Commit Graph
159 Commits
Author SHA1 Message Date
JoshVanL 4eb6335c76 Support out of tree issuers in ingress-shim
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
James Munnelly f466aeea88 Fix govet warnings
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-27 12:07:08 +01:00
James Munnelly fad13bfce1 Move image macro into hack/build
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-27 12:07:08 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly 6a167cc9e6 Enable all CertificateRequest controllers by default
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly bc61194709 Remove deprecated code from ingress-shim controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
jetstack-botandGitHub dcba8ebd06 Merge pull request #2002 from munnerz/internal-apiversion
Add internal API version, enable defaulter & conversion-gen and implement mutating webhook
2019-08-21 21:53:36 +01:00
James Munnelly 6052e0558e Refactor base controller and allow Running additional informers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:22:57 +01:00
James Munnelly 00410e3831 Switch to use new webhook handlers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:10:31 +01:00
JoshVanL d96c7d2e1c Adds venafi internal package with venafi CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
jetstack-botandGitHub 8ab4dc1301 Merge pull request #1943 from JoshVanL/cr-acme
Adds acme CertificateRequest controller
2019-08-17 00:34:00 +01:00
JoshVanL e2b9b21766 Adds acme CertificateRequest controller with unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-15 17:18:11 +01:00
James Munnelly 5c17c2e37f Add webhookbootstrap controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 21:27:36 +01:00
James Munnelly dd66c11115 Extend cainjector to support injecting from secrets
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:01 +01:00
jetstack-botandGitHub 4f622c7479 Merge pull request #1986 from munnerz/rearrange-webhook
Move API webhook validation package
2019-08-14 12:19:55 +01:00
JoshVanL 60b349e162 Adds initial vault CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:34:17 +01:00
James Munnelly d56b6be948 Move API webhook validation package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-13 20:41:53 +01:00
JoshVanL 46fd159f81 Register self signed CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
James Munnelly 99bbc31386 Promote 'Clock' to be a field on controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 12:30:23 +01:00
James Munnelly 32bc10710e Update use of featuregate package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-20 01:57:24 +01:00
James Munnelly 088e196d82 Add experimental certificate request based controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:07:36 +01:00
jetstack-botandGitHub c6cd522a6a Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller
Add alpha CertificateRequest controller for CA Issuer type
2019-07-08 14:11:34 +01:00
JoshVanL ec28f8dc6e Adds certificate request controller feature flag
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-03 15:43:14 +01:00
JoshVanL 6b1ff0148b Adds certificate request base controller and CA issuer controller
instance

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-03 15:42:03 +01:00
James Munnelly 5f5811b81e Respect --namespace flag in rfc2136 provider
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-03 13:52:43 +01:00
James Munnelly 5a096b0b07 Fix lint failures and remove image target manual tag
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-02 18:26:12 +01:00
James Munnelly de34f0410d Use binary image targets to avoid building multiple architectures all the time
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-02 17:29:32 +01:00
James Munnelly fd2dd16f75 Change bazel build to only build for current --platform
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-02 16:10:05 +01:00
Michael Tsang 2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-05-13 16:55:38 +01:00
James Munnelly 500d8fbeb7 Create image bundles in multiarch_image target
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-05-03 11:16:25 +01:00
James Munnelly 9906c0d946 Add feature gate for ValidateCAA functionality and default it to off
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-25 15:10:05 +01:00
James Munnelly 942d6491d6 Pass StopCh and RESTClient to controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:08 +01:00
James Munnelly 871ed4283b Allow controller constructors to return errors
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:04 +01:00
Lennart Jern cd576dd8db Set default acmesolver image based on arch
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
2019-03-22 17:32:34 +01:00
Louis Taylor c640c2f070 Expose metrics server on non-leader instances
This makes sure all cert-manager instances have a metrics endpoint.

Fixes #1352.

Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-03-18 12:41:39 +00:00
James Munnelly d282c5f2aa Run update-bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly 420ebfebe2 Use goflag instead of pflag for logs
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly f4c0de2627 Define pkg/api.Scheme with all used types registered
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly 46faba06b6 Update acmesolver to use logr
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly 6b24e9c966 Update cainjector
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly 5d73076db9 Update logs package for go-logr
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 41934a2b57 Enable Venafi issuer in controller binary
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-01 13:16:03 +00:00
James Munnelly 9e914d6457 Update generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-27 15:43:17 +00:00
James Munnelly f90d145688 Rename to cainjector
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-27 15:26:23 +00:00
James Munnelly 22edcc9071 Update flag descriptions
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-27 15:26:23 +00:00
Solly Ross 42248a91d7 CA Injector Controller
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.

Signed-off-by: Solly Ross <sollyross@google.com>
2019-02-26 21:47:34 -08:00
James Munnelly 2f30258f0e Switch to klog
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:02 +00:00
James Munnelly a9d8f7de8a Fixup for Kubernetes 1.13.2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 11:53:19 +00:00
Daniel Morsing af019ad1e8 add log line when restarting
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-18 16:41:22 +00:00