James Munnelly
636083f8e9
Fix up use of omitempty and optional in Cloudflare config struct
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:50:43 +01:00
James Munnelly
bfe3dd2c2b
review feedback
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:49:19 +01:00
James Munnelly
d01d921a71
generated files
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:49:19 +01:00
James Munnelly
8f0b81490d
address review feedback
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:49:19 +01:00
James Munnelly
b8d1f294b9
Update acme API group doc comments
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:49:18 +01:00
James Munnelly
463e08a467
Address review feedback
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:47:27 +01:00
James Munnelly
6caa4c451d
Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:47:27 +01:00
James Munnelly
aacaaa2cd8
Update API type documentation for 'certmanager' and 'meta' API groups
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 14:47:27 +01:00
jetstack-bot and GitHub
220b98923c
Merge pull request #3037 from munnerz/verify-staticcheck
...
Add verify-staticcheck.sh script
2020-06-26 13:15:39 +01:00
James Munnelly
1adfe16690
Bulk fix of non-test staticcheck failures
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-26 12:25:08 +01:00
jetstack-bot and GitHub
deac83e6fb
Merge pull request #2989 from meyskens/cf-no-email
...
Make Cloudflare email an optional field
2020-06-26 10:58:39 +01:00
jetstack-bot and GitHub
63b7ca26b8
Merge pull request #3027 from munnerz/expcerts-renewal
...
expcertificates: fix bug renewing certificates automatically near expiry
2020-06-26 09:21:39 +01:00
James Munnelly
86b8cab328
expand out 'clearCertificateFields' function
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-25 10:44:08 +01:00
jetstack-bot and GitHub
83f391c177
Merge pull request #3018 from hzhou97/fix-convert-cmd
...
Fix ctl convert cmd
2020-06-23 18:14:12 +01:00
Haoxiang Zhou
24404aa1eb
Added new scheme to use for ctl commands
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-06-23 17:18:56 +01:00
James Munnelly
ba26d65c68
schedule resyncs once renewalTime has passed to handle certificate renewals in the future
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:48:33 +01:00
James Munnelly
b3300b8673
update trigger policies unit tests for status.renewalTime field
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:48:33 +01:00
James Munnelly
fe51a02227
use status.renewalTime in trigger policies and correctly plumb through clock
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:37:50 +01:00
James Munnelly
8bb4bb389a
use correct PolicyChain in readiness controller
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:37:50 +01:00
James Munnelly
7cf74ec442
set notBefore and renewalTime status fields in certificate readiness controller
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:23:42 +01:00
James Munnelly
cbe5f5dfb5
generated files
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:23:42 +01:00
James Munnelly
2d5901df3f
pkg/apis: add 'notBefore' and 'renewalTime' fields to Certificate status
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:23:42 +01:00
James Munnelly
1d6424b8f2
Use 'clock' package in pkg/scheduler
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:23:42 +01:00
James Munnelly
281b9ffcbd
add RenewBeforeExpiryDuration function
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2020-06-23 16:23:42 +01:00
Haoxiang Zhou
6c72193678
Handle keyEncoding for temporary Certificates
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-06-23 10:17:41 +01:00
Haoxiang Zhou
5bcea49921
Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-06-18 15:26:14 +01:00
jetstack-bot and GitHub
abd13992c8
Merge pull request #2839 from meyskens/update-miekg-dns
...
Update to the latest miekg/dns
2020-06-11 15:26:23 +01:00
jetstack-bot and GitHub
89c8fc3c8d
Merge pull request #2898 from diversario/2159-remove-custom-retryer
...
Remove custom retry logic from route53 package
2020-06-11 13:58:23 +01:00
Maartje Eyskens
4a59c875ee
Do not send email if not set
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-06-08 17:25:15 +02:00
Maartje Eyskens
963c5566ae
Make Cloudflare email an optional field
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-06-08 16:48:47 +02:00
jetstack-bot and GitHub
46eaf3d1a4
Merge pull request #2923 from JoshVanL/new-metrics
...
Updates the metrics package + new metrics controller
2020-06-04 12:59:38 +01:00
jetstack-bot and GitHub
485e2e59a4
Merge pull request #2947 from hzhou97/no_empty_cacrt
...
Do not add empty ca.crt
2020-05-29 09:13:01 +01:00
Maartje Eyskens
c867bc7d36
Implement MessageAcceptFunc
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-05-27 17:42:34 +02:00
Maartje Eyskens
c9fbbdbde8
Update to the latest miekg/dns
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-05-27 17:42:34 +02:00
jetstack-bot and GitHub
78ee463a98
Merge pull request #2946 from meyskens/fix-venafi-dn
...
Add default DN back in Venafi issuer
2020-05-27 10:35:22 +01:00
JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-26 23:01:55 +01:00
Haoxiang Zhou
7229741505
Changed tests for issuing controller to expect no ca.crt instead of nil
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-05-26 15:30:43 +01:00
Maartje Eyskens
3fa7f038b3
Check for empty Organizations instead
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-05-26 16:03:42 +02:00
Haoxiang Zhou
609eedacec
Do not add ca.crt key to TLS secret if empty in expcertificates as well
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-05-26 14:37:40 +01:00
Haoxiang Zhou
3591de614d
Changed unit tests to expect no ca.crt instead of nil
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-05-26 12:16:55 +01:00
Haoxiang Zhou
dceae33364
Do not add ca.crt key to TLS secret if empty
...
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io >
2020-05-26 12:16:20 +01:00
Maartje Eyskens
96cf8c717e
Add default DN back in Venafi issuer
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me >
2020-05-25 11:30:35 +02:00
JoshVanL
9c9fe56f0b
Update new files to use 2020 copyright
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-21 10:52:56 +01:00
JoshVanL
5539bf3495
Moves metrics controller into sub-package of ./controller/certificates
...
and fix metrics listen address flag description
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-21 10:47:52 +01:00
JoshVanL
63c5e5f5c6
Cleans up metrics pkg to not require locks, and split out resources into
...
different files
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-21 10:47:00 +01:00
JoshVanL
db24ca052b
Remove the Factory interface from ACME accounts, in favour of using
...
package level funcs. This exposes BuildHTTPClient that instruments
metrics, which is passed to NewClient. ACME issuer has reference to
plumbed in metrics
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-21 10:44:37 +01:00
JoshVanL
3e7f7eb87e
Expose Prometheus listen address as a controller command line flag
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-18 18:21:03 +01:00
JoshVanL
92eb8d0957
Refactor controllers to use new instrumented metrics that's baked into
...
all controllers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-18 17:43:56 +01:00
JoshVanL
4dd70a6fe7
Adds new metrics controller to reconcile over Certificates and its
...
Status (Ready and Expiry)
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-18 17:43:18 +01:00
JoshVanL
54eb9da7af
Adds 'Factory' interface to consume the instrumented acme client
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com >
2020-05-18 17:42:47 +01:00