Tim Ramlot

Refactor config API

4

De-duplicates code and fixes found bugs/ inconsistencies. TODO: split this PR into multiple smaller PRs. ### Kind /kind cleanup ### Release Note ```release-note NONE ```

Support duration strings in config API

1

Adds support for specifying human readable duration values (using time.ParseDuration format). We also still support integer values for backwards compatibility. The reason we did not support this yet is due...

Improve config validation

1

Improves the validation logic for the config API and unit-test all code paths. ### Kind /kind cleanup ### Release Note ```release-note NONE ```

✨ Add missing generic version of ResourceVersionChangedPredicate

2

This was missing missing from https://github.com/kubernetes-sigs/controller-runtime/pull/2783.

Add Helm options to extend auto-approval or disable it

4

This PR adds Helm options to simplify configuring the build-in cert-manager auto-approver. 1. It adds the option to approve external issuers (including an "approve all external issuers" options) 2. It...

Make the binary dynamically determine whether it is a kubectl plugin

5

fixes https://github.com/cert-manager/cmctl/issues/38 See https://krew.sigs.k8s.io/docs/developer-guide/develop/best-practices/ TODO: I would like to get some feedback on the `kubectl cert-manager` autocomplete functionality. UPDATE: autocomplete works as expected, additional improvements can be made in a...

Currently, we release two binaries cmctl and kubectl_cert-manager. This was introduced in https://github.com/cert-manager/cert-manager/pull/4522. However, instead of using build-time variables to determine the binary name, we could determine the binary name...

Based on the documentation here: https://krew.sigs.k8s.io/docs/developer-guide/distributing-with-krew/, directly downloading the binaries is not supported. The binaries have to be downloaded using an archive file.

Tests: add bind resource request to improve availability during tests

1

Following the best practices described here: https://home.robusta.dev/blog/stop-using-cpu-limits Sets a CPU request and a MEM request and limit. Experimentally found that 256Mi works as memory limit. ### Kind /kind cleanup ###...

Tests: use supported bind9 image and run as non-root

1

Depends on https://github.com/cert-manager/cert-manager/pull/7141 Use the supported docker.io/ubuntu/bind9 image and run it as non-root. ### Kind /kind cleanup ### Release Note ```release-note NONE ```