Removed secret-read permissions from pod

This commit is contained in:
2024-11-02 11:04:53 +00:00
parent 2da56a0aaf
commit 74a7eb3828
7 changed files with 48 additions and 75 deletions
+12 -15
View File
@@ -5,8 +5,8 @@ Have you read it? If you haven't go read it. Cuz I'll keep everything short.
This is a dns01 solver for [FreeDNS](https://freedns.afraid.org/).
Pull requests welcome. I'm completely unfamiliar with golang. I did it by looking at
other webhook repos and this is the result.
Pull requests welcome. I'm now somewhat familiar with golang. You can also look at
other and choose the one that fits your need.
## Install
```bash
@@ -42,18 +42,15 @@ Normally if you haven't changed anything, the default namespace should be
`cert-manager`. It should be within the same namespace for the webhook when
you do `helm install webhook -n cert-manager`.
```yaml
apiVersion: v1
kind: Secret
metadata:
name: freedns-auth
namespace: cert-manager
data:
username: [YOUR_USERNAME_IN_BASE64]
password: [YOUR_PASSWORD_IN_BASE64]
type: Opaque
```
Additionally, the following names can be customized
* acme.freedns.afraid.org
* freedns-auth
### UPDATE
2024-10-30
- Merged from upstream, now works on 1.31 cluster
2024-11-02
- Webhook will now properly logs its actions
- Removed permissions to read secrets from pod for obvious reansons
- Authentication details are now requested from Helm
- You should remove the old secret `freedns-auth`. It is now handled by Helm.