home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-23 03:56:34 +10:00
Code Issues Packages Projects Releases Wiki Activity
6,005 Commits 37 Branches 119 Tags
a6ae7828573e2e2e93e4faa767af2711ef228532
Commit Graph
608 Commits
Author SHA1 Message Date
Richard Wallandjetstack-bot 792ce0d50a Cleanup hook resources from previous failed installs 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-09-06 10:07:16 +00:00
Nicolas Degoryjetstack-botRichard Wall
 		aae91fbb5d Apply suggestions from code review 
Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-09-03 15:36:09 +00:00
Nicolas Degoryandjetstack-bot 98e6a38fbc PR review 
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-09-03 15:36:09 +00:00
Nicolas Degoryandjetstack-bot 033460b16a add startup API check job PSP 
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-09-03 15:36:09 +00:00
jetstack-botandGitHub 081a5f2191 Merge pull request #4388 from jetstack-bot/cherry-pick-4384-to-release-1.5 
[release-1.5] finalisers -> finalizers
 2021-08-19 17:19:09 +01:00
Jake Sandersandjetstack-bot 1d83c2e284 Update Docs on solver type to reflect default service type 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-19 14:36:57 +00:00
Jake Sandersandjetstack-bot 2e52164622 finalisers -> finalizers 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-18 16:24:10 +00:00
irbekrmandjetstack-bot 1ce09d6eae Removes status fields from CRD definitions 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-18 15:43:04 +00:00
Ashley Davisandjetstack-bot 745515288b fix mistakenly changed CRDs for v1beta1 (#4352) 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-08-13 13:40:58 +00:00
Dean Coakleyandjetstack-bot c7fa2af425 Fix helm install commands for helm 3.x clients 
Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
 2021-08-09 12:08:55 +00:00
Dean Coakleyandjetstack-bot 306422825c Fix chart install command to include version 
Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
 2021-08-09 12:08:55 +00:00
Dean CoakleyandAshley Davis fb92d3f1e3 Fix chart prerequisites Kubernetes version 
Ref: https://cert-manager.io/docs/installation/supported-releases/

Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
 2021-08-06 17:07:25 +01:00
jetstack-botandGitHub 34cb511980 Merge pull request #4050 from longkai/fix-ssa 
explicitly specify port protocol field to allow server side apply
 2021-08-04 11:40:23 +01:00
jetstack-botandGitHub d647e543e3 Merge pull request #4276 from jakexks/gateway-http01 
Experimental Gateway API support for ACME HTTP-01 Solving
 2021-08-03 18:51:49 +01:00
jetstack-botandGitHub b5f80c428e Merge pull request #4234 from inteon/add_startupapicheck 
Add startup api check Job
 2021-08-03 17:41:49 +01:00
Jake Sanders 23e1acdd5c Update Gateway HTTPRoute Label doc string 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-03 15:26:40 +01:00
Jake Sanders c2d7a98192 Remove PodTemplate from Gateway Solver, rename to GatewayHTTPRoute 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-03 14:26:45 +01:00
jetstack-botandGitHub c333ace179 Merge pull request #4072 from Marfeel/master 
Add a name to Prometheus scraping service port for Istio compatibillity
 2021-08-03 11:43:19 +01:00
Fran Sanjuán 21bbdaced6 Set fixed port name 
Signed-off-by: Fran Sanjuán <francesc.sanjuan@marfeel.com>
 2021-08-03 11:55:38 +02:00
Jonathan Prates 50bb91a032 feat: update object description explaning the current behaviour 
Signed-off-by: jonathansp <jonathansimonprates@gmail.com>
 2021-08-03 09:26:23 +01:00
Jonathan Prates 9f36f8984b feat: copy SecretTemplate api to v1alpha2 v1alpha3 and v1beta1 
Signed-off-by: jonathansp <jonathansimonprates@gmail.com>
 2021-08-03 01:19:11 +01:00
Jonathan Prates 0569997ede feat: update crds 
Signed-off-by: jonathansp <jonathansimonprates@gmail.com>
 2021-08-03 01:19:11 +01:00
Jake Sanders b38869b551 Gateway HTTP01: Make docs better, only enable gateway solver if gateway API is found 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-02 14:06:23 +01:00
Jake Sanders 34a844b150 Fix validation test, add RBAC for gateway API 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-02 14:06:21 +01:00
Jake Sanders deb9ccc5a9 HTTP01 solver support for the Gateway API 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-02 14:06:16 +01:00
Jake Sanders 6f6213c5fd APIs and validation 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-02 14:06:09 +01:00
Inteon 06e2ac2d41 change weight of hook resources and only delete after all hooks have finished 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-30 17:31:25 +02:00
jetstack-botandGitHub b04e42c437 Merge pull request #4253 from JoshVanL/apiextensions-v1beta1-v1 
Conversion: Apiextensions v1beta1 -> v1
 2021-07-30 15:49:49 +01:00
Inteon 0eabaec743 change startupapicheck to helm post-install hook 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-30 16:04:55 +02:00
joshvanl 29514ff09d Adds v1beta1 as a supported admissionReviewVersion with a note as to 
why it is listed even though we don't support it

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-29 11:10:25 +01:00
joshvanl fbfe48cad8 Change webhook manifests for mutation and validation to only accept v1 
in admissionReviewVersions

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-29 11:10:25 +01:00
joshvanl 6c5a4897b6 Adds note as to why v1beta1 is still an accepted 
`conversionReviewVersion`

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-28 15:49:50 +01:00
Inteon e73f3bed12 update README.template.md, add startupapicheck flags 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-28 16:47:31 +02:00
joshvanl b3ece6708a Adds v1beta1 as a conversionReviewVersion but don't actually support 
it

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-28 15:36:58 +01:00
mortega d525001f80 Adding webhook.serviceLabels to README template 
Signed-off-by: Marco Ortega <mortega@brightcove.com>
 2021-07-27 10:24:29 -05:00
Inteon 9092bf8bb6 use correct component name in comments & add --wait-for-jobs flag 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-27 15:54:00 +02:00
mortega feee2fd76c Enabling serviceLabels for webhook service. 
Signed-off-by: Marco Ortega <mortega@brightcove.com>
 2021-07-27 07:03:16 -05:00
joshvanl 5680bfd4b3 Change all CRDs to no longer accept v1beta1 conversionReviewVersions 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-26 17:05:58 +01:00
Inteon 411452809c add startup api check Job 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-20 19:40:53 +02:00
Maël ValaisandJake Sanders 30f9c123d3 gateway-shim: add the gateway-shim controller 
Note that the gateway-shim is only half the work for supporting the
Gateway API in cert-manager. The other half is the HTTP01 solver
support, which is still worked on.

The Gateway API in cert-manager is releases as an experimental feature
and needs to be enabled manually with the following flag:

  --controllers=*,gateway-shim

All the annotations supported by ingress-shim are also supported by
gateway-shim, with some exceptions:

  "acme.cert-manager.io/http01-ingress-class"

This annotation is not supported on the Gateway resource. Although the
Gateway resource also has a "gatewayClass" field, we will need to add
another field instead of "ingress-class" to avoid confusion with the
ingress-shim.

  "acme.cert-manager.io/http01-edit-in-place"

This annotation is not supported because it is specific to some ingress
controllers like ingress-gce.

  "kubernetes.io/tls-acme"

This annotation is not supported because it is a behavior inherited from
kube-lego and we chose not to keep this behavior with the Gateway API.

Unlike the ingress-shim, you can reuse the same Secret name in multiple
TLS configurations on the same Gateway resource.

The ingress-shim now shows the exact location of the duplicate
secretName when the user gives the same secretName in two separate TLS
blocks.

Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: Jake Sanders <i@am.so-aweso.me>
 2021-07-15 20:34:55 +02:00
jetstack-botandGitHub c546f5bbd9 Merge pull request #4190 from inteon/helm_labels 
Remove Helm-specific labels & add version label
 2021-07-13 18:27:03 +01:00
Inteon c7d92681b8 add comments 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-13 17:58:28 +02:00
Inteon 0683738458 fix bug & add comment & cleanup 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-13 13:41:37 +02:00
Inteon 043bbd283e remove helm-specific labels & add version label 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-11 17:42:32 +02:00
irbekrm 160e638c8f Explicitly set webhook match policy to Equivalent 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-08 08:16:48 +01:00
irbekrm 3fc6fc62a2 Mutating and validating webhooks only accept v1 resources 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-06 07:36:14 +01:00
jetstack-botandGitHub e7a9ec0dab Merge pull request #4178 from maelvls/vault-cabundle-base64 
vault issuer: specify that the caBundle must be base64-encoded
 2021-07-05 20:31:27 +01:00
ulrich giraudandMaël Valais b9c9231305 vault issuer: specify that the caBundle must be base64-encoded 
Signed-off-by: Ulrich GIRAUD <ulrich.giraud@pole-emploi.fr>
Signed-off-by: Maël Valais <mael@vls.dev>
 2021-07-02 20:54:03 +02:00
Inteon f228e6c7be fix command flags + move to experimental + redo uninstall logic 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-02 12:58:30 +02:00
jetstack-botandGitHub 02d90248de Merge pull request #4079 from annerajb/support-ed25519 
support-ed25519
 2021-06-15 16:17:53 +01:00