mirror of
https://github.com/1Password/onepassword-operator.git
synced 2025-10-28 18:29:41 +00:00
Compare commits
12 Commits
v1.0.1
...
deploy-1.2
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
cd43475098 | ||
|
|
9dabac4a55 | ||
|
|
d927a08790 | ||
|
|
933f7c4e2c | ||
|
|
81eb9a521f | ||
|
|
eb32bd7f94 | ||
|
|
a5781af949 | ||
|
|
0aa5781acd | ||
|
|
700be4426f | ||
|
|
76ef9aa372 | ||
|
|
d7e6704314 | ||
|
|
2443979602 |
7
.github/workflows/release.yml
vendored
7
.github/workflows/release.yml
vendored
@@ -28,6 +28,9 @@ jobs:
|
|||||||
tags: |
|
tags: |
|
||||||
type=semver,pattern={{version}}
|
type=semver,pattern={{version}}
|
||||||
type=semver,pattern={{major}}.{{minor}}
|
type=semver,pattern={{major}}.{{minor}}
|
||||||
|
- name: Get the version from tag
|
||||||
|
id: get_version
|
||||||
|
run: echo ::set-output name=VERSION::${GITHUB_REF#refs/tags/v}
|
||||||
-
|
-
|
||||||
name: Set up QEMU
|
name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v1
|
uses: docker/setup-qemu-action@v1
|
||||||
@@ -46,9 +49,9 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
context: .
|
context: .
|
||||||
file: Dockerfile
|
file: Dockerfile
|
||||||
platforms: linux/amd64,linux/arm64
|
platforms: linux/amd64,linux/arm64,linux/arm/v7
|
||||||
push: true
|
push: true
|
||||||
tags: ${{ steps.meta.outputs.tags }}
|
tags: ${{ steps.meta.outputs.tags }}
|
||||||
labels: ${{ steps.meta.outputs.labels }}
|
labels: ${{ steps.meta.outputs.labels }}
|
||||||
build-args: |
|
build-args: |
|
||||||
operator_version=${{ github.event.ref }}
|
operator_version=${{ steps.get_version.outputs.VERSION }}
|
||||||
|
|||||||
@@ -16,7 +16,7 @@ ARG operator_version=dev
|
|||||||
RUN CGO_ENABLED=0 \
|
RUN CGO_ENABLED=0 \
|
||||||
GO111MODULE=on \
|
GO111MODULE=on \
|
||||||
go build \
|
go build \
|
||||||
-ldflags "-X version.Version=$operator_version" \
|
-ldflags "-X \"github.com/1Password/onepassword-operator/version.Version=$operator_version\"" \
|
||||||
-mod vendor \
|
-mod vendor \
|
||||||
-a -o manager main.go
|
-a -o manager main.go
|
||||||
|
|
||||||
|
|||||||
21
README.md
21
README.md
@@ -13,8 +13,8 @@ Prerequisites:
|
|||||||
- [1Password Command Line Tool Installed](https://1password.com/downloads/command-line/)
|
- [1Password Command Line Tool Installed](https://1password.com/downloads/command-line/)
|
||||||
- [kubectl installed](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
|
- [kubectl installed](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
|
||||||
- [docker installed](https://docs.docker.com/get-docker/)
|
- [docker installed](https://docs.docker.com/get-docker/)
|
||||||
- [Generated a 1password-credentials.json file and issued a 1Password Connect API Token for the K8s Operator integration](https://support.b5dev.com/cs/connect)
|
- [Generated a 1password-credentials.json file and issued a 1Password Connect API Token for the K8s Operator integration](https://support.1password.com/secrets-automation/)
|
||||||
- [1Password Connect deployed to Kubernetes](https://support.b5dev.com/cs/connect-deploy-kubernetes/#step-2-deploy-a-connect-server). **NOTE**: If customization of the 1Password Connect deployment is not required you can skip this prerequisite.
|
- [1Password Connect deployed to Kubernetes](https://support.1password.com/connect-deploy-kubernetes/#step-2-deploy-a-1password-connect-server). **NOTE**: If customization of the 1Password Connect deployment is not required you can skip this prerequisite.
|
||||||
|
|
||||||
### Quickstart for Deploying 1Password Connect to Kubernetes
|
### Quickstart for Deploying 1Password Connect to Kubernetes
|
||||||
|
|
||||||
@@ -53,15 +53,15 @@ Adding this environment variable will have the operator automatically deploy a d
|
|||||||
"Create a Connect token for the operator and save it as a Kubernetes Secret:
|
"Create a Connect token for the operator and save it as a Kubernetes Secret:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
$ kubectl create secret generic op-operator-connect-token --from-literal=token=<OP_CONNECT_TOKEN>"
|
$ kubectl create secret generic onepassword-token --from-literal=token=<OP_CONNECT_TOKEN>"
|
||||||
```
|
```
|
||||||
|
|
||||||
If you do not have a token for the operator, you can generate a token and save it to kubernetes with the following command:
|
If you do not have a token for the operator, you can generate a token and save it to kubernetes with the following command:
|
||||||
```bash
|
```bash
|
||||||
$ kubectl create secret generic op-operator-connect-token --from-literal=token=$(op create connect token <server> op-k8s-operator --vault <vault>)
|
$ kubectl create secret generic onepassword-token --from-literal=token=$(op create connect token <server> op-k8s-operator --vault <vault>)
|
||||||
```
|
```
|
||||||
|
|
||||||
[More information on generating a token can be found here](https://support.1password.com/cs/secrets-automation/#appendix-issue-additional-access-tokens)
|
[More information on generating a token can be found here](https://support.1password.com/secrets-automation/#appendix-issue-additional-access-tokens)
|
||||||
|
|
||||||
**Set Permissions For Operator**
|
**Set Permissions For Operator**
|
||||||
|
|
||||||
@@ -163,7 +163,8 @@ apiVersion: v1
|
|||||||
kind: Namespace
|
kind: Namespace
|
||||||
metadata:
|
metadata:
|
||||||
name: "example-namespace"
|
name: "example-namespace"
|
||||||
operator.1password.io/auto-restart: "true"
|
annotations:
|
||||||
|
operator.1password.io/auto-restart: "true"
|
||||||
```
|
```
|
||||||
If the value is not set, the auto reset settings on the operator will be used. This value can be overwritten by deployment.
|
If the value is not set, the auto reset settings on the operator will be used. This value can be overwritten by deployment.
|
||||||
|
|
||||||
@@ -175,7 +176,8 @@ apiVersion: v1
|
|||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
name: "example-deployment"
|
name: "example-deployment"
|
||||||
operator.1password.io/auto-restart: "true"
|
annotations:
|
||||||
|
operator.1password.io/auto-restart: "true"
|
||||||
```
|
```
|
||||||
If the value is not set, the auto reset settings on the namespace will be used.
|
If the value is not set, the auto reset settings on the namespace will be used.
|
||||||
|
|
||||||
@@ -187,7 +189,8 @@ apiVersion: onepassword.com/v1
|
|||||||
kind: OnePasswordItem
|
kind: OnePasswordItem
|
||||||
metadata:
|
metadata:
|
||||||
name: example
|
name: example
|
||||||
operator.1password.io/auto-restart: "true"
|
annotations:
|
||||||
|
operator.1password.io/auto-restart: "true"
|
||||||
```
|
```
|
||||||
If the value is not set, the auto reset settings on the deployment will be used.
|
If the value is not set, the auto reset settings on the deployment will be used.
|
||||||
|
|
||||||
@@ -224,4 +227,4 @@ make test/coverage
|
|||||||
|
|
||||||
Please file requests via [**BugCrowd**](https://bugcrowd.com/agilebits).
|
Please file requests via [**BugCrowd**](https://bugcrowd.com/agilebits).
|
||||||
|
|
||||||
For information about security practices, please visit our [Security homepage](https://bugcrowd.com/agilebits).
|
For information about security practices, please visit our [Security homepage](https://bugcrowd.com/agilebits).
|
||||||
|
|||||||
@@ -11,7 +11,7 @@ spec:
|
|||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: onepassword-connect
|
app: onepassword-connect
|
||||||
version: "1.0.0"
|
version: "1.2.0"
|
||||||
spec:
|
spec:
|
||||||
volumes:
|
volumes:
|
||||||
- name: shared-data
|
- name: shared-data
|
||||||
|
|||||||
Reference in New Issue
Block a user