Commit Graph
95 Commits
Author SHA1 Message Date
James Munnellyandjetstack-bot 212ba66dc0 Fix JKS keystore functionality and add additional tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-23 11:48:52 +00:00
James Munnelly 98bc0d52f9 Add --experimental-issue-jks flag to enable JKS bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 15:33:22 +00:00
James Munnelly e9374730c9 Add --experimental-issue-pkcs12 flag to enable PKCS12 bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 10:02:21 +00:00
Josh Soref d98d4f898e spelling: separated
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:44 -05:00
Andrew Haines 3edb4c3c6c Remove IP address validation on dns01-recursive-nameservers to allow domain names
Signed-off-by: Andrew Haines <andrew@haines.org.nz>
2019-12-05 13:34:55 +00:00
jetstack-botandGitHub 1793e7b573 Merge pull request #2236 from munnerz/covered-images
Add Bazel image targets with coverage enabled
2019-11-14 10:54:09 +00:00
James Munnelly 4266e11747 Remove calls to os.Exit and panic
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-13 17:38:33 +00:00
jetstack-botandGitHub 66d32a204f Merge pull request #2242 from munnerz/cm-manifestlist-acmesolver
No longer use arch-specific acmesolver image
2019-10-17 14:16:14 +01:00
chenjun.cj fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
2019-10-17 12:14:28 +08:00
James Munnelly 7eb2e5efa0 No longer use arch-specific acmesolver image
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 16:24:34 +01:00
JoshVanL 4eb6335c76 Support out of tree issuers in ingress-shim
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly 6a167cc9e6 Enable all CertificateRequest controllers by default
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly bc61194709 Remove deprecated code from ingress-shim controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly 6052e0558e Refactor base controller and allow Running additional informers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:22:57 +01:00
JoshVanL d96c7d2e1c Adds venafi internal package with venafi CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
jetstack-botandGitHub 8ab4dc1301 Merge pull request #1943 from JoshVanL/cr-acme
Adds acme CertificateRequest controller
2019-08-17 00:34:00 +01:00
JoshVanL e2b9b21766 Adds acme CertificateRequest controller with unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-15 17:18:11 +01:00
James Munnelly 5c17c2e37f Add webhookbootstrap controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 21:27:36 +01:00
JoshVanL 60b349e162 Adds initial vault CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:34:17 +01:00
JoshVanL 46fd159f81 Register self signed CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
James Munnelly 99bbc31386 Promote 'Clock' to be a field on controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 12:30:23 +01:00
James Munnelly 32bc10710e Update use of featuregate package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-20 01:57:24 +01:00
James Munnelly 088e196d82 Add experimental certificate request based controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:07:36 +01:00
jetstack-botandGitHub c6cd522a6a Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller
Add alpha CertificateRequest controller for CA Issuer type
2019-07-08 14:11:34 +01:00
JoshVanL ec28f8dc6e Adds certificate request controller feature flag
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-03 15:43:14 +01:00
JoshVanL 6b1ff0148b Adds certificate request base controller and CA issuer controller
instance

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-03 15:42:03 +01:00
James Munnelly 5f5811b81e Respect --namespace flag in rfc2136 provider
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-03 13:52:43 +01:00
Michael Tsang 2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-05-13 16:55:38 +01:00
James Munnelly 942d6491d6 Pass StopCh and RESTClient to controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:08 +01:00
James Munnelly 871ed4283b Allow controller constructors to return errors
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:04 +01:00
Lennart Jern cd576dd8db Set default acmesolver image based on arch
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
2019-03-22 17:32:34 +01:00
Louis Taylor c640c2f070 Expose metrics server on non-leader instances
This makes sure all cert-manager instances have a metrics endpoint.

Fixes #1352.

Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-03-18 12:41:39 +00:00
James Munnelly 5d73076db9 Update logs package for go-logr
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 2f30258f0e Switch to klog
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:02 +00:00
James Munnelly a9d8f7de8a Fixup for Kubernetes 1.13.2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 11:53:19 +00:00
James Munnelly 0bb864871e Increase acmesolver default cpu resource limit to 100m
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-07 17:16:01 +00:00
James Munnelly 094ae3e50c Fix CLI flag not being respected
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 16:11:37 +00:00
jetstack-botandGitHub 5f96b378e6 Merge pull request #1184 from tlmiller/feature/authnss
Control authoritative dns01 server check.
2019-01-12 15:25:07 +00:00
Thomas Miller dacd0b45cb Control authoritative dns01 server check.
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
2019-01-12 20:17:28 +10:00
Louis Taylor 3d0e06a0b9 Add note to help text about clusterissuers
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
Louis Taylor bbda87b3c8 Add --namespace flag
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
James Munnelly 0fcc0c666c Update copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-01-07 15:07:55 +00:00
James Munnelly bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-29 22:49:55 +00:00
jetstack-botandGitHub a21ac37a74 Merge pull request #713 from kragniz/add-prometheus-metrics-endpoint
Add cert-manager specific metrics to Prometheus endpoint
2018-11-26 15:45:33 +00:00
jetstack-botandGitHub 2c74eabb1c Merge pull request #819 from ccojocar/cert_secret_ref
Set the certificate as an owner of the secret
2018-11-26 15:06:33 +00:00
Louis Taylor cf872a9fc9 Add prometheus metrics
Count certificate requests

Add certificate_expiry_time_seconds metric

Register certificate_expiry_time_seconds metric, fix kind switch and fix metric status result

Export nameForIssuer and remove unneccessary switch

Refactor metrics into controller context

Move metrics collection into functions

Move error checking for metrics collection back into sync function

Remove space

Add TODO

Move update certificate expiry function to metrics package

Refactor metrics functionality

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Run dep ensure

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Fix build

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Refactor

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Fix reporting errors

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Add comments

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Remove unused issuerType

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Update dep inputs-digest

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Don't update status

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Make metrics package level var

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Add prometheusMetricsServerMaxHeaderBytes comment

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Add failures metric

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Remove issue metrics

TODO: hopefully revert this at some point.
Signed-off-by: Louis Taylor <louis@kragniz.eu>

Assign metrics

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Update dep digest

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Fix copyright header

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Remove old metrics server

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Update bazel files

Signed-off-by: Louis Taylor <louis@kragniz.eu>

Clean up

Signed-off-by: Louis Taylor <louis@kragniz.eu>
2018-11-26 13:13:44 +00:00
Cosmin Cojocar 3766edcd12 Set the default value of enable-certificate-owner-ref to false
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-11-26 09:48:02 +01:00
jetstack-botandGitHub ace5c2b2f2 Merge pull request #738 from gambol99/acme_options
Configurable ACME Annotation
2018-11-06 16:00:02 +00:00