Commit Graph
723 Commits
Author SHA1 Message Date
jetstack-botandGitHub 914508a625 Merge pull request #3085 from meyskens/ingress-cn
Set a CN on ingress-shim + allow common-name annotation on ingress
2020-07-31 10:21:57 +01:00
Maartje Eyskens 4be07ade31 Also update labels
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-31 10:07:26 +02:00
Maartje Eyskens 3c7573ac12 Use crt variable to update certificate
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-29 19:20:00 +02:00
Maartje Eyskens 6e0d27234d Remove unused argument
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-28 17:40:17 +02:00
Maartje Eyskens 5be15c870f Remoce unused test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-28 11:21:09 +02:00
Maartje Eyskens 9844658e73 Remove defaulting behaviour
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-28 11:18:04 +02:00
jetstack-botandGitHub a67afed4ec Merge pull request #3076 from munnerz/trigger-retry-after-failure
Schedule a 'resync' of Certificates that have been marked as failed and are to be retried later
2020-07-20 09:44:23 +01:00
James Munnelly fdc0960d27 Schedule a 'resync' of Certificates that have been marked as failed and are to be retried later
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-20 09:19:11 +01:00
jetstack-botandGitHub d4bab3f369 Merge pull request #2979 from meyskens/venafi-async
Make Venafi issuer async
2020-07-15 15:27:34 +01:00
Maartje Eyskens 657a410178 Fix tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-10 16:20:50 +02:00
Maartje Eyskens 7c01c74b90 Move annotation update logic
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-10 11:05:07 +02:00
Maartje Eyskens 33b59460d1 Set a CN on ingress-shim + allow common-name annotation on ingress
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-09 10:59:48 +02:00
James Munnelly ec44d8992c Include Order failure reason as part of CertificateRequest failure message
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-07 16:11:58 +01:00
Maartje Eyskens e952560810 implement review feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-07 14:16:29 +02:00
jetstack-botandGitHub d4a743f91a Merge pull request #3038 from munnerz/v1beta1
add v1beta1 API version
2020-07-07 09:52:37 +01:00
James Munnelly 8b9ab18849 Add test for unknown challenge types
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-06 16:39:31 +01:00
James Munnelly 09d5121713 Update acmeorders controller for new field type
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-06 16:25:46 +01:00
Haoxiang Zhou fe80b7d760 Moved predicate package to pkg/util
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 12:23:15 +01:00
James Munnelly 1a2c676c61 Rename certificaterequest.spec.csr to 'request'
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-02 12:02:47 +01:00
Maartje EyskensandJames Munnelly 35365b79c9 Use venafi.cert-manager.io/pickup-id
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje EyskensandJames Munnelly 00d37aa21d Make wait timeout error less alarming
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje EyskensandJames Munnelly b81a0af6f8 Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje EyskensandJames Munnelly 63c66ee415 Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje EyskensandJames Munnelly ca5361d79d Make unit tests work
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje EyskensandJames Munnelly ac9895d91b Make Venafi issuer async
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
James Munnelly 8a1d7c6831 Remove AuditSink support from cainjector
The AuditSink resource type (previously in alpha) has been removed
as per https://groups.google.com/g/kubernetes-sig-auth/c/aV_nXpa5uWU.

Remove all support for it from our cainjector so we are able to
continue to upgrade dependencies, and to avoid more users coming
to rely on this functionality ahead of it being removed from
Kubernetes.

Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 19:35:20 +01:00
James Munnelly 9e2d6a514b Move expcertificates into certificates package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 12:16:25 +01:00
James Munnelly 2280480c02 Remove old certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 11:46:13 +01:00
James Munnelly 6caa4c451d Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly 1adfe16690 Bulk fix of non-test staticcheck failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 12:25:08 +01:00
jetstack-botandGitHub 63b7ca26b8 Merge pull request #3027 from munnerz/expcerts-renewal
expcertificates: fix bug renewing certificates automatically near expiry
2020-06-26 09:21:39 +01:00
James Munnelly 86b8cab328 expand out 'clearCertificateFields' function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-25 10:44:08 +01:00
James Munnelly ba26d65c68 schedule resyncs once renewalTime has passed to handle certificate renewals in the future
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly b3300b8673 update trigger policies unit tests for status.renewalTime field
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly fe51a02227 use status.renewalTime in trigger policies and correctly plumb through clock
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:37:50 +01:00
James Munnelly 8bb4bb389a use correct PolicyChain in readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:37:50 +01:00
James Munnelly 7cf74ec442 set notBefore and renewalTime status fields in certificate readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly 1d6424b8f2 Use 'clock' package in pkg/scheduler
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly 281b9ffcbd add RenewBeforeExpiryDuration function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
Haoxiang Zhou 6c72193678 Handle keyEncoding for temporary Certificates
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-23 10:17:41 +01:00
Haoxiang Zhou 5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-18 15:26:14 +01:00
jetstack-botandGitHub 46eaf3d1a4 Merge pull request #2923 from JoshVanL/new-metrics
Updates the metrics package + new metrics controller
2020-06-04 12:59:38 +01:00
JoshVanL e465329b80 Revert vault free port and expose listener port from metrics server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-26 23:01:55 +01:00
Haoxiang Zhou 7229741505 Changed tests for issuing controller to expect no ca.crt instead of nil
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 15:30:43 +01:00
Haoxiang Zhou 609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 14:37:40 +01:00
Haoxiang Zhou 3591de614d Changed unit tests to expect no ca.crt instead of nil
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 12:16:55 +01:00
Haoxiang Zhou dceae33364 Do not add ca.crt key to TLS secret if empty
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-05-26 12:16:20 +01:00
JoshVanL 9c9fe56f0b Update new files to use 2020 copyright
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-21 10:52:56 +01:00
JoshVanL 5539bf3495 Moves metrics controller into sub-package of ./controller/certificates
and fix metrics listen address flag description

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-21 10:47:52 +01:00
JoshVanL 3e7f7eb87e Expose Prometheus listen address as a controller command line flag
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-18 18:21:03 +01:00