manager syncer

AtomiCloud · Oct 15, 2023 · 0bb6235 · 0bb6235
1 parent 71c4dc7
commit 0bb6235
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/chart/README.md b/chart/README.md
@@ -52,7 +52,7 @@ Helm chart to install virtual cluster on a physical cluster
 | sulfoxide-bromine.rootSecret.ref | string | `"SULFOXIDE_IODINE"` | DOPPLER Token Reference |
 | sulfoxide-bromine.storeName | string | `"doppler-iodine"` | Store name to create |
 | tags | object | `{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}` | Kubernetes labels and annotations, following Service Tree |
-| vcluster | object | `{"annotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"coredns":{"replicas":3},"enableHA":true,"ingress":{"enabled":true,"host":"kubernetes.atomi.cloud","ingressClassName":"nginx"},"init":{"manifests":"apiVersion: v1\nkind: Namespace\nmetadata:\n  labels:\n    kubernetes.io/metadata.name: sulfoxide\n  name: sulfoxide\n"},"labels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"mapServices":{"fromHost":[{"from":"sulfoxide/entei-silicon-otlp-collector","to":"sulfoxide/entei-silicon-otlp-collector"}]},"plugin":{"secret-syncer":{"image":"ghcr.io/kirinnee/vcluster-secret-syncer/secret-syncer-amd:1.0.0","imagePullPolicy":"IfNotPresent"}},"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"proxy":{"metricsServer":{"nodes":{"enabled":false},"pods":{"enabled":false}}},"replicas":3,"serverToken":{"secretKeyRef":{"key":"K3S_TOKEN","name":"k3s-sync-token"}},"storage":{"persistence":false},"sync":{"configmaps":{"all":true},"ingresses":{"enabled":true},"nodes":{"enableScheduler":true,"enabled":true,"fakeKubeletIPs":true,"syncAllNodes":true,"syncNodeChanges":true},"pods":{"enabled":true,"ephemeralContainers":true,"status":true},"secrets":{"all":true}},"syncer":{"extraArgs":["--tls-san=https://kubernetes.atomi.cloud"]},"telemetry":{"disabled":true},"vcluster":{"env":[{"name":"K3S_DATASTORE_ENDPOINT","valueFrom":{"secretKeyRef":{"key":"K3S_DATASTORE_ENDPOINT","name":"datastore-endpoint"}}}]}}` | Virtual Cluster Configuration. See [vcluster documentation](https://artifacthub.io/packages/helm/loft/vcluster) |
+| vcluster | object | `{"annotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"coredns":{"replicas":3},"enableHA":true,"ingress":{"enabled":true,"host":"kubernetes.atomi.cloud","ingressClassName":"nginx"},"init":{"manifests":"apiVersion: v1\nkind: Namespace\nmetadata:\n  labels:\n    kubernetes.io/metadata.name: sulfoxide\n  name: sulfoxide\n"},"labels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"mapServices":{"fromHost":[{"from":"sulfoxide/entei-silicon-otlp-collector","to":"sulfoxide/entei-silicon-otlp-collector"}]},"plugin":{"cert-manager-plugin":{"image":"ghcr.io/loft-sh/vcluster-plugins/cert-manager-plugin:0.3.0","imagePullPolicy":"IfNotPresent","rbac":{"clusterRole":{"extraRules":[{"apiGroups":["apiextensions.k8s.io"],"resources":["customresourcedefinitions"],"verbs":["get","list","watch"]}]},"role":{"extraRules":[{"apiGroups":["cert-manager.io"],"resources":["issuers","certificates"],"verbs":["create","delete","patch","update","get","list","watch"]}]}}},"secret-syncer":{"image":"ghcr.io/kirinnee/vcluster-secret-syncer/secret-syncer-amd:1.0.0","imagePullPolicy":"IfNotPresent"}},"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/module":"apiserver","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"iodine"}},"proxy":{"metricsServer":{"nodes":{"enabled":false},"pods":{"enabled":false}}},"replicas":3,"serverToken":{"secretKeyRef":{"key":"K3S_TOKEN","name":"k3s-sync-token"}},"storage":{"persistence":false},"sync":{"configmaps":{"all":true},"ingresses":{"enabled":true},"nodes":{"enableScheduler":true,"enabled":true,"fakeKubeletIPs":true,"syncAllNodes":true,"syncNodeChanges":true},"pods":{"enabled":true,"ephemeralContainers":true,"status":true},"secrets":{"all":true}},"syncer":{"extraArgs":["--tls-san=https://kubernetes.atomi.cloud"]},"telemetry":{"disabled":true},"vcluster":{"env":[{"name":"K3S_DATASTORE_ENDPOINT","valueFrom":{"secretKeyRef":{"key":"K3S_DATASTORE_ENDPOINT","name":"datastore-endpoint"}}}]}}` | Virtual Cluster Configuration. See [vcluster documentation](https://artifacthub.io/packages/helm/loft/vcluster) |
 
 ----------------------------------------------
 Autogenerated from chart metadata using [helm-docs v1.11.1](https://github.com/norwoodj/helm-docs/releases/v1.11.1)
diff --git a/chart/values.yaml b/chart/values.yaml
@@ -154,6 +154,20 @@ vcluster:
   telemetry:
     disabled: true
   plugin:
+    cert-manager-plugin:
+      image: ghcr.io/loft-sh/vcluster-plugins/cert-manager-plugin:0.3.0
+      imagePullPolicy: IfNotPresent
+      rbac:
+        role:
+          extraRules:
+            - apiGroups: [ "cert-manager.io" ]
+              resources: [ "issuers", "certificates" ]
+              verbs: [ "create", "delete", "patch", "update", "get", "list", "watch" ]
+        clusterRole:
+          extraRules:
+            - apiGroups: [ "apiextensions.k8s.io" ]
+              resources: [ "customresourcedefinitions" ]
+              verbs: [ "get", "list", "watch" ]
     secret-syncer:
       image: ghcr.io/kirinnee/vcluster-secret-syncer/secret-syncer-amd:1.0.0
       imagePullPolicy: IfNotPresent