Commit Graph
1393 Commits
Author SHA1 Message Date
jetstack-botandGitHub 0e5af56d7d Merge pull request #2520 from mathianasj/fix-clusterissuer-secret-missing
Fix clusterissuer not being able to provision certs
2020-01-17 14:03:06 +00:00
Joshua Mathianas cc802cc16e made code review changes
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-17 07:31:25 -05:00
jetstack-botandGitHub fc00a273a6 Merge pull request #2518 from mathianasj/x509-subject-fields
X509 Name support
2020-01-17 09:39:05 +00:00
Joshua Mathianas eed8f67587 fixed which namespace to find secret in based on if its a clusterissuer for venafi
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 12:19:49 -05:00
Joshua Mathianas 39cc63a205 resolve failing unit tests
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 11:34:44 -05:00
Joshua Mathianas 05ff21250d Updates plural names and destination attribute name to match source
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 10:30:20 -05:00
Joshua Mathianas 9ee6ea7b7d Fixed a typo and ran generators
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:49:40 -05:00
Joshua Mathianas b096e0f0af Made requested changes from review
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:41:16 -05:00
Joshua Mathianas e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 07:50:26 -05:00
Maartje Eyskens 98ca10b5ba Update bazel
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:28:15 +01:00
Maartje Eyskens 0e1f64a337 Do not change crt.Name
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:07:45 +01:00
Maartje Eyskens dbac7cf1fb Use correct regexp package
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:03:58 +01:00
Maartje Eyskens 3212e446e5 Fix issue in ComputeCertificateRequestName when 52nd is a dot
This strips any symbols at the end of a shortened domain name  in ComputeCertificateRequestName.
It also adds tests for the specific util function

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 11:49:28 +01:00
jetstack-botandGitHub 5ee9e6c7aa Merge pull request #2452 from munnerz/kubernetes-1.17.0
Bump Kubernetes dependencies to v0.17.0
2020-01-14 14:19:57 +00:00
jetstack-botandGitHub 9ca34f773f Merge pull request #2470 from munnerz/remove-misleading-errors
Don't log misleading error messages
2020-01-07 14:24:19 +00:00
James Munnelly d3b785c263 Bump generated files copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-07 12:43:44 +00:00
James Munnelly 4aed3a7bbc Set namespace on Challenge resources created during tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:38:04 +00:00
jetstack-botandGitHub 8d6e86468d Merge pull request #2460 from greywolve/fix-ensure-ingress-for-service-name-changing
ACME HTTP01 solver: clean up ingresses if the service name changes
2019-12-17 15:35:09 +00:00
jetstack-botandGitHub 8809f7e031 Merge pull request #2469 from munnerz/temp-certs-dont-overwrite
Don't overwrite existing certificates when issuing a temporary certificate
2019-12-17 14:30:09 +00:00
James Munnelly 361fdfac3f Don't log misleading error messages
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 16:31:18 +00:00
James Munnelly 9daad6dd93 Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 15:11:07 +00:00
James Munnelly 7076041de6 Don't overwrite existing certificates when issuing a temporary certificate
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 13:53:38 +00:00
James Munnelly df27fff9ce Don't use time.Tick to prevent leaks
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 12:45:49 +00:00
Oliver Powell 7611f78793 ACME HTTP01 solver: clean up ingresses if the service name changes
Signed-off-by: Oliver Powell <oliver@opowell.com>
2019-12-14 10:05:51 +02:00
jetstack-botandGitHub 90bf960c1e Merge pull request #2450 from munnerz/webhook-pprof
webhook: register http handlers for pprof debug endpoints
2019-12-11 15:59:33 +00:00
James Munnelly ae5c13c1b2 Update codegen
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 15:42:12 +00:00
James Munnelly ff8c68348a Update checks.go for external account bindings
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:37:36 +00:00
James Munnelly 5c4e27830f Use enum for HMAC algorithm field
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 3f212844a7 Fix apiext.JSON fuzzer
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly fd306c538c acme: Add support for external account binding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 80bc253d74 acme: Add API fields for ExternalAccountBinding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 10:37:16 +00:00
jetstack-botandGitHub 4073080089 Merge pull request #2416 from munnerz/fixup-expiry-metrics
Fix certificate controller expiry metrics
2019-12-10 17:25:15 +00:00
James Munnelly f3a58ed991 webhook: register pprof http handlers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-10 16:54:15 +00:00
James Munnelly 1f3b883cfd Don't overwrite order.status.url if return Order's URI is empty
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-03 16:49:31 +00:00
James Munnelly 9d28261da5 Properly handle ErrNoAccount
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-03 16:49:31 +00:00
James Munnelly 641fe0da7c Switch to using upstream golang.org/x/crypto
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-03 16:49:31 +00:00
James Munnelly 698e7a522a Fix certificate controller expiry metrics
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-29 18:29:23 +00:00
jetstack-botandGitHub 1581bf2796 Merge pull request #2400 from JoshVanL/secret-annotation-fallback
Allow secrets with legacy annotations for issuer name and kind to match
2019-11-27 15:39:22 +00:00
JoshVanL 232b1133fd Adds more tests for deprecated secret annotations and update secret
annotations if deprecated ones exist

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-27 15:12:25 +00:00
jetstack-botandGitHub df265ddbfd Merge pull request #2170 from matevzmihalic/cloudflare-apitoken
Add API token authentication option to Cloudflare issuer
2019-11-27 13:22:21 +00:00
James Munnelly bb117875d3 Validate that both APIKey and APIToken are not both specified
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-27 12:54:17 +00:00
JoshVanL 0d9d0eeb22 Allow secrets with legacy annotations for issuer name and kind to match
existing certificates

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-26 12:13:58 +00:00
jetstack-botandGitHub 5ec141c107 Merge pull request #2382 from JoshVanL/cr-controller-issuer-ready
Check for Issuer readiness in CR controllers
2019-11-26 09:40:30 +00:00
JoshVanL de7aaa84d3 Update CertificateRequest controller unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-19 22:09:01 +00:00
JoshVanL 3bcc038c09 Check for Issuer readiness in CR controllers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-19 20:31:44 +00:00
Matevz Mihalic 0abf945945 Remove ambient credentials
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:50 +01:00
Matevz Mihalic b5972a379f Add API token auth option to Cloudflare issuer
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:43 +01:00
James Munnelly 4353ef142f Fix up whitespace around doc.go in apis package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 14:43:07 +00:00
jetstack-botandGitHub cb4dbe0d94 Merge pull request #2372 from munnerz/add-gencrd-force-meta
Add '// +gencrdrefdocs:force' to meta/v1 package
2019-11-15 14:18:15 +00:00
James Munnelly 039acd1f09 Add '// +gencrdrefdocs:force' to meta/v1 package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 13:50:36 +00:00