Commit Graph
445 Commits
Author SHA1 Message Date
Raphaël Pinson e1c8d3ad71 Regenerate CRDs
Signed-off-by: Raphaël Pinson <raphael.pinson@camptocamp.com>
2020-10-16 15:40:34 +02:00
Maartje Eyskens 542b329914 Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens ed9c2e4f45 Fix description
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 58b462eef9 Fix nil in spec
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens 39de7f3b99 Fix IP type
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens b3e25815a5 Add support for IPs in ACME
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Renan Gonçalves 5aa87267ab Allow custom timeout value for webhook calls
Because webhooks add to API request latency, they should evaluate as
quickly as possible. `timeoutSeconds` allows configuring how long the
API server should wait for a webhook to respond before treating the call
as a failure.

The default values from Kubernetes are, however, too large. For
`admissionregistration.k8s.io/v1` the default value is 10 seconds while
for `admissionregistration.k8s.io/v1beta1` is 30 seconds!

This default value of 10 seconds should be more than enough for standard
installs.

Signed-off-by: Renan Gonçalves <renan.saddam@gmail.com>
2020-10-06 17:08:51 +02:00
Anshul Sharma 5c75438af6 Fixes #3286
- Added acme resources to clusterroles

Signed-off-by: Anshul Sharma <optimisticanshul@gmail.com>
2020-09-29 06:35:33 +02:00
Zhou Miao 59f422102e typo of registry in values.yaml
```release-note
NONE
```

Signed-off-by: Miao Zhou <millsonzhou@gmail.com>
2020-09-28 18:21:09 +08:00
jetstack-botandGitHub 647035a266 Merge pull request #3211 from meyskens/csr-extkey
Extended key usages into CSR
2020-08-27 15:33:37 +01:00
Maartje Eyskens 45d1457a8c Update CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-27 15:49:30 +02:00
jetstack-botandGitHub 6a2f9538fc Merge pull request #3208 from meyskens/acme-multi-chain
Add support for alternate certs with PrefferedChain in ACME
2020-08-26 12:03:35 +01:00
Maartje Eyskens c81531d90d Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-26 10:22:01 +02:00
Maartje Eyskens 627b57fed5 Add validation for CR creation only to match Key usages with the CSR if both are set
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-25 14:38:57 +02:00
Maartje Eyskens 90d6a54151 Add support for alternate certs with PrefferedChain in ACME
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-21 17:56:26 +02:00
Haoxiang Zhou acaea2d96e Rename field to DisableAccountKeyGeneration
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-08-21 09:55:21 +02:00
Haoxiang Zhou 4cb01a3c4e Add new field for v1 API as well
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-08-21 09:55:21 +02:00
Haoxiang Zhou d9dd8cfdd7 Change CRDs
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-08-21 09:55:21 +02:00
Richard Wall 3362131a6d Update helm chart README file to reflect that v1 is the new storage version
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 17:18:26 +01:00
jetstack-botandGitHub 0cb8cf66fb Merge pull request #3196 from wallrj/3156-store-v1
Update controllers to use v1 API and make v1 the storage version
2020-08-20 15:08:50 +01:00
Richard Wall 4c8d12badf Update storage version
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:28:06 +01:00
Christian Kotzbauer 8cc92de87e updated probe config
Signed-off-by: Christian Kotzbauer <christian.kotzbauer@gmail.com>
2020-08-18 17:01:37 +02:00
Christian Kotzbauer 1aed32d959 make webhook-probes configurable
increase probe-timeout to 3 seconds

Signed-off-by: Christian Kotzbauer <christian.kotzbauer@gmail.com>
2020-08-17 18:16:29 +02:00
jetstack-botandGitHub ae6a747fd4 Merge pull request #3178 from meyskens/crd-v1
Add apiextensions.k8s.io/v1 CRDs
2020-08-17 10:57:22 +01:00
jetstack-botandGitHub dd36fb45e2 Merge pull request #3175 from guilhem/digest
chart: add image digest option
2020-08-17 09:31:22 +01:00
Maartje Eyskens bdefb05083 Fix k8s 1.15
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-17 09:18:05 +02:00
Maartje Eyskens 0925adfc32 Remove old CRD files
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-17 09:13:34 +02:00
Maartje Eyskens f2aad8b6ff run update all
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-14 20:06:48 +02:00
Maartje Eyskens 19cc376f79 support v1 conversion webhooks
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-14 20:04:19 +02:00
jetstack-botandGitHub ceccf6a047 Merge pull request #3179 from meyskens/no-helm-labels
Remove managed by Helm labels from static manifests and CRDs
2020-08-14 18:44:32 +01:00
Maartje Eyskens 83cb862794 update CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-14 19:38:17 +02:00
Maartje Eyskens 58151d2998 re-add v1
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-14 19:37:02 +02:00
Maartje Eyskens 90cd6f87fa Fix Cluster scope
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-14 19:25:15 +02:00
Maartje Eyskens 82784ac070 Add apiextensions.k8s.io/v1 CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Run update

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Add back helm things

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Let bazel handle the both types

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Add back additionalPrinterColumns

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Add subresources: status: {}

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

re-add short names

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Update conversion

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

fix deploy

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-14 19:25:10 +02:00
Richard Wall 8beeac1187 Rename Certificate.Spec.URISANs to URIs and EmailSANs to EmailAddresses
For consistency with DNSNames and IPAddresses
And for consistency with https://golang.org/pkg/crypto/x509/#Certificate

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-14 17:02:53 +01:00
Richard Wall c31cb51246 Update CRDs
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-13 21:43:36 +01:00
Maartje Eyskens 1672a01e49 Remove managed by Helm labels from static manifests and CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-13 20:09:35 +02:00
jetstack-botandGitHub 9822581393 Merge pull request #3167 from meyskens/admission-v1
Support v1 admission webhooks
2020-08-13 16:04:40 +01:00
Guilhem Lettron 409db5fdaa chart: add digest option
Also add "registry/repository" option.

Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>
2020-08-13 09:45:49 +02:00
jetstack-botandGitHub 967bf85068 Merge pull request #3172 from meyskens/rbac-v1
Use rbac.authorization.k8s.io/v1
2020-08-12 13:43:59 +01:00
Maartje Eyskens 2304a007ad Use rbac.authorization.k8s.io/v1
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 11:18:38 +02:00
Maartje Eyskens fecd0b3518 Set all log levels for info
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
Maartje Eyskens 6e3279e002 Explain helm hack
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:14:56 +02:00
Maartje Eyskens 50686d3e26 Support v1 admission webhooks
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-10 16:39:49 +02:00
Valentin Petrov 3c3f5a8395 Add MutatingWebhook and ValidatingWebhook extra annotations sections of the helm chart
Signed-off-by: Valentin Petrov <valentin.petrov06303@gmail.com>
2020-08-05 15:22:30 +03:00
Paul Jones 529cef8a93 Add serviceAccountName to issuers CRDs for http01 solvers
Signed-off-by: Paul Jones <paul.jones@jetstack.io>
2020-08-03 15:30:24 +01:00
jetstack-botandGitHub 535f991e83 Merge pull request #3112 from meyskens/add-pod-priority
Add support for the pod PriorityClass field in HTTP01 podTemplate
2020-07-30 15:53:45 +01:00
João Francisco eef64ffc16 chart: clarify only some deployments need hostNetwork
Signed-off-by: João Francisco <jfrancisco@veniamworks.com>
2020-07-29 03:43:55 +01:00
João Francisco 7a5990c8e5 chart: document webhook port must be changed if in hostNetwork mode
Signed-off-by: João Francisco <jfrancisco@veniamworks.com>
2020-07-29 03:39:51 +01:00
João FranciscoandJoão Francisco be2090120d chart: cleanup hostNetwork config
Signed-off-by: João Francisco <jfrancisco@veniam.com>
2020-07-29 03:39:50 +01:00