aureq/cert-manager-webhook-ovh 0.5.0 on GitHub

Changes for cert-manager-webhook-ovh 0.5.0

✨ add support for readOnlyRootFilesystem on the deployment (thanks @Benzhaomin)
✨ add Deployment annotation support (thanks @Benzhaomin)
✨ add ref link about nodeSelector, tolerations, affinity and annotations
✨ choose rbac role type (default Role) (thanks @Alissia01)
📄 document 3 more configuration entries in values.yaml
🌿 make this chart compatible with helm 3 by settings apiVersion to v2
🌿 drop v in appVersion and version fields, set "0.5.0"
🌿 udpate image.tag value to use SemVer 2.0 and set its values to "0.5.0"
🐛 typo fix
⏩ update k8s.io/apiserver to v0.28.2 due to security (dependabot)

🐛 include minutes and seconds in certificates duration fields. see argoproj/argo-cd#6008 for details. via @aegaeonit
✨ optimize Dockerfile for better builds
✨ explicitly use Alpine 3.16 throughout the Dockerfile
✨ run the webhook as nobody/nogroup
✨ reduce container image from 107MB down to 56.2MB
✨ add CNAME strategy to issuers in #8. Thanks (@Zcool85)
✨ build image using Go 1.19.4

⚠️ breaking changes ahead if comming from previous version
📄 documentation and helm chart hosted at https://aureq.github.io/cert-manager-webhook-ovh/
✨ deploy multiple Issuer (namespaced) and ClusterIssuer via chart
✨ either specify your OVH credentials, or use an existing secret
✨ OVH credential are all stored in a secret (ApplicationKey, ApplicaitonSecret, ConsumerKey)
✨ deploy necessary permissions to access the OVH credentials
✨ role based access control to access secrets across namespaces
🚀 publish container image on GitHub Container Registry
🚀 publish Helm Chart on GitHub pages
⬆️ upgrade dependencies to reduce warnings
✨ drop root privileges
✨ add support for HTTP/HTTPS proxy

🚀 use kubernetes recommended labels
✨ move some helm logic in _helpers.tpl
✨ completely rework values.yaml to support creating issuers and ovh credentials
✨ create role and bind it so the webhook can access necessary secrets
⬆️ upgrade dependencies to reduce warnings
- cert-manager v1.5.3 to v1.9.1
- go-ovh v1.1.0 to v1.3.0
- client-go v0.22.1 to v0.24.2
build webhook using golang 1.18
✨ add image pull secrets to helm chart by Julian Stiller)
🐛 fix base64 encoded secrets by @julienkosinski
🔥 drop root privilges (missing attribution)
🐛 fix how security context is checked
✨ add RBAC (missing attribution)
⬆️ upgrade to Alpine Linux 3.16 container image
🐛 fix Makefile references and enable HTTP proxy to local build environment
✨ set CAP_NET_BIND_SERVICE to binary to bind on privileged ports without root privileges (missing attribution)
🐛 add libpcap to container image
✨ create logo based on cert-manager logo and icons8
✨ more fields populated in Chart.yaml
🌱 some ground work to automate the release process via GitHub Actions and GitHub packages

⚠️ breaking changes ahead
✨ major helm chart improvements
✨ deploy multiple Issuer (namespaced) and ClusterIssuer via chart
✨ either specify your OVH credentials, or use an existing secret
✨ OVH credential are all stored in a secret (ApplicationKey, ApplicaitonSecret, ConsumerKey)
✨ deploy necessary permissions to access the OVH credentials
✨ role based access control to access secrets across namespaces

✨ move some helm logic in _helpers.tpl
✨ completely rework values.yaml to support creating issuers and ovh credentials
✨ create role and bind it so the webhook can access necessary secrets
📄 documentation and helm chart hosted at https://aureq.github.io/cert-manager-webhook-ovh/

✨ add support for HTTP proxy
⬆️ upgrade dependencies to reduce warnings
- cert-manager v1.5.3 to v1.9.1
- go-ovh v1.1.0 to v1.3.0
- client-go v0.22.1 to v0.24.2
build webhook using golang 1.18
✨ add image pull secrets to helm chart by Julian Stiller)
🐛 fix base64 encoded secrets by @julienkosinski
🔥 drop root privilges (missing attribution)
🐛 fix how security context is checked
✨ add RBAC (missing attribution)
⬆️ upgrade to Alpine Linux 3.16 container image
🐛 fix Makefile references and enable HTTP proxy to local build environment
✨ set CAP_NET_BIND_SERVICE to binary to bind on privileged ports without root privileges (missing attribution)
🐛 add libpcap to container image
✨ create logo based on cert-manager logo and icons8
✨ more fields populated in Chart.yaml
🌱 some ground work to automate the release process via GitHub Actions and GitHub packages