home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-09 05:06:38 +10:00
Code Issues Packages Projects Releases Wiki Activity
6,323 Commits 37 Branches 119 Tags
1ae8fedc2dee9cabc1b0db490aedfd4f529f1834
Commit Graph
648 Commits
Author SHA1 Message Date
jetstack-botandGitHub 3c9510b782 Merge pull request #4329 from jwenz723/patch-1 
[Helm Chart] Add optional service annotations
 2022-01-05 12:46:45 +00:00
irbekrm f9a9326483 Add comments on how to view all available flags for cert-manager binaries 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-12-31 09:15:14 +00:00
irbekrm e500109bea Removes example setting of --cluster-resource-namespace flag from extra args 
As there is already a top level clusterResourceNamespace key in Helm values that sets the same flag

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-12-31 09:04:05 +00:00
jetstack-botandGitHub 52bba1dcdb Merge pull request #4656 from TerryHowe/helm-ignore 
Minor clean-up to helm chart
 2021-12-17 12:21:13 +00:00
jetstack-botandGitHub 0b8eba629c Merge pull request #4554 from SgtCoDFish/maker 
Makefile flow
 2021-12-17 10:37:13 +00:00
jetstack-botandGitHub b5fbabdc6f Merge pull request #4635 from wallrj/remove-deprecated-apis-crds 
Remove deprecated APIs from the CRD templates
 2021-12-15 13:31:33 +00:00
Ashley Davis 32d716654a Add a makefile flow for building artifacts 
Includes targets for:

- all "server" binaries, for all arches
- all containers for all server binaries for all arches
- all client binaries (kubectl plugin / cmctl) for all arches
- the cert-manager helm chart + signature
- the cert-manager static manifests + CRDs
- tools which bazel would download, with checksum verification
- (commented out) a signed SHA256SUM file for client binaries

Upgrades from the bazel flow include that:

- we use OS-specific base images rather than just using amd64 everywhere
- we easily add support for signing artifacts at build time
- we add ".exe" to the end of windows executables
- we add a zip file for windows executables, for easier consumption
- we concatenate YAML files more robustly
- staging a full release should be much faster
- hopefully, it's easier to change things!
- licenses are trimmed down to reduce bloat in images (the license
  bundle was 1.4MB in size alone)

Changes from the bazel flow include:

- containers no longer have a symlink to the binary at an unusual
  path, but instead just have the binary at a more predictable path
  (e.g. /app/cmd/webhook/webhook instead of
  /app/cmd/webhook/webhook.runfiles/com_github_jetstack_cert_manager/cmd/webhook/webhook_/webhook)

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-12-15 09:54:15 +00:00
Richard Wall d80c53dc16 Remove conversion webhook configurations 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-12-14 17:42:54 +00:00
jetstack-botandGitHub 5894ed989a Merge pull request #4546 from munnerz/webhook-config-api 
Support loading webhook config from versioned file
 2021-12-14 10:09:02 +00:00
Terry Howe 3263a4c1fb Minor clean-up to helm chart 
Signed-off-by: Terry Howe <tlhowe@amazon.com>
 2021-12-12 05:58:44 -07:00
James Munnelly cfbd574e75 Remove deprecation notice on webhook.securePort 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-10 12:53:00 +00:00
jetstack-botandGitHub 7166f32320 Merge pull request #4608 from ninech/add_honor_labels 
allow to honor the labels of cert-manager on conflicts
 2021-12-10 10:48:51 +00:00
James Munnelly 838a8dc153 Allow specifying minTLSVersion and cipherSuites without explicit tlsConfig 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-03 13:03:57 +00:00
James Munnelly 17d6a19ba2 Fix apiVersion of example config 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-03 12:56:34 +00:00
James Munnelly d4beef13b8 Support configuring securePort in webhook service 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-03 12:56:26 +00:00
joshvanl 6d83e3111d Removes v1beta1 from webhook's admissionReviewVersions as we no longer 
support Kubernetes v1.16

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-12-02 10:40:44 +00:00
James Munnelly 1a96d9f32d config.cert-manager.io -> webhook.config.cert-manager.io 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-01 12:57:08 +00:00
Richard Wall 704fe73b4b Remove deprectated APIs from the CRD templates 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-11-30 13:33:59 +00:00
nick 4755fccb63 improve option description 
Signed-off-by: Sebastian Nickel <nick@nine.ch>
 2021-11-26 16:27:16 +01:00
James Munnelly 553e1e0536 Add ability to configure WebhookConfiguration via the Helm chart 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:17:34 +00:00
nick 3c5e5ee05e allow to honor the labels of cert-manager 
With setting honorLabels to "true" one can get rid of the "exported_namespace" label in scraped cert-manager metrics.

Signed-off-by: Sebastian Nickel <nick@nine.ch>
 2021-11-19 15:44:23 +01:00
Ashley Davis 115b70cfef update link to k8s security context spec 
the old link was for 1.16 and actually led to a site with a certificate error

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-19 13:55:02 +00:00
Ashley Davis 0e9c9e3481 bump supported k8s version in helm chart readme 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-19 13:54:22 +00:00
jetstack-botandGitHub 0236f0836e Merge pull request #4556 from inteon/helm_template_cleanup 
Cleanup helm templates & fix empty 'resources' in deployment
 2021-11-15 14:27:06 +00:00
jetstack-botandGitHub 4291d207b7 Merge pull request #3883 from james-callahan/omit-servicemonitor-namespaceSelector 
No need to specify namespaceSelector when in same namespace
 2021-11-05 13:02:28 +00:00
Inteon 4a9bbce297 add spaces 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-11-01 11:45:42 +01:00
Inteon b1445d687e cleanup helm templates & better support for empty 'resources' in values.yaml 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-11-01 11:37:50 +01:00
Richard Wall c6896b2f93 Set all non-v1 CRD versions as not-served 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-09-29 12:17:32 +01:00
Trey Dockendorf 3b860993c5 Allow setting Helm chart service annotations 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-09-20 12:33:39 -04:00
jetstack-botandGitHub 5ec37819e8 Merge pull request #4433 from wallrj/4431-cleanup-failed-install-hook-resources 
Cleanup hook resources from previous failed installs
 2021-09-06 11:06:28 +01:00
jetstack-botandGitHub 8f0225189e Merge pull request #4332 from tomasfreund/feature/azure-dns-msi-id 
Add option to specify managed identity id when using azure dns
 2021-09-03 17:17:22 +01:00
Richard Wall 31821e7fd8 Cleanup hook resources from previous failed installs 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-09-03 16:36:13 +01:00
Nicolas DegoryandRichard Wall d2209df85a Apply suggestions from code review 
Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:24:59 -07:00
Nicolas Degory 6549344e47 PR review 
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:21:47 -07:00
Nicolas Degory 9ce9c7d2bd add startup API check job PSP 
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:21:47 -07:00
irbekrm 38ce9fc4b1 Adds a warning about sidecar proxy for startup check job 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-27 12:18:44 +01:00
Jake Sanders 5df1dd4932 Update Docs on solver type to reflect default service type 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-19 14:55:50 +01:00
jetstack-botandGitHub c5a4cb9fbf Merge pull request #4384 from jakexks/en_GB 
finalisers -> finalizers
 2021-08-18 17:23:35 +01:00
Jake Sanders e0ecc9938a finalisers -> finalizers 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-18 15:33:27 +01:00
irbekrm 7d30a6452c Removes status fields from CRD definitions 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-18 10:17:34 +01:00
jetstack-botandGitHub 30c40f8f15 Merge pull request #4348 from inteon/upgrade_deps_v0.22.0 
Upgrade deps (kube v0.22.0)
 2021-08-14 01:07:12 +02:00
Inteon b13eb0483b upgrade deps to latest version (kube v0.22.0) 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-13 23:38:59 +02:00
Tomáš Freund 8e737dd1b7 move azure managed identity config to nested struct, improve validation 
Signed-off-by: Tomáš Freund <tomas.freund@datamole.cz>
 2021-08-13 16:17:08 +02:00
Ashley Davis e0e5a50f31 fix mistakenly changed CRDs for v1beta1 (#4352) 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-08-13 13:44:05 +01:00
jwenz723 71c376c935 Add webhook service annotations: 
Signed-off-by: Jeff Wenzbauer <jwenz723@gmail.com>
 2021-08-09 16:26:03 -06:00
Jeff Wenzbauer 01635752ea Add documentation of serviceAnnotations 
Signed-off-by: Jeff Wenzbauer <jwenz723@gmail.com>
 2021-08-09 16:14:19 -06:00
Jeff Wenzbauer 9201d5de5b Add use of .Values.serviceAnnotations in Service 
Signed-off-by: Jeff Wenzbauer <jwenz723@gmail.com>
 2021-08-09 16:13:47 -06:00
jetstack-botandGitHub 17a5066400 Merge pull request #4308 from Dean-Coakley/fix-chart-readme 
Fix chart readme install command
 2021-08-09 09:33:49 +01:00
Dean Coakley 19eae6e81b Fix chart prerequisites Kubernetes version 
Ref: https://cert-manager.io/docs/installation/supported-releases/

Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
 2021-08-05 13:20:19 +01:00
Dean Coakley b42a566d4f Fix helm install commands for helm 3.x clients 
Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
 2021-08-05 13:14:35 +01:00