home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-22 11:36:42 +10:00
Code Issues Packages Projects Releases Wiki Activity
3,774 Commits 37 Branches 119 Tags
af9875e210cb818ea2728a9f89c32905bbc29e6f
Commit Graph
163 Commits
Author SHA1 Message Date
James Munnelly 881b886049 Update Kubernetes API client call-sites 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-26 12:58:50 +00:00
JoshVanL 7a1620a632 Adds a duration gap for the app role Vault e2e issuer test 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-03-10 13:18:44 +00:00
James Munnelly 9ee4a7d724 Use bind are rfc2136 server for DNS01 challenges 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-07 00:13:07 +00:00
James Munnelly 4fd0a7a89f e2e: don't wait for test namespace to be deleted before proceeding 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-06 20:47:17 +00:00
James Munnelly 9b6ba36840 e2e: remove noisy log message 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-06 20:47:17 +00:00
jetstack-botandGitHub 00b101de76 Merge pull request #2597 from meyskens/emailsans 
Add Email SANs
 2020-03-03 16:31:56 +00:00
Josh Soref 11778da61e spelling: request 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 17:20:27 -05:00
Josh Soref e27408c72f spelling: kubernetes 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:43:36 -05:00
Maartje Eyskens d3a623314c Add EmailSANs field 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-21 08:49:00 +01:00
James Munnelly af63f08074 Fixup using devel tools in CI 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-23 12:57:03 +00:00
James Munnelly 8b43813072 Update test/e2e to no longer deploy using addons 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-22 22:08:27 +00:00
Periklis Tsirakidis a1f63b953d Use vault api and sdk modules instead of tagged repo 
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
 2020-01-20 12:27:09 +01:00
James Munnelly b50f0a983a Fix issue using new apiserver lib with older Kubernetes 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-17 17:14:42 +00:00
JoshVanL f03cf45a9e Generate Name on e2e secret names and clean up 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-13 11:03:12 +00:00
JoshVanL 836800d1e7 Correctly de-duplicate ext key usages in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 14:34:45 +00:00
JoshVanL b3c301dfd4 De-duplicate ext key usages is e2e tests getting defaults 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 13:18:30 +00:00
jetstack-botandGitHub d3254e3843 Merge pull request #2260 from JoshVanL/2247-cert-key-usages 
Ensure key usages are set on CertificateRequests created by the Certificate controller
 2019-11-07 17:14:34 +00:00
JoshVanL b4e62d0fce Increase vault health timeout try 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 17:59:38 +00:00
JoshVanL 50d9b1f038 Ignore key encipherment of e2e tests when key is EC 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 15:23:51 +00:00
JoshVanL b2337cdf9e Creates a proper wrapper for vault port-forwarding to keep it alive and 
healthy

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:23:23 +00:00
JoshVanL 206c4a3909 Ensure no ECDSA keys have key enrichment expected for e2e 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 9c2a37fbfd Remove key encipherment for DNS01 ACME ECDSA certs 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 2bb8bfe07a Adds server auth to Venafi default key usages 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 48afefbeb4 Adds key usage exceptions for vault in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 78196cffe5 If certificate uses Vault or ACME issuer then add server/client auth key 
usages as expected

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL 192566d789 Adds conversion for key usage int to string 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL fca395bb4d Expose non-matching key-usages with string 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
JoshVanL a03560b93a Updates tests to ensure that key usages are correctly checked 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
James Munnelly 2138dde7c3 Run a single instance of Pebble during the e2e suite 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 21:48:58 +01:00
James Munnelly 0472ac4f09 Print 'kubectl apply' output during e2e tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-11 11:05:26 +01:00
James Munnelly 6138f0c3c4 Fix e2e jobs on Kubernetes 1.14 and below 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-10 18:36:19 +01:00
JoshVanL e64d0a26be Add allowed URI names to e2e test vault server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 15fccf9ebb Adds describe CertificateRequest in tests when waiting for valid 
certificate fails and enable no CommonName for vault server

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 8175a59ab3 Changes e2e test for DNS for expected to be subset 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL b48b0e58fd Prevent panic in e2e tests caused by change in DNS name behaviour 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 13b0584838 Change behaviour to be more relaxed around common names 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL 88cadca433 Adds proper checking for common name in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL dd7213866f Adds validation for URIs to certificate validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
James Munnelly 655b432e32 Bump ingress-nginx to a version compatible with k8s 1.16 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-02 15:21:17 +01:00
JoshVanL 869370e226 Cleans up code and naming 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:35:52 +01:00
JoshVanL cd53c9e004 Wait for secret to contain cert for deletion e2e test 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:35:01 +01:00
JoshVanL bcd94fc2f1 e2e: Adds fuz to cert duration check and fix waiting for cert unready 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:35:01 +01:00
JoshVanL 0f55a21e32 Set vault e2e to key_type=any 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:34:42 +01:00
JoshVanL ced21c287f Conformance: Ensure if a certificate is deleted then a new certificate is signed with 
same key

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:34:42 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-26 12:52:43 +01:00
JoshVanL 9ffaae5bfd Adds review comments 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 14:01:19 +01:00
JoshVanL 5f25ffadd8 Increase scope of vault addon tokenreview permissions to cluster 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL f6e1964b93 Set role name correctly for vault addon with Kube Auth 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL f2f5fccb85 Addresses comments and makes vault auth pointers 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
Adam KunickiandJoshVanL 7058dfc687 Added Kubernetes authentication type for Vault Issuer 
Signed-off-by: Adam Kunicki <adam@streamsets.com>
 2019-09-23 13:33:29 +01:00