Commit Graph
231 Commits
Author SHA1 Message Date
James Munnellyandjetstack-bot 212ba66dc0 Fix JKS keystore functionality and add additional tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-23 11:48:52 +00:00
James Munnelly 98bc0d52f9 Add --experimental-issue-jks flag to enable JKS bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 15:33:22 +00:00
James Munnelly e9374730c9 Add --experimental-issue-pkcs12 flag to enable PKCS12 bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 10:02:21 +00:00
Josh Soref b4f28e5d04 spelling: deprecated
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:42:26 -05:00
Josh Soref 8d801fc100 spelling: certificate
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:15:51 -05:00
James Munnelly 1f7f23895d Ensure fetched certificate is valid for CSRs public key before issuing
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-22 16:42:58 +00:00
JoshVanL 2f3fe4c3d7 Reduce comments by removing invalid data in CR implementations doing
better InvalidRequest checking

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-17 14:11:25 +00:00
JoshVanL f9f8fbd311 Add InvalidRequest condition check to Certificate controller:
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:14:21 +00:00
James Munnelly 9daad6dd93 Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 15:11:07 +00:00
James Munnelly 7076041de6 Don't overwrite existing certificates when issuing a temporary certificate
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 13:53:38 +00:00
James Munnelly 698e7a522a Fix certificate controller expiry metrics
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-29 18:29:23 +00:00
JoshVanL 232b1133fd Adds more tests for deprecated secret annotations and update secret
annotations if deprecated ones exist

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-27 15:12:25 +00:00
JoshVanL 0d9d0eeb22 Allow secrets with legacy annotations for issuer name and kind to match
existing certificates

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-26 12:13:58 +00:00
JoshVanL bca6ebc520 Ensure key usages are set on CertificateRequests created by the
Certificate controller

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-05 14:22:25 +00:00
James Munnelly 6b19892908 Fix regression in certificates controller setting owner references
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-09 11:33:21 +01:00
JoshVanL 7d615ff8e4 Remove getting secret from lister in matches spec func
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-03 10:01:57 +01:00
JoshVanL 66cda5cbd7 Only match for common name in DNS names if common name was given
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 54f8069a78 Make annotation of secret if nil to prevent panic
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 18e0dcdb63 Adds boilerplate copyright to util_test.go
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL 13b0584838 Change behaviour to be more relaxed around common names
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL f249888112 Only add common-name annotation if commonName exists
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
JoshVanL dd7213866f Adds validation for URIs to certificate validation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 17:48:37 +01:00
James Munnelly 9a807be80a Fix not returning updateErr if updating status failed
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-02 14:09:24 +01:00
JoshVanL de07651142 Remote updatestatus todos and add minimal version to docs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-30 13:47:51 +01:00
JoshVanL 94d077a5fb Adds status sub resource and changes updates
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-30 13:47:50 +01:00
JoshVanL 869370e226 Cleans up code and naming
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:35:52 +01:00
JoshVanL ced21c287f Conformance: Ensure if a certificate is deleted then a new certificate is signed with
same key

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-26 17:34:42 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly bf9fbea23f Update codebase for new meta apigroup
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 19:25:04 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly 80cbcb35fb Add issue-temporary-certificate annotation to control temporary cert issuance
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 15:26:41 +01:00
James Munnelly 7e1312794c Set certificate-name annotation on CertificateRequest resources
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 17:05:02 +01:00
James Munnelly 79f2cd60f4 Pass down annotations from Certificate resources to Orders via CertificateRequests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 16:38:43 +01:00
James Munnelly 51bf98581e Remove deprecated code from certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
jetstack-botandGitHub f1d591a531 Merge pull request #1959 from munnerz/basic-conformance-certificates
Add very basic Certificates based conformance suite
2019-09-04 15:18:33 +01:00
James Munnelly c4e00311ba Set certificate name annotation in certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-03 11:20:51 +01:00
James Munnelly cb71859bad Copy labels from Certificate to CertificateRequest
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-03 10:52:32 +01:00
James Munnelly 1b8a286206 Rename Setup->Init and use Start to start informers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-22 13:11:33 +01:00
jetstack-botandGitHub dcba8ebd06 Merge pull request #2002 from munnerz/internal-apiversion
Add internal API version, enable defaulter & conversion-gen and implement mutating webhook
2019-08-21 21:53:36 +01:00
James Munnelly 6052e0558e Refactor base controller and allow Running additional informers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:22:57 +01:00
James Munnelly 73d66c44ab Move API validations package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:11:01 +01:00
jetstack-botandGitHub f7f0e9f16a Merge pull request #1987 from munnerz/ca-crt-api
Move TLSCAKey to v1alpha1 package
2019-08-14 12:02:55 +01:00
James Munnelly ce475e1640 Move TLSCAKey to v1alpha1 package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 01:21:15 +01:00
jetstack-botandGitHub 0c5694723f Merge pull request #1979 from JoshVanL/cr-failure-time
Adds CertificateRequest FailureTime
2019-08-13 20:50:15 +01:00
JoshVanL 7e56ce1c01 Adds CR reporter tests and cleans up code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 17:24:38 +01:00
JoshVanL f1e4e2b16c Remove fired event when a certificate request is re-scheduled when
failed but < 1 hour

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 12:21:28 +01:00
JoshVanL eed1e4ba21 Move certificates cr controller to use a switch on condition status
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 12:10:13 +01:00
James Munnelly 3bb5fb1897 Fix concurrent map write panic
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-13 12:07:41 +01:00
JoshVanL d7ada47686 Retry failed CertificateRequests in the Certificate controller based on
FailureTime of the CertificateRequest status

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-12 14:03:37 +01:00
JoshVanL 071e5ab208 Always set secret ref annotation for CRs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00