Commit Graph
5602 Commits
Author SHA1 Message Date
joshvanl 67ba2b15da Updates comment for internal vault client New func, that errors should
be considered for retrying

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 14:34:49 +01:00
joshvanl b237b5c222 Changes comment for duration annotation parsing
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 14:34:30 +01:00
joshvanl 2c217f0377 Remove CA field from Vault CertificateSigningRequest controllers
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:50:33 +01:00
joshvanl f054611b32 Change vault policy string to not require escaping
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl 680c4f4a41 Fix vault setup in e2e by reverting ttl duration
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl d0e7ccd805 Update some CSR comments
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl a6a394236b Revert Vault e2e ttl setting, and make Ed keys an unsupported feature
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl 889e7b9c50 Revert e2e vault setup to use original max certificate TTL, and fix
custom app role auth path in CSR tests

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl f82f36bfaa Adds Vault Kubernetes Auth CSR E2E tests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl 9b2466589c Adds Vault AppRole with a custom path CSR E2E tests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl 21a05ea9de Adds Vault AppRole CSR e2e tests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:41:03 +01:00
joshvanl aac1f24450 Expands CSR validation to allow not checking CA as the Root
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 10:37:46 +01:00
joshvanl 2c193f9f60 Changes Vault e2e addon to enable Kubernetes Auth signing and make roles
ready for ClusterIssuer testing

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 09:11:43 +01:00
joshvanl d9be35c299 Wires up Vault CSR controller
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 09:11:43 +01:00
joshvanl f5b609e446 Adds Vault CertificateSigningRequest Issuer controller
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-29 09:11:43 +01:00
jetstack-botandGitHub 59c2a2d9f4 Merge pull request #4143 from JoshVanL/certificate-signing-request-remove-ca-annotation
Remove the `experimental.cert-manager.io/ca` annotation from CertificateSigningRequests
2021-06-28 17:19:36 +01:00
joshvanl 7e8bf731b2 Remove the experimental.cert-manager.io/ca annotation from the
CertificateSigningRequest

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-25 16:02:37 +01:00
jetstack-botandGitHub 15b6f32071 Merge pull request #4130 from irbekrm/fix_failed_crs_retry
4082 Fix retrying of failed CertificateRequests
2021-06-22 12:37:47 +01:00
irbekrm fd61e1ccc7 Delete 'next' CertificateRequests that failed in last issuance cycle
So that the issuance is retried

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-06-22 07:28:06 +01:00
irbekrm feb62b1fe5 Make the back off period const public
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-06-22 06:37:07 +01:00
irbekrm 428c280f76 Pass clock to request manager controller
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-06-22 06:36:26 +01:00
jetstack-botandGitHub 67c8176801 Merge pull request #4106 from JoshVanL/ctl-experimental-create-csr
ctl experimental create certificatesigningrequest
2021-06-18 15:44:24 +01:00
jetstack-botandGitHub 1f602cfcd4 Merge pull request #4110 from RinkiyaKeDad/add_flags_for_acme_test
adding flags for config in the acme issuer tests
2021-06-18 14:56:23 +01:00
jetstack-botandGitHub c23ce682eb Merge pull request #4101 from JoshVanL/certificate-signing-request-e2e=conformance
CertificateSigningRequest E2E Conformance Suite
2021-06-18 13:13:23 +01:00
Arsh Sharma 2629d5976d combined into one struct
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
2021-06-18 16:57:07 +05:30
joshvanl b3804bb162 Cleans up CSR E2E validation functions, allow 30s duration fuzz, allow
common name copy to DNS names, spelling

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-18 12:20:43 +01:00
joshvanl 3eccfaaa94 Adds review comments for adding supported versions, writing to stdout,
removing error wraping

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-18 11:58:24 +01:00
jetstack-botandGitHub 7c88eda33b Merge pull request #4085 from kmodules/crt
Use stable version of controller-runtime
2021-06-18 10:23:23 +01:00
RinkiyaKeDad 607ea9c1cd initial commit
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-17 12:08:02 +05:30
jetstack-botandGitHub e0f80c321a Merge pull request #4109 from SgtCoDFish/makefilechanges
Add .PHONY next to make targets
2021-06-16 15:36:14 +01:00
Ashley Davis 10aba07dad add .PHONY next to targets
having .PHONY next to the target which it's marking
helps with identifying which targets have been marked and makes it
easier to spot a missing .PHONY

also tweaks the find command to avoid piping, and cleans up a duplicated
ctl target

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-06-16 14:57:18 +01:00
joshvanl b35a9170b7 Fix ecdsa public CSR key validation
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-16 10:43:49 +01:00
jetstack-botandGitHub fbd2a6d06a Merge pull request #4105 from kit837/add-clock-time-seconds
Add clock_time_seconds metric
2021-06-15 21:00:53 +01:00
kit837 51fe108beb Fix metrics_controller integration test.
Signed-off-by: kit837 <66801824+kit837@users.noreply.github.com>
2021-06-15 19:26:55 +00:00
kit837 4d55dbd217 run ./hack/update-bazel.sh
Signed-off-by: kit837 <66801824+kit837@users.noreply.github.com>
2021-06-15 17:48:31 +00:00
kit837 0f97e6d19d pass in clock.Clock for better test
Signed-off-by: kit837 <66801824+kit837@users.noreply.github.com>
2021-06-15 17:48:20 +00:00
joshvanl f92bdeaa80 Adds Ed25519 tests to CertificateSigningRequest conformance tests
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 18:34:08 +01:00
joshvanl 78a6df1ebd Fix util/pki test which relied on hardcoded CSR common name
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl 6736a2d82c Adds missing validation functions to the default
CertificateSigningRequest e2e conformance tests

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl 849403723b Updates test unit gen modifiers for e2e
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl 13462b41c2 Adds CertificateSigningRequest conformance suite for SelfSigned and CA
Issuers

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl a0f0d85f5f Remove unused CertificateSigningRequest helper functions
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl 82e2b4e078 Refactor all validations into validations package
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl 159c8ca760 Move featureset into separate helper package
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
joshvanl 40bcbdd3e9 Adds CertificateSigningRequest e2e validation functions
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 17:58:34 +01:00
jetstack-botandGitHub b8a1f3d6fb Merge pull request #4070 from irbekrm/3969_parameterize_and_document_image_building
3969 parameterize and document image building
2021-06-15 16:45:53 +01:00
Irbe KruminaandAshley Davis 6183a2d2b6 Suggestions from code review
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-06-15 16:23:53 +01:00
jetstack-botandGitHub 02d90248de Merge pull request #4079 from annerajb/support-ed25519
support-ed25519
2021-06-15 16:17:53 +01:00
joshvanl 331e178f60 Wires up ctl x create csr command
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 15:37:28 +01:00
joshvanl ee8130f159 Adds utilities for converting kubernetes certificates v1 usages to x509
usages

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-06-15 15:18:07 +01:00