home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-28 22:47:05 +10:00
Code Issues Packages Projects Releases Wiki Activity
3,543 Commits 37 Branches 119 Tags
94bc5f60f81ca3c5e04456b66ea79f40c0fe74e5
Commit Graph
154 Commits
Author SHA1 Message Date
James Munnelly af63f08074 Fixup using devel tools in CI 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-23 12:57:03 +00:00
James Munnelly 8b43813072 Update test/e2e to no longer deploy using addons 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-22 22:08:27 +00:00
Periklis Tsirakidis a1f63b953d Use vault api and sdk modules instead of tagged repo 
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
 2020-01-20 12:27:09 +01:00
James Munnelly b50f0a983a Fix issue using new apiserver lib with older Kubernetes 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-17 17:14:42 +00:00
JoshVanL f03cf45a9e Generate Name on e2e secret names and clean up 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-13 11:03:12 +00:00
JoshVanL 836800d1e7 Correctly de-duplicate ext key usages in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 14:34:45 +00:00
JoshVanL b3c301dfd4 De-duplicate ext key usages is e2e tests getting defaults 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 13:18:30 +00:00
jetstack-botandGitHub d3254e3843 Merge pull request #2260 from JoshVanL/2247-cert-key-usages 
Ensure key usages are set on CertificateRequests created by the Certificate controller
 2019-11-07 17:14:34 +00:00
JoshVanL b4e62d0fce Increase vault health timeout try 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 17:59:38 +00:00
JoshVanL 50d9b1f038 Ignore key encipherment of e2e tests when key is EC 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 15:23:51 +00:00
JoshVanL b2337cdf9e Creates a proper wrapper for vault port-forwarding to keep it alive and 
healthy

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:23:23 +00:00
JoshVanL 206c4a3909 Ensure no ECDSA keys have key enrichment expected for e2e 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 9c2a37fbfd Remove key encipherment for DNS01 ACME ECDSA certs 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 2bb8bfe07a Adds server auth to Venafi default key usages 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 48afefbeb4 Adds key usage exceptions for vault in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 78196cffe5 If certificate uses Vault or ACME issuer then add server/client auth key 
usages as expected

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 192566d789 Adds conversion for key usage int to string 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL fca395bb4d Expose non-matching key-usages with string 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL a03560b93a Updates tests to ensure that key usages are correctly checked 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
James Munnelly 2138dde7c3 Run a single instance of Pebble during the e2e suite 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 21:48:58 +01:00
James Munnelly 0472ac4f09 Print 'kubectl apply' output during e2e tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-11 11:05:26 +01:00
James Munnelly 6138f0c3c4 Fix e2e jobs on Kubernetes 1.14 and below 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-10 18:36:19 +01:00
JoshVanL e64d0a26be Add allowed URI names to e2e test vault server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 15fccf9ebb Adds describe CertificateRequest in tests when waiting for valid 
certificate fails and enable no CommonName for vault server

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 8175a59ab3 Changes e2e test for DNS for expected to be subset 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL b48b0e58fd Prevent panic in e2e tests caused by change in DNS name behaviour 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 13b0584838 Change behaviour to be more relaxed around common names 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 88cadca433 Adds proper checking for common name in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL dd7213866f Adds validation for URIs to certificate validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
James Munnelly 655b432e32 Bump ingress-nginx to a version compatible with k8s 1.16 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-02 15:21:17 +01:00
JoshVanL 869370e226 Cleans up code and naming 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:35:52 +01:00
JoshVanL cd53c9e004 Wait for secret to contain cert for deletion e2e test 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:35:01 +01:00
JoshVanL bcd94fc2f1 e2e: Adds fuz to cert duration check and fix waiting for cert unready 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:35:01 +01:00
JoshVanL 0f55a21e32 Set vault e2e to key_type=any 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:34:42 +01:00
JoshVanL ced21c287f Conformance: Ensure if a certificate is deleted then a new certificate is signed with 
same key

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:34:42 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-26 12:52:43 +01:00
JoshVanL 9ffaae5bfd Adds review comments 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 14:01:19 +01:00
JoshVanL 5f25ffadd8 Increase scope of vault addon tokenreview permissions to cluster 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL f6e1964b93 Set role name correctly for vault addon with Kube Auth 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL f2f5fccb85 Addresses comments and makes vault auth pointers 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
Adam KunickiandJoshVanL 7058dfc687 Added Kubernetes authentication type for Vault Issuer 
Signed-off-by: Adam Kunicki <adam@streamsets.com>
 2019-09-23 13:33:29 +01:00
James Munnelly f2f3aee50d Update codebase for new API group 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-23 12:06:13 +01:00
James Munnelly bf9fbea23f Update codebase for new meta apigroup 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 19:25:04 +01:00
James Munnelly eda613e6f0 Revert API version change in samplewebhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 17:26:55 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 16:22:43 +01:00
JoshVanL 6a362c67b0 Move e2e output logs with suffixes 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-12 15:59:54 +01:00
JoshVanL 3455747723 Include previous logs and use all containers from pods 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-11 22:02:10 +01:00
James Munnelly c4e00311ba Set certificate name annotation in certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-03 11:20:51 +01:00
stuart.warren 7eb1e34e48 feat: enable certificate keyusages 
Enable users to request x509 key usages and extended key usages when
defining a certificate or certificate signing request

fixes: #301

Signed-off-by: stuart.warren <stuart.warren@ocado.com>
 2019-08-31 01:00:00 +01:00
JoshVanL 277dc7ab17 Adds CertificateRequest to condition matcher in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-15 17:18:11 +01:00