Commit Graph
526 Commits
Author SHA1 Message Date
jetstack-botandGitHub b5be5a8730 Merge pull request #3877 from irbekrm/move_crypto_fork
Use upstream golang/crypto for ACME EAB + move crypto fork to cert-manager org
2021-04-13 13:28:15 +01:00
irbekrm fc9d966a1c Certificate's revision history limit validated by webhook
To avoid helm upgrade issues, see https://github.com/jetstack/cert-manager/issues/3880

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-04-12 14:59:28 +01:00
irbekrm d213b4bfdb Standardize deprecation warnings
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-04-12 09:38:49 +01:00
irbekrm 09af959071 Issuer's ACME EAB algorithm can no longer be set
It is hardcoded to HS256 in golang.org/x/crypto

Also, we now use a fork of golang.org/x/crypto
in cert-manager org.

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-04-09 10:28:19 +01:00
irbekrm 22f6cb18d2 Adds some comments
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-04-03 15:54:52 +01:00
joshvanl f8b38daa4c Update cert-manager-controller:approve RBAC naming to be more consistent
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl 5b34d9a6cc Change cert-manager-controller approve RBAC resource names to
':approve-cert-manager-io'

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl 393848ee98 Fix webhook RBAC resource names to use ':subjectaccessreviews'
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl 8048034b0e Adds permissions to approve "issuer.cert-manager.io/*", "clusterissuer.cert-manager.io/*" signers to the cert-manager-controller ServiceAccount
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl 6ef840972c Change controller options to return a set of enabled controllers, and
log enabled controllers on start

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 11:28:01 +00:00
joshvanl 0382c9d8b2 Adds a cert-manager-controller flag to disable controllers, for example,
the certificaterequests-approver

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 11:28:01 +00:00
jetstack-botandGitHub a8c75fab1a Merge pull request #3773 from JoshVanL/certificate-revision-history-limit
Certificate revision history limit
2021-03-26 11:13:58 +00:00
jetstack-botandGitHub dffbf391db Merge pull request #3733 from jakexks/renewBefore
Clarify the default values for the renewBefore and duration fields
2021-03-24 10:53:46 +00:00
joshvanl 59ca6ca850 Move CertificateRequest revisionHistoryLimit validation to OpenAPI
validation

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-23 15:58:14 +00:00
joshvanl 72904ca2c1 Updates CertificateRequest printColumn with a new Denied column
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-17 13:10:39 +00:00
joshvanl fb54272d17 Adds Approved condition status as additionalPrinterColumn for pretty
printing

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-17 13:10:39 +00:00
jetstack-botandGitHub fedea03a16 Merge pull request #3774 from JoshVanL/kubectl-get-cr-username
Add Requestor to kubectl output, moves Issuer name from wide to default outpt
2021-03-15 18:00:15 +00:00
joshvanl d2b98828b3 Adds Username to kubectl get output, moves issuer name from wide to
default

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-15 16:52:51 +00:00
joshvanl e6ece1f36b Updates Issuer CRDs with new ObservedGeneration field
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-15 15:06:22 +00:00
joshvanl 7146f9702d Adds revisionHistoryLimit field to CRD
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-15 14:54:35 +00:00
jetstack-botandGitHub 70c66e02a0 Merge pull request #3641 from JoshVanL/certificate-request-identity
CertificateRequest UserInfo fields
2021-03-15 14:26:15 +00:00
jetstack-botandGitHub 51340d0c87 Merge pull request #3454 from Kirill-Garbar/chart-bugfix-with-hostNetwork
fix bug with hostNetwork false in webhook psp
2021-03-11 19:40:25 +00:00
jetstack-botandGitHub c2634d3538 Merge pull request #3613 from JoshVanL/certificate-condition-observed-generation
Certificate condition observed generation
2021-03-08 09:47:45 +00:00
jetstack-botandGitHub 75a46ff90b Merge pull request #3731 from jsoref/spelling
Spelling
2021-03-05 13:58:40 +00:00
jetstack-botandGitHub deb55110a2 Merge pull request #3725 from joshuastern/automountServiceAccountToken
Add automountServiceAccountToken field to ca service accounts
2021-03-04 18:43:40 +00:00
jetstack-botandGitHub 3ff69d0dd6 Merge pull request #3697 from yann-soubeyrand/patch-1
fix: correct permissions on edit aggregate role
2021-03-04 18:08:40 +00:00
Josh Soref 3b957488c3 spelling: will
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2021-03-04 13:04:38 -05:00
Josh Soref 7e0119a7d4 spelling: liveness
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2021-03-04 13:04:38 -05:00
Jake Sanders e19a9f3800 Add default duration to duration field doc
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-03-04 17:18:33 +00:00
joshvanl b3cab7e265 Updates the CRDs with the Certificate Condition observedGeneration field
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-04 17:04:11 +00:00
Jake Sanders 5aedd544d7 Clarify the default value for the renewBefore field
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-03-04 15:37:47 +00:00
Joshua Stern 144368a598 Add automountServiceAccountToken field to ca service accounts
Signed-off-by: Joshua Stern <joshua.stern@appian.com>
2021-03-01 18:23:37 -05:00
Yann SoubeyrandandGitHub 8af2065e74 fix: correct permissions on edit aggregate role
Signed-off-by: Yann Soubeyrand <yann.soubeyrand@camptocamp.com>
2021-02-22 19:20:54 +01:00
7opfandSeverin Skillman 5dc0eba59d use port from helm value for service targetPort
Signed-off-by: Severin Skillman <sev@skillman.ch>
2021-02-21 12:26:07 +00:00
irbekrmandRichard Wall 959e581368 Removes implementation-specific comment from api
Co-authored-by: Richard Wall <richard.wall@jetstack.io>
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-02-10 13:29:05 +00:00
irbekrmandJoshVanL 59f52139dc Finishes sentences with a full stop
Co-authored-by: JoshVanL <vleeuwenjoshua@gmail.com>
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-02-10 09:43:34 +00:00
irbekrm 863c709a19 Removes minimum and maximum fields from Certificate CRD
This was done to fix Helm data type conversion problem- see issue #3644 for more context

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-02-09 17:08:29 +00:00
joshvanl 46d4e61a18 Updates CRDs to include new identity fields to CertificateRequests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-02-08 19:23:52 +00:00
jetstack-botandGitHub 35febb1717 Merge pull request #3505 from hugoboos/ocsp-server
Add option to specify OCSP server #3497
2021-02-05 11:27:37 +00:00
jetstack-botandGitHub 461a41046c Merge pull request #3628 from wallrj/3627-fix-crd-duplication
Fix duplication of the CRD definitions in cert-manager.yaml
2021-02-04 15:19:41 +00:00
Richard Wall 0255304ef4 Fix the helm install --set installCRDs=true option
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-02-04 14:05:49 +00:00
jetstack-botandGitHub 4fe609156b Merge pull request #3538 from chulkilee/patch-1
Fix comments for docs on types_certificate.go
2021-02-03 15:09:11 +00:00
Richard Wall dd4219501d Fix duplication of the CRD definitions in cert-manager.yaml
* CRDs are already included by virtue of the manifests.helm target

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-02-03 11:50:19 +00:00
Maël ValaisandJames Munnelly ba22785445 Rename ocspServer to oscpServers
Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: James Munnelly <james@munnelly.eu>
2021-02-03 11:13:32 +01:00
Hugo StijnsandMaël Valais 5f18cce622 add option to specify OCSP server
Signed-off-by: Hugo Stijns <hugo@boosboos.net>
Signed-off-by: Maël Valais <mael@vls.dev>
2021-02-03 09:09:03 +01:00
Chulki Lee e90b494da6 Fix go comments for API docs
- Use backticks, not single/double quotes for enum values
- Fix allowed values
- Remove unnecessary quote

Signed-off-by: Chulki Lee <chulki.lee@gmail.com>
2021-01-22 20:21:19 +09:00
Maartje Eyskens 494fcaf480 Remove all and rename acme to cert-manager-acme
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-20 15:21:42 +01:00
Maartje Eyskens cab840e876 Add CRD catagories
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-18 14:09:38 +01:00
Kirill Garbar 12ac6d7e52 fix bug with hostNetwork false in webhook psp
Signed-off-by: Kirill Garbar <kirill.garbar@t-systems.com>
2020-12-29 11:25:59 +03:00
jetstack-botandGitHub d655522e2e Merge pull request #3529 from meyskens/fix-manifest-rel
Fix release tar content of manifests
2020-12-22 10:38:28 +00:00