Commit Graph
274 Commits
Author SHA1 Message Date
James Munnelly 25af59a0d5 Use v1beta1 API version in cainjector controller
This resolves issues when running the cainjector on Kubernetes 1.9,
as the 1.9 apiserver is not aware of the 'v1' API version.

Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-24 11:19:24 +01:00
James Munnelly af9bce7221 Add 'webhook' DNS01 provider type
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 17:19:32 +01:00
James Munnelly 942d6491d6 Pass StopCh and RESTClient to controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:08 +01:00
James Munnelly 871ed4283b Allow controller constructors to return errors
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:04 +01:00
Lennart Jern dfb3954dba Update cert if issuer doesn't match
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
2019-03-29 20:32:59 +01:00
James Munnelly aeaa3412ed Fix controller test pkg
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly eaeefdf5b2 Update acmechallenges controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly c6c498338a Update clusterissuers controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly 6b24e9c966 Update cainjector
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly a13543013d Use logr in pkg/util/kube
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly d7c9d39e3c Update issuers controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 92713156ed Update certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 708313ac4b Update acmeorders controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 5d73076db9 Update logs package for go-logr
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
jetstack-botandGitHub 5e3c1a813b Merge pull request #1250 from munnerz/venafi
add Venafi Cloud & TPP issuer type
2019-03-01 19:42:38 +00:00
jetstack-botandGitHub 687dcd0db7 Merge pull request #1420 from munnerz/cainjector-apiserverca
cainjector: support injecting apiserver ca
2019-03-01 15:19:05 +00:00
James Munnelly 2f67c78f62 Address review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-01 14:37:11 +00:00
James Munnelly c3f696fa1a Add support for Venafi API types to certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-01 13:00:55 +00:00
James Munnelly 1618ebde43 Fix loading apiserver caBundle
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-28 19:34:40 +00:00
jetstack-botandGitHub 334477ec73 Merge pull request #1392 from munnerz/gen-tmp-selfsigned
Generate temporary certificate to appease ingress-gce
2019-02-28 19:20:03 +00:00
James Munnelly b34adf88ff cainjector: support injecting apiserver ca
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-28 16:45:26 +00:00
Solly Ross 42248a91d7 CA Injector Controller
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.

Signed-off-by: Solly Ross <sollyross@google.com>
2019-02-26 21:47:34 -08:00
James Munnelly dfabece6eb Use a one-use CA to sign temporary certificates
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-25 20:48:13 +00:00
James Munnelly cf2f9eac74 Generate a temporary certificate whilst waiting for Issuer to issue
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-25 17:48:22 +00:00
jetstack-botandGitHub 01903f06ba Merge pull request #1384 from munnerz/unit-compare-reading
Print unit test failures in action matchers as part of failure message
2019-02-22 18:16:38 +00:00
James Munnelly 439499561c Remove dependence on k8s.io/ingress
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:52 +00:00
James Munnelly 2f30258f0e Switch to klog
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:02 +00:00
James MunnellyandJames Munnelly 381bed1fd8 Print unit test failures in action matchers as part of failure message
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-20 17:27:31 +00:00
James Munnelly fe2fcd4e83 go fmt
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 15:00:39 +00:00
James Munnelly 14a1b5373f Update bazel files
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:36:07 +00:00
James Munnelly 1f48f3d1d4 gofmt
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:56 +00:00
James Munnelly bbd73477cd Fixes after rebasing
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:56 +00:00
James Munnelly 324e8319b6 Add basic Certificate unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:55 +00:00
James Munnelly cee0e28a05 Add initial unit test for certificate controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:55 +00:00
James Munnelly 0bde3dacba Create pkg/api/util and re-arrange controller instantiation code
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:54 +00:00
James Munnelly 3a19501e26 Add initial unit test framework for Certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:22:36 +00:00
James Munnelly 804240da9d Switch Certificate controller to use Helper struct
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:22:36 +00:00
jetstack-botandGitHub eafda2a31a Merge pull request #1307 from munnerz/helper-everywhere
Use Helper structure to call GetGenericIssuer everywhere
2019-02-13 13:48:37 +00:00
jetstack-botandGitHub 1476aed737 Merge pull request #1293 from munnerz/test-builder-logger
Plumb testing.T through to test Builder
2019-02-13 13:48:26 +00:00
jetstack-botandGitHub cb532cc3b8 Merge pull request #1325 from DanielMorsing/caaCheck
Extend ACME self check to check CAA records
2019-02-12 16:53:11 +00:00
Daniel Morsing a01514ad63 use configured nameservers for CAA validation
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-11 12:05:18 +00:00
James Munnelly 1c4f160169 Use Helper structure to call GetGenericIssuer everywhere
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-07 22:35:17 +00:00
jetstack-botandGitHub fd9567f1e4 Merge pull request #1318 from munnerz/crt-ctrl-use-lister
Use secretLister in updateSecret
2019-02-06 16:39:55 +00:00
James Munnelly 094ae3e50c Fix CLI flag not being respected
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 16:11:37 +00:00
James Munnelly fac0a32c7e Fix bug causing certficates to be re-issued with misconfigured renewBefore/duration
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 15:43:59 +00:00
James Munnelly e53312463d Use secretLister in updateSecret
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-05 17:56:16 +00:00
Daniel Morsing bb853e5e79 first draft CAA checking
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-05 14:25:10 +00:00
jetstack-botandGitHub 22b0863801 Merge pull request #1128 from lrolaz/certificate-ip-sans
Add IP Address in CSR
2019-01-31 23:05:25 +00:00
James Munnelly d055d370bb Plumb testing.T through to test Builder
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-01-31 20:20:20 +00:00
Laurent ROLAZ ed82465df5 Refactoring
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
2019-01-30 13:04:28 +01:00