cert-manager / trust-manager

trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.
https://cert-manager.io/docs/projects/trust-manager/
Apache License 2.0
233 stars 64 forks source link

Add support for kubectl installation #301

Open dprotaso opened 4 months ago

dprotaso commented 4 months ago

Not a fan that helm is required to generate yamls to be used with kubectl apply

SgtCoDFish commented 4 months ago

Could you expand on what you dislike about this? Simply that there's an additional dependency?

I totally understand the ask; I think this would be a reasonable thing to add for a potential trust-manager v1, so I've added it to the milestone

dprotaso commented 4 months ago

Could you expand on what you dislike about this? Simply that there's an additional dependency?

More or less.

Also for CI and testing it's nice to just kubectl apply -f ${some_release_yaml_link}

erikgb commented 4 months ago

I think adding this could make sense. It will also simplify our setup. We try to avoid Helm as much as possible and prefer kustomize. A present we inflate the Helm chart into resources client-side before including it in a kustomization for further processing.

It could be implemented as a simple helm template using the chart default values - where the result is committed to Git. It might complicate the release process a bit, but I imagine it's doable. A benefit of this approach is a "smoke test" of Helm chart changes. I am assuming Helm will remain the master of resources.