Skip to content

[refresh-credential] rotate the AWS ECR credential by schedule #15313

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
roboquat merged 14 commits into from
Dec 15, 2022
Merged

[refresh-credential] rotate the AWS ECR credential by schedule #15313

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
db80e26
installer: update volume mount when Secret updates
jenting Dec 6, 2022
4762c65
installer: add registry-credential component
jenting Dec 6, 2022
101469b
A new component: registry-credential
jenting Dec 12, 2022
42c5372
installer: use container image from leeway built
jenting Dec 12, 2022
8c15093
registry-credential: load from config file
jenting Dec 12, 2022
2f7ebf9
installer: update according to load from config
jenting Dec 12, 2022
3ebe4f9
[installer]: add registry-credential as leeway dependency (#15306)
Dec 12, 2022
329f631
registry-credential: support public AWS ECR credential rotation
jenting Dec 12, 2022
d0d0cb4
installer: add create secrets permission
jenting Dec 14, 2022
fe1542d
Add README for registry-credential
jenting Dec 14, 2022
ae4f39d
Address review comment
jenting Dec 14, 2022
397b18d
Rename from registry-credential to refresh-credential
jenting Dec 15, 2022
c09d2f9
Check secret key credentials
jenting Dec 15, 2022
7aedf1c
Forbid job to run concurrency
jenting Dec 15, 2022
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
installer: add create secrets permission 
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
  • Loading branch information
@jenting
jenting committed Dec 14, 2022
commit d0d0cb4d515bd481c7553e0085747ad28ed945e7
1 change: 1 addition & 0 deletions install/installer/cmd/testdata/render/aws-setup/output.golden
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

1 change: 1 addition & 0 deletions install/installer/pkg/components/registry-credential/role.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,7 @@ func role(ctx *common.RenderContext) ([]runtime.Object, error) {
APIGroups: []string{""},
Resources: []string{"secrets"},
Verbs: []string{
"create",
"get",
"list",
"watch",
Expand Down