Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update tlsConfig & namespaceSelector for metrics serviceMonitor #740

Closed
wants to merge 496 commits into from
Closed

update tlsConfig & namespaceSelector for metrics serviceMonitor #740

wants to merge 496 commits into from

Conversation

iamps5
Copy link

@iamps5 iamps5 commented May 10, 2024

  • Update the comment to fix the default selector label in serviceMonitor
  • Added namespaceSelector field - this is required incase ServiceMonitor is deployed in any other namespace instead of VSO namespace
  • Added tlsConfig[] to add CA certificates, client certificates and client keys for SSL/TLS certificates validation on metrics' serviceMonitor. Without these we don't even have option to add these configuration in serviceMonitor

benashz and others added 30 commits September 25, 2023 17:03
@benashz
Add validation for spec.refreshAfter and min constraints for HVSA (#376)
9e40e7c 
Ensure that only support duration string values can be set for
spec.refreshAfter. This change affects VaultStaticSecret and
HCPVaultSecretsApp specs.

In addition to the change above, apply a minimum constraint on the
configured HVSA refreshAfter, with the default value being 30s. This
value can be set from the command line option '-min-refresh-after-hvsa'.

Additional enhancements:
- chart: support extending the controller.manager's args with the new
  extraArgs value.
@benashz
Support running bats tests in parallel (#377)
160c566 
* Bump bats version to 1.10.0
@dependabot @benashz
Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.7 (#375)
a4a15fb 
Bumps [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) from 0.21.3 to 0.21.7.
- [Commits](go-openapi/strfmt@v0.21.3...v0.21.7)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/strfmt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
@dependabot @benashz
Bump github.com/hashicorp/hcp-sdk-go from 0.58.0 to 0.63.0 (#374)
587cb7d 
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.58.0 to 0.63.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases)
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcp-sdk-go@v0.58.0...v0.63.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
@dependabot @benashz
Bump github.com/gruntwork-io/terratest from 0.42.0 to 0.44.0 (#373)
f136fd5 
Bumps [github.com/gruntwork-io/terratest](https://github.com/gruntwork-io/terratest) from 0.42.0 to 0.44.0.
- [Release notes](https://github.com/gruntwork-io/terratest/releases)
- [Commits](gruntwork-io/terratest@v0.42.0...v0.44.0)

---
updated-dependencies:
- dependency-name: github.com/gruntwork-io/terratest
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
@dependabot @benashz
Bump k8s.io/client-go from 0.28.1 to 0.28.2 (#372)
380c166 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.1 to 0.28.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.28.1...v0.28.2)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
@benashz
Fix up Helm and API docs for v0.3.0 (#380)
5ff6435 
- helm: hostAliases did not provide a type, which broke Helm
  documentation generation
- api-ref: the HCPAuthServicePrincipal table contained an extra row.
@benashz
Update CRD manifests (#381)
e31d09e
@benashz
HVSA: include User-Agent and requester HTTP request headers. (#382)
a573db1 
These are being added to identify VSO as an HCP client.
@benashz
Remove/disable revoke on uninstall (#383)
c5834cd 
Remove revoke on uninstall until VAULT-20196 is resolved
@benashz
Update changelog for v0.3.0 (#384)
5ac3446
@benashz
VDS tests: pass operator image TF vars to the vso helm module (#385)
7925038
@benashz
Bump the chart version and default tags to 0.3.1 (#386)
94c74e2 
Missed the version bump in the 0.3.0 release, so bumping everything to
0.3.1.
@benashz
Add vault-1.15 to the test matrix (#388)
69314c5 
additional changes to the test matrix:
- cycle out vault-1.12
- update vault-1.13.5 to 1.13.8
- update vault-1.14.1 to 1.14.4

other fixes:
- factor out locals from vault/main.tf to locals.tf, making it
  consistent with the other TF code.
- bump the default vault image tag to 1.15 in vault/variables.tf
@benashz @tvoran
Check Helm and Kustomize versions for production builds. (#387)
3a22d6c 
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
@benashz
Update remaining integration tests to use the VSO TF Helm module (#389)
4bde222 
Updated tests:
- TestVaultAuthMethods
- TestVaultPKISecret
- TestVaultStaticSecret
- TestRevocation
@dependabot
Bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0 (#394)
7a9593f 
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.25.0 to 0.26.0.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@benashz
Skip version checks with the -dev suffix. (#396)
0197922
@dependabot
Bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 (#393)
7a9a5f9 
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.16.0...v1.17.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/hashicorp/golang-lru/v2 from 2.0.6 to 2.0.7 (#392)
1695d46 
Bumps [github.com/hashicorp/golang-lru/v2](https://github.com/hashicorp/golang-lru) from 2.0.6 to 2.0.7.
- [Release notes](https://github.com/hashicorp/golang-lru/releases)
- [Commits](hashicorp/golang-lru@v2.0.6...v2.0.7)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/golang-lru/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/hashicorp/hcp-sdk-go from 0.63.0 to 0.64.0 (#390)
bd03f7e 
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.63.0 to 0.64.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases)
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcp-sdk-go@v0.63.0...v0.64.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 (#391)
0efb124 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.27.10 to 1.28.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.27.10...v1.28.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump ubi9/ubi-micro from 9.2-15 to 9.2-15.1696515526 (#404)
95dc2ef
@sarahethompson
Update to use CRT prepare workflow (#405)
1cc8699 
This update, moves vault-secrets-operator to use the prepare workflow. This workflow encapsulates several previous workflows, running jobs in parallel to reduce the artifact processing time. See https://hashicorp.atlassian.net/wiki/spaces/RELENG/pages/2489712686/Dec+7th+2022+-+Introducing+the+new+Prepare+workflow for more info.
@benashz
Handle invalid Client race after restoration (#400)
670af7f 
During the VSO restart the Vault Client is restored from the storage
cache, but it’s LifetimeWatcher has not yet renewed the client token,
which can lead to the next fetch from cache getting an invalid Client
(token expired) error. In this situation, the ClientFactory will evict
the client from the cache, which in turns calls client.Close(), which
has the negative side-effect of setting it’s wrapped api.Client to nil
thereby breaking any current Client references that are handling any
in-flight requests.
@dependabot
Bump github.com/gruntwork-io/terratest from 0.44.0 to 0.45.0 (#402)
3dbd07d 
Bumps [github.com/gruntwork-io/terratest](https://github.com/gruntwork-io/terratest) from 0.44.0 to 0.45.0.
- [Release notes](https://github.com/gruntwork-io/terratest/releases)
- [Commits](gruntwork-io/terratest@v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: github.com/gruntwork-io/terratest
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/prometheus/client_model from 0.4.1-0.20230718164431-9…
84e2d1e 
…a2bf3000d16 to 0.5.0 (#401)

Bump github.com/prometheus/client_model

Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.4.1-0.20230718164431-9a2bf3000d16 to 0.5.0.
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](https://github.com/prometheus/client_model/commits/v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/hashicorp/hcp-sdk-go from 0.64.0 to 0.65.0 (#403)
36a35c1 
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.64.0 to 0.65.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases)
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcp-sdk-go@v0.64.0...v0.65.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@benashz
Release v0.3.2 (#406)
df65525
@benashz
Bump to Go 1.21.3 (#408)
7b4c99e 
Includes important security fixes
dependabot bot and others added 18 commits April 29, 2024 17:17
@dependabot
Bump github.com/gruntwork-io/terratest from 0.46.13 to 0.46.14 (#713)
21dccec 
Bumps [github.com/gruntwork-io/terratest](https://github.com/gruntwork-io/terratest) from 0.46.13 to 0.46.14.
- [Release notes](https://github.com/gruntwork-io/terratest/releases)
- [Commits](gruntwork-io/terratest@v0.46.13...v0.46.14)

---
updated-dependencies:
- dependency-name: github.com/gruntwork-io/terratest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@benashz
CI: test against vault-1.16.2 (#715)
6b89635 
Move integration tests to a common action which removes the need to
maintain includes/excludes filters.
@dependabot
Bump ubi9/ubi-minimal from 9.3-1612 to 9.4-949 (#720)
a88032e 
Bumps ubi9/ubi-minimal from 9.3-1612 to 9.4-949.

---
updated-dependencies:
- dependency-name: ubi9/ubi-minimal
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump ubi9/ubi-micro from 9.3-15 to 9.4-6 (#719)
a678594 
Bumps ubi9/ubi-micro from 9.3-15 to 9.4-6.

---
updated-dependencies:
- dependency-name: ubi9/ubi-micro
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@benashz
VDS: Selectively log calls to SyncRegistry.Delete() (#718)
cd318d8
@benashz
Client: skip LifetimeWatcher validation for non-renewable auth tokens (…
0979da9 
…#722)
@dependabot
Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 (#727)
8a18a5f 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.0 to 1.33.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.33.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump ubi9/ubi-minimal from 9.4-949 to 9.4-949.1714662671 (#728)
85f8ba8 
Bumps ubi9/ubi-minimal from 9.4-949 to 9.4-949.1714662671.

---
updated-dependencies:
- dependency-name: ubi9/ubi-minimal
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump sigs.k8s.io/controller-runtime from 0.18.0 to 0.18.1 (#726)
a435099 
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.18.0 to 0.18.1.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.0...v0.18.1)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump google.golang.org/api from 0.176.1 to 0.177.0 (#724)
90be043 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.176.1 to 0.177.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.176.1...v0.177.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/hashicorp/vault/api from 1.12.2 to 1.13.0 (#725)
c033c62 
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.12.2 to 1.13.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@v1.12.2...v1.13.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@thyton @kishoregv
@tvoran @benashz
add argo.Rollout support for RolloutRestartTarget (#702)
b3de823 
---------

Co-authored-by: Kishore Goduguluri <1823272+kishoregv@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
@benashz
Rename Vault OSS to Vault Community (#733)
ef6e9b1
@benashz
Build: sync ClusteRole to the chart (#736)
f33277a 
Updating sync-rbac.sh to sync config/rbac/role.yaml to the chart.
@benashz
Bump GH actions for node 16 obsolescence (#738)
34f96fd
@benashz
Bump TF provider versions (#737)
c80807c
@iamps5
update tlsConfig & namespaceSelector for metrics serviceMonitor
9190b21
@iamps5
update
603948e
@iamps5 iamps5 requested a review from a team as a code owner May 10, 2024 19:50
@hashicorp-cla-app HashiCorp CLA App
Copy link

hashicorp-cla-app bot commented May 10, 2024 •
edited

CLA assistant check
All committers have signed the CLA.

dependabot bot added 3 commits May 13, 2024 17:40
@dependabot
Bump golang.org/x/crypto from 0.22.0 to 0.23.0 (#744)
0d68dbe 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.22.0 to 0.23.0.
- [Commits](golang/crypto@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump sigs.k8s.io/controller-runtime from 0.18.1 to 0.18.2 (#743)
f14e746 
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.18.1 to 0.18.2.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.1...v0.18.2)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 (#741)
535dc54 
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@benashz benashz added the helm label May 13, 2024
dependabot bot and others added 4 commits May 13, 2024 18:08
@dependabot
Bump google.golang.org/api from 0.177.0 to 0.180.0 (#742)
d3065fc 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.177.0 to 0.180.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.177.0...v0.180.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@benashz
Call VDS callbacks on VaultAuth and VaultConnection changes (#739)
a7e9613
@iamps5 @iamps05
typo fix
09cfd32
@iamps5
Merge branch 'hashicorp:main' into main
80db85c
@iamps5 iamps5 closed this May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
helm
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet