home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-09 13:16:20 +10:00
Code Issues Packages Projects Releases Wiki Activity
6,226 Commits 37 Branches 119 Tags
4afe2f00a8142d0bd2134da408a811cb70e100a6
Commit Graph
451 Commits
Author SHA1 Message Date
Jake Sanders 43583e13b3 Update bazel repos 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-11-23 16:58:59 +00:00
Ashley Davis 6f8ef26c07 add a script + flow for getting latest kind images 
the script will need to be manually updated if we want to add a new
k8s version, but it should be trivial to do that

the actual kind image SHAsums aren't updated, so that the addition of
the script can be separate from the act of updating the images

also adds a make target for creating a kind cluster with CI deps

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-08 16:58:16 +00:00
irbekrm edd7304c6c Bumps timeout to wait for cm api in upgrade test 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-02 11:19:05 +02:00
Ashley Davis bfecde8116 update keystore-go library version 
Following the release of cert-manager v1.6.0, it was observed that an
update to the keystore-go library was backwards-incompatible; it
introduced a 6-character minimum length on passwords which wasn't
previously in force.

This led to https://github.com/pavel-v-chernykh/keystore-go/issues/30
which in turn led to https://github.com/pavel-v-chernykh/keystore-go/pull/31

This commit bumps to use the new version, which by default doesn't have
a min password length

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-10-28 10:10:45 +01:00
James Munnelly b2353bee4b Update codegen script to remove workarounds 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-10-21 15:43:50 +01:00
James Munnelly e7dea9f2a2 Replace all references to pkg/internal with internal 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-10-21 12:27:04 +01:00
irbekrm 264c45c276 Identifies the version to upgrade to by commit 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-18 13:54:22 +03:00
irbekrm c9f1a5dbdf Fix the script that finds last published release 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-18 08:55:57 +03:00
irbekrm 598ed35e4a Uses go/crypto ListCertAlternates function to fetch alternative certificate chains 
This allows us to use upstream go/crypto again instead of our own fork

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-07 15:21:26 +01:00
Richard Wall cf3092f8c5 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-07 09:16:16 +01:00
jetstack-botandGitHub f41310a82d Merge pull request #4485 from munnerz/m1-support 
Add support for building all Bazel targets on M1 macs
 2021-10-01 14:03:35 +01:00
Richard Wall 38fbd6cf4f ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-01 12:41:15 +01:00
James Munnelly 093313390b Add support for building all Bazel targets on M1 macs 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-10-01 11:48:22 +01:00
Richard Wall 00e0090ce7 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-01 10:22:35 +01:00
irbekrm 81bdabf67a Code review feedback 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 17:23:42 +01:00
irbekrm 7319d3392a Load kyverno image with Bazel 
So that we don't pull the same image for each test run.

Also run helm install with --debug so that it outputs more information.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:14:26 +01:00
irbekrm 577757f282 Adds the new format of Go build tags to verify_boilerplate 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:30 +01:00
irbekrm cb6a746726 Runs ./hack/update-all.sh 
New format of Go build tags gets added

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:19 +01:00
irbekrm 0889570722 Ensures conversion code temp workaround works for Go 1.17 
Also refactor

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:09 +01:00
irbekrm 0679c33c3f Update kube libraries, regenerate go.mod/go.sum 
Updates go.mod for Go 1.17

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:07:59 +01:00
jetstack-botandGitHub fcf379d6e9 Merge pull request #4428 from mol-george/issue-4189-keystore-upgrade 
Issue 4189 keystore upgrade
 2021-09-13 10:45:56 +01:00
jetstack-botandGitHub cd1f5a3d94 Merge pull request #4400 from irbekrm/arm 
Update and verify scripts can be run from darwin-arm64
 2021-09-03 19:14:22 +01:00
George Moldoveanu 0463681244 updates go deps and bazel files 
Signed-off-by: George Moldoveanu <mol.george@gmail.com>
 2021-09-02 23:45:11 +01:00
Nicolas DegoryandRichard Wall d2209df85a Apply suggestions from code review 
Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:24:59 -07:00
Nicolas Degory 37b03ab5db bump chart testing version 
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:21:47 -07:00
irbekrm 7a7d853d9f Add a comment about staticcheck script 
Also shift the correct number of params
and remove and unused def.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-23 08:58:20 +01:00
irbekrm 25303b79c9 Use yq instead of jq 
Because yq releases builds for darwin/arm

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-23 07:08:51 +01:00
irbekrm ba3864e3c9 Removes the unused buildozer tool 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-22 08:58:35 +01:00
irbekrm f7ee62e701 Pull dependencies for darwin/arm 
Also bumps a few dependency versions

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-21 09:21:06 +01:00
jetstack-botandGitHub c24c0889bf Merge pull request #4390 from irbekrm/verify_crd_status 
Verify crd status
 2021-08-19 10:22:08 +01:00
Irbe KruminaandAshley Davis e43db8a426 Code review feedback. 
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-19 09:43:45 +01:00
irbekrm 04b584e698 verify-crds script now verifies that the CRDs don't contain status field 
This is necessary because some CD tools don't accept resource configs with predefined status fields, but controllergen currently adds this field when a CRD yaml is generated

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-19 06:19:37 +01:00
irbekrm b8e2846901 Adds a Bazel rule to install yq 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-18 18:36:01 +01:00
Jake Sanders 682b3f108e Fix sed command on Darwin 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-18 16:09:14 +01:00
Inteon b13eb0483b upgrade deps to latest version (kube v0.22.0) 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-13 23:38:59 +02:00
irbekrm 97a730f7fd Ensure the upgrade tests always install vanilla cert-manager 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-11 08:02:57 +01:00
Inteon 1e89e9a55b upgrade go.mod 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-04 00:49:07 +02:00
jetstack-botandGitHub b5f80c428e Merge pull request #4234 from inteon/add_startupapicheck 
Add startup api check Job
 2021-08-03 17:41:49 +01:00
Inteon 7f19db0faa update scripts with new image 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-27 18:38:33 +02:00
jetstack-botandGitHub 05cfd7bb72 Merge pull request #4218 from inteon/verify_upgrade_use_check_api 
Use 'kubectl cert-manager check api' in verify-upgrade.sh
 2021-07-21 20:37:20 +01:00
jetstack-botandGitHub f489c7df02 Merge pull request #4236 from irbekrm/fix_version_finding 
Fix how last published release version is calculated for upgrade tests
 2021-07-21 15:15:20 +01:00
irbekrm 48d4f955ea Fix how last published release is calculated 
It should always be the last published non-alpha/beta release

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-21 13:58:44 +01:00
Ashley Davis c86f20f4b5 add crd make target & don't change GOPROXY in update-codegen.sh 
there seems to be justification for setting GOSUMDB to a universal value
here, but setting GOPROXY doesn't seem to provide value here

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-07-19 17:19:13 +01:00
Inteon 629924c123 use 'kubectl cert-manager check api' in verify-upgrade.sh 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-16 16:38:47 +02:00
Maël ValaisandJake Sanders 30f9c123d3 gateway-shim: add the gateway-shim controller 
Note that the gateway-shim is only half the work for supporting the
Gateway API in cert-manager. The other half is the HTTP01 solver
support, which is still worked on.

The Gateway API in cert-manager is releases as an experimental feature
and needs to be enabled manually with the following flag:

  --controllers=*,gateway-shim

All the annotations supported by ingress-shim are also supported by
gateway-shim, with some exceptions:

  "acme.cert-manager.io/http01-ingress-class"

This annotation is not supported on the Gateway resource. Although the
Gateway resource also has a "gatewayClass" field, we will need to add
another field instead of "ingress-class" to avoid confusion with the
ingress-shim.

  "acme.cert-manager.io/http01-edit-in-place"

This annotation is not supported because it is specific to some ingress
controllers like ingress-gce.

  "kubernetes.io/tls-acme"

This annotation is not supported because it is a behavior inherited from
kube-lego and we chose not to keep this behavior with the Gateway API.

Unlike the ingress-shim, you can reuse the same Secret name in multiple
TLS configurations on the same Gateway resource.

The ingress-shim now shows the exact location of the duplicate
secretName when the user gives the same secretName in two separate TLS
blocks.

Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: Jake Sanders <i@am.so-aweso.me>
 2021-07-15 20:34:55 +02:00
jetstack-botandGitHub c546f5bbd9 Merge pull request #4190 from inteon/helm_labels 
Remove Helm-specific labels & add version label
 2021-07-13 18:27:03 +01:00
Inteon 043bbd283e remove helm-specific labels & add version label 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-11 17:42:32 +02:00
jetstack-botandGitHub 4dfb5add86 Merge pull request #4182 from irbekrm/upgrade_test 
Upgrade test
 2021-07-11 13:45:01 +01:00
Inteon b852735a95 upgrade ginkgo & gomega 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-10 20:52:09 +02:00
Inteon cb6030f1d9 add -prune=true & go mod tidy to update-deps.sh 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-10 20:35:41 +02:00