Commit Graph
55 Commits
Author SHA1 Message Date
James Munnelly 98bc0d52f9 Add --experimental-issue-jks flag to enable JKS bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 15:33:22 +00:00
James Munnelly e9374730c9 Add --experimental-issue-pkcs12 flag to enable PKCS12 bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 10:02:21 +00:00
Josh Soref d98d4f898e spelling: separated
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:44 -05:00
Andrew Haines 3edb4c3c6c Remove IP address validation on dns01-recursive-nameservers to allow domain names
Signed-off-by: Andrew Haines <andrew@haines.org.nz>
2019-12-05 13:34:55 +00:00
jetstack-botandGitHub 66d32a204f Merge pull request #2242 from munnerz/cm-manifestlist-acmesolver
No longer use arch-specific acmesolver image
2019-10-17 14:16:14 +01:00
chenjun.cj fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
2019-10-17 12:14:28 +08:00
James Munnelly 7eb2e5efa0 No longer use arch-specific acmesolver image
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 16:24:34 +01:00
JoshVanL 4eb6335c76 Support out of tree issuers in ingress-shim
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly 6a167cc9e6 Enable all CertificateRequest controllers by default
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly bc61194709 Remove deprecated code from ingress-shim controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly 5c17c2e37f Add webhookbootstrap controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 21:27:36 +01:00
Michael Tsang 2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-05-13 16:55:38 +01:00
Lennart Jern cd576dd8db Set default acmesolver image based on arch
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
2019-03-22 17:32:34 +01:00
James Munnelly 0bb864871e Increase acmesolver default cpu resource limit to 100m
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-07 17:16:01 +00:00
James Munnelly 094ae3e50c Fix CLI flag not being respected
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 16:11:37 +00:00
jetstack-botandGitHub 5f96b378e6 Merge pull request #1184 from tlmiller/feature/authnss
Control authoritative dns01 server check.
2019-01-12 15:25:07 +00:00
Thomas Miller dacd0b45cb Control authoritative dns01 server check.
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
2019-01-12 20:17:28 +10:00
Louis Taylor 3d0e06a0b9 Add note to help text about clusterissuers
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
Louis Taylor bbda87b3c8 Add --namespace flag
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
James Munnelly 0fcc0c666c Update copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-01-07 15:07:55 +00:00
James Munnelly bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-29 22:49:55 +00:00
jetstack-botandGitHub 2c74eabb1c Merge pull request #819 from ccojocar/cert_secret_ref
Set the certificate as an owner of the secret
2018-11-26 15:06:33 +00:00
Cosmin Cojocar 3766edcd12 Set the default value of enable-certificate-owner-ref to false
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-11-26 09:48:02 +01:00
jetstack-botandGitHub ace5c2b2f2 Merge pull request #738 from gambol99/acme_options
Configurable ACME Annotation
2018-11-06 16:00:02 +00:00
James Munnelly b6f89ae9dd Regenerate files
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 12:31:16 +00:00
James Munnelly 85d433cff9 Add ACME challenge scheduler and process challenges for matching domains/types in serial
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 12:31:16 +00:00
Rohith e2f13f5f9c Requested Changes
- changing the name of the command line option to --auto-certificate-annotations
- making the option an array to allow for multiple annotations settings

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
2018-11-06 12:09:47 +00:00
Rohith 712a7a85ee Configurable ACME Annotation
- adds a option command line (default to the current behavour) which allows the user to control the acme annotation used by the shim controller
- a current mitgration requires use to run multiple providers at the same

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
2018-11-06 12:09:18 +00:00
Cosmin Cojocar 5d36fba075 Add a flag which controls whether the certificate is configured as an owner of the secret where the effective TLS certificate is stored
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-10-28 19:55:26 +01:00
James Munnelly 039a086f58 run //hack:update-bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-12 12:40:40 +01:00
James MunnellyandJames Munnelly 967a48e1dc Add ACME Order & Challenge controllers
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-12 12:40:38 +01:00
Arnold Bechtoldt 845eb7f57c make http01 solver pod resource request/limits configurable, refs #892
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
2018-09-26 14:39:06 +02:00
James Munnelly db65d6a170 run //hack:update-bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-09-13 11:24:48 +01:00
James Munnelly 51195e4c5f Update license header and add header to every file
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2018-08-13 15:53:37 +01:00
jetstack-botandGitHub c43e4d75f8 Merge pull request #801 from munnerz/renew-duration
Add RenewBeforeExpiryDuration option to controller context
2018-08-08 14:34:56 +01:00
James Munnelly fa0bc9998e Add RenewBeforeDuration option to controller context 2018-08-08 13:34:30 +01:00
James MunnellyandGitHub 12ab53b948 Update options.go 2018-08-08 13:28:37 +01:00
James Munnelly d63ba1257d Change leader election duration defaults to be less chatty 2018-08-08 00:54:26 +01:00
Louis Taylor 58d71216c3 Change flag to list of controllers to enable 2018-07-12 10:27:49 +01:00
Louis Taylor fd48a2e360 Add option for disabling ingress-shim
This adds a new flag, which can be used to disable running the
ingress-shim controller:

     --enable-ingress-shim=false
2018-07-12 10:27:05 +01:00
Louis Taylor e35a09bd72 Add validation 2018-07-05 14:47:41 +01:00
Louis Taylor 4804086fdf Add example to usage 2018-07-05 14:37:32 +01:00
Louis Taylor 14873c248a Use StringSlice 2018-07-05 14:37:08 +01:00
Louis Taylor ea6a5472e2 dns01-nameservers -> dns01-self-check-nameservers 2018-07-05 14:22:43 +01:00
Louis Taylor 3eaca6a318 Add flag for custom dns01 nameservers 2018-07-05 12:40:53 +01:00
James Munnelly fdb8f2bf40 Link ingress-shim into main controller binary 2018-04-26 12:44:40 +01:00
Louis Taylor f43b926570 Remove controller --namespace option 2018-04-05 14:32:29 +01:00
Euan KempandEuan Kemp 0fb787eae7 controller: add ambient issuer flags and feature
This implements ambient credential support for AWS, gated behind flags
for issuers and cluster issuers.

This adds the pair of flags discussed in
https://github.com/jetstack/cert-manager/issues/308.

It provides an implementation for those flag's effects for the route53
solver.
2018-03-23 14:30:43 -07:00