Commit Graph
1618 Commits
Author SHA1 Message Date
James Munnelly 38aa959f95 accounts: Use RWMutex instead of regular Mutex
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-05-13 14:33:49 +01:00
James Munnelly b126a0c0e5 Use acme AccountRegistry throughout and tidy up ACME setup code
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-05-13 13:14:46 +01:00
James Munnelly 81b6c74e63 Add ACME account registry structure
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-05-13 10:08:06 +01:00
James Munnelly 982b21bb06 Fix bug that could lead to validation to fail when attempting to update immutable field
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-05-01 12:33:14 +01:00
James Munnelly 3e8649abc2 Handle ACME orders with already valid authorizations upon first fetch through new 'initialState' field
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-05-01 12:33:14 +01:00
James Munnelly 9cb68d1d91 Remove serverAuth default usage & remove unused DefaultKeyUsage functions
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-30 15:57:12 +01:00
jetstack-botandGitHub c0c74216d5 Merge pull request #2843 from JoshVanL/certificate-issuing-controller-temporary-certificate
Issuing controller temporary certificate support
2020-04-30 12:30:55 +01:00
JoshVanL a4cfd41ce7 Updates comments to proper working/capitalisation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-30 11:53:42 +01:00
Mehdi AbaakoukandMehdi Abaakouk 13c2539a78 cloudfare: update per_page max to 100
cloudfare just changed the maximum of per_page in their API to 100.

  Warning  PresentError  2m41s (x11 over 75m)  cert-manager
  Error presenting challenge: Cloudflare API Error
  Error: 9205: Per_Page must be a number between 5 and 100

This change fixes that.

Signed-off-by: Mehdi Abaakouk <sileht@sileht.net>
2020-04-28 15:25:27 +02:00
jetstack-botandGitHub 59ff99811b Merge pull request #2851 from munnerz/fixup-webhook-requestkind
Support Kubernetes 1.15 and below properly in validating webhook
2020-04-28 13:18:29 +01:00
James Munnelly c641443e92 Support Kubernetes 1.15 and below properly in validating webhook
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-28 11:51:58 +01:00
JoshVanL dc4ba16051 Adds comments to clarify issuing_controller_test Certificate current
revision

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-28 11:03:26 +01:00
JoshVanL d830db4ef7 Adds more temp cert tests, don't issue temp cert of different private
key and use shared GenerateLocallySignedCertificate

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-27 16:31:12 +01:00
JoshVanL c115e6c2bf internal/test.go accepts fixed clock and Shares
generaleLocallySignedCertificate

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-27 16:29:58 +01:00
JoshVanL 7d1d94fedb Adds issuing controller temporary certificate units tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-26 19:39:08 +01:00
JoshVanL 095976548d Adds temporary certificate logic to issuing controller based on
annotation

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-26 19:16:57 +01:00
JoshVanL 92c2d3c7c4 Moves secretmanager and testing util into separate package to refactor
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-26 15:45:10 +01:00
JoshVanL 11961b992d Moves Certificate Issuing validation logic and key fetch earlier in sync
loop

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-26 15:01:32 +01:00
Maartje Eyskens f2b36483a4 Set Issuer kind specific to Issuer if cert-manager.io/issuer is specified.
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-24 16:16:04 +02:00
jetstack-botandGitHub 49e1a7a51c Merge pull request #2825 from meyskens/add-origin-tag
Add cert-manager origin tag in Venafi
2020-04-22 16:48:02 +01:00
Maartje Eyskens 3747cf2000 Fix up test and make code look nicer
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-22 17:08:34 +02:00
Maartje Eyskens 453640dd4d Add cert-manager origin tag in Venafi
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-22 16:42:55 +02:00
James Munnelly 7978fbe081 Address review feedback and include truststore.jks with JKS mode enabled
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-22 15:20:49 +01:00
James Munnelly ba33c823a3 Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 17:58:18 +01:00
jetstack-botandGitHub 4aff1ce3f0 Merge pull request #2814 from munnerz/privatekey-rotation
keymanager: support private key rotationPolicy field
2020-04-21 16:02:53 +01:00
James Munnelly 6a827c6b8b Don't use fixed length map
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 14:49:25 +01:00
James Munnelly 019f64e841 Fix test failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 10:25:56 +01:00
James Munnelly 6d02c855ee Regenerate files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 10:07:13 +01:00
James Munnelly 8a628c3315 Update field comments on ChallengeSpec
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 10:07:03 +01:00
James Munnelly a17d04260e requestmanager: copy labels and annotations onto CertificateRequest resources
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
James Munnelly 212ef42a66 util/pki: allow certificates only specifying IP, URI or Email SANs to be signed
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
James Munnelly f04696747c Fix SecretDataAltNamesMatchSpec for loose matching and add tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
James Munnelly 23892bc6e4 keymanager: support private key rotationPolicy field
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
James Munnelly 4daa3b086b Update generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
James Munnelly 129b5f8303 Add fields for controlling private key rotation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
James Munnelly e8cc2ba4ac Fix selfsigned issuer unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly a9dd260e95 requestmanager: tidy up and add unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly 48958036bf Set NotAfter field in readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly 1c26ae412d Move some logic into separate method
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly 945dde4175 Fix PolicyFunc reference in trigger controller tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly 8aaca4a2ad expcertificates: add readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly 53fa3b70ab Move trigger policies into separate package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly 707b7a486a Fix missing append bug
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly a572f739c2 Add trigger policy for private key not matching spec
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly b5c169e35a Fix panic in issuing controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly cde13aa6fd Add requestmanager controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
jetstack-botandGitHub 91d598b1de Merge pull request #2810 from munnerz/keymanager-controller
expcertificates: add keymanager controller
2020-04-20 10:17:38 +01:00
jetstack-botandGitHub 4adec72ac9 Merge pull request #2681 from gitirabassi/feat/azure-auth-msi-master
feat(azure): add usage of Managed Identities for azuredns
2020-04-20 08:42:38 +01:00
jetstack-botandGitHub 687d47f832 Merge pull request #2027 from pepov/auditsink-injector
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
2020-04-20 08:23:38 +01:00
Maartje Eyskens db45891705 Add missing context
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 16:39:06 +02:00