Commit graph

4 commits

Author SHA1 Message Date
Sebastian Tiedtke
3a2ba85126
Flip default for certificate restriction to namespace to false (#60) 2019-04-17 14:00:24 -07:00
Justin
351c01cf7e Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54)
* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.
2019-04-08 12:24:31 -07:00
Mike Malone
0c53b0f310 rename cluster role & binding to match other binding names 2019-02-06 13:57:29 -08:00
Mike Malone
042e36da65 autocert 2019-01-17 16:07:27 -08:00