Merge pull request #26 from IBM-Security/10.0.7.0_updates

10.0.7.0 updates

README.md

@@ -248,6 +248,38 @@ spec:
   # The name of the ServiceAccount to use to run the managed pod.
   # serviceAccountName: "default"
 
+  # The X509 certificate to verify the connection to the configuration snapshot
+  # service. The default value for this property is "operator", which reads the "tls.cert"
+  # value from the verify-access-operator secret created in the namespace that the Verify
+  # Access pods are deployed to.
+  snapshotTLSCacert: "operator"
+
+
+  # The IBM License Metric Tool annotations to add to the runtime container. These annotations a required
+  # by IBM to track license useage for the IBM Security Verfy Access product. Administartors have the option
+  # of using licence codes for WebSEAL, Advanced Access Cotnrol, Federation or Enterprise; as well as production
+  # or non-production (development) licenses. The actual license codes you sould deploy will depend on your 
+  # licensing agreement with IBM.
+  ilmtAnnotations:
+    module: welseal
+    production: true
+
+  # Administarators can optionally set additional annotations to add to deployed Verify Access runtime
+  # containers. This may be used for integration with third party applications such as log aggregation 
+  # or infrastructure monitoring tools. Character restrictions for custom annotations are the same for
+  # any other Kubernets annotation.
+  # More info can be found at:
+  #     https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set
+  customAnnotations:
+  - key: my.custom/Annotation
+    value: annotationToAdd
+
+
+  # The ordered list of secrets used to decrypt configuration snapshot files. This
+  # property is required if the configuration snapshot file being used was encrypted
+  # when it was created.
+  snapshotSecrets: "secreteToDecryptSnapshotFiles||AnotherSecretToDecryptFiles"
+
   # Any specific container information which is associated with this
   # container.  The container options include:
   #    env

src/Makefile

@@ -132,7 +132,7 @@ controller-gen: ## Download controller-gen locally if necessary.
 
 KUSTOMIZE = $(shell pwd)/bin/kustomize
 kustomize: ## Download kustomize locally if necessary.
-	$(call go-get-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/[email protected])
+	$(call go-get-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/[email protected])
 
 # go-get-tool will 'go get' any package $2 and install it to $1.
 PROJECT_DIR := $(shell dirname $(abspath $(lastword $(MAKEFILE_LIST))))
@@ -143,7 +143,7 @@ TMP_DIR=$$(mktemp -d) ;\
 cd $$TMP_DIR ;\
 go mod init tmp ;\
 echo "Downloading $(2)" ;\
-GOBIN=$(PROJECT_DIR)/bin go get $(2) ;\
+GOBIN=$(PROJECT_DIR)/bin go install $(2) ;\
 rm -rf $$TMP_DIR ;\
 }
 endef

src/api/v1/groupversion_info.go

@@ -3,8 +3,8 @@
  */
 
 // Package v1 contains API Schema definitions for the ibm v1 API group
-//+kubebuilder:object:generate=true
-//+groupName=ibm.com
+// +kubebuilder:object:generate=true
+// +groupName=ibm.com
 package v1
 
 import (