Commit Graph
3477 Commits
Author SHA1 Message Date
jetstack-botandGitHub 55db4c23ca Merge pull request #2516 from meyskens/computed-name-non-char
Fix issue in ComputeCertificateRequestName when 52nd is a dot
2020-01-16 15:19:25 +00:00
Maartje Eyskens 98ca10b5ba Update bazel
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:28:15 +01:00
Maartje Eyskens 0e1f64a337 Do not change crt.Name
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:07:45 +01:00
Maartje Eyskens dbac7cf1fb Use correct regexp package
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 12:03:58 +01:00
Maartje Eyskens 3212e446e5 Fix issue in ComputeCertificateRequestName when 52nd is a dot
This strips any symbols at the end of a shortened domain name  in ComputeCertificateRequestName.
It also adds tests for the specific util function

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-01-16 11:49:28 +01:00
jetstack-botandGitHub 5ee9e6c7aa Merge pull request #2452 from munnerz/kubernetes-1.17.0
Bump Kubernetes dependencies to v0.17.0
2020-01-14 14:19:57 +00:00
jetstack-botandGitHub 29389b19d5 Merge pull request #2509 from castlemilk/rbac-fix
updating serviceAccount reference in leaderelection rolebinding
2020-01-14 12:00:59 +00:00
jetstack-botandGitHub c6958bd31c Merge pull request #2455 from UKHomeOffice/securityContext
support an arbitrary SecurityContext block for the main deployment
2020-01-10 15:52:48 +00:00
Nicolas Fischer 2bb792943a ensure space after comment character
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Nicolas Fischer 1a066a0717 removed redundant security-context-deprecation.md file from test/fixtures
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Nicolas Fischer aefa3c9660 add securityContext.enabled deprecation doc to the design folder
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Nicolas Fischer 3b838758a3 support an arbitrary SecurityContext block for the main deployment
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Ben Ebsworth 263459da05 updating serviceAccount reference to use serviceAccountName instead of fullname
Signed-off-by: Ben Ebsworth <ben.ebsworth@gmail.com>
2020-01-10 09:01:56 +11:00
jetstack-botandGitHub b7390818af Merge pull request #2489 from czunker/fix_2293
Add configuration switch for use of apparmor in PSP
2020-01-09 15:14:13 +00:00
jetstack-botandGitHub 3ec12c3534 Merge pull request #2481 from cpu/cpu-use-upstream-pebble-v2.3.0
Use upstream Pebble v2.3.0 for E2E tests.
2020-01-09 12:04:14 +00:00
Christian Zunker 7f5ac29d2f Add configuration switch for use of apparmor in PSP
Fixes #2293

Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>
2020-01-08 06:42:28 +01:00
Daniel ecb250ce9d Merge remote-tracking branch 'jetstack/master' into cpu-use-upstream-pebble-v2.3.0
Signed-off-by: Daniel McCarney cpu@letsencrypt.org
2020-01-07 09:35:02 -05:00
jetstack-botandGitHub 9ca34f773f Merge pull request #2470 from munnerz/remove-misleading-errors
Don't log misleading error messages
2020-01-07 14:24:19 +00:00
jetstack-botandGitHub 66d45afcdb Merge pull request #2501 from munnerz/update-codegen-year
Bump generated files copyright header year
2020-01-07 13:32:18 +00:00
James Munnelly d3b785c263 Bump generated files copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-07 12:43:44 +00:00
Daniel 6a775423c3 Use upstream Pebble v2.3.0 for E2E tests.
This is a follow-up from 0f196a5 which temporarily switched the Pebble
image to a fork. The required functionality landed in the upstream
v2.3.0 release and so the E2E tests can be switched back to the
upstream repo.

Signed-off-by: Daniel McCarney <cpu@letsencrypt.org>
2019-12-18 15:05:02 -05:00
James Munnelly 4aed3a7bbc Set namespace on Challenge resources created during tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:38:04 +00:00
James Munnelly b50f0a983a Fix issue using new apiserver lib with older Kubernetes
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:14:42 +00:00
jetstack-botandGitHub 8d6e86468d Merge pull request #2460 from greywolve/fix-ensure-ingress-for-service-name-changing
ACME HTTP01 solver: clean up ingresses if the service name changes
2019-12-17 15:35:09 +00:00
jetstack-botandGitHub 8809f7e031 Merge pull request #2469 from munnerz/temp-certs-dont-overwrite
Don't overwrite existing certificates when issuing a temporary certificate
2019-12-17 14:30:09 +00:00
James Munnelly 361fdfac3f Don't log misleading error messages
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 16:31:18 +00:00
James Munnelly 9daad6dd93 Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 15:11:07 +00:00
James Munnelly 7076041de6 Don't overwrite existing certificates when issuing a temporary certificate
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 13:53:38 +00:00
jetstack-botandGitHub dc9b4766e9 Merge pull request #2467 from munnerz/webhook-ticker
webhook: don't use time.Tick to prevent leaks
2019-12-16 13:19:17 +00:00
James Munnelly df27fff9ce Don't use time.Tick to prevent leaks
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 12:45:49 +00:00
jetstack-botandGitHub 45785999f9 Merge pull request #2465 from munnerz/v0130alpha
Bump Helm chart strings for v0.13.0-alpha.0
v0.13.0-alpha.0
2019-12-16 11:16:17 +00:00
James Munnelly ff8ebef492 Bump Helm chart strings for v0.13.0-alpha.0
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 09:29:50 +00:00
Oliver Powell 7611f78793 ACME HTTP01 solver: clean up ingresses if the service name changes
Signed-off-by: Oliver Powell <oliver@opowell.com>
2019-12-14 10:05:51 +02:00
jetstack-botandGitHub b365021dc8 Merge pull request #2428 from haines/remove-nameserver-ip-address-validation
Remove IP address validation on dns01-recursive-nameservers to allow domain names
2019-12-12 16:31:14 +00:00
jetstack-botandGitHub adce70f649 Merge pull request #2436 from ttarczynski/patch-1
Bump default 'image.tag' value in helm chart README.md
2019-12-12 15:32:15 +00:00
jetstack-botandGitHub 02ee550c5d Merge pull request #2447 from UKHomeOffice/issue-2443
issue 2443 - annotations for cert-manager deployments
2019-12-11 16:41:33 +00:00
jetstack-botandGitHub 90bf960c1e Merge pull request #2450 from munnerz/webhook-pprof
webhook: register http handlers for pprof debug endpoints
2019-12-11 15:59:33 +00:00
James Munnelly ae5c13c1b2 Update codegen
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 15:42:12 +00:00
Nicolas Fischer f8c83a1411 issue 2443 - annotations for cert-manager deployments
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2019-12-11 15:37:21 +00:00
jetstack-botandGitHub 6544ab93c5 Merge pull request #2449 from UKHomeOffice/issue-2448
issue 2448 - Optional securityContext for cainjector and webhook char…
2019-12-11 15:27:32 +00:00
James Munnelly 70253622cf Bump Kubernetes dependencies to v0.17.0
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 14:57:28 +00:00
jetstack-botandGitHub 9d95d2b4dd Merge pull request #2392 from JoshVanL/acme-external-account-binding
acme: external account binding support
2019-12-11 14:53:56 +00:00
James Munnelly ff8c68348a Update checks.go for external account bindings
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:37:36 +00:00
James Munnelly 5c4e27830f Use enum for HMAC algorithm field
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 3f212844a7 Fix apiext.JSON fuzzer
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly fd306c538c acme: Add support for external account binding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 4930a0e8d8 Add end-to-end tests using EAB
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 0f196a57dc Use forked pebble with support for EABs
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 861e0f95c6 Use fork of x/crypto with support for EAB
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 10:37:16 +00:00
James Munnelly 80bc253d74 acme: Add API fields for ExternalAccountBinding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 10:37:16 +00:00