joshvanl
67ba2b15da
Updates comment for internal vault client New func, that errors should
...
be considered for retrying
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 14:34:49 +01:00
joshvanl
b237b5c222
Changes comment for duration annotation parsing
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 14:34:30 +01:00
joshvanl
2c217f0377
Remove CA field from Vault CertificateSigningRequest controllers
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:50:33 +01:00
joshvanl
f054611b32
Change vault policy string to not require escaping
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
680c4f4a41
Fix vault setup in e2e by reverting ttl duration
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
d0e7ccd805
Update some CSR comments
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
a6a394236b
Revert Vault e2e ttl setting, and make Ed keys an unsupported feature
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
889e7b9c50
Revert e2e vault setup to use original max certificate TTL, and fix
...
custom app role auth path in CSR tests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
f82f36bfaa
Adds Vault Kubernetes Auth CSR E2E tests
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
9b2466589c
Adds Vault AppRole with a custom path CSR E2E tests
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
21a05ea9de
Adds Vault AppRole CSR e2e tests
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:41:03 +01:00
joshvanl
aac1f24450
Expands CSR validation to allow not checking CA as the Root
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 10:37:46 +01:00
joshvanl
2c193f9f60
Changes Vault e2e addon to enable Kubernetes Auth signing and make roles
...
ready for ClusterIssuer testing
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 09:11:43 +01:00
joshvanl
d9be35c299
Wires up Vault CSR controller
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 09:11:43 +01:00
joshvanl
f5b609e446
Adds Vault CertificateSigningRequest Issuer controller
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-29 09:11:43 +01:00
jetstack-bot and GitHub
59c2a2d9f4
Merge pull request #4143 from JoshVanL/certificate-signing-request-remove-ca-annotation
...
Remove the `experimental.cert-manager.io/ca` annotation from CertificateSigningRequests
2021-06-28 17:19:36 +01:00
joshvanl
7e8bf731b2
Remove the experimental.cert-manager.io/ca annotation from the
...
CertificateSigningRequest
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-25 16:02:37 +01:00
jetstack-bot and GitHub
15b6f32071
Merge pull request #4130 from irbekrm/fix_failed_crs_retry
...
4082 Fix retrying of failed CertificateRequests
2021-06-22 12:37:47 +01:00
irbekrm
fd61e1ccc7
Delete 'next' CertificateRequests that failed in last issuance cycle
...
So that the issuance is retried
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-06-22 07:28:06 +01:00
irbekrm
feb62b1fe5
Make the back off period const public
...
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-06-22 06:37:07 +01:00
irbekrm
428c280f76
Pass clock to request manager controller
...
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-06-22 06:36:26 +01:00
jetstack-bot and GitHub
67c8176801
Merge pull request #4106 from JoshVanL/ctl-experimental-create-csr
...
ctl experimental create certificatesigningrequest
2021-06-18 15:44:24 +01:00
jetstack-bot and GitHub
1f602cfcd4
Merge pull request #4110 from RinkiyaKeDad/add_flags_for_acme_test
...
adding flags for config in the acme issuer tests
2021-06-18 14:56:23 +01:00
jetstack-bot and GitHub
c23ce682eb
Merge pull request #4101 from JoshVanL/certificate-signing-request-e2e=conformance
...
CertificateSigningRequest E2E Conformance Suite
2021-06-18 13:13:23 +01:00
Arsh Sharma
2629d5976d
combined into one struct
...
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com >
2021-06-18 16:57:07 +05:30
joshvanl
b3804bb162
Cleans up CSR E2E validation functions, allow 30s duration fuzz, allow
...
common name copy to DNS names, spelling
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-18 12:20:43 +01:00
joshvanl
3eccfaaa94
Adds review comments for adding supported versions, writing to stdout,
...
removing error wraping
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-18 11:58:24 +01:00
jetstack-bot and GitHub
7c88eda33b
Merge pull request #4085 from kmodules/crt
...
Use stable version of controller-runtime
2021-06-18 10:23:23 +01:00
RinkiyaKeDad
607ea9c1cd
initial commit
...
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com >
2021-06-17 12:08:02 +05:30
jetstack-bot and GitHub
e0f80c321a
Merge pull request #4109 from SgtCoDFish/makefilechanges
...
Add .PHONY next to make targets
2021-06-16 15:36:14 +01:00
Ashley Davis
10aba07dad
add .PHONY next to targets
...
having .PHONY next to the target which it's marking
helps with identifying which targets have been marked and makes it
easier to spot a missing .PHONY
also tweaks the find command to avoid piping, and cleans up a duplicated
ctl target
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io >
2021-06-16 14:57:18 +01:00
joshvanl
b35a9170b7
Fix ecdsa public CSR key validation
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-16 10:43:49 +01:00
jetstack-bot and GitHub
fbd2a6d06a
Merge pull request #4105 from kit837/add-clock-time-seconds
...
Add clock_time_seconds metric
2021-06-15 21:00:53 +01:00
kit837
51fe108beb
Fix metrics_controller integration test.
...
Signed-off-by: kit837 <66801824+kit837@users.noreply.github.com >
2021-06-15 19:26:55 +00:00
kit837
4d55dbd217
run ./hack/update-bazel.sh
...
Signed-off-by: kit837 <66801824+kit837@users.noreply.github.com >
2021-06-15 17:48:31 +00:00
kit837
0f97e6d19d
pass in clock.Clock for better test
...
Signed-off-by: kit837 <66801824+kit837@users.noreply.github.com >
2021-06-15 17:48:20 +00:00
joshvanl
f92bdeaa80
Adds Ed25519 tests to CertificateSigningRequest conformance tests
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 18:34:08 +01:00
joshvanl
78a6df1ebd
Fix util/pki test which relied on hardcoded CSR common name
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
6736a2d82c
Adds missing validation functions to the default
...
CertificateSigningRequest e2e conformance tests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
849403723b
Updates test unit gen modifiers for e2e
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
13462b41c2
Adds CertificateSigningRequest conformance suite for SelfSigned and CA
...
Issuers
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
a0f0d85f5f
Remove unused CertificateSigningRequest helper functions
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
82e2b4e078
Refactor all validations into validations package
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
159c8ca760
Move featureset into separate helper package
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
joshvanl
40bcbdd3e9
Adds CertificateSigningRequest e2e validation functions
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 17:58:34 +01:00
jetstack-bot and GitHub
b8a1f3d6fb
Merge pull request #4070 from irbekrm/3969_parameterize_and_document_image_building
...
3969 parameterize and document image building
2021-06-15 16:45:53 +01:00
Irbe Krumina and Ashley Davis
6183a2d2b6
Suggestions from code review
...
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com >
Signed-off-by: irbekrm <irbekrm@gmail.com >
2021-06-15 16:23:53 +01:00
jetstack-bot and GitHub
02d90248de
Merge pull request #4079 from annerajb/support-ed25519
...
support-ed25519
2021-06-15 16:17:53 +01:00
joshvanl
331e178f60
Wires up ctl x create csr command
...
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 15:37:28 +01:00
joshvanl
ee8130f159
Adds utilities for converting kubernetes certificates v1 usages to x509
...
usages
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com >
2021-06-15 15:18:07 +01:00