home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-27 22:16:49 +10:00
Code Issues Packages Projects Releases Wiki Activity
4,848 Commits 37 Branches 119 Tags
7cef4582ec8e33ff2f3b8dcf15b3f293f6ef82cc
Commit Graph
4848 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
jetstack-botandGitHub 7cef4582ec Merge pull request #3519 from meyskens/rm-webhook-helm-hack 
Remove Helm hack for webhook API versions
v1.2.0-alpha.0 		2020-12-17 17:48:41 +00:00
jetstack-botandGitHub d4731ec523 Merge pull request #3522 from meyskens/rm-apimig 
Remove api-migration tool
 2020-12-17 17:27:42 +00:00
jetstack-botandGitHub f19a5e6402 Merge pull request #3463 from wallrj/2667-acme-stalled-orders 
Wait for order-controller to add certificate data to the Order
 2020-12-17 16:30:41 +00:00
Maartje Eyskens 1dd6443f98 Remove api-migration tool 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-17 15:13:21 +01:00
jetstack-botandGitHub 5b2d0d660e Merge pull request #3465 from wallrj/3396-ingress-renew-before 
Add duration and renew-before Ingress annotations to set those fields on the Certificate
 2020-12-16 15:50:04 +00:00
Maartje Eyskens 5ce6a5aebd Properly remove caBundle hack too 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-16 16:02:42 +01:00
jetstack-botandGitHub 7bca0709ae Merge pull request #3515 from meyskens/new-ua 
Rename the User Agent fields
 2020-12-16 12:05:04 +00:00
Richard Wall 4ba546c97b E2E test for all Certificate field related ingress annotations 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-16 11:06:20 +00:00
jetstack-botandGitHub a1fe0498f2 Merge pull request #3440 from aledbf/update 
Update ingress-nginx addon
 2020-12-16 10:48:03 +00:00
Richard Wall 9cd3eaabf7 Add a duration Ingress annotation to set the duration field on Certificate 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-16 09:40:28 +00:00
Maartje Eyskens 929f9edcd0 Remove more checks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-16 10:35:13 +01:00
Maartje Eyskens 5819818242 Remove Helm hack for webhook API versions 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-16 10:24:17 +01:00
Maartje Eyskens 7078a5c7b8 Rename the User Agent fields 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:25:18 +01:00
Richard Wall 27d0f011be Delete Order if its certificate data is bad or unexpected 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 13:46:52 +00:00
Richard Wall fb01c3b3c2 Tests for handling of Orders with bad certificates 
* Badly formed certificates, and
* certificates with an unexpected public key.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 13:44:59 +00:00
Maartje Eyskens 1017967bfa Remove comment 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 13:22:29 +01:00
Richard Wall 98e2f1c8f3 Wait for order-controller to add certificate data to the Order 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 10:22:38 +00:00
Richard Wall 02883417ee Re-organise the handling of non-failed but not-yet-valid Orders 
Exit early in this case and move the happy case to the end of the function.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 10:22:38 +00:00
Richard Wall 26aa0e29fa Add a renew-before Ingress annotation to set the renewBefore field on the Certificate 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 10:19:07 +00:00
Richard Wall bae51b92b2 Simplify some ingress-shim helper functions 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 10:19:07 +00:00
Maartje Eyskens c0aa031339 Fix deploy of ingress-nginx 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 11:18:35 +01:00
jetstack-botandGitHub cdc53b65cb Merge pull request #3500 from meyskens/update-copy 
Update copyright to cert-manager project
 2020-12-15 10:12:31 +00:00
jetstack-botandGitHub 34396bc93b Merge pull request #3499 from meyskens/ingress-netk8sbeta1 
Migrate Ingress to networking.k8s.io/v1beta1
 2020-12-14 09:50:12 +00:00
jetstack-botandGitHub b14a09be17 Merge pull request #3503 from meyskens/120-e2e 
Add Kubernetes 1.20 to the kind setup script
 2020-12-12 02:37:02 +00:00
Maartje Eyskens ab0cd57dc5 Use The cert-manager Authors. 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-11 19:04:13 +01:00
Maartje Eyskens 3da73f618e Add Kubernetes 1.20 to the kind setup script 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-11 18:53:01 +01:00
jetstack-botandGitHub 2c521609de Merge pull request #3477 from tharun208/feat/profiling 
Added profiling for controller
 2020-12-11 14:11:10 +00:00
Tharun b4df9b3567 removed gorilla mux and used profiling util 
Signed-off-by: Tharun <rajendrantharun@live.com>
 2020-12-11 17:54:55 +05:30
jetstack-botandGitHub fcf54969dd Merge pull request #3489 from exceptionfactory/3373-truststore-p12 
Add creation of truststore.p12 from CA
 2020-12-11 10:21:07 +00:00
Manuel Alejandro de Brito Fontes e6c0b4d19f Update ingress-nginx addon 
Signed-off-by: Manuel Alejandro de Brito Fontes <aledbf@gmail.com>
 2020-12-09 20:52:24 -03:00
jetstack-botandGitHub 98b2da503c Merge pull request #3504 from meyskens/rm-legacy-kind 
Remove legacy kind + old kind kubernetes versions
 2020-12-09 17:48:22 +00:00
exceptionfactory 967fed5309 Reverted changes to removed v1beta1.yaml 
Signed-off-by: David Handermann <exceptionfactory@gmail.com>
 2020-12-09 12:12:01 -05:00
Maartje Eyskens c753dc14d1 Fix unbound variable error 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 17:26:48 +01:00
Maartje Eyskens f32561ea60 Remove legacy kind + old kind kubernetes versions 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 17:13:48 +01:00
Maartje Eyskens c6e84d7c83 Switch informer to networking 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 16:36:11 +01:00
Maartje Eyskens 02c165a734 Update RBAC 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 16:25:32 +01:00
Maartje Eyskens 2413fb0bda Fix last clientsets 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 15:04:21 +01:00
jetstack-botandGitHub c195417ffa Merge pull request #3487 from meyskens/rm-legacy 
Remove the legacy release
 2020-12-09 11:53:16 +01:00
Maartje Eyskens 22aa9e89fa Comment on why the variants are there 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 11:22:05 +01:00
Maartje Eyskens 4ef0de99b9 Remove lost section of legacy 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-09 11:22:05 +01:00
Maartje Eyskens 1788a9d758 Update copyright to cert-manager project 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-08 19:04:49 +01:00
exceptionfactory 9a32867a6f Updated CRDs #3373 
Signed-off-by: David Handermann <exceptionfactory@gmail.com>
 2020-12-08 11:49:31 -05:00
exceptionfactory e9dfbb7a1a Updated PKCS12 API docs and corrected code formatting #3373 
Signed-off-by: David Handermann <exceptionfactory@gmail.com>
 2020-12-08 11:23:16 -05:00
Maartje Eyskens 65281efff1 Migrate Ingress to networking.k8s.io/v1beta1 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-08 14:46:01 +01:00
jetstack-botandGitHub 7c53f88f19 Merge pull request #3476 from maelvls/unit-test-backoff-one-hour 
Move the 'back off for 1 hour' logic to a unit-tested func
 2020-12-08 11:02:17 +01:00
jetstack-botandGitHub 2520ed6ab4 Merge pull request #3478 from maelvls/fix-issuing-controller-not-waiting-request-match 
Bug: the issuing controller does not wait until the request matches the certificate before setting the certificate to "Issuing = False"
 2020-12-08 10:30:17 +01:00
Maël Valais 62f8db6e6a refactor(issuing): PR review: use MustCreateCryptoBundle directly 
Signed-off-by: Maël Valais <mael.valais@gmail.com>
 2020-12-06 14:22:02 +01:00
Maël Valais 6484010f5c fix(issuing): wait until req matches cert before setting failure 
The issuing controller wasn't checking if the certificate request that
it picked up is up to date. That resulted in the certificate being set
to "Failing" and "Issuing = False" due to an old certificate request
that was created during a previous issuance. The certificate would then
become stale.

Signed-off-by: Maël Valais <mael.valais@gmail.com>
 2020-12-06 14:22:02 +01:00
Maël Valais 17cd05ecab test(issuing): new test: when req mismatches, cert can't be updated 
This new unit test highlights an unexpected behavior of the issuing
controller: the issuing controller is updating the certificate's status
when the certificate request has a failure ("Reason = Failed"), but the
controller might have picked up an out-of-date certificate request.

The consequence is that the issuing controller would set the certificate
to "Issuing = False". That happens when a re-issuance is triggered with
an old failing certificate request.

Signed-off-by: Maël Valais <mael.valais@gmail.com>
 2020-12-06 14:22:02 +01:00
Maël Valais 07fd8754f5 refactor(trigger): add test case when failure just happened 
Signed-off-by: Maël Valais <mael.valais@gmail.com>
 2020-12-06 13:51:12 +01:00