Commit Graph
1681 Commits
Author SHA1 Message Date
Haoxiang Zhou 4f26537ff7 Set visibility to public
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 16:12:47 +01:00
Haoxiang Zhou fe80b7d760 Moved predicate package to pkg/util
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 12:23:15 +01:00
James Munnelly 8a1d7c6831 Remove AuditSink support from cainjector
The AuditSink resource type (previously in alpha) has been removed
as per https://groups.google.com/g/kubernetes-sig-auth/c/aV_nXpa5uWU.

Remove all support for it from our cainjector so we are able to
continue to upgrade dependencies, and to avoid more users coming
to rely on this functionality ahead of it being removed from
Kubernetes.

Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 19:35:20 +01:00
jetstack-botandGitHub e06a1dadd1 Merge pull request #3053 from meyskens/venafi-dn
Error on venafi CertificateRequest when DN is empty
2020-07-01 16:29:08 +01:00
Maartje Eyskens ef5356f0e0 Add unit test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-01 16:57:17 +02:00
Maartje Eyskens 471df65dfd Implement feedback on error message
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-01 16:52:24 +02:00
Maartje Eyskens 32a167d7c7 Error on venafi CertificateRequest when DN is empty
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-01 16:00:02 +02:00
James Munnelly 9e2d6a514b Move expcertificates into certificates package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 12:16:25 +01:00
James Munnelly 2280480c02 Remove old certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 11:46:13 +01:00
James Munnelly 636083f8e9 Fix up use of omitempty and optional in Cloudflare config struct
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:50:43 +01:00
James Munnelly bfe3dd2c2b review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly d01d921a71 generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly 8f0b81490d address review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly b8d1f294b9 Update acme API group doc comments
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:18 +01:00
James Munnelly 463e08a467 Address review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly 6caa4c451d Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly aacaaa2cd8 Update API type documentation for 'certmanager' and 'meta' API groups
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
jetstack-botandGitHub 220b98923c Merge pull request #3037 from munnerz/verify-staticcheck
Add verify-staticcheck.sh script
2020-06-26 13:15:39 +01:00
James Munnelly 1adfe16690 Bulk fix of non-test staticcheck failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 12:25:08 +01:00
jetstack-botandGitHub deac83e6fb Merge pull request #2989 from meyskens/cf-no-email
Make Cloudflare email an optional field
2020-06-26 10:58:39 +01:00
jetstack-botandGitHub 63b7ca26b8 Merge pull request #3027 from munnerz/expcerts-renewal
expcertificates: fix bug renewing certificates automatically near expiry
2020-06-26 09:21:39 +01:00
James Munnelly 86b8cab328 expand out 'clearCertificateFields' function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-25 10:44:08 +01:00
jetstack-botandGitHub 83f391c177 Merge pull request #3018 from hzhou97/fix-convert-cmd
Fix ctl convert cmd
2020-06-23 18:14:12 +01:00
Haoxiang Zhou 24404aa1eb Added new scheme to use for ctl commands
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-23 17:18:56 +01:00
James Munnelly ba26d65c68 schedule resyncs once renewalTime has passed to handle certificate renewals in the future
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly b3300b8673 update trigger policies unit tests for status.renewalTime field
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly fe51a02227 use status.renewalTime in trigger policies and correctly plumb through clock
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:37:50 +01:00
James Munnelly 8bb4bb389a use correct PolicyChain in readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:37:50 +01:00
James Munnelly 7cf74ec442 set notBefore and renewalTime status fields in certificate readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly cbe5f5dfb5 generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly 2d5901df3f pkg/apis: add 'notBefore' and 'renewalTime' fields to Certificate status
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly 1d6424b8f2 Use 'clock' package in pkg/scheduler
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly 281b9ffcbd add RenewBeforeExpiryDuration function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
Haoxiang Zhou 6c72193678 Handle keyEncoding for temporary Certificates
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-23 10:17:41 +01:00
Haoxiang Zhou 5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-18 15:26:14 +01:00
jetstack-botandGitHub abd13992c8 Merge pull request #2839 from meyskens/update-miekg-dns
Update to the latest miekg/dns
2020-06-11 15:26:23 +01:00
jetstack-botandGitHub 89c8fc3c8d Merge pull request #2898 from diversario/2159-remove-custom-retryer
Remove custom retry logic from route53 package
2020-06-11 13:58:23 +01:00
Maartje Eyskens 4a59c875ee Do not send email if not set
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-08 17:25:15 +02:00
Maartje Eyskens 963c5566ae Make Cloudflare email an optional field
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-08 16:48:47 +02:00
jetstack-botandGitHub 46eaf3d1a4 Merge pull request #2923 from JoshVanL/new-metrics
Updates the metrics package + new metrics controller
2020-06-04 12:59:38 +01:00
jetstack-botandGitHub 485e2e59a4 Merge pull request #2947 from hzhou97/no_empty_cacrt
Do not add empty ca.crt
2020-05-29 09:13:01 +01:00
Maartje Eyskens c867bc7d36 Implement MessageAcceptFunc
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-05-27 17:42:34 +02:00
Maartje Eyskens c9fbbdbde8 Update to the latest miekg/dns
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-05-27 17:42:34 +02:00
jetstack-botandGitHub 78ee463a98 Merge pull request #2946 from meyskens/fix-venafi-dn
Add default DN back in Venafi issuer
2020-05-27 10:35:22 +01:00
JoshVanL e465329b80 Revert vault free port and expose listener port from metrics server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-26 23:01:55 +01:00
Haoxiang Zhou 7229741505 Changed tests for issuing controller to expect no ca.crt instead of nil
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 15:30:43 +01:00
Maartje Eyskens 3fa7f038b3 Check for empty Organizations instead
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-05-26 16:03:42 +02:00
Haoxiang Zhou 609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 14:37:40 +01:00
Haoxiang Zhou 3591de614d Changed unit tests to expect no ca.crt instead of nil
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 12:16:55 +01:00
Haoxiang Zhou dceae33364 Do not add ca.crt key to TLS secret if empty
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 12:16:20 +01:00