jetstack-bot and GitHub
b5be5a8730
Merge pull request #3877 from irbekrm/move_crypto_fork
...
Use upstream golang/crypto for ACME EAB + move crypto fork to cert-manager org
2021-04-13 13:28:15 +01:00
irbekrm
fc9d966a1c
Certificate's revision history limit validated by webhook
...
To avoid helm upgrade issues, see https://github.com/jetstack/cert-manager/issues/3880
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-04-12 14:59:28 +01:00
irbekrm
d213b4bfdb
Standardize deprecation warnings
...
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-04-12 09:38:49 +01:00
irbekrm
09af959071
Issuer's ACME EAB algorithm can no longer be set
...
It is hardcoded to HS256 in golang.org/x/crypto
Also, we now use a fork of golang.org/x/crypto
in cert-manager org.
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-04-09 10:28:19 +01:00
irbekrm
22f6cb18d2
Adds some comments
...
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-04-03 15:54:52 +01:00
joshvanl
f8b38daa4c
Update cert-manager-controller:approve RBAC naming to be more consistent
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-26 17:26:28 +00:00
joshvanl
5b34d9a6cc
Change cert-manager-controller approve RBAC resource names to
...
':approve-cert-manager-io'
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-26 17:26:28 +00:00
joshvanl
393848ee98
Fix webhook RBAC resource names to use ':subjectaccessreviews'
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-26 17:26:28 +00:00
joshvanl
8048034b0e
Adds permissions to approve "issuer.cert-manager.io/*", "clusterissuer.cert-manager.io/*" signers to the cert-manager-controller ServiceAccount
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-26 17:26:28 +00:00
joshvanl
6ef840972c
Change controller options to return a set of enabled controllers, and
...
log enabled controllers on start
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-26 11:28:01 +00:00
joshvanl
0382c9d8b2
Adds a cert-manager-controller flag to disable controllers, for example,
...
the certificaterequests-approver
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-26 11:28:01 +00:00
jetstack-bot and GitHub
a8c75fab1a
Merge pull request #3773 from JoshVanL/certificate-revision-history-limit
...
Certificate revision history limit
2021-03-26 11:13:58 +00:00
jetstack-bot and GitHub
dffbf391db
Merge pull request #3733 from jakexks/renewBefore
...
Clarify the default values for the renewBefore and duration fields
2021-03-24 10:53:46 +00:00
joshvanl
59ca6ca850
Move CertificateRequest revisionHistoryLimit validation to OpenAPI
...
validation
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-23 15:58:14 +00:00
joshvanl
72904ca2c1
Updates CertificateRequest printColumn with a new Denied column
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-17 13:10:39 +00:00
joshvanl
fb54272d17
Adds Approved condition status as additionalPrinterColumn for pretty
...
printing
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-17 13:10:39 +00:00
jetstack-bot and GitHub
fedea03a16
Merge pull request #3774 from JoshVanL/kubectl-get-cr-username
...
Add Requestor to kubectl output, moves Issuer name from wide to default outpt
2021-03-15 18:00:15 +00:00
joshvanl
d2b98828b3
Adds Username to kubectl get output, moves issuer name from wide to
...
default
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-15 16:52:51 +00:00
joshvanl
e6ece1f36b
Updates Issuer CRDs with new ObservedGeneration field
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-15 15:06:22 +00:00
joshvanl
7146f9702d
Adds revisionHistoryLimit field to CRD
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-15 14:54:35 +00:00
jetstack-bot and GitHub
70c66e02a0
Merge pull request #3641 from JoshVanL/certificate-request-identity
...
CertificateRequest UserInfo fields
2021-03-15 14:26:15 +00:00
jetstack-bot and GitHub
51340d0c87
Merge pull request #3454 from Kirill-Garbar/chart-bugfix-with-hostNetwork
...
fix bug with hostNetwork false in webhook psp
2021-03-11 19:40:25 +00:00
jetstack-bot and GitHub
c2634d3538
Merge pull request #3613 from JoshVanL/certificate-condition-observed-generation
...
Certificate condition observed generation
2021-03-08 09:47:45 +00:00
jetstack-bot and GitHub
75a46ff90b
Merge pull request #3731 from jsoref/spelling
...
Spelling
2021-03-05 13:58:40 +00:00
jetstack-bot and GitHub
deb55110a2
Merge pull request #3725 from joshuastern/automountServiceAccountToken
...
Add automountServiceAccountToken field to ca service accounts
2021-03-04 18:43:40 +00:00
jetstack-bot and GitHub
3ff69d0dd6
Merge pull request #3697 from yann-soubeyrand/patch-1
...
fix: correct permissions on edit aggregate role
2021-03-04 18:08:40 +00:00
Josh Soref
3b957488c3
spelling: will
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
2021-03-04 13:04:38 -05:00
Josh Soref
7e0119a7d4
spelling: liveness
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
2021-03-04 13:04:38 -05:00
Jake Sanders
e19a9f3800
Add default duration to duration field doc
...
Signed-off-by: Jake Sanders <i@am.so-aweso.me >
2021-03-04 17:18:33 +00:00
joshvanl
b3cab7e265
Updates the CRDs with the Certificate Condition observedGeneration field
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-03-04 17:04:11 +00:00
Jake Sanders
5aedd544d7
Clarify the default value for the renewBefore field
...
Signed-off-by: Jake Sanders <i@am.so-aweso.me >
2021-03-04 15:37:47 +00:00
Joshua Stern
144368a598
Add automountServiceAccountToken field to ca service accounts
...
Signed-off-by: Joshua Stern <joshua.stern@appian.com >
2021-03-01 18:23:37 -05:00
Yann Soubeyrand and GitHub
8af2065e74
fix: correct permissions on edit aggregate role
...
Signed-off-by: Yann Soubeyrand <yann.soubeyrand@camptocamp.com >
2021-02-22 19:20:54 +01:00
7opf and Severin Skillman
5dc0eba59d
use port from helm value for service targetPort
...
Signed-off-by: Severin Skillman <sev@skillman.ch >
2021-02-21 12:26:07 +00:00
irbekrm and Richard Wall
959e581368
Removes implementation-specific comment from api
...
Co-authored-by: Richard Wall <richard.wall@jetstack.io >
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-02-10 13:29:05 +00:00
irbekrm and JoshVanL
59f52139dc
Finishes sentences with a full stop
...
Co-authored-by: JoshVanL <vleeuwenjoshua@gmail.com >
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-02-10 09:43:34 +00:00
irbekrm
863c709a19
Removes minimum and maximum fields from Certificate CRD
...
This was done to fix Helm data type conversion problem- see issue #3644 for more context
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-02-09 17:08:29 +00:00
joshvanl
46d4e61a18
Updates CRDs to include new identity fields to CertificateRequests
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-02-08 19:23:52 +00:00
jetstack-bot and GitHub
35febb1717
Merge pull request #3505 from hugoboos/ocsp-server
...
Add option to specify OCSP server #3497
2021-02-05 11:27:37 +00:00
jetstack-bot and GitHub
461a41046c
Merge pull request #3628 from wallrj/3627-fix-crd-duplication
...
Fix duplication of the CRD definitions in cert-manager.yaml
2021-02-04 15:19:41 +00:00
Richard Wall
0255304ef4
Fix the helm install --set installCRDs=true option
...
Signed-off-by: Richard Wall <richard.wall@jetstack.io >
2021-02-04 14:05:49 +00:00
jetstack-bot and GitHub
4fe609156b
Merge pull request #3538 from chulkilee/patch-1
...
Fix comments for docs on types_certificate.go
2021-02-03 15:09:11 +00:00
Richard Wall
dd4219501d
Fix duplication of the CRD definitions in cert-manager.yaml
...
* CRDs are already included by virtue of the manifests.helm target
Signed-off-by: Richard Wall <richard.wall@jetstack.io >
2021-02-03 11:50:19 +00:00
Maël Valais and James Munnelly
ba22785445
Rename ocspServer to oscpServers
...
Signed-off-by: Maël Valais <mael@vls.dev >
Co-authored-by: James Munnelly <james@munnelly.eu >
2021-02-03 11:13:32 +01:00
Hugo Stijns and Maël Valais
5f18cce622
add option to specify OCSP server
...
Signed-off-by: Hugo Stijns <hugo@boosboos.net >
Signed-off-by: Maël Valais <mael@vls.dev >
2021-02-03 09:09:03 +01:00
Chulki Lee
e90b494da6
Fix go comments for API docs
...
- Use backticks, not single/double quotes for enum values
- Fix allowed values
- Remove unnecessary quote
Signed-off-by: Chulki Lee <chulki.lee@gmail.com >
2021-01-22 20:21:19 +09:00
Maartje Eyskens
494fcaf480
Remove all and rename acme to cert-manager-acme
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2021-01-20 15:21:42 +01:00
Maartje Eyskens
cab840e876
Add CRD catagories
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2021-01-18 14:09:38 +01:00
Kirill Garbar
12ac6d7e52
fix bug with hostNetwork false in webhook psp
...
Signed-off-by: Kirill Garbar <kirill.garbar@t-systems.com >
2020-12-29 11:25:59 +03:00
jetstack-bot and GitHub
d655522e2e
Merge pull request #3529 from meyskens/fix-manifest-rel
...
Fix release tar content of manifests
2020-12-22 10:38:28 +00:00