Skip to content

CM-830: Add trust-manager controller implementation #485

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
openshift-app-platform-shift wants to merge 2 commits into
base: cert-manager-1.18
Choose a base branch
from
+6,213 −19
Open

CM-830: Add trust-manager controller implementation #485

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
02d35d3
CM-830: Add TrustManager API type definitions for trust-manager operand
openshift-app-platform-shift[bot] Aug 27, 2026
4ba0499
CM-830: Add trust-manager controller implementation
openshift-app-platform-shift[bot] Aug 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 17 additions & 1 deletion api/operator/v1alpha1/features.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,8 +13,24 @@ var (
// For more details,
// https://github.com/openshift/enhancements/blob/master/enhancements/cert-manager/istio-csr-controller.md
FeatureIstioCSR featuregate.Feature = "IstioCSR"

// TrustManager enables the controller for trustmanagers.operator.openshift.io resource,
// which extends cert-manager-operator to deploy and manage the trust-manager operand.
// trust-manager provides a way to manage trust bundles in Kubernetes and OpenShift clusters.
// It takes a list of trusted certificate sources and combines them into a bundle which
// applications can trust directly.
//
// This feature requires both the operator feature gate to be enabled AND the OpenShift cluster
// to be configured with a TechPreview-compatible feature set (TechPreviewNoUpgrade,
// DevPreviewNoUpgrade, or CustomNoUpgrade). On MicroShift, only the operator feature gate
// is required.
//
// For more details,
// https://github.com/openshift/enhancements/blob/master/enhancements/cert-manager/trust-manager-controller.md
FeatureTrustManager featuregate.Feature = "TrustManager"
)

var OperatorFeatureGates = map[featuregate.Feature]featuregate.FeatureSpec{
FeatureIstioCSR: {Default: true, PreRelease: featuregate.GA},
FeatureIstioCSR: {Default: true, PreRelease: featuregate.GA},
FeatureTrustManager: {Default: false, PreRelease: featuregate.Alpha},
}
Loading