Commit Graph
639 Commits
Author SHA1 Message Date
James Munnelly b0e65f84c7 Add TODO for domain label values 2018-04-04 11:30:15 +01:00
James Munnelly 01efbca114 Merge branch 'master' into acmev2 2018-04-04 11:27:37 +01:00
jetstack-botandGitHub 0f2fad4726 Merge pull request #416 from jetstack/munnerz-patch-1
Delete .travis.yml
2018-03-27 20:48:00 +01:00
James MunnellyandGitHub 333417d3fd Delete .travis.yml 2018-03-27 18:22:10 +01:00
jetstack-botandGitHub 95883c47dd Merge pull request #363 from euank/nonstatic-aws-creds
Allow non-static AWS credentials for Route 53, gated by "ambient credentials" flags
2018-03-26 12:35:18 +01:00
jetstack-botandGitHub 977b038d2b Merge pull request #408 from kragniz/resource-limits
Add limits to http validation pod
2018-03-26 10:47:51 +01:00
Euan Kemp faac0701ab issuer/route53: respect 'ambient' flag for region
This notably results in the region being a required field if the
'ambient' option is not set for a given issuer.
2018-03-24 14:16:33 -07:00
Euan Kemp 8857ea55b3 docs/api-types: mention ambient credentials 2018-03-24 14:13:19 -07:00
Euan Kemp f848ecf529 docs/examples: mention ambient credentials 2018-03-24 14:13:19 -07:00
Euan Kemp f88707df88 docs: xref ambient issuers in cluster-issuer docs 2018-03-24 14:13:19 -07:00
Euan Kemp 1c57feb523 docs: add ambient credentials documentation 2018-03-24 14:13:19 -07:00
Louis Taylor e8d6861d31 Increase memory limits 2018-03-24 00:24:51 +00:00
Euan Kemp dd48f4aa05 issuer/acme/dns: add ambient=false unit test 2018-03-23 14:30:43 -07:00
Euan KempandEuan Kemp 971ef4f198 issuer/route53: remove unused integ test
I'm convinced this test was never run and also did not provide any
significant value in this project.
2018-03-23 14:30:43 -07:00
Euan KempandEuan Kemp 0d39da5174 issuer/route53: improve logging hosted zone errs 2018-03-23 14:30:43 -07:00
Euan KempandEuan Kemp 0fb787eae7 controller: add ambient issuer flags and feature
This implements ambient credential support for AWS, gated behind flags
for issuers and cluster issuers.

This adds the pair of flags discussed in
https://github.com/jetstack/cert-manager/issues/308.

It provides an implementation for those flag's effects for the route53
solver.
2018-03-23 14:30:43 -07:00
Euan KempandEuan Kemp 0e6ca80a70 issuer/route53: remove zone-id env test
The zone id is never read from the environment; this test tests
functionality which doesn't exist in the actual software, so there's no
point in having it.
2018-03-23 14:30:43 -07:00
Matt MoyerandEuan Kemp 14c109af46 Drop unused NewDNSProvider() method.
Signed-off-by: Matt Moyer <moyer@heptio.com>
2018-03-23 14:30:42 -07:00
Matt MoyerandEuan Kemp 1236a93d1e Allow non-static AWS credentials for Route 53.
This change maintains backwards compatibility, but makes the `accessKeyID` and `secretAccessKeySecretRef` fields of the `route53` DNS provider optional.
If not provided, AWS credentials will be loaded from `AWS_*` environment variables or the EC2 metadata service.
This should also work for things that impersonate the EC2 metadata service, such as [kube2iam](https://github.com/jtblin/kube2iam) and [kail](https://github.com/uswitch/kiam).

Signed-off-by: Matt Moyer <moyer@heptio.com>
2018-03-23 14:30:42 -07:00
jetstack-botandGitHub 37ed6f3ab1 Merge pull request #387 from etiennetremel/helm-add-pod-annotations
Add podAnnotations
2018-03-23 19:38:15 +00:00
James Munnelly e786e47d73 Add ensurePod and ensureService tests 2018-03-23 18:50:46 +00:00
James Munnelly 0d945e86f5 Add 5s acme client connect timeout 2018-03-23 18:50:46 +00:00
James Munnelly 8d48e75d6e Use GetAccount to check if acme account is already registered 2018-03-23 18:50:46 +00:00
James Munnelly e91dfc40af Fix ACME CSR generation 2018-03-23 18:50:46 +00:00
James Munnelly cb042e886f Fix buildOrder function 2018-03-23 18:50:46 +00:00
James Munnelly 8ad26f6378 Fix log message print formatting 2018-03-23 18:50:46 +00:00
James Munnelly 51f6208955 Update default pebble image tag 2018-03-23 18:50:46 +00:00
James Munnelly 13a770bcb0 Update acmev2 library with latest changes to golang.org/x/crypto 2018-03-23 18:50:46 +00:00
James Munnelly d4b07ab0bb Add log messages throughout ACME Present process 2018-03-23 18:50:46 +00:00
James Munnelly 8eaf63cf29 Fix testReachability 2018-03-23 18:50:46 +00:00
James Munnelly dd950c8b65 Increase http01 e2e test timeout 2018-03-23 18:50:46 +00:00
James Munnelly 9cb346313c Fix panic in http solver 2018-03-23 18:50:46 +00:00
James Munnelly 02f1b37caf Add correct HasSynced func 2018-03-23 18:50:46 +00:00
James Munnelly 649fdecdd2 Add comment explaining new HasSynced usages 2018-03-23 18:50:46 +00:00
James Munnelly 0a7cefecf4 Call Pod & Service lister HasSynced method in Cert controller construction 2018-03-23 18:50:46 +00:00
James Munnelly 06f9d6e40d Fix listing existing pods/services/ingresses in http solver 2018-03-23 18:50:46 +00:00
James Munnelly e10affd765 Add comments to test fixture 2018-03-23 18:50:46 +00:00
James Munnelly 48edcd2f96 Run gofmt 2018-03-23 18:50:45 +00:00
James Munnelly bf3570af0d Add OwnerReferences to HTTP solver resources 2018-03-23 18:50:45 +00:00
James Munnelly cfc11f324b Fix bugs in http challenge solver 2018-03-23 18:50:45 +00:00
James Munnelly 36c825fa48 Set order.URL in createOrder 2018-03-23 18:50:45 +00:00
James Munnelly d617bec346 Don't use order URL as a pod label. Cleanup existing resources if multiple exist. 2018-03-23 18:50:45 +00:00
James Munnelly 393e146543 Fix arguments to ensureIngress 2018-03-23 18:50:45 +00:00
James Munnelly c9dfd408b7 Run gofmt 2018-03-23 18:50:45 +00:00
James Munnelly 42c5599305 Rename integration test framework to unit 2018-03-23 18:50:45 +00:00
James Munnelly 0a0747dac7 Move OrderURL into OrderStatus struct and fix up http solver 2018-03-23 18:50:45 +00:00
James Munnelly 7a44cb3e0e Make HTTP challenge solver async 2018-03-23 18:50:45 +00:00
James Munnelly de59fc70ee Add pick challenge type unit test 2018-03-23 18:50:45 +00:00
James Munnelly eccc3d5a8e Change log level of useful messages 2018-03-23 18:50:45 +00:00
James Munnelly d0d30a0fc2 Disable check for acme account being valid 2018-03-23 18:50:45 +00:00