home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-16 08:36:44 +10:00
Code Issues Packages Projects Releases Wiki Activity
4,679 Commits 37 Branches 119 Tags
4758efe7da8dbdb332c6794fd9533670a00a397b
Commit Graph
439 Commits
Author SHA1 Message Date
Renan Gonçalves 5aa87267ab Allow custom timeout value for webhook calls 
Because webhooks add to API request latency, they should evaluate as
quickly as possible. `timeoutSeconds` allows configuring how long the
API server should wait for a webhook to respond before treating the call
as a failure.

The default values from Kubernetes are, however, too large. For
`admissionregistration.k8s.io/v1` the default value is 10 seconds while
for `admissionregistration.k8s.io/v1beta1` is 30 seconds!

This default value of 10 seconds should be more than enough for standard
installs.

Signed-off-by: Renan Gonçalves <renan.saddam@gmail.com>
 2020-10-06 17:08:51 +02:00
Anshul Sharma 5c75438af6 Fixes #3286 
- Added acme resources to clusterroles

Signed-off-by: Anshul Sharma <optimisticanshul@gmail.com>
 2020-09-29 06:35:33 +02:00
Zhou Miao 59f422102e typo of registry in values.yaml 
```release-note
NONE
```

Signed-off-by: Miao Zhou <millsonzhou@gmail.com>
 2020-09-28 18:21:09 +08:00
jetstack-botandGitHub 647035a266 Merge pull request #3211 from meyskens/csr-extkey 
Extended key usages into CSR
 2020-08-27 15:33:37 +01:00
Maartje Eyskens 45d1457a8c Update CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-27 15:49:30 +02:00
jetstack-botandGitHub 6a2f9538fc Merge pull request #3208 from meyskens/acme-multi-chain 
Add support for alternate certs with PrefferedChain in ACME
 2020-08-26 12:03:35 +01:00
Maartje Eyskens c81531d90d Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-26 10:22:01 +02:00
Maartje Eyskens 627b57fed5 Add validation for CR creation only to match Key usages with the CSR if both are set 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 14:38:57 +02:00
Maartje Eyskens 90d6a54151 Add support for alternate certs with PrefferedChain in ACME 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-21 17:56:26 +02:00
Haoxiang Zhou acaea2d96e Rename field to DisableAccountKeyGeneration 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-21 09:55:21 +02:00
Haoxiang Zhou 4cb01a3c4e Add new field for v1 API as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-21 09:55:21 +02:00
Haoxiang Zhou d9dd8cfdd7 Change CRDs 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-21 09:55:21 +02:00
Richard Wall 3362131a6d Update helm chart README file to reflect that v1 is the new storage version 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 17:18:26 +01:00
jetstack-botandGitHub 0cb8cf66fb Merge pull request #3196 from wallrj/3156-store-v1 
Update controllers to use v1 API and make v1 the storage version
 2020-08-20 15:08:50 +01:00
Richard Wall 4c8d12badf Update storage version 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00
Christian Kotzbauer 8cc92de87e updated probe config 
Signed-off-by: Christian Kotzbauer <christian.kotzbauer@gmail.com>
 2020-08-18 17:01:37 +02:00
Christian Kotzbauer 1aed32d959 make webhook-probes configurable 
increase probe-timeout to 3 seconds

Signed-off-by: Christian Kotzbauer <christian.kotzbauer@gmail.com>
 2020-08-17 18:16:29 +02:00
jetstack-botandGitHub ae6a747fd4 Merge pull request #3178 from meyskens/crd-v1 
Add apiextensions.k8s.io/v1 CRDs
 2020-08-17 10:57:22 +01:00
jetstack-botandGitHub dd36fb45e2 Merge pull request #3175 from guilhem/digest 
chart: add image digest option
 2020-08-17 09:31:22 +01:00
Maartje Eyskens bdefb05083 Fix k8s 1.15 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-17 09:18:05 +02:00
Maartje Eyskens 0925adfc32 Remove old CRD files 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-17 09:13:34 +02:00
Maartje Eyskens f2aad8b6ff run update all 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 20:06:48 +02:00
Maartje Eyskens 19cc376f79 support v1 conversion webhooks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 20:04:19 +02:00
jetstack-botandGitHub ceccf6a047 Merge pull request #3179 from meyskens/no-helm-labels 
Remove managed by Helm labels from static manifests and CRDs
 2020-08-14 18:44:32 +01:00
Maartje Eyskens 83cb862794 update CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 19:38:17 +02:00
Maartje Eyskens 58151d2998 re-add v1 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 19:37:02 +02:00
Maartje Eyskens 90cd6f87fa Fix Cluster scope 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 19:25:15 +02:00
Maartje Eyskens 82784ac070 Add apiextensions.k8s.io/v1 CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Run update

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Add back helm things

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Let bazel handle the both types

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Add back additionalPrinterColumns

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Add subresources: status: {}

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

re-add short names

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Update conversion

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

fix deploy

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 19:25:10 +02:00
Richard Wall 8beeac1187 Rename Certificate.Spec.URISANs to URIs and EmailSANs to EmailAddresses 
For consistency with DNSNames and IPAddresses
And for consistency with https://golang.org/pkg/crypto/x509/#Certificate

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-14 17:02:53 +01:00
Richard Wall c31cb51246 Update CRDs 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-13 21:43:36 +01:00
Maartje Eyskens 1672a01e49 Remove managed by Helm labels from static manifests and CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-13 20:09:35 +02:00
jetstack-botandGitHub 9822581393 Merge pull request #3167 from meyskens/admission-v1 
Support v1 admission webhooks
 2020-08-13 16:04:40 +01:00
Guilhem Lettron 409db5fdaa chart: add digest option 
Also add "registry/repository" option.

Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>
 2020-08-13 09:45:49 +02:00
jetstack-botandGitHub 967bf85068 Merge pull request #3172 from meyskens/rbac-v1 
Use rbac.authorization.k8s.io/v1
 2020-08-12 13:43:59 +01:00
Maartje Eyskens 2304a007ad Use rbac.authorization.k8s.io/v1 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 11:18:38 +02:00
Maartje Eyskens fecd0b3518 Set all log levels for info 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens 6e3279e002 Explain helm hack 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:14:56 +02:00
Maartje Eyskens 50686d3e26 Support v1 admission webhooks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-10 16:39:49 +02:00
Valentin Petrov 3c3f5a8395 Add MutatingWebhook and ValidatingWebhook extra annotations sections of the helm chart 
Signed-off-by: Valentin Petrov <valentin.petrov06303@gmail.com>
 2020-08-05 15:22:30 +03:00
Paul Jones 529cef8a93 Add serviceAccountName to issuers CRDs for http01 solvers 
Signed-off-by: Paul Jones <paul.jones@jetstack.io>
 2020-08-03 15:30:24 +01:00
jetstack-botandGitHub 535f991e83 Merge pull request #3112 from meyskens/add-pod-priority 
Add support for the pod PriorityClass field in HTTP01 podTemplate
 2020-07-30 15:53:45 +01:00
João Francisco eef64ffc16 chart: clarify only some deployments need hostNetwork 
Signed-off-by: João Francisco <jfrancisco@veniamworks.com>
 2020-07-29 03:43:55 +01:00
João Francisco 7a5990c8e5 chart: document webhook port must be changed if in hostNetwork mode 
Signed-off-by: João Francisco <jfrancisco@veniamworks.com>
 2020-07-29 03:39:51 +01:00
João FranciscoandJoão Francisco be2090120d chart: cleanup hostNetwork config 
Signed-off-by: João Francisco <jfrancisco@veniam.com>
 2020-07-29 03:39:50 +01:00
João FranciscoandJoão Francisco bea1d3ce84 chart: add option to run webhook in hostNetwork 
Signed-off-by: João Francisco <jfrancisco@veniam.com>
 2020-07-29 03:39:50 +01:00
thejas 78ae19ebc5 Add Vault Namespace in Vault Issuer 
Signed-off-by: thejas <thejasb99@gmail.com>
 2020-07-28 10:45:10 +05:30
Maartje Eyskens 2130329811 Add support for the podPriorityClass field in HTTP01 podTemplate 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-23 10:21:34 +02:00
jetstack-botandGitHub 54605ff68a Merge pull request #2975 from meyskens/clouddns-hostedzone 
Add a hostedZoneName field to Cloud DNS
 2020-07-16 13:15:48 +01:00
Maartje Eyskens 9af08b8def Update CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-16 11:51:40 +02:00
Walid MELLOULI 2650afcf44 Inject POD_NAMESPACE env variable to dynamic-serving-ca-secret-namespace argument 
Signed-off-by: Walid MELLOULI <walid_mellouli@carrefour.com>
 2020-07-16 04:31:33 +02:00