Commit Graph
304 Commits
Author SHA1 Message Date
jetstack-botandGitHub b48988ffcf Merge pull request #2650 from meyskens/014-versionupdate
Tag v0.14 in the Helm chart readme
2020-03-05 08:13:05 +00:00
Maartje Eyskens d63cbb2731 Set tag to v0.14.0-alpha.0
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-05 08:12:14 +01:00
jetstack-botandGitHub db1c5faf7b Merge pull request #2649 from meyskens/rm-no-webhook
Remove webhook.enabled from Helm chart
2020-03-05 00:44:05 +00:00
Maartje Eyskens 6a0c53c508 Tag v0.14 in the Helm chart readme
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-04 20:28:32 +01:00
Maartje Eyskens f951a89385 Remove webhook.enabled from Helm chart
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-04 19:26:05 +01:00
Maartje Eyskens 3307e3a946 Update bazel
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-04 15:07:47 +01:00
Maartje Eyskens aaae73a45d Replace openshift/no-webhook manifests with legacy
This releases a new manifest type "legacy" to support Kubernetes <1.15 and OpenShift 3.
This version uses the webhook but disables the conversions as they are not supported.
For this reason only the v1alpha2 API is added in these manifests.
All newer APIs are filtered by the filter-crd tool.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-04 14:26:25 +01:00
jetstack-botandGitHub f2c462d29f Merge pull request #2642 from meyskens/manifest-phase1
Put OpenShift specific RBAC in all manifests
2020-03-04 13:02:58 +00:00
jetstack-botandGitHub 00b101de76 Merge pull request #2597 from meyskens/emailsans
Add Email SANs
2020-03-03 16:31:56 +00:00
Maartje Eyskens ce4c33f3b5 Put OpenShift specific RBAC in all manifests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-03 14:57:26 +01:00
James Munnelly 5eb3cb6313 Mark filter-crd target as a tool dependency instead of src
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-03 10:29:54 +00:00
jetstack-botandGitHub 930827b06b Merge pull request #2624 from jsoref/spelling
Spelling
2020-02-25 11:41:48 +00:00
Josh Soref c4337b3acd spelling: occurrences
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:36:16 -05:00
Josh Soref b7f18161a5 spelling: explicitly
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:42:41 -05:00
Josh Soref 8d801fc100 spelling: certificate
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:15:51 -05:00
Josh Soref b93d64c09d spelling: authorizations
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:15:18 -05:00
Josh Soref ec5da97f2b spelling: account
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:14:20 -05:00
Travis Glenn Hansen 5485291ba2 dynamic namespace for webhook RoleBinding
Signed-off-by: Travis Glenn Hansen <travisghansen@yahoo.com>
2020-02-24 09:06:04 -07:00
Maartje Eyskens d3a623314c Add EmailSANs field
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-21 08:49:00 +01:00
Maartje Eyskens 1439ca350c Write CRD filter for OpenShift
This adds a Go binary that filters certain keys from the CRDs.
This is meant to remove keys that are not compatible with OpenShift 3.11.
This then is ran on creating the deployment manifests.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-18 10:52:42 +01:00
jetstack-botandGitHub 2862c31386 Merge pull request #2593 from JoshVanL/encode-openapi-validation
Certificate KeySize encode openapi validation
2020-02-17 11:42:24 +00:00
James Munnelly 71373d1e50 Fix including CRDs as part of static manifests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-13 15:52:01 +00:00
JoshVanL 9b9b66d7b4 Updates CRDs with max/min keysize validation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-02-12 10:18:11 +00:00
jetstack-botandGitHub f9c23dcb8f Merge pull request #2556 from munnerz/release-tars
Add release-tars targets to construct cert-manager release artifacts
2020-02-10 16:10:13 +00:00
James Munnelly 48c56dbe5a Run ./hack/update-crds.sh
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-10 12:16:29 +00:00
James Munnelly 277659c466 Enable conversion webhook for v1alpha3 in CRDs and 'serve' v1alpha3
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-10 12:15:09 +00:00
Maartje Eyskens 3c09a7b80c Document more info on CN behaviour
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-07 09:22:24 +01:00
Maartje Eyskens 7e318dbfbb update CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-07 09:16:49 +01:00
James Munnelly 5b9cd23d0f Make the Venafi Cloud URL field optional
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-03 18:18:38 +00:00
James Munnelly 22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-30 21:02:58 +00:00
Greg Taylor 3f2e9dd37f Fix Helm chart cainjector.enabled
cainjector previously disregarded the cainjector.enabled
value when passed in. This commit leaves it defaulted to
enabled (per the docs) but causes cainjector to not be
deployed when cainjector.enabled = false.

Signed-off-by: Greg Taylor <greg@gctaylor.com>
2020-01-23 16:22:41 -08:00
James Munnelly 86d7160499 Update version numbers in Helm chart README
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-21 14:24:18 +00:00
jetstack-botandGitHub 5eb56efdad Merge pull request #2529 from munnerz/v0130-readme
Update version tags in Helm chart
2020-01-20 17:12:31 +00:00
jetstack-botandGitHub b7e83b5382 Merge pull request #2508 from JoshVanL/cr-invalid-request
CertificateRequest InvalidRequest
2020-01-20 14:17:31 +00:00
James Munnelly 71c2e6f5cd Update version tags in Helm chart
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 14:14:23 +00:00
jetstack-botandGitHub 44535d60ab Merge pull request #2504 from appian/add-support-for-volumes
Add support for volumes and volume mounts to cert-manager chart
2020-01-17 10:18:05 +00:00
Joshua Stern 72aa16c7be Add support for volumes and volume mounts to cert-manager chart
Signed-off-by: Joshua Stern <joshua.stern@appian.com>
2020-01-16 11:11:48 -05:00
Joshua Mathianas 05ff21250d Updates plural names and destination attribute name to match source
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 10:30:20 -05:00
Joshua Mathianas 9ee6ea7b7d Fixed a typo and ran generators
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:49:40 -05:00
Joshua Mathianas e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 07:50:26 -05:00
jetstack-botandGitHub 29389b19d5 Merge pull request #2509 from castlemilk/rbac-fix
updating serviceAccount reference in leaderelection rolebinding
2020-01-14 12:00:59 +00:00
Nicolas Fischer 2bb792943a ensure space after comment character
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Nicolas Fischer 3b838758a3 support an arbitrary SecurityContext block for the main deployment
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Ben Ebsworth 263459da05 updating serviceAccount reference to use serviceAccountName instead of fullname
Signed-off-by: Ben Ebsworth <ben.ebsworth@gmail.com>
2020-01-10 09:01:56 +11:00
JoshVanL 0a10343e2c Updates crds
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:56:52 +00:00
Christian Zunker 7f5ac29d2f Add configuration switch for use of apparmor in PSP
Fixes #2293

Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>
2020-01-08 06:42:28 +01:00
James Munnelly ff8ebef492 Bump Helm chart strings for v0.13.0-alpha.0
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 09:29:50 +00:00
jetstack-botandGitHub adce70f649 Merge pull request #2436 from ttarczynski/patch-1
Bump default 'image.tag' value in helm chart README.md
2019-12-12 15:32:15 +00:00
Nicolas Fischer f8c83a1411 issue 2443 - annotations for cert-manager deployments
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2019-12-11 15:37:21 +00:00
jetstack-botandGitHub 6544ab93c5 Merge pull request #2449 from UKHomeOffice/issue-2448
issue 2448 - Optional securityContext for cainjector and webhook char…
2019-12-11 15:27:32 +00:00