cert-manager / trust-manager

trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.
https://cert-manager.io/docs/projects/trust-manager/
Apache License 2.0
243 stars 65 forks source link

Use label selector to add sources to a bundle #256

Closed ocampeau closed 7 months ago

ocampeau commented 8 months ago

The Bundle CR allows to specify a list of Secret and ConfigMap by name in the spec.sources. In environments where the list of certificates to add to the Bundle is dynamic, it can become complicated to maintain the Bundle.

Would it be possible to specify, in a Bundle spec, a label selector for Secret and ConfigMap? That way the Bundle could be automatically updated, based on labels on Secret and ConfigMap, when those resources are created, updated and deleted.