Re-enable "feat(tls): Change Issuer to ClusterIssuer""

This reverts commit 2ec17153c6cb918dd357f71824ec59dd0d74dfba.

Reason for revert: resolved bug with cluster issuer versioning

Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/772814

Co-authored-by: Sangeet Gupta <sg774j@att.com>

Change-Id: If7ebef1cebbe5b1d97ac530dd7136e3fc9232b21
This commit is contained in:
Nafiz Haider 2021-01-28 20:08:43 +00:00
parent 352b43acca
commit ca47e3c974
25 changed files with 37 additions and 17 deletions

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Cinder description: OpenStack-Helm Cinder
name: cinder name: cinder
version: 0.1.9 version: 0.1.10
home: https://docs.openstack.org/cinder/latest/ home: https://docs.openstack.org/cinder/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Cinder/OpenStack_Project_Cinder_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Cinder/OpenStack_Project_Cinder_vertical.png
sources: sources:

View File

@ -97,6 +97,7 @@ endpoints:
secretName: cinder-tls-api secretName: cinder-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
internal: https internal: https
@ -110,6 +111,7 @@ endpoints:
secretName: cinder-tls-api secretName: cinder-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
internal: https internal: https
@ -123,6 +125,7 @@ endpoints:
secretName: cinder-tls-api secretName: cinder-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
internal: https internal: https

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Glance description: OpenStack-Helm Glance
name: glance name: glance
version: 0.1.4 version: 0.1.5
home: https://docs.openstack.org/glance/latest/ home: https://docs.openstack.org/glance/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Glance/OpenStack_Project_Glance_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Glance/OpenStack_Project_Glance_vertical.png
sources: sources:

View File

@ -92,6 +92,7 @@ endpoints:
secretName: glance-tls-api secretName: glance-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
public: https public: https
@ -105,6 +106,7 @@ endpoints:
secretName: glance-tls-reg secretName: glance-tls-reg
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
public: https public: https

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Heat description: OpenStack-Helm Heat
name: heat name: heat
version: 0.1.4 version: 0.1.5
home: https://docs.openstack.org/heat/latest/ home: https://docs.openstack.org/heat/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Heat/OpenStack_Project_Heat_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Heat/OpenStack_Project_Heat_vertical.png
sources: sources:

View File

@ -144,6 +144,7 @@ endpoints:
secretName: heat-tls-api secretName: heat-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:
@ -156,6 +157,7 @@ endpoints:
secretName: heat-tls-cfn secretName: heat-tls-cfn
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:
@ -169,7 +171,7 @@ endpoints:
secretName: heat-tls-cloudwatch secretName: heat-tls-cloudwatch
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: Issuer kind: ClusterIssuer
ingress: ingress:
port: port:
ingress: ingress:

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Horizon description: OpenStack-Helm Horizon
name: horizon name: horizon
version: 0.1.5 version: 0.1.6
home: https://docs.openstack.org/horizon/latest/ home: https://docs.openstack.org/horizon/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Horizon/OpenStack_Project_Horizon_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Horizon/OpenStack_Project_Horizon_vertical.png
sources: sources:

View File

@ -93,6 +93,7 @@ endpoints:
secretName: horizon-tls-web secretName: horizon-tls-web
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
public: https public: https

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Keystone description: OpenStack-Helm Keystone
name: keystone name: keystone
version: 0.1.7 version: 0.1.8
home: https://docs.openstack.org/keystone/latest/ home: https://docs.openstack.org/keystone/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Keystone/OpenStack_Project_Keystone_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Keystone/OpenStack_Project_Keystone_vertical.png
sources: sources:

View File

@ -68,7 +68,7 @@ endpoints:
secretName: keystone-tls-api secretName: keystone-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: Issuer kind: ClusterIssuer
scheme: scheme:
default: https default: https
public: https public: https

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Neutron description: OpenStack-Helm Neutron
name: neutron name: neutron
version: 0.1.9 version: 0.1.10
home: https://docs.openstack.org/neutron/latest/ home: https://docs.openstack.org/neutron/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Neutron/OpenStack_Project_Neutron_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Neutron/OpenStack_Project_Neutron_vertical.png
sources: sources:

View File

@ -117,6 +117,7 @@ endpoints:
secretName: neutron-tls-server secretName: neutron-tls-server
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:

View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Nova description: OpenStack-Helm Nova
name: nova name: nova
version: 0.1.12 version: 0.1.13
home: https://docs.openstack.org/nova/latest/ home: https://docs.openstack.org/nova/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Nova/OpenStack_Project_Nova_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Nova/OpenStack_Project_Nova_vertical.png
sources: sources:

View File

@ -171,6 +171,7 @@ endpoints:
secretName: nova-tls-api secretName: nova-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: 'https' default: 'https'
port: port:
@ -183,6 +184,7 @@ endpoints:
secretName: metadata-tls-metadata secretName: metadata-tls-metadata
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:
@ -195,6 +197,7 @@ endpoints:
secretName: nova-novncproxy-tls-proxy secretName: nova-novncproxy-tls-proxy
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:
@ -207,6 +210,7 @@ endpoints:
secretName: nova-tls-spiceproxy secretName: nova-tls-spiceproxy
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
placement: placement:
@ -216,6 +220,7 @@ endpoints:
secretName: placement-tls-api secretName: placement-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:

View File

@ -16,7 +16,7 @@ apiVersion: v1
appVersion: v1.0.0 appVersion: v1.0.0
description: OpenStack-Helm Placement description: OpenStack-Helm Placement
name: placement name: placement
version: 0.1.6 version: 0.1.7
home: https://docs.openstack.org/placement/latest/ home: https://docs.openstack.org/placement/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Placement/OpenStack_Project_Placement_vertical.png icon: https://www.openstack.org/themes/openstack/images/project-mascots/Placement/OpenStack_Project_Placement_vertical.png
sources: sources:

View File

@ -68,6 +68,7 @@ endpoints:
secretName: placement-tls-api secretName: placement-tls-api
issuerRef: issuerRef:
name: ca-issuer name: ca-issuer
kind: ClusterIssuer
scheme: scheme:
default: https default: https
port: port:

View File

@ -10,3 +10,4 @@ cinder:
- 0.1.7 Change Issuer to ClusterIssuer - 0.1.7 Change Issuer to ClusterIssuer
- 0.1.8 Revert - Change Issuer to ClusterIssuer - 0.1.8 Revert - Change Issuer to ClusterIssuer
- 0.1.9 Use HostToContainer mount propagation - 0.1.9 Use HostToContainer mount propagation
- 0.1.10 Change Issuer to ClusterIssuer

View File

@ -5,3 +5,4 @@ glance:
- 0.1.2 Change issuer to clusterissuer - 0.1.2 Change issuer to clusterissuer
- 0.1.3 Revert - Change issuer to clusterissuer - 0.1.3 Revert - Change issuer to clusterissuer
- 0.1.4 Update RBAC apiVersion from /v1beta1 to /v1 - 0.1.4 Update RBAC apiVersion from /v1beta1 to /v1
- 0.1.5 Change Issuer to ClusterIssuer

View File

@ -5,3 +5,4 @@ heat:
- 0.1.2 Remove tls values override for clients_heat - 0.1.2 Remove tls values override for clients_heat
- 0.1.3 Change Issuer to ClusterIssuer - 0.1.3 Change Issuer to ClusterIssuer
- 0.1.4 Revert - Change Issuer to ClusterIssuer - 0.1.4 Revert - Change Issuer to ClusterIssuer
- 0.1.5 Change Issuer to ClusterIssuer

View File

@ -1,3 +1,4 @@
--- ---
horizon: horizon:
- 0.1.0 Initial Chart - 0.1.0 Initial Chart
- 0.1.6 Change Issuer to ClusterIssuer

View File

@ -8,3 +8,4 @@ keystone:
- 0.1.5 Revert clusterissuer change - 0.1.5 Revert clusterissuer change
- 0.1.6 Fix typo in subPath entry - 0.1.6 Fix typo in subPath entry
- 0.1.7 Move rabbit-init to dynamic dependency - 0.1.7 Move rabbit-init to dynamic dependency
- 0.1.8 Change Issuer to ClusterIssuer

View File

@ -10,3 +10,4 @@ neutron:
- 0.1.7 Change Issuer to ClusterIssuer - 0.1.7 Change Issuer to ClusterIssuer
- 0.1.8 Revert Change Issuer to ClusterIssuer - 0.1.8 Revert Change Issuer to ClusterIssuer
- 0.1.9 Update ovs agent to support host/label overrides - 0.1.9 Update ovs agent to support host/label overrides
- 0.1.10 Change Issuer to ClusterIssuer

View File

@ -13,3 +13,4 @@ nova:
- 0.1.10 Use HostToContainer mount propagation - 0.1.10 Use HostToContainer mount propagation
- 0.1.11 Secure libvirt connection from using 127.0.0.1 to use unix socket - 0.1.11 Secure libvirt connection from using 127.0.0.1 to use unix socket
- 0.1.12 Update RBAC apiVersion from /v1beta1 to /v1 - 0.1.12 Update RBAC apiVersion from /v1beta1 to /v1
- 0.1.13 Change Issuer to ClusterIssuer

View File

@ -7,3 +7,4 @@ placement:
- 0.1.4 Add null check condition in placement deployment manifest - 0.1.4 Add null check condition in placement deployment manifest
- 0.1.5 Change Issuer to ClusterIssuer - 0.1.5 Change Issuer to ClusterIssuer
- 0.1.6 Revert - Change Issuer to ClusterIssuer - 0.1.6 Revert - Change Issuer to ClusterIssuer
- 0.1.7 Change Issuer to ClusterIssuer

View File

@ -2,7 +2,7 @@
set -eux set -eux
: ${CERT_MANAGER_VERSION:="v0.15.0"} : ${CERT_MANAGER_VERSION:="v1.2.0"}
cert_path="/etc/openstack-helm" cert_path="/etc/openstack-helm"
ca_cert_root="$cert_path/certs/ca" ca_cert_root="$cert_path/certs/ca"
@ -126,14 +126,12 @@ helm repo update
helm install --name cert-manager --namespace cert-manager \ helm install --name cert-manager --namespace cert-manager \
--version ${CERT_MANAGER_VERSION} jetstack/cert-manager \ --version ${CERT_MANAGER_VERSION} jetstack/cert-manager \
--set installCRDs=true \ --set installCRDs=true \
--set featureGates=ExperimentalCertificateControllers=true \
--set extraArgs[0]="--enable-certificate-owner-ref=true" --set extraArgs[0]="--enable-certificate-owner-ref=true"
# helm 3 command # helm 3 command
# helm install cert-manager jetstack/cert-manager --namespace cert-manager \ # helm install cert-manager jetstack/cert-manager --namespace cert-manager \
# --version ${CERT_MANAGER_VERSION} \ # --version ${CERT_MANAGER_VERSION} \
# --set installCRDs=true \ # --set installCRDs=true \
#. --set featureGates=ExperimentalCertificateControllers=true \
# --set extraArgs[0]="--enable-certificate-owner-ref=true" # --set extraArgs[0]="--enable-certificate-owner-ref=true"
helm repo remove jetstack helm repo remove jetstack
@ -147,16 +145,15 @@ apiVersion: v1
kind: Secret kind: Secret
metadata: metadata:
name: ca-key-pair name: ca-key-pair
namespace: openstack namespace: cert-manager
data: data:
tls.crt: $crt tls.crt: $crt
tls.key: $key tls.key: $key
--- ---
apiVersion: cert-manager.io/v1alpha3 apiVersion: cert-manager.io/v1
kind: Issuer kind: ClusterIssuer
metadata: metadata:
name: ca-issuer name: ca-issuer
namespace: openstack
spec: spec:
ca: ca:
secretName: ca-key-pair secretName: ca-key-pair