Commit Graph
88 Commits
Author SHA1 Message Date
James Munnelly c162c76395 Add feature gate for ValidateCAA functionality and default it to off
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
2019-05-01 10:52:31 +01:00
James Munnelly 41934a2b57 Enable Venafi issuer in controller binary
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-01 13:16:03 +00:00
James Munnelly 2f30258f0e Switch to klog
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:02 +00:00
James Munnelly a9d8f7de8a Fixup for Kubernetes 1.13.2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 11:53:19 +00:00
James Munnelly 149cbb30a7 Add arm32 and arm64 bazel image targets
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-08 15:10:45 +00:00
James Munnelly 0bb864871e Increase acmesolver default cpu resource limit to 100m
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-07 17:16:01 +00:00
James Munnelly 094ae3e50c Fix CLI flag not being respected
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 16:11:37 +00:00
jetstack-botandGitHub 5f96b378e6 Merge pull request #1184 from tlmiller/feature/authnss
Control authoritative dns01 server check.
2019-01-12 15:25:07 +00:00
Thomas Miller dacd0b45cb Control authoritative dns01 server check.
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
2019-01-12 20:17:28 +10:00
Louis Taylor 3d0e06a0b9 Add note to help text about clusterissuers
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
Louis Taylor bbda87b3c8 Add --namespace flag
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
James Munnelly 0fcc0c666c Update copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-01-07 15:07:55 +00:00
James Munnelly bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-29 22:49:55 +00:00
jetstack-botandGitHub a21ac37a74 Merge pull request #713 from kragniz/add-prometheus-metrics-endpoint
Add cert-manager specific metrics to Prometheus endpoint
2018-11-26 15:45:33 +00:00
jetstack-botandGitHub 2c74eabb1c Merge pull request #819 from ccojocar/cert_secret_ref
Set the certificate as an owner of the secret
2018-11-26 15:06:33 +00:00
Louis Taylor cf872a9fc9 Add prometheus metrics
Count certificate requests

Add certificate_expiry_time_seconds metric

Register certificate_expiry_time_seconds metric, fix kind switch and fix metric status result

Export nameForIssuer and remove unneccessary switch

Refactor metrics into controller context

Move metrics collection into functions

Move error checking for metrics collection back into sync function

Remove space

Add TODO

Move update certificate expiry function to metrics package

Refactor metrics functionality

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Run dep ensure

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Fix build

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Refactor

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Fix reporting errors

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Add comments

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Remove unused issuerType

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Update dep inputs-digest

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Don't update status

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Make metrics package level var

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Add prometheusMetricsServerMaxHeaderBytes comment

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Add failures metric

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Remove issue metrics

TODO: hopefully revert this at some point.
Signed-off-by: Louis Taylor <louis@kragniz.eu>

Assign metrics

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Update dep digest

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Fix copyright header

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Remove old metrics server

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Update bazel files

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Clean up

Signed-off-by: Louis Taylor <louis@kragniz.eu>
2018-11-26 13:13:44 +00:00
Cosmin Cojocar 3766edcd12 Set the default value of enable-certificate-owner-ref to false
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-11-26 09:48:02 +01:00
jetstack-botandGitHub ac80ed82f1 Merge pull request #1046 from munnerz/logs-pkg
Revert "Remove pkg/logs package"
2018-11-07 09:48:55 +00:00
jetstack-botandGitHub 04ac65caee Merge pull request #1047 from munnerz/stamped-images
Stamp docker images with current timestamp using Bazel
2018-11-07 09:28:45 +00:00
James Munnelly 175e90c158 Revert "Remove pkg/logs package"
This reverts commit b6f854f849.

Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 20:05:32 +00:00
James Munnelly 2541b10e52 Stamp docker images with current timestamp using Bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 19:18:15 +00:00
jetstack-botandGitHub ace5c2b2f2 Merge pull request #738 from gambol99/acme_options
Configurable ACME Annotation
2018-11-06 16:00:02 +00:00
James Munnelly b6f89ae9dd Regenerate files
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 12:31:16 +00:00
James Munnelly 85d433cff9 Add ACME challenge scheduler and process challenges for matching domains/types in serial
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 12:31:16 +00:00
Rohith e2f13f5f9c Requested Changes
- changing the name of the command line option to --auto-certificate-annotations
- making the option an array to allow for multiple annotations settings

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
2018-11-06 12:09:47 +00:00
Rohith 712a7a85ee Configurable ACME Annotation
- adds a option command line (default to the current behavour) which allows the user to control the acme annotation used by the shim controller
- a current mitgration requires use to run multiple providers at the same

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
2018-11-06 12:09:18 +00:00
Cosmin Cojocar 5be660ec9e Fix typo in filed name
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-10-28 20:08:48 +01:00
Cosmin Cojocar 5d36fba075 Add a flag which controls whether the certificate is configured as an owner of the secret where the effective TLS certificate is stored
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-10-28 19:55:26 +01:00
James Munnelly b6f854f849 Remove pkg/logs package
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-18 13:27:05 +01:00
James Munnelly 039a086f58 run //hack:update-bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-12 12:40:40 +01:00
James MunnellyandJames Munnelly 967a48e1dc Add ACME Order & Challenge controllers
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-12 12:40:38 +01:00
Arnold Bechtoldt 845eb7f57c make http01 solver pod resource request/limits configurable, refs #892
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
2018-09-26 14:39:06 +02:00
James Munnelly 64f02f6004 Add docker image building rules
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-09-13 11:24:52 +01:00
James Munnelly db65d6a170 run //hack:update-bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-09-13 11:24:48 +01:00
James Munnelly 51195e4c5f Update license header and add header to every file
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2018-08-13 15:53:37 +01:00
jetstack-botandGitHub c43e4d75f8 Merge pull request #801 from munnerz/renew-duration
Add RenewBeforeExpiryDuration option to controller context
2018-08-08 14:34:56 +01:00
James Munnelly fa0bc9998e Add RenewBeforeDuration option to controller context 2018-08-08 13:34:30 +01:00
James MunnellyandGitHub 12ab53b948 Update options.go 2018-08-08 13:28:37 +01:00
James Munnelly d63ba1257d Change leader election duration defaults to be less chatty 2018-08-08 00:54:26 +01:00
James Munnelly 9dc20d3c35 Remove dedicated issuer context and move issuer registration into controller pkg 2018-08-07 16:13:46 +01:00
Louis Taylor 58d71216c3 Change flag to list of controllers to enable 2018-07-12 10:27:49 +01:00
Louis Taylor fd48a2e360 Add option for disabling ingress-shim
This adds a new flag, which can be used to disable running the
ingress-shim controller:

     --enable-ingress-shim=false
2018-07-12 10:27:05 +01:00
jetstack-botandGitHub bd7f15d5f4 Merge pull request #710 from kragniz/dns-flag
Add flag for setting nameservers for DNS01 check
2018-07-11 14:26:33 +01:00
Louis Taylor 3815b36193 Add git tag and commit to startup logs 2018-07-06 17:27:59 +01:00
Louis Taylor e35a09bd72 Add validation 2018-07-05 14:47:41 +01:00
Louis Taylor 4804086fdf Add example to usage 2018-07-05 14:37:32 +01:00
Louis Taylor 14873c248a Use StringSlice 2018-07-05 14:37:08 +01:00
Louis Taylor ea6a5472e2 dns01-nameservers -> dns01-self-check-nameservers 2018-07-05 14:22:43 +01:00
Louis Taylor 3eaca6a318 Add flag for custom dns01 nameservers 2018-07-05 12:40:53 +01:00
James Munnelly 6cfdc62f6b Add self signed Issuer type 2018-06-08 15:48:30 +01:00