Skip to content

Release v0.7.0
Compare
Choose a tag to compare
@wallyqs wallyqs released this 18 May 23:48
· 113 commits to master since this release
v0.7.0
b82fb23
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Installing

Docker Image:

connecteverything/nats-operator:0.7.0

kubectl apply -f https://github.com/nats-io/nats-operator/releases/download/v0.7.0/00-prereqs.yaml
kubectl apply -f https://github.com/nats-io/nats-operator/releases/download/v0.7.0/10-deployment.yaml

Added

  • Added support to template the nats container

Fixed

  • Many helm chart related fixes

Changed

  • Cluster scoped mode was changed to supports NatsServiceRoles across different namespaces.
    The location of the service account will be the one that dictates where the bound token secret
    will be created. To try the full example with cluster scoped mode in minikube:
$ minikube start \
     --extra-config=apiserver.service-account-signing-key-file=/var/lib/minikube/certs/sa.key \
     --extra-config=apiserver.service-account-key-file=/var/lib/minikube/certs/sa.pub \
     --extra-config=apiserver.service-account-issuer=api \
     --extra-config=apiserver.service-account-api-audiences=api,spire-server \
     --extra-config=apiserver.authorization-mode=Node,RBAC \
     --extra-config=kubelet.authentication-token-webhook=true

$ kubectl apply -f example/nats-operator-cluster-scoped-rbac.yaml 
$ kubectl apply -f example/nats-operator-cluster-scoped.yaml

$ kubectl get pods -A
NAMESPACE         NAME                               READY   STATUS    RESTARTS   AGE
kube-system       coredns-66bff467f8-7fqmb           1/1     Running   0          5m57s
kube-system       coredns-66bff467f8-s9q4q           1/1     Running   0          5m57s
kube-system       etcd-minikube                      1/1     Running   0          5m58s
kube-system       kube-apiserver-minikube            1/1     Running   0          5m58s
kube-system       kube-controller-manager-minikube   1/1     Running   0          5m58s
kube-system       kube-proxy-7s8w5                   1/1     Running   0          5m57s
kube-system       kube-scheduler-minikube            1/1     Running   0          5m58s
kube-system       storage-provisioner                1/1     Running   0          5m56s
my-admin-app-ns   nats-admin-user-pod                1/1     Running   0          92s
my-app-ns         nats-user-pod                      1/1     Running   0          92s
nats-io           nats-operator-6f545874b4-hvl75     1/1     Running   0          2m52s
nats-system       nats-cluster-1                     2/2     Running   0          84s
nats-system       nats-cluster-2                     2/2     Running   0          74s
nats-system       nats-cluster-3                     2/2     Running   0          68s

$ kubectl exec -n my-app-ns -it  nats-user-pod -- /bin/sh
$ nats-sub -s nats://nats-user:`cat /var/run/secrets/nats.io/token`@nats-cluster.nats-system foo.bar
$ nats-sub -s nats://nats-user:`cat /var/run/secrets/nats.io/token`@nats-cluster.nats-system foo.asdf
Assets 4
Loading