Closed mrogers950 closed 6 years ago
I've updated this PR to match https://github.com/openshift/origin/pull/20870, and have done local testing to ensure that they line up properly. @deads2k @openshift/sig-security PTAL
@simo5 please confirm you want this for 3.11
@deads2k yes, the sooner the better, otherwise we may get upgrade issues later as context piles up
/lgtm
No more being tongue-tied on the name :). So here is "Service CA". The binary is
service-ca
. Theservice-ca
subcommands are:operator
, which runs the service-ca operatorservice-ca-signer
which runs the signing controllers (creating controller/updating controller)apiservice-cabundle-injector
which runs the API service CA bundle injector controllerThe namespace that these controllers run in is changing from
openshift-service-cert-signer
toopenshift-service-ca
. Corresponding references in Origin will need to be updated.The configuration API names are left as they currently are: https://github.com/openshift/api/blob/master/servicecertsigner/v1alpha1/types.go Should we update these as well?