diff --git a/config/certmanager/certificate.yaml b/config/certmanager/certificate.yaml
index 02bdc1bffff0cb6d4a30d9178b6d6eec1f041609..82dfb534229ce3aa1d3cd8b91cfbb40e651ae4fd 100644
--- a/config/certmanager/certificate.yaml
+++ b/config/certmanager/certificate.yaml
@@ -1,6 +1,6 @@
# The following manifests contain a self-signed issuer CR and a certificate CR.
# More document can be found at https://docs.cert-manager.io
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
kind: Issuer
metadata:
name: selfsigned-issuer
@@ -8,7 +8,7 @@ metadata:
spec:
selfSigned: {}
---
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
diff --git a/config/certmanager/kustomizeconfig.yaml b/config/certmanager/kustomizeconfig.yaml
index 49e0b1e7a460f79016e6654f06a4aedd83739e19..90d7c313ca10ae5581252f3d39d2f7098b5cffe9 100644
--- a/config/certmanager/kustomizeconfig.yaml
+++ b/config/certmanager/kustomizeconfig.yaml
@@ -1,16 +1,16 @@
# This configuration is for teaching kustomize how to update name ref and var substitution
nameReference:
- kind: Issuer
- group: certmanager.k8s.io
+ group: cert-manager.io
fieldSpecs:
- kind: Certificate
- group: certmanager.k8s.io
+ group: cert-manager.io
path: spec/issuerRef/name
varReference:
- kind: Certificate
- group: certmanager.k8s.io
+ group: cert-manager.io
path: spec/commonName
- kind: Certificate
- group: certmanager.k8s.io
+ group: cert-manager.io
path: spec/dnsNames
diff --git a/config/crd/bases/certmanager.step.sm_stepissuers.yaml b/config/crd/bases/certmanager.step.sm_stepissuers.yaml
index 5afc93b80e2e18ea07251d6cb64591773701ed02..c4381e20a4893e8602f7d21aa7fbfc37a05efb95 100644
--- a/config/crd/bases/certmanager.step.sm_stepissuers.yaml
+++ b/config/crd/bases/certmanager.step.sm_stepissuers.yaml
@@ -3,14 +3,20 @@
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.2.5
creationTimestamp: null
name: stepissuers.certmanager.step.sm
spec:
group: certmanager.step.sm
names:
kind: StepIssuer
+ listKind: StepIssuerList
plural: stepissuers
- scope: ""
+ singular: stepissuer
+ scope: Namespaced
+ subresources:
+ status: {}
validation:
openAPIV3Schema:
description: StepIssuer is the Schema for the stepissuers API
@@ -18,12 +24,12 @@ spec:
apiVersion:
description: 'APIVersion defines the versioned schema of this representation
of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
+ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
type: string
kind:
description: 'Kind is a string value representing the REST resource this
object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
+ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
type: string
metadata:
type: object
@@ -95,12 +101,17 @@ spec:
the condition's last transition.
type: string
status:
+ allOf:
+ - enum:
+ - "True"
+ - "False"
+ - Unknown
+ - enum:
+ - "True"
+ - "False"
+ - Unknown
description: Status of the condition, one of ('True', 'False',
'Unknown').
- enum:
- - "True"
- - "False"
- - Unknown
type: string
type:
description: Type of the condition, currently ('Ready').
@@ -114,6 +125,7 @@ spec:
type: array
type: object
type: object
+ version: v1beta1
versions:
- name: v1beta1
served: true
diff --git a/config/crd/patches/cainjection_in_stepissuers.yaml b/config/crd/patches/cainjection_in_stepissuers.yaml
index 9c899618f00cee5c5fed812fd9c5559c52922b19..9e57437faebf13f17a11bf42a66ad0acbcab6cc3 100644
--- a/config/crd/patches/cainjection_in_stepissuers.yaml
+++ b/config/crd/patches/cainjection_in_stepissuers.yaml
@@ -4,5 +4,5 @@ apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
annotations:
- certmanager.k8s.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
+ cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
name: stepissuers.certmanager.step.sm
diff --git a/config/default/kustomization.yaml b/config/default/kustomization.yaml
index c7403c63673b6e81684c4447b60ad55e76f5f267..cb1819db4667ac929beb81887c214886efa70ea4 100644
--- a/config/default/kustomization.yaml
+++ b/config/default/kustomization.yaml
@@ -51,16 +51,16 @@ vars:
#- name: CERTIFICATE_NAMESPACE # namespace of the certificate CR
# objref:
# kind: Certificate
-# group: certmanager.k8s.io
-# version: v1alpha1
+# group: cert-manager.io
+# version: v1alpha2
# name: serving-cert # this name should match the one in certificate.yaml
# fieldref:
# fieldpath: metadata.namespace
#- name: CERTIFICATE_NAME
# objref:
# kind: Certificate
-# group: certmanager.k8s.io
-# version: v1alpha1
+# group: cert-manager.io
+# version: v1alpha2
# name: serving-cert # this name should match the one in certificate.yaml
#- name: SERVICE_NAMESPACE # namespace of the service
# objref:
diff --git a/config/default/manager_image_patch.yaml b/config/default/manager_image_patch.yaml
index 362e13b9893df2d38a229b0854ab317854099647..4a371c546066454e826512518b3ac685df44d37b 100644
--- a/config/default/manager_image_patch.yaml
+++ b/config/default/manager_image_patch.yaml
@@ -8,5 +8,5 @@ spec:
spec:
containers:
# Change the value of image field below to your controller image URL
- - image: smallstep/step-issuer:0.1.0
+ - image: step-issuer:latest
name: manager
diff --git a/config/default/webhookcainjection_patch.yaml b/config/default/webhookcainjection_patch.yaml
index 5e3e077df96fa4949413f6ac0a4caf85e3ee86dd..7e79bf9955a23ea564ef8b08f5177c330d646be1 100644
--- a/config/default/webhookcainjection_patch.yaml
+++ b/config/default/webhookcainjection_patch.yaml
@@ -5,11 +5,11 @@ kind: MutatingWebhookConfiguration
metadata:
name: mutating-webhook-configuration
annotations:
- certmanager.k8s.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
+ cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
---
apiVersion: admissionregistration.k8s.io/v1beta1
kind: ValidatingWebhookConfiguration
metadata:
name: validating-webhook-configuration
annotations:
- certmanager.k8s.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
+ cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 67dd2d5a11e1bf0a8331cccc4c9ba436cd3b5213..8fe1c63620b764f4a187fd4181d201e36b1c5660 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -15,7 +15,7 @@ rules:
- list
- watch
- apiGroups:
- - certmanager.k8s.io
+ - cert-manager.io
resources:
- certificaterequests
verbs:
@@ -24,7 +24,7 @@ rules:
- update
- watch
- apiGroups:
- - certmanager.k8s.io
+ - cert-manager.io
resources:
- certificaterequests/status
verbs:
diff --git a/config/samples/certificate.yaml b/config/samples/certificate.yaml
index 3540ed0c168322c3702a516f6a08069343b4dc6f..c1090e5d3104f6af6eae226f21a83cf602d766f9 100644
--- a/config/samples/certificate.yaml
+++ b/config/samples/certificate.yaml
@@ -1,4 +1,4 @@
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
name: backend-smallstep-com
diff --git a/config/samples/certificaterequest.yaml b/config/samples/certificaterequest.yaml
index 29eec1c1b4d882ad5cc083fc1865ce6e8780e188..a9389217fa3f012550bfc6ccd5b7566c710139ff 100644
--- a/config/samples/certificaterequest.yaml
+++ b/config/samples/certificaterequest.yaml
@@ -1,4 +1,4 @@
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
kind: CertificateRequest
metadata:
name: internal-smallstep-com
diff --git a/config/samples/deployment.yaml b/config/samples/deployment.yaml
index f9dcedcb8115d39019784a7641818d6906dbcce9..542e60a4c3900b7c1af7e3489c41744a47063043 100644
--- a/config/samples/deployment.yaml
+++ b/config/samples/deployment.yaml
@@ -178,7 +178,7 @@ rules:
- list
- watch
- apiGroups:
- - certmanager.k8s.io
+ - cert-manager.io
resources:
- certificaterequests
verbs:
@@ -187,7 +187,7 @@ rules:
- update
- watch
- apiGroups:
- - certmanager.k8s.io
+ - cert-manager.io
resources:
- certificaterequests/status
verbs: