Commit Graph

2 Commits (81a50a26e4e63827fc43cec816661af368df57dd)

Author SHA1 Message Date
Justin 351c01cf7e Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54)
* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.
5 years ago
Mike Malone 042e36da65 autocert 6 years ago