Commit Graph
4719 Commits
Author SHA1 Message Date
jetstack-botandGitHub 2eeac9742e Merge pull request #3333 from james-w/roadmap
Add a roadmap for the project
2020-10-21 18:15:07 +02:00
James Westby f2716df828 Add a roadmap for the project
This is based on discussions with a lot of people about
what they would like to see from the project and what fits
with the vision on the project.

There's no timeline at this point as different people may
contribute to different themes, so it's hard to make definite
plans.

Signed-off-by: James Westby <james.westby@jetstack.io>
2020-10-21 15:57:53 +01:00
jetstack-botandGitHub 0b113c6861 Merge pull request #3401 from wallrj/fix-for-git-signatures-in-logs
Suppress GPG signatures when getting the git last revision year
2020-10-21 13:36:07 +02:00
Richard Wall 35bfc75997 Suppress GPG signatures when getting the git last revision year
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-21 11:47:28 +01:00
jetstack-botandGitHub 0754659260 Merge pull request #3376 from meyskens/document-issuer-set
Document a bit more about the IssuerConfig
2020-10-20 11:40:10 +02:00
jetstack-botandGitHub 09f043d2c9 Merge pull request #3382 from meyskens/qps-config
Make Kubernetes API QPS throtteling configurable
v1.1.0-alpha.0
2020-10-16 18:50:15 +02:00
jetstack-botandGitHub cce8380f9e Merge pull request #3357 from meyskens/timestamp-licenced-manifests
Timestamp the static manifest's licences
2020-10-16 17:34:15 +02:00
jetstack-botandGitHub 1286d379e4 Merge pull request #3304 from raphink/usages_csr
Add encodeUsagesInRequest to Certificate spec (fix #3301)
2020-10-16 17:01:16 +02:00
560eac4b06 Update cmd/controller/app/options/options.go
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
2020-10-16 16:43:13 +02:00
jetstack-botandGitHub 3cb9bd64fe Merge pull request #3379 from wallrj/3140-tpp-access-token-only
Add support for long lived TPP access-token credentials
2020-10-16 16:21:15 +02:00
Richard Wall 2390b10614 Grab TPP access-token from ENVIRONMENT in e2e tests
and pass it through to the Issuer Secret

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-16 14:49:43 +01:00
Raphaël Pinson e1c8d3ad71 Regenerate CRDs
Signed-off-by: Raphaël Pinson <raphael.pinson@camptocamp.com>
2020-10-16 15:40:34 +02:00
Raphaël Pinson b2d719d6c3 Add encode_usages_in_request to Certificate spec (fix #3301)
Signed-off-by: Raphaël Pinson <raphael.pinson@camptocamp.com>
2020-10-16 15:40:32 +02:00
Maartje Eyskens ebc1ca218c Update comments
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-16 13:25:31 +02:00
jetstack-botandGitHub 31a146a4b1 Merge pull request #3380 from wallrj/3140-tpp-ready-false-message
Always set the ready condition on Venafi issuer
2020-10-16 13:16:15 +02:00
Maartje Eyskens 232f21db26 Validate API values not being 0 + following k8s naming + defaults
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-16 13:08:26 +02:00
Richard Wall daa3b16eda Use an access-token if it is supplied in the Issuer Secret
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-16 12:08:05 +01:00
Richard Wall 8db0e49c70 Always set the ready condition on Venafi issuer
And always set a meaningful error message on the condition when the issuer setup
has failed.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-16 11:23:10 +01:00
jetstack-botandGitHub f2ce195344 Merge pull request #3385 from wallrj/e2e-fail-early
Fail early when e2e flag validation fails
2020-10-16 11:19:15 +02:00
jetstack-botandGitHub 8e0e858199 Merge pull request #3288 from meyskens/acme-ip
Add support for IPs in ACME
2020-10-16 10:48:15 +02:00
d0fff81daf Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
2020-10-16 10:01:49 +02:00
Richard Wall 7939a419db Fail early when e2e flag validation fails
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-15 12:02:13 +01:00
Maartje Eyskens 7c87e93950 update burst description
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-14 17:49:19 +02:00
Maartje Eyskens ebadd4cd28 Fix defaults, description and add validation
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-14 17:46:09 +02:00
Maartje Eyskens 5dfb4d409b Make Kubernetes API QPS throtteling configurable
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-14 17:16:44 +02:00
Maartje Eyskens 82e63a4002 Docoment a bit more about the IssuerConfig
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-13 14:59:44 +02:00
jetstack-botandGitHub 98eb6cbb80 Merge pull request #3354 from supriya-premkumar/fix-zone-match-route-53
Fix auth zone hostedZoneID lookups.
2020-10-13 10:28:56 +01:00
jetstack-botandGitHub b7633b06d7 Merge pull request #3369 from JrCs/master
Add Acoss to users
2020-10-13 10:03:56 +01:00
Yves Blusseau 62dc954685 Add Acoss to users 2020-10-11 13:56:20 +02:00
Supriya Premkumar 4dbcd1fa73 Fix auth zone hosted domain lookups.
Changes:
    1. When there are multiple route53 hosted top zone and delegated
    zones within the same account, cert-manager incorrectly uses
    the top level domain as auth zone for which it doesn't have perms.
    This DOSes AWS's IAM API.
    2. This change adds the best match in determining auth zone while
    looking up hosted zone IDs.
    3. Defines a GetBestMatch util function to perform longest domain
    matches.
    4. Adds test cases
    5. Fixes #3353

Signed-off-by: Supriya Premkumar <supriyapremkumar1@gmail.com>
2020-10-09 09:55:28 -07:00
Maartje Eyskens 21d7588e50 Make ExpectValidCommonName IP aware
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-09 17:04:11 +02:00
jetstack-botandGitHub c98415062a Merge pull request #3358 from wallrj/3140-tpp-access-token-1
Update to vcert v4.11.0
2020-10-08 16:13:24 +01:00
Maartje Eyskens 6f49a347b4 Use stamping and last commit year
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 16:56:07 +02:00
Maartje Eyskens 50efbc0f6c Timestamp the static manifest's licences
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 16:06:05 +02:00
Richard Wall f3f321bbbc Update to vcert v4.11.0
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-08 15:02:50 +01:00
Maartje Eyskens 0d20fa8b35 Update e2e tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:36:42 +02:00
Maartje Eyskens d8023a79d0 Fix error format
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 542b329914 Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 9452327d1b Add test in order sync
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 1cbfe49938 Fix CN check for IPs as well as add tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 0dbf037312 remove json tags from internal type
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 7105ca6e6a Add a unit test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens f50ef8fdf3 Fix IPv6
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens ed9c2e4f45 Fix description
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens bb9453a5c8 Make e2e IP aware
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens eb3c2f4b1b Fix unit test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 58b462eef9 Fix nil in spec
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 52bda8a33f Fix validation in CSR
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 918e1e04f3 Add e2e tests + fix validation
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 39de7f3b99 Fix IP type
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00