chart edt

Author: Serhii Rudenko

.gitignore

@@ -3,6 +3,9 @@
 *.exe~
 *.dll
 *.so
+
+*.tgz
+
 *.dylib
 bin/*
 Dockerfile.cross

Makefile

@@ -25,19 +25,6 @@ SHELL = /usr/bin/env bash -o pipefail
 .PHONY: all
 all: build
 
-##@Docs
-
-.PHONY:
-install_helm-docs: ## Install helm-docs
-	wget https://github.com/norwoodj/helm-docs/releases/download/v1.14.2/helm-docs_1.14.2_Linux_x86_64.tar.gz
-	tar -zxvf helm-docs_1.14.2_Linux_x86_64.tar.gz helm-docs
-	sudo mv helm-docs ./bin/
-	rm helm-docs_1.14.2_Linux_x86_64.tar.gz
-
-.PHONY: helm-docs-generate
-helm-docs-generate: ## Generate Helm Chart Docs
-	helm-docs -c $(CHART_PATH) -o README.md
-
 ##@ General
 
 # The help target prints out all targets with their descriptions organized

charts/Makefile

@@ -4,6 +4,7 @@ GIT_STAMP ?= $(shell git describe || echo v0.1.0)
 KUBEVAL_SCHEMA_LOCATION ?= https://raw.githubusercontent.com/redacid/k8s-json-scheme/refs/heads/main
 KUBECONFORM_SCHEMA ?= --schema-location 'https://raw.githubusercontent.com/redacid/k8s-json-scheme/refs/heads/main/{{.NormalizedKubernetesVersion}}-standalone{{.StrictSuffix}}/{{.ResourceKind}}{{.KindSuffix}}.json'
 CHART_PATH ?= ./aws-auth-operator
+CREATE_NAMESPACE ?= --create-namespace
 
 ENV_NAME ?= TEST
 
@@ -24,6 +25,19 @@ TARGET_MAX_CHAR_NUM = 30
 
 all: help
 
+## Install helm-docs | Docs
+.PHONY: install_helm-docs
+install_helm-docs:
+	wget https://github.com/norwoodj/helm-docs/releases/download/v1.14.2/helm-docs_1.14.2_Linux_x86_64.tar.gz
+	tar -zxvf helm-docs_1.14.2_Linux_x86_64.tar.gz helm-docs
+	sudo mv helm-docs ./bin/
+	rm helm-docs_1.14.2_Linux_x86_64.tar.gz
+
+## Generate Helm Chart Docs
+.PHONY: helm-docs-generate
+helm-docs-generate:
+	helm-docs -c $(CHART_PATH) -o README.md
+
 ## Check helm | Linters
 helm-lint: helm-dependency-update
 	@$(foreach var,$(ENV_NAME), echo "\n\n======= Check $(var) =======\n\n" \
@@ -45,7 +59,7 @@ helm-kubeconform: helm-dependency-update install-kubeconform-plugin
 
 ## Deploy TEST
 deploy-test:  helm-dependency-update helm-package
-	@helm upgrade -i --namespace=$(TEST_NAMESPACE) $(TEST_RELEASE_NAME) ./aws-auth-operator-$(GIT_STAMP).tgz $(TEST_VALUES)
+	@helm upgrade -i --namespace=$(TEST_NAMESPACE) $(TEST_RELEASE_NAME) ./aws-auth-operator-$(GIT_STAMP).tgz $(TEST_VALUES) $(CREATE_NAMESPACE)
 
 ## Deploy TEST
 template-test:  helm-dependency-update

charts/aws-auth-operator/README.md

@@ -27,7 +27,6 @@ Kubernetes operator to declaratively manage the EKS aws-auth configmap
 | replicaCount | int | `1` | Controller Pod replica count |
 | resources | object | `{}` | Resource requests and limits for the manager container |
 | securityContext | object | `{}` | Security context for the manager container |
-| selfSignedIssuer | object | `{"enabled":true}` | Enable cert-manager issuer and create self-signed certs |
 | tolerations | list | `[]` | Tolerations for pod assignment |
 
 ----------------------------------------------

charts/aws-auth-operator/templates/certificate-serving.yaml

@@ -1,4 +1,3 @@
-{{- if .Values.selfSignedIssuer.enabled -}}
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
@@ -14,4 +13,3 @@ spec:
     kind: Issuer
     name: {{ include "aws-auth-operator.fullname" . }}-selfsigned-issuer
   secretName: {{ include "aws-auth-operator.fullname" . }}-webhook-server-cert
-{{- end }}

charts/aws-auth-operator/templates/issuer.yaml

@@ -1,4 +1,3 @@
-{{- if .Values.selfSignedIssuer.enabled -}}
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
@@ -8,4 +7,3 @@ metadata:
   namespace: {{ .Release.Namespace }}
 spec:
   selfSigned: {}
-{{- end }}

charts/aws-auth-operator/templates/webhook-validation.yaml

@@ -2,9 +2,7 @@ apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
 metadata:
   annotations:
-    {{- if .Values.selfSignedIssuer.enabled }}
     cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "aws-auth-operator.fullname" . }}-serving-cert
-    {{- end }}
   name: {{ include "aws-auth-operator.fullname" . }}-validating-webhook
 webhooks:
   - admissionReviewVersions:

charts/aws-auth-operator/values.yaml

@@ -80,10 +80,6 @@ affinity: {}
 podDisruptionBudget:
   enabled: false
 
-# -- Enable cert-manager issuer and create self-signed certs
-selfSignedIssuer:
-  enabled: true
-
 # -- ConfigMap for MapAccount, MapUser, MapRoles in kube-system ns, aws-auth bu default
 configMapName: "aws-auth"
 # -- This account id must allways present in cm, and disallow to delete crd MapAccount with this id

charts/values.yaml

@@ -77,10 +77,6 @@ affinity: {}
 podDisruptionBudget:
   enabled: false
 
-# -- Enable cert-manager issuer and create self-signed certs
-selfSignedIssuer:
-  enabled: true
-
 # -- ConfigMap for MapAccount, MapUser, MapRoles in kube-system ns, aws-auth bu default
 configMapName: "aws-auth-test"
 # -- This account id must allways present in cm, and disallow to delete crd MapAccount with this id