Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) #4400

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

camilamacedo86
Copy link
Member

@camilamacedo86 camilamacedo86 commented Dec 1, 2024

feat/fix: enhance cert-manager integration for metrics endpoints

This commit is a follow-up to PR #4243, which introduced support for using cert-manager certificates for securing the metrics endpoint and ServiceMonitor. Related to #3871 and #4003

Key enhancements:

  • Added support for configuring certificate integration via a Kustomize patch.
  • Introduced configurable flags for greater flexibility in customization.
  • Use Certwatcher to allow certificate rotation

This configuration provides an option for users to be production-ready.

These improvements enhance usability and adaptability while maintaining compatibility with the initial implementation. As the feature has not yet been released, this update ensures a polished and user-friendly integration for upcoming releases.

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: camilamacedo86

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. approved Indicates a PR has been approved by an approver from all required OWNERS files. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Dec 1, 2024
@camilamacedo86 camilamacedo86 changed the title Follow up of: #4243 - Ensure that production configuration to protect… feat: Add Kustomize patch and flags for metrics certificates configuration Dec 1, 2024
@camilamacedo86 camilamacedo86 changed the title feat: Add Kustomize patch and flags for metrics certificates configuration ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) Dec 1, 2024
@k8s-ci-robot k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Dec 1, 2024
@camilamacedo86 camilamacedo86 changed the title ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) WIP: ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) Dec 1, 2024
@k8s-ci-robot k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 1, 2024
@camilamacedo86 camilamacedo86 added release-blocker and removed do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. labels Dec 1, 2024
@camilamacedo86 camilamacedo86 force-pushed the protect-metrics-production branch 3 times, most recently from 2f012e8 to fe0b824 Compare December 1, 2024 17:52
@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels Dec 1, 2024
@camilamacedo86 camilamacedo86 force-pushed the protect-metrics-production branch 2 times, most recently from 6114658 to 7bcaf26 Compare December 1, 2024 18:51
@k8s-ci-robot k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. labels Dec 1, 2024
@k8s-ci-robot k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 1, 2024
@camilamacedo86 camilamacedo86 changed the title WIP: ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) Dec 1, 2024
@k8s-ci-robot k8s-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 1, 2024
@camilamacedo86 camilamacedo86 added the priority/backlog Higher priority than priority/awaiting-more-evidence. label Dec 1, 2024
@camilamacedo86 camilamacedo86 added priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. and removed priority/backlog Higher priority than priority/awaiting-more-evidence. labels Dec 1, 2024
@camilamacedo86 camilamacedo86 changed the title ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) WIP ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) Dec 1, 2024
@k8s-ci-robot k8s-ci-robot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels Dec 1, 2024
@camilamacedo86 camilamacedo86 changed the title WIP ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) ✨ feat/fix: enhance cert-manager integration for metrics endpoints (follow-up to PR #4243) Dec 1, 2024
@k8s-ci-robot k8s-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 1, 2024
…low-up to PR kubernetes-sigs#4243)

This commit is a follow-up to PR kubernetes-sigs#4243, which introduced support for using cert-manager certificates for securing the metrics endpoint and ServiceMonitor. Related to kubernetes-sigs#3871 and kubernetes-sigs#4003

Key enhancements:
- Added support for configuring certificate integration via a Kustomize patch.
- Introduced configurable flags for greater flexibility in customization.
- Use Certwatcher to allow certificate rotation

This configuration provides an option for users to be production-ready
@k8s-ci-robot k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. labels Dec 1, 2024
@migueleliasweb
Copy link

Thank you for tackling this feature, @camilamacedo86 !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. release-blocker size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants