Comments (7)
Thank you for submitting the feature request. We will review the request and get back to you.
from aws-privateca-issuer.
Hi @hassanSRE, I spoke to the team and we would like to know more about your usecase. Can you please tell us more about the limitations that prevent you from using helm and why kubectl is required instead?
from aws-privateca-issuer.
Hi @divyansh-gupta. Hassan opened the ticket on our behalf, so I can chime in.
We currently run a number of Kubernetes clusters in production and have developed our own templating mechanism (using kustomize
and some other in-house tools and scripts) to play nice with our various CI/CD tools.
We don't currently use , nor do we foresee using helm
in the near future. However, we would like to make use of this plugin to streamline the process of issuing/renewing ACM certificates for the nginx ingress controllers running in our kubernetes clusters.
As a workaround, we've tried to generate the installation manifests from the helm chart using
helm install awspca/aws-privateca-issuer --generate-name --dry-run -o yaml
but the resulting yaml seems to be missing the necessary CRD and Issuer resources, among possibly others.
from aws-privateca-issuer.
Hello, we're interested to hear why you are unable to use helm install
. When you run helm install
, the CRDs for the plugin are installed, as well as the controller necessary. After this is installed, you are responsible for creating an Issuer or a ClusterIssuer. Examples for these configurations can be found in config/examples
and config/samples
.
from aws-privateca-issuer.
We aren't unable to run helm install
, but we do not use helm
at all in our organization. It is a decision that was made some time ago for different reasons. All of the deployments into our kubernetes clusters are done without the use of helm
and introducing a new tool into our toolchain is not something that we can do quickly. Moreover, we are not interested in using helm
at all in our organization at this time.
I personally have helm
installed on my workstation and am able to get the aws-pca installed into a test cluster. I see that it creates a number of CRDs in addition to the Deployment and Service. However, when inspecting the output of the --dry-run -o yaml
, I do not see the issuer CRDs in the manifest.
from aws-privateca-issuer.
This makes sense, thank you for the clarification. Here is what we discovered after digging in...
You have 2 options in terms of installing without helm install
- You can use the following to install the correct CRDs (recommended)
helm template --name-template={release_name} --include-crds awspca/aws-privateca-issuer > a.yaml
kubectl apply -f
- You can follow the example in this repository to install with Kustomize and without helm. We tried to follow the example and found it difficult: https://github.com/cert-manager/sample-external-issuer/blob/main/Makefile#L71
To remedy this in the future:
- We will add an item to our backlog to explore alternative installation methods
- If you would like this urgently, please feel free to cut us a PR!
I'm going to close this issue, but feel free to reopen if you have questions or comments.
from aws-privateca-issuer.
Excellent. Thanks for the quick turnaround.
from aws-privateca-issuer.
Related Issues (20)
- [Feature Request]: Integration with cert-manager 1.10 HOT 4
- [Bug]: Using the default version causes image pull failures HOT 4
- Integration with cert-manager, istio-csr fails pod to pod mTLS. HOT 5
- [Bug]: Image Tag in Helm Chart doesn't match Contianer Image Tag HOT 9
- topologySpreadConstraints support in helm chart HOT 6
- [Bug]: cert-manager.io/cluster-issuer annotation does not work for AWSPCAClusterIssuer HOT 12
- [Feature Request]: helm chart: support optional podDisruptionBudget HOT 1
- [Feature Request]: Documentation of useage with ingress annotations HOT 2
- [Bug]: panic: runtime error: invalid memory address or nil pointer dereference HOT 8
- security HOT 3
- [Feature Request]: Support temporary AWS credentials (including AWS_SESSION_TOKEN) HOT 1
- [Bug]: Error: failed to sts.GetCallerIdentity when using IRSA HOT 11
- [Bug]: awspca-issuer not using secretRef to obtain CA HOT 7
- [Feature Request]: Issue image out of more official ECR Public Repo HOT 2
- [Feature Request]: Support ARM64 architecture HOT 4
- [Feature Request]: Add feature to call kubernetes secrets for the AWSPCAClusterIssuer spec.arn value HOT 3
- [Bug]: Issuer is not ready and certificate creation fails HOT 10
- [Bug]: Connection to AWS PCA not working HOT 5
- [Feature Request]: Replace deprecated `set-output` command with environment file HOT 1
- [Troubleshoot]: Reconciler error StorageError: invalid object, Code: 4 HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-privateca-issuer.