Commit Graph
489 Commits
Author SHA1 Message Date
James Munnelly af9875e210 test/integration/webhook: Use context
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-30 17:24:02 +01:00
James Munnelly 3d1b43d343 Add 'dynamic' certificate source backed by an authority
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-30 14:25:54 +01:00
James Munnelly aa2e653b2e Add 'dynamic authority' controller for managing a Secret containing a CA
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-30 14:25:54 +01:00
James Munnelly 881b886049 Update Kubernetes API client call-sites
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-26 12:58:50 +00:00
James Munnelly 90e8c1589f Remove unused rule
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-17 10:04:35 +00:00
jetstack-botandGitHub e328cfd5aa Merge pull request #2708 from munnerz/fix-image-uid
Fix issue causing docker images to use UID 0 (root)
2020-03-17 09:51:25 +00:00
James Munnelly 0935277f3d Remove old 'image' targets and update to consistently use //build targets
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-17 09:47:01 +00:00
Maartje Eyskens 2236d1a271 Patch issue where runtime.Object is needed
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-13 15:51:14 +01:00
James MunnellyandMaartje Eyskens 4e5f9bc31d Add integration testing framework and a basic conversion test
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-13 15:32:50 +01:00
JoshVanL 7a1620a632 Adds a duration gap for the app role Vault e2e issuer test
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-03-10 13:18:44 +00:00
James Munnelly 66b2bc41f5 Increase timeout for sample DNS01 webhook e2e tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-09 12:17:56 +00:00
James Munnelly 9ee4a7d724 Use bind are rfc2136 server for DNS01 challenges
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-07 00:13:07 +00:00
James Munnelly 4fd0a7a89f e2e: don't wait for test namespace to be deleted before proceeding
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 20:47:17 +00:00
James Munnelly 9b6ba36840 e2e: remove noisy log message
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 20:47:17 +00:00
James Munnelly 363882c5df Use pebble instead of Let's Encrypt staging during DNS01 end-to-end tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 20:47:17 +00:00
James Munnelly f8444a676b Skip test initialisation if test case utilises unsupported features
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 10:27:41 +00:00
jetstack-botandGitHub 00b101de76 Merge pull request #2597 from meyskens/emailsans
Add Email SANs
2020-03-03 16:31:56 +00:00
Maartje Eyskens 96b54bfdac Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-03 11:24:25 +01:00
Josh Soref 11778da61e spelling: request
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:27 -05:00
Josh Soref e27408c72f spelling: kubernetes
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:43:36 -05:00
Josh Soref ece5f4d0c3 spelling: failed
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:42:53 -05:00
Josh Soref 05b3c8a21f spelling: because
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:15:23 -05:00
Josh Soref 80bede1039 spelling: arbitrary
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:14:27 -05:00
Maartje Eyskens d3a623314c Add EmailSANs field
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-21 08:49:00 +01:00
James Munnelly 22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-30 21:02:58 +00:00
James Munnelly af63f08074 Fixup using devel tools in CI
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-23 12:57:03 +00:00
James Munnelly 8b43813072 Update test/e2e to no longer deploy using addons
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-22 22:08:27 +00:00
Periklis Tsirakidis a1f63b953d Use vault api and sdk modules instead of tagged repo
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
2020-01-20 12:27:09 +01:00
jetstack-botandGitHub 5ee9e6c7aa Merge pull request #2452 from munnerz/kubernetes-1.17.0
Bump Kubernetes dependencies to v0.17.0
2020-01-14 14:19:57 +00:00
Daniel 6a775423c3 Use upstream Pebble v2.3.0 for E2E tests.
This is a follow-up from 0f196a5 which temporarily switched the Pebble
image to a fork. The required functionality landed in the upstream
v2.3.0 release and so the E2E tests can be switched back to the
upstream repo.

Signed-off-by: Daniel McCarney <cpu@letsencrypt.org>
2019-12-18 15:05:02 -05:00
James Munnelly b50f0a983a Fix issue using new apiserver lib with older Kubernetes
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:14:42 +00:00
James Munnelly 4930a0e8d8 Add end-to-end tests using EAB
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly 0f196a57dc Use forked pebble with support for EABs
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly dc95d9597d Upgrade to Pebble containing letsencrypt/pebble#294
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-05 12:22:50 +00:00
jetstack-botandGitHub 1581bf2796 Merge pull request #2400 from JoshVanL/secret-annotation-fallback
Allow secrets with legacy annotations for issuer name and kind to match
2019-11-27 15:39:22 +00:00
JoshVanL 0d9d0eeb22 Allow secrets with legacy annotations for issuer name and kind to match
existing certificates

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-26 12:13:58 +00:00
Matevz Mihalic b5972a379f Add API token auth option to Cloudflare issuer
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:43 +01:00
JoshVanL b72e8341df Correctly wait for issue on e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 14:36:31 +00:00
JoshVanL 0645bb6769 Use cloud flare service account in cluster namespace when using cluster
issuer

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:03:12 +00:00
JoshVanL f03cf45a9e Generate Name on e2e secret names and clean up
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:03:12 +00:00
JoshVanL d57cd5a6c7 Sets all conformance issuers to have generate name
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:02:43 +00:00
JoshVanL 854c67d718 Ensure ClusterIssuer is deleted after tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:02:43 +00:00
JoshVanL 56a40ddba7 Adds cluster issuer tests for all conformance issuer suites
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:02:43 +00:00
JoshVanL dfaf2f20c2 Initialise e2e vault issuer secret namespace before each
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:02:43 +00:00
JoshVanL d6248d20bd Make vault issuer to point to resource namespace over certificaterequest
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-13 11:02:43 +00:00
jetstack-botandGitHub 4bc4844f27 Merge pull request #2355 from JoshVanL/disable-api-service-ca-injector
Disables API Service cainjector.go e2e test
2019-11-13 10:22:26 +00:00
jetstack-botandGitHub 1bfec37482 Merge pull request #2349 from JoshVanL/2205-kubernetes-auth-path
Changes the vault issuer Kubernetes auth path to require the full *mount* path
2019-11-13 09:58:26 +00:00
JoshVanL ee196a4578 Disables API Service cainjector.go e2e test
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-12 20:55:00 +00:00
JoshVanL 0e739bdde9 Mount path now hard codes /login endpoint in code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-12 18:37:54 +00:00
JoshVanL 836800d1e7 Correctly de-duplicate ext key usages in e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 14:34:45 +00:00