home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-24 12:36:37 +10:00
Code Issues Packages Projects Releases Wiki Activity
4,549 Commits 37 Branches 119 Tags
0f641502e280d440647310e04c19b4da8253ffc5
Commit Graph
266 Commits
Author SHA1 Message Date
Richard Wall 9d0559cfda Compare email addresses in RequestMatchesSpec 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-27 09:10:57 +01:00
Richard Wall 3107b380f2 Replace some references to URISANs and EmailSANs 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-26 16:52:08 +01:00
Richard Wall e8185e73f1 Remove duplicate import 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-26 16:47:47 +01:00
Lars Lehtonen aab6b479c5 pkg/controller/certificates/internal: fix dropped test errors 
Signed-off-by: Lars Lehtonen <lars.lehtonen@gmail.com>
 2020-08-21 21:39:29 -07:00
Richard Wall 01b5d0fa88 Fix tests in ./pkg/controller/certificates/... 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00
Richard Wall 81eb53f597 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00
Richard Wall a70298180a Run a script to update v1alpha2 usage to v1 
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:26:51 +01:00
Richard Wall 2b1e1d1d2b Remove deprecated issuer related annotation key constants from the API 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-14 17:07:36 +01:00
jetstack-botandGitHub d9ad986823 Merge pull request #3173 from wallrj/p12-intermed-cert 
Add intermediate cert to P12 chain if ca.crt is empty
 2020-08-12 13:18:59 +01:00
Maartje EyskensandRichard Wall d2f86c410a Add intermediate cert to P12 chain if ca.crt is empty 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 12:39:27 +01:00
Richard Wall 5acb052194 A test for certificate chains 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-12 12:39:27 +01:00
Maartje Eyskens 3259fdfe9b Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens 827ce9c5ad Revert log levels on errors 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens 86dee5ed41 Set error log levels 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens fecd0b3518 Set all log levels for info 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Richard Wall 46d4ea768b Update test for pkcs12 encoded CA data 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-07 17:26:59 +01:00
JoshVanL 016b566689 Adds Issuer Group to Secret annotation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-08-06 09:24:37 +01:00
James Munnelly fdc0960d27 Schedule a 'resync' of Certificates that have been marked as failed and are to be retried later 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-20 09:19:11 +01:00
Haoxiang Zhou fe80b7d760 Moved predicate package to pkg/util 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 12:23:15 +01:00
James Munnelly 9e2d6a514b Move expcertificates into certificates package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 12:16:25 +01:00
James Munnelly 2280480c02 Remove old certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 11:46:13 +01:00
James Munnelly 6caa4c451d Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:47:27 +01:00
James Munnelly 1adfe16690 Bulk fix of non-test staticcheck failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 12:25:08 +01:00
James Munnelly 1d6424b8f2 Use 'clock' package in pkg/scheduler 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
jetstack-botandGitHub 46eaf3d1a4 Merge pull request #2923 from JoshVanL/new-metrics 
Updates the metrics package + new metrics controller
 2020-06-04 12:59:38 +01:00
Haoxiang Zhou 609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 14:37:40 +01:00
Haoxiang Zhou 3591de614d Changed unit tests to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:55 +01:00
Haoxiang Zhou dceae33364 Do not add ca.crt key to TLS secret if empty 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:20 +01:00
JoshVanL 9c9fe56f0b Update new files to use 2020 copyright 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:52:56 +01:00
JoshVanL 5539bf3495 Moves metrics controller into sub-package of ./controller/certificates 
and fix metrics listen address flag description

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:47:52 +01:00
JoshVanL 92eb8d0957 Refactor controllers to use new instrumented metrics that's baked into 
all controllers

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:43:56 +01:00
James Munnelly 7978fbe081 Address review feedback and include truststore.jks with JKS mode enabled 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-22 15:20:49 +01:00
James Munnelly ba33c823a3 Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 17:58:18 +01:00
James Munnelly 822b9e17a0 Remove AdditionalRunFuncs from base controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 20:43:00 +01:00
James Munnelly 881b886049 Update Kubernetes API client call-sites 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-26 12:58:50 +00:00
James Munnelly acff2b12bb Fix JKS keystore functionality and add additional tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-23 10:02:42 +00:00
James Munnelly 98bc0d52f9 Add --experimental-issue-jks flag to enable JKS bundle generation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-04 15:33:22 +00:00
James Munnelly e9374730c9 Add --experimental-issue-pkcs12 flag to enable PKCS12 bundle generation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-04 10:02:21 +00:00
Josh Soref b4f28e5d04 spelling: deprecated 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:42:26 -05:00
Josh Soref 8d801fc100 spelling: certificate 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:51 -05:00
James Munnelly 1f7f23895d Ensure fetched certificate is valid for CSRs public key before issuing 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-22 16:42:58 +00:00
JoshVanL 2f3fe4c3d7 Reduce comments by removing invalid data in CR implementations doing 
better InvalidRequest checking

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-17 14:11:25 +00:00
JoshVanL f9f8fbd311 Add InvalidRequest condition check to Certificate controller: 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-09 15:14:21 +00:00
James Munnelly 9daad6dd93 Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-16 15:11:07 +00:00
James Munnelly 7076041de6 Don't overwrite existing certificates when issuing a temporary certificate 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-16 13:53:38 +00:00
James Munnelly 698e7a522a Fix certificate controller expiry metrics 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-11-29 18:29:23 +00:00
JoshVanL 232b1133fd Adds more tests for deprecated secret annotations and update secret 
annotations if deprecated ones exist

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-27 15:12:25 +00:00
JoshVanL 0d9d0eeb22 Allow secrets with legacy annotations for issuer name and kind to match 
existing certificates

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-26 12:13:58 +00:00
JoshVanL bca6ebc520 Ensure key usages are set on CertificateRequests created by the 
Certificate controller

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
James Munnelly 6b19892908 Fix regression in certificates controller setting owner references 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-09 11:33:21 +01:00