Keyfactor / ejbca-cert-manager-issuer

External issuer for cert-manager for EJBCA

Apache License 2.0

3 stars 3 forks source link

v1.3.2: Upgrade packages, implement metrics.metricsAddress and containerPorts in Helm chart, refactor release process #13

Closed m8rmclaren closed 9 months ago

m8rmclaren commented 10 months ago

v1.3.2

Features

feat(helm): Rename secureMetrics to metrics and add metrics.secure and metrics.metricsAddress as configuration values. This way, Prometheus can scrape the controller manager metrics without the secure metrics proxy.
feat(helm): Add configuration element in Helm chart default values file to configure container ports on the controller manager container.

Fixes

fix(deps): Update golang.org/x/net to v0.19.0
fix(dockerfile): Upgrade builder image to golang:1.20 to address CVE-2023-38408

m8rmclaren commented 10 months ago

Image vulnerability analysis:

Test results:

m8rmclaren commented 10 months ago

Pod state with the following Helm install command:

helm package deploy/charts/ejbca-cert-manager-issuer --app-version=1.3.2 --version=1.3.2

# Install the Helm chart and point it to the local image
helm install ejbca-cert-manager-issuer ejbca-cert-manager-issuer-1.3.2.tgz \
    --namespace ejbca-issuer-system \
    --create-namespace \
    --set image.pullPolicy=Never \
    --set metrics.metricsAddress=:8080

Pod state demonstrates successful configuration of manager container arguments to configure metrics server address, and container logs display accepted configuration.