Merge pull request #304 from chiragkyal/rebase-istio-csr

CM-675: Rebase istio-csr with upstream v0.14.2

Author: openshift-merge-bot[bot]

Makefile

@@ -5,7 +5,7 @@
 # - use environment variables to overwrite this value (e.g export BUNDLE_VERSION=0.0.2)
 BUNDLE_VERSION ?= 1.17.0
 CERT_MANAGER_VERSION ?= "v1.17.4"
-ISTIO_CSR_VERSION ?= "v0.14.0"
+ISTIO_CSR_VERSION ?= "v0.14.2"
 
 # CHANNELS define the bundle channels used in the bundle.
 # Add a new line here if you would like to change its default config. (E.g CHANNELS = "candidate,fast,stable")

bindata/istio-csr/cert-manager-istio-csr-clusterrole.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
   name: cert-manager-istio-csr
 rules:

bindata/istio-csr/cert-manager-istio-csr-clusterrolebinding.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
   name: cert-manager-istio-csr
 roleRef:

bindata/istio-csr/cert-manager-istio-csr-deployment.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
 spec:
   replicas: 1
@@ -19,14 +19,14 @@ spec:
         app: cert-manager-istio-csr
         app.kubernetes.io/name: cert-manager-istio-csr
         app.kubernetes.io/instance: cert-manager-istio-csr
-        app.kubernetes.io/version: v0.14.0
+        app.kubernetes.io/version: v0.14.2
     spec:
       serviceAccountName: cert-manager-istio-csr
       nodeSelector:
         kubernetes.io/os: linux
       containers:
         - name: cert-manager-istio-csr
-          image: quay.io/jetstack/cert-manager-istio-csr:v0.14.0
+          image: quay.io/jetstack/cert-manager-istio-csr:v0.14.2
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 6443
@@ -80,3 +80,5 @@ spec:
                 - ALL
             readOnlyRootFilesystem: true
             runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault

bindata/istio-csr/cert-manager-istio-csr-leases-role.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
   name: cert-manager-istio-csr-leases
   namespace: istio-system

bindata/istio-csr/cert-manager-istio-csr-leases-rolebinding.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
 roleRef:
   apiGroup: rbac.authorization.k8s.io

bindata/istio-csr/cert-manager-istio-csr-role.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
   name: cert-manager-istio-csr
   namespace: istio-system

bindata/istio-csr/cert-manager-istio-csr-rolebinding.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
 roleRef:
   apiGroup: rbac.authorization.k8s.io

bindata/istio-csr/cert-manager-istio-csr-service.yaml

@@ -7,7 +7,7 @@ metadata:
     app: cert-manager-istio-csr
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
 spec:
   type: ClusterIP

bindata/istio-csr/cert-manager-istio-csr-serviceaccount.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/name: cert-manager-istio-csr
     app.kubernetes.io/instance: cert-manager-istio-csr
-    app.kubernetes.io/version: v0.14.0
+    app.kubernetes.io/version: v0.14.2
     app.kubernetes.io/managed-by: cert-manager-operator
   name: cert-manager-istio-csr
   namespace: cert-manager