Removed secret-read permissions from pod
This commit is contained in:
@@ -5,8 +5,8 @@ Have you read it? If you haven't go read it. Cuz I'll keep everything short.
|
||||
|
||||
This is a dns01 solver for [FreeDNS](https://freedns.afraid.org/).
|
||||
|
||||
Pull requests welcome. I'm completely unfamiliar with golang. I did it by looking at
|
||||
other webhook repos and this is the result.
|
||||
Pull requests welcome. I'm now somewhat familiar with golang. You can also look at
|
||||
other and choose the one that fits your need.
|
||||
|
||||
## Install
|
||||
```bash
|
||||
@@ -42,18 +42,15 @@ Normally if you haven't changed anything, the default namespace should be
|
||||
`cert-manager`. It should be within the same namespace for the webhook when
|
||||
you do `helm install webhook -n cert-manager`.
|
||||
|
||||
```yaml
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: freedns-auth
|
||||
namespace: cert-manager
|
||||
data:
|
||||
username: [YOUR_USERNAME_IN_BASE64]
|
||||
password: [YOUR_PASSWORD_IN_BASE64]
|
||||
type: Opaque
|
||||
```
|
||||
|
||||
Additionally, the following names can be customized
|
||||
* acme.freedns.afraid.org
|
||||
* freedns-auth
|
||||
|
||||
### UPDATE
|
||||
2024-10-30
|
||||
- Merged from upstream, now works on 1.31 cluster
|
||||
|
||||
2024-11-02
|
||||
- Webhook will now properly logs its actions
|
||||
- Removed permissions to read secrets from pod for obvious reansons
|
||||
- Authentication details are now requested from Helm
|
||||
- You should remove the old secret `freedns-auth`. It is now handled by Helm.
|
||||
|
||||
Reference in New Issue
Block a user