home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-09 05:06:38 +10:00
Code Issues Packages Projects Releases Wiki Activity
6,296 Commits 37 Branches 119 Tags
b2e63dbed3dd320bffcdabb09a8a2f492ade83d6
Commit Graph
180 Commits
Author SHA1 Message Date
Ashley Davis 32d716654a Add a makefile flow for building artifacts 
Includes targets for:

- all "server" binaries, for all arches
- all containers for all server binaries for all arches
- all client binaries (kubectl plugin / cmctl) for all arches
- the cert-manager helm chart + signature
- the cert-manager static manifests + CRDs
- tools which bazel would download, with checksum verification
- (commented out) a signed SHA256SUM file for client binaries

Upgrades from the bazel flow include that:

- we use OS-specific base images rather than just using amd64 everywhere
- we easily add support for signing artifacts at build time
- we add ".exe" to the end of windows executables
- we add a zip file for windows executables, for easier consumption
- we concatenate YAML files more robustly
- staging a full release should be much faster
- hopefully, it's easier to change things!
- licenses are trimmed down to reduce bloat in images (the license
  bundle was 1.4MB in size alone)

Changes from the bazel flow include:

- containers no longer have a symlink to the binary at an unusual
  path, but instead just have the binary at a more predictable path
  (e.g. /app/cmd/webhook/webhook instead of
  /app/cmd/webhook/webhook.runfiles/com_github_jetstack_cert_manager/cmd/webhook/webhook_/webhook)

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-12-15 09:54:15 +00:00
Inteon 0eabaec743 change startupapicheck to helm post-install hook 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-30 16:04:55 +02:00
Inteon c7d92681b8 add comments 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-13 17:58:28 +02:00
Inteon 043bbd283e remove helm-specific labels & add version label 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-11 17:42:32 +02:00
irbekrm 22f6cb18d2 Adds some comments 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-04-03 15:54:52 +01:00
Maartje Eyskens ba5accae50 Fix release tar content of manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-22 10:47:37 +01:00
Maartje Eyskens 136f332fcb fix location 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 14:38:35 +01:00
Maartje Eyskens 006981e7e5 Format bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 14:13:45 +01:00
Maartje Eyskens fb1ee4c952 Fix static manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 14:05:22 +01:00
Maartje Eyskens f33c63e901 Fix a lost variable + format 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 11:25:01 +01:00
Maartje Eyskens eb3c0f8448 Fix syntax error 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-01 16:32:07 +01:00
Maartje Eyskens 887af1bc84 Remove the legacy release 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-01 16:17:07 +01:00
jetstack-botandGitHub ceccf6a047 Merge pull request #3179 from meyskens/no-helm-labels 
Remove managed by Helm labels from static manifests and CRDs
 2020-08-14 18:44:32 +01:00
Maartje Eyskens 1672a01e49 Remove managed by Helm labels from static manifests and CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-13 20:09:35 +02:00
Maartje Eyskens 6e3279e002 Explain helm hack 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:14:56 +02:00
Maartje Eyskens 50686d3e26 Support v1 admission webhooks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-10 16:39:49 +02:00
James Munnelly a4cbd146c3 Avoid duplicate CRDs in static manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-08 17:45:19 +01:00
James Munnelly b955abed17 Fix up chart and bazel build rules 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-01 18:22:35 +01:00
James Munnelly f33beefc32 Add installCRDs option to Helm chart 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-01 13:15:15 +01:00
James Munnelly 1700833601 Default webhook to use the dynamic secret source 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly d08299c846 Update Helm chart & other docs with new URLs and info 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-24 16:21:48 +00:00
jetstack-botandGitHub 35add56ef5 Merge pull request #2625 from srbraun/crl 
adds option to specify CRL Distribution Point. #2612
 2020-03-23 13:33:32 +00:00
jetstack-botandGitHub 6a16550698 Merge pull request #2023 from zeeZ/configure-annotations 
Add option to set custom annotations for HTTP01 resolver Ingress resources.
 2020-03-23 12:24:37 +00:00
Sergey Braun 9b76cdd402 adds CDP field and description to CA issuer 
Signed-off-by: Sergey Braun <dev@skra.space>
 2020-03-19 12:52:43 +01:00
zeeZ 1c96ea9c57 Add option to set annotations and labels for HTTP01 resolver Ingress resources. 
Signed-off-by: zeeZ <zeeZinator+github@gmail.com>
 2020-03-12 21:12:11 +01:00
Johan Fleury 08db170a36 feat(rfc2136): add support for IPv6 address in nameserver 
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
 2020-03-09 21:43:56 -04:00
Johan Fleury 51d46e5f76 feat(rfc2136): allow FQDN and hostname in nameserver 
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
 2020-03-09 21:12:23 -04:00
James Munnelly 61cff09573 Automatically prepend license boilerplate header to release manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-11 12:08:43 +00:00
James Munnelly 73c8c6747f Include CRDs as part of release assets published to GitHub 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-06 14:09:46 +00:00
Maartje Eyskens 3307e3a946 Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-04 15:07:47 +01:00
Maartje Eyskens aaae73a45d Replace openshift/no-webhook manifests with legacy 
This releases a new manifest type "legacy" to support Kubernetes <1.15 and OpenShift 3.
This version uses the webhook but disables the conversions as they are not supported.
For this reason only the v1alpha2 API is added in these manifests.
All newer APIs are filtered by the filter-crd tool.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-04 14:26:25 +01:00
jetstack-botandGitHub f2c462d29f Merge pull request #2642 from meyskens/manifest-phase1 
Put OpenShift specific RBAC in all manifests
 2020-03-04 13:02:58 +00:00
jetstack-botandGitHub 00b101de76 Merge pull request #2597 from meyskens/emailsans 
Add Email SANs
 2020-03-03 16:31:56 +00:00
Maartje Eyskens ce4c33f3b5 Put OpenShift specific RBAC in all manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-03 14:57:26 +01:00
James Munnelly 5eb3cb6313 Mark filter-crd target as a tool dependency instead of src 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-03 10:29:54 +00:00
srBraun 04bfddefc3 adds support for CDP to selfsigned issuer 
Signed-off-by: srBraun <dev@skra.space>
 2020-03-02 12:40:46 +01:00
Josh Soref 8d801fc100 spelling: certificate 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:51 -05:00
Josh Soref b93d64c09d spelling: authorizations 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:18 -05:00
Josh Soref ec5da97f2b spelling: account 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:14:20 -05:00
Maartje Eyskens d3a623314c Add EmailSANs field 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-21 08:49:00 +01:00
Maartje Eyskens 1439ca350c Write CRD filter for OpenShift 
This adds a Go binary that filters certain keys from the CRDs.
This is meant to remove keys that are not compatible with OpenShift 3.11.
This then is ran on creating the deployment manifests.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-18 10:52:42 +01:00
jetstack-botandGitHub 2862c31386 Merge pull request #2593 from JoshVanL/encode-openapi-validation 
Certificate KeySize encode openapi validation
 2020-02-17 11:42:24 +00:00
James Munnelly 71373d1e50 Fix including CRDs as part of static manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-13 15:52:01 +00:00
JoshVanL 9b9b66d7b4 Updates CRDs with max/min keysize validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-02-12 10:18:11 +00:00
jetstack-botandGitHub f9c23dcb8f Merge pull request #2556 from munnerz/release-tars 
Add release-tars targets to construct cert-manager release artifacts
 2020-02-10 16:10:13 +00:00
James Munnelly 48c56dbe5a Run ./hack/update-crds.sh 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-10 12:16:29 +00:00
Maartje Eyskens 3c09a7b80c Document more info on CN behaviour 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-07 09:22:24 +01:00
Maartje Eyskens 7e318dbfbb update CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-07 09:16:49 +01:00
James Munnelly 5b9cd23d0f Make the Venafi Cloud URL field optional 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-03 18:18:38 +00:00
James Munnelly 22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-30 21:02:58 +00:00