6c7ef96354
add design details for insecure HTTP RFC
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2022-10-24 05:35:57 -04:00
d2e7a37eb4
add user stories and alternatives for insecure HTTP RFC
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2022-10-24 05:35:57 -04:00
1d8105247a
add RFC for blocking insecure HTTP connections across Flux
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2022-10-24 05:35:57 -04:00
d015895caa
RFC-0002: Add Cosign verification for Helm OCI charts
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-23 12:09:34 +03:00
d37bb42995
Update RFC-0003 implementation history
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-29 21:32:34 +03:00
f417352370
Add Cosign keyless specification
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-29 09:20:46 +03:00
20557f9f15
update to new doc links structure
...
Signed-off-by: Daniel Holbach <daniel@weave.works>
2022-08-30 14:50:05 +02:00
43cdea01d6
Status update for RFC-0002 and RFC-0003
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-29 16:31:51 +03:00
07de9d9ffe
[RFC-0002] Add auth specification for Helm OCI
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-25 12:16:02 +03:00
463d241a91
Update TODOs for RFC-0003
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-23 16:03:40 +03:00
db0920ba32
Clarify the layer selection behaviour
...
Co-authored-by: Hidde Beydals <hiddeco@users.noreply.github.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-23 16:03:37 +03:00
16d3180e42
[RFC-0003] OCI select layer by media type
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-23 16:03:37 +03:00
9386b9e0c3
Status update for RFC-0002 and RFC-0003
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-11 17:34:37 +03:00
36d219e05c
[RFC-0003] Add the provider field for OIDC auth
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-08-02 11:46:20 +03:00
4a55b828b1
Mark RFC-0003 as implementable
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 17:02:19 +03:00
6b9c0a5e48
Add oci://
proto to the spec
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:45 +03:00
e060873246
Add examples for flux build, push and list commands
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:42 +03:00
143609b9fb
Add specification for spec.url
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
a22438b7fa
Add design details
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
34321983e7
Add OCI artifact type to alternatives
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
44762933b3
Add flux tag artifact
command
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
2912d1d437
Add serviceAccountName to auth spec
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
4885278691
Restructure the OCI auth spec
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
8a7c94180b
Add client certificate authentication
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
183b9a7ee0
Add auto-login feature
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:41 +03:00
0fc582d6fd
Add user stories for publishing and reconciling OCI artifacts
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:40 +03:00
c7a6ed53ca
Add proposal for adding OCI support for Kubernetes manifests to Flux
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-07-06 16:57:40 +03:00
2fe3362c3d
[RFC-0002] Update status and implementation history
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-06-07 12:21:19 +03:00
30f977a7cb
Assign RFC-0002 to Helm OCI proposal
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-13 10:27:11 +03:00
e06fa24616
Add dedicated reconcilers to the design docs
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-12 15:09:51 +03:00
20d7d0c78a
Add image registry example to story 2
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-12 15:08:31 +03:00
606078c1b3
Add chart update automation to Git
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-12 15:08:31 +03:00
0135eb19d4
Add proposal for adding Helm OCI support to Flux Source API
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-12 15:08:30 +03:00
ede6785e6b
RFC on authorisation model
...
This gives a baseline for future changes, e.g., expanding where
namespace ACLs are used, switching access control to
untrusted-by-default.
The "Security considerations" section was adapted from
https://github.com/fluxcd/flux2/pull/2086
Signed-off-by: Michael Bridgen <michael@weave.works>
2021-12-17 19:17:25 +00:00
2c3cb1a664
Add template to RFC-0000
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-30 17:26:57 +02:00
99a0c47277
Add RFC process
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-30 16:25:40 +02:00
c5b2c6709a
Add status, creation and last update date fields to RFC template
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-30 15:03:45 +02:00
8354ac937c
Introduce the Flux RFC template
...
The RFC template is heavily inspired by Rust RFCs and Kubernetes KEPs.
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-11-30 15:03:45 +02:00