Commit Graph
1419 Commits
Author SHA1 Message Date
James Munnellyandjetstack-bot c0a8d8beca Only allow a single TLS entry per secret name in an Ingress resource
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-21 14:27:39 +00:00
James Munnellyandjetstack-bot 925f30c0e9 ingress-shim: add unit tests for events
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-21 14:27:39 +00:00
James Munnellyandjetstack-bot cd7fa1b43e Make the Venafi Cloud URL field optional
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-06 15:48:28 +00:00
James Munnellyandjetstack-bot abaeb86b21 Fix ownerReference GVK used during HTTP01 challenge solving
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-28 18:07:18 +00:00
James Munnellyandjetstack-bot 3681b6f4fd Ensure fetched certificate is valid for CSRs public key before issuing
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-23 10:58:02 +00:00
jetstack-botandGitHub fbab741817 Merge pull request #2513 from munnerz/add-v1alpha3
Create v1alpha3 API version
2020-01-20 16:37:31 +00:00
jetstack-botandGitHub eec3f3633c Merge pull request #2506 from periklis/use-vault-modules
Use vault api and sdk modules instead of tagged repo
2020-01-20 15:55:31 +00:00
jetstack-botandGitHub b7e83b5382 Merge pull request #2508 from JoshVanL/cr-invalid-request
CertificateRequest InvalidRequest
2020-01-20 14:17:31 +00:00
Periklis Tsirakidis a1f63b953d Use vault api and sdk modules instead of tagged repo
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
2020-01-20 12:27:09 +01:00
James Munnelly 72ea226b41 Update controllers to use validation registry
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly c27ccd78d7 Update webhook validation handler for validation registry
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly 0046036460 Add validation registration functions to API groups
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly a867bc9c7a Update testgroup validation to use internal type
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly ef72b0d866 Add validation registry package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly 511bddc953 Update apigroup validation to use internal types
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly 50da07292a Add GenericIssuer interface to internal API
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly 866d89ffb0 Update pkg/webhook to use internal types
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly 7af9fb0006 Register new apiVersion with schemes
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly b57b1d8407 Run update-codegen.sh
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
James Munnelly 0f1d7cf755 Copy apis directories for v1alpha3
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 10:05:54 +00:00
JoshVanL 2f3fe4c3d7 Reduce comments by removing invalid data in CR implementations doing
better InvalidRequest checking

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-17 14:11:25 +00:00
jetstack-botandGitHub 0e5af56d7d Merge pull request #2520 from mathianasj/fix-clusterissuer-secret-missing
Fix clusterissuer not being able to provision certs
2020-01-17 14:03:06 +00:00
JoshVanL b989f4e604 Remove cert-manager core issuers from marking CR as InvalidRequest
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-17 13:35:05 +00:00
Joshua Mathianas cc802cc16e made code review changes
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-17 07:31:25 -05:00
jetstack-botandGitHub fc00a273a6 Merge pull request #2518 from mathianasj/x509-subject-fields
X509 Name support
2020-01-17 09:39:05 +00:00
Joshua Mathianas eed8f67587 fixed which namespace to find secret in based on if its a clusterissuer for venafi
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 12:19:49 -05:00
Joshua Mathianas 39cc63a205 resolve failing unit tests
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 11:34:44 -05:00
Joshua Mathianas 05ff21250d Updates plural names and destination attribute name to match source
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 10:30:20 -05:00
Joshua Mathianas 9ee6ea7b7d Fixed a typo and ran generators
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:49:40 -05:00
Joshua Mathianas b096e0f0af Made requested changes from review
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:41:16 -05:00
Joshua Mathianas e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 07:50:26 -05:00
Maartje Eyskens 98ca10b5ba Update bazel
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:28:15 +01:00
Maartje Eyskens 0e1f64a337 Do not change crt.Name
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:07:45 +01:00
Maartje Eyskens dbac7cf1fb Use correct regexp package
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:03:58 +01:00
Maartje Eyskens 3212e446e5 Fix issue in ComputeCertificateRequestName when 52nd is a dot
This strips any symbols at the end of a shortened domain name  in ComputeCertificateRequestName.
It also adds tests for the specific util function

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 11:49:28 +01:00
jetstack-botandGitHub 5ee9e6c7aa Merge pull request #2452 from munnerz/kubernetes-1.17.0
Bump Kubernetes dependencies to v0.17.0
2020-01-14 14:19:57 +00:00
JoshVanL c38466dc9c Update certificate request controller sync_test.go
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-10 09:41:55 +00:00
JoshVanL f9f8fbd311 Add InvalidRequest condition check to Certificate controller:
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:14:21 +00:00
JoshVanL 1c9557b729 Adds InvalidRequest condition set to CertificateRequest controllers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:13:54 +00:00
JoshVanL 0c50cc166a Adds InvalidRequest condition to CertificateRequest
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:12:55 +00:00
jetstack-botandGitHub 9ca34f773f Merge pull request #2470 from munnerz/remove-misleading-errors
Don't log misleading error messages
2020-01-07 14:24:19 +00:00
James Munnelly d3b785c263 Bump generated files copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-07 12:43:44 +00:00
James Munnelly 4aed3a7bbc Set namespace on Challenge resources created during tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:38:04 +00:00
jetstack-botandGitHub 8d6e86468d Merge pull request #2460 from greywolve/fix-ensure-ingress-for-service-name-changing
ACME HTTP01 solver: clean up ingresses if the service name changes
2019-12-17 15:35:09 +00:00
jetstack-botandGitHub 8809f7e031 Merge pull request #2469 from munnerz/temp-certs-dont-overwrite
Don't overwrite existing certificates when issuing a temporary certificate
2019-12-17 14:30:09 +00:00
James Munnelly 361fdfac3f Don't log misleading error messages
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 16:31:18 +00:00
James Munnelly 9daad6dd93 Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 15:11:07 +00:00
James Munnelly 7076041de6 Don't overwrite existing certificates when issuing a temporary certificate
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 13:53:38 +00:00
James Munnelly df27fff9ce Don't use time.Tick to prevent leaks
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 12:45:49 +00:00
Oliver Powell 7611f78793 ACME HTTP01 solver: clean up ingresses if the service name changes
Signed-off-by: Oliver Powell <oliver@opowell.com>
2019-12-14 10:05:51 +02:00