home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-23 03:56:34 +10:00
Code Issues Packages Projects Releases Wiki Activity
4,719 Commits 37 Branches 119 Tags
2eeac9742e46591253df221e05967aa9fdb673ef
Commit Graph
1949 Commits
Author SHA1 Message Date
jetstack-botandGitHub 0754659260 Merge pull request #3376 from meyskens/document-issuer-set 
Document a bit more about the IssuerConfig
 2020-10-20 11:40:10 +02:00
jetstack-botandGitHub 1286d379e4 Merge pull request #3304 from raphink/usages_csr 
Add encodeUsagesInRequest to Certificate spec (fix #3301)
 2020-10-16 17:01:16 +02:00
jetstack-botandGitHub 3cb9bd64fe Merge pull request #3379 from wallrj/3140-tpp-access-token-only 
Add support for long lived TPP access-token credentials
 2020-10-16 16:21:15 +02:00
Raphaël Pinson e1c8d3ad71 Regenerate CRDs 
Signed-off-by: Raphaël Pinson <raphael.pinson@camptocamp.com>
 2020-10-16 15:40:34 +02:00
Raphaël Pinson b2d719d6c3 Add encode_usages_in_request to Certificate spec (fix #3301) 
Signed-off-by: Raphaël Pinson <raphael.pinson@camptocamp.com>
 2020-10-16 15:40:32 +02:00
Maartje Eyskens ebc1ca218c Update comments 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-16 13:25:31 +02:00
jetstack-botandGitHub 31a146a4b1 Merge pull request #3380 from wallrj/3140-tpp-ready-false-message 
Always set the ready condition on Venafi issuer
 2020-10-16 13:16:15 +02:00
Richard Wall daa3b16eda Use an access-token if it is supplied in the Issuer Secret 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-10-16 12:08:05 +01:00
Richard Wall 8db0e49c70 Always set the ready condition on Venafi issuer 
And always set a meaningful error message on the condition when the issuer setup
has failed.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-10-16 11:23:10 +01:00
jetstack-botandGitHub 8e0e858199 Merge pull request #3288 from meyskens/acme-ip 
Add support for IPs in ACME
 2020-10-16 10:48:15 +02:00
Maartje EyskensGitHubRichard Wall
 		d0fff81daf Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
 2020-10-16 10:01:49 +02:00
Maartje Eyskens 82e63a4002 Docoment a bit more about the IssuerConfig 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-13 14:59:44 +02:00
jetstack-botandGitHub 98eb6cbb80 Merge pull request #3354 from supriya-premkumar/fix-zone-match-route-53 
Fix auth zone hostedZoneID lookups.
 2020-10-13 10:28:56 +01:00
Supriya Premkumar 4dbcd1fa73 Fix auth zone hosted domain lookups. 
Changes:
    1. When there are multiple route53 hosted top zone and delegated
    zones within the same account, cert-manager incorrectly uses
    the top level domain as auth zone for which it doesn't have perms.
    This DOSes AWS's IAM API.
    2. This change adds the best match in determining auth zone while
    looking up hosted zone IDs.
    3. Defines a GetBestMatch util function to perform longest domain
    matches.
    4. Adds test cases
    5. Fixes #3353

Signed-off-by: Supriya Premkumar <supriyapremkumar1@gmail.com>
 2020-10-09 09:55:28 -07:00
Richard Wall f3f321bbbc Update to vcert v4.11.0 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-10-08 15:02:50 +01:00
Maartje Eyskens d8023a79d0 Fix error format 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 542b329914 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 9452327d1b Add test in order sync 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 1cbfe49938 Fix CN check for IPs as well as add tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 0dbf037312 remove json tags from internal type 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 7105ca6e6a Add a unit test 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens f50ef8fdf3 Fix IPv6 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens ed9c2e4f45 Fix description 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens eb3c2f4b1b Fix unit test 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 58b462eef9 Fix nil in spec 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 52bda8a33f Fix validation in CSR 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 918e1e04f3 Add e2e tests + fix validation 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 39de7f3b99 Fix IP type 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens 0cda5b3421 Fix conversion 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
Maartje Eyskens b3e25815a5 Add support for IPs in ACME 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-08 15:24:56 +02:00
jetstack-botandGitHub 70a8a7916c Merge pull request #3343 from meyskens/fix-patchDuplicateKeyUsage 
Patch mistake made in patchDuplicateKeyUsage
 2020-10-07 15:10:28 +01:00
jetstack-botandGitHub 74f9d8ed72 Merge pull request #3314 from freym/f-dns01 
make ACME dns01 propagation check period configurable
 2020-10-07 09:49:38 +01:00
Maartje Eyskens c60edce94c Patch mistake made in patchDuplicateKeyUsage and write tests for it 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-02 16:17:20 +02:00
Maartje Eyskens 55c4562eaf Add license 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 17:13:19 +02:00
Maartje Eyskens 739ca14e9d Fix place of log 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:51:43 +02:00
Maartje Eyskens 807ed0e85c Improve logic order 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:50:17 +02:00
Maartje Eyskens a752503e81 Forgot to commit one file 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:47:14 +02:00
Maartje Eyskens 3897cbb0ef Fix import order 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:40:40 +02:00
Maartje Eyskens 9e19b68304 Implement ACME backoff in the correct place + improve logic 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:34:23 +02:00
Matthias Frey 2f2253afaf make propagation check period configurable 
Signed-off-by: Matthias Frey <freym@users.noreply.github.com>
 2020-09-24 11:28:49 +02:00
jetstack-botandGitHub 4a13dd72f3 Merge pull request #3279 from meyskens/fix-double-signing-validation 
Fix double "signing" KU validation
 2020-09-22 10:27:51 +01:00
jetstack-botandGitHub a4394510e2 Merge pull request #3275 from wallrj/3251-cainjector-3 
Load cainjector controllers independently
 2020-09-18 17:14:06 +01:00
Richard Wall 0a2a4b0d7a Revert the introduction of errors.WithStack 
* The logging isn't configured to show the stack traces anyway.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 12:08:10 +01:00
Richard Wall ea73ab534c Document newIndependentCacheAndDelegatingClient 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 12:02:52 +01:00
Richard Wall 35f10ef439 Explain why we're not using the controller.Builder 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 11:58:30 +01:00
Richard Wall 975e98e285 Log an error if WaitForCacheSync fails 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 11:51:45 +01:00
Richard Wall a5e6f6c262 Stop creating new controllers if one of the errgroup has already erred 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 11:41:11 +01:00
Richard Wall 602043013e Revert the increased number of reconcile threads 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 11:39:52 +01:00
Richard Wall 2bffaf9270 A clearer name for the function which creates each controller 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 11:38:00 +01:00
Richard Wall 7c6374ff07 Explain why we ignore objects with a deletionTimestamp 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-09-18 10:28:32 +01:00