Commit Graph
72 Commits
Author SHA1 Message Date
Richard Wall cc1412b252 Deprecate the --renew-before-expiry-duration flag
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-11-19 12:44:18 +00:00
560eac4b06 Update cmd/controller/app/options/options.go
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
2020-10-16 16:43:13 +02:00
Maartje Eyskens 232f21db26 Validate API values not being 0 + following k8s naming + defaults
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-16 13:08:26 +02:00
Maartje Eyskens 7c87e93950 update burst description
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-14 17:49:19 +02:00
Maartje Eyskens ebadd4cd28 Fix defaults, description and add validation
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-14 17:46:09 +02:00
Maartje Eyskens 5dfb4d409b Make Kubernetes API QPS throtteling configurable
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-14 17:16:44 +02:00
Matthias Frey 2f2253afaf make propagation check period configurable
Signed-off-by: Matthias Frey <freym@users.noreply.github.com>
2020-09-24 11:28:49 +02:00
Richard Wall 81eb53f597 ./hack/update-all.sh
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:28:06 +01:00
Richard Wall a70298180a Run a script to update v1alpha2 usage to v1
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:26:51 +01:00
James Munnelly 9e2d6a514b Move expcertificates into certificates package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 12:16:25 +01:00
James Munnelly 2280480c02 Remove old certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 11:46:13 +01:00
JoshVanL e465329b80 Revert vault free port and expose listener port from metrics server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-26 23:01:55 +01:00
JoshVanL 5539bf3495 Moves metrics controller into sub-package of ./controller/certificates
and fix metrics listen address flag description

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-21 10:47:52 +01:00
JoshVanL 3e7f7eb87e Expose Prometheus listen address as a controller command line flag
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-18 18:21:03 +01:00
James Munnelly 67a93b4f22 Remove unused vars
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 17:58:18 +01:00
James Munnelly ba33c823a3 Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 17:58:18 +01:00
James Munnelly 20ee4833dd Remove webhookbootstrap controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-30 14:26:05 +01:00
James Munnelly 98bc0d52f9 Add --experimental-issue-jks flag to enable JKS bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 15:33:22 +00:00
James Munnelly e9374730c9 Add --experimental-issue-pkcs12 flag to enable PKCS12 bundle generation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-04 10:02:21 +00:00
Josh Soref d98d4f898e spelling: separated
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:44 -05:00
Andrew Haines 3edb4c3c6c Remove IP address validation on dns01-recursive-nameservers to allow domain names
Signed-off-by: Andrew Haines <andrew@haines.org.nz>
2019-12-05 13:34:55 +00:00
jetstack-botandGitHub 66d32a204f Merge pull request #2242 from munnerz/cm-manifestlist-acmesolver
No longer use arch-specific acmesolver image
2019-10-17 14:16:14 +01:00
chenjun.cj fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
2019-10-17 12:14:28 +08:00
James Munnelly 7eb2e5efa0 No longer use arch-specific acmesolver image
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 16:24:34 +01:00
JoshVanL 4eb6335c76 Support out of tree issuers in ingress-shim
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly 6a167cc9e6 Enable all CertificateRequest controllers by default
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly bc61194709 Remove deprecated code from ingress-shim controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly 5c17c2e37f Add webhookbootstrap controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 21:27:36 +01:00
Michael Tsang 2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-05-13 16:55:38 +01:00
Lennart Jern cd576dd8db Set default acmesolver image based on arch
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
2019-03-22 17:32:34 +01:00
James Munnelly 0bb864871e Increase acmesolver default cpu resource limit to 100m
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-07 17:16:01 +00:00
James Munnelly 094ae3e50c Fix CLI flag not being respected
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 16:11:37 +00:00
jetstack-botandGitHub 5f96b378e6 Merge pull request #1184 from tlmiller/feature/authnss
Control authoritative dns01 server check.
2019-01-12 15:25:07 +00:00
Thomas Miller dacd0b45cb Control authoritative dns01 server check.
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
2019-01-12 20:17:28 +10:00
Louis Taylor 3d0e06a0b9 Add note to help text about clusterissuers
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
Louis Taylor bbda87b3c8 Add --namespace flag
Signed-off-by: Louis Taylor <louis@kragniz.eu>
2019-01-10 13:52:52 +00:00
James Munnelly 0fcc0c666c Update copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-01-07 15:07:55 +00:00
James Munnelly bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-29 22:49:55 +00:00
jetstack-botandGitHub 2c74eabb1c Merge pull request #819 from ccojocar/cert_secret_ref
Set the certificate as an owner of the secret
2018-11-26 15:06:33 +00:00
Cosmin Cojocar 3766edcd12 Set the default value of enable-certificate-owner-ref to false
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-11-26 09:48:02 +01:00
jetstack-botandGitHub ace5c2b2f2 Merge pull request #738 from gambol99/acme_options
Configurable ACME Annotation
2018-11-06 16:00:02 +00:00
James Munnelly b6f89ae9dd Regenerate files
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 12:31:16 +00:00
James Munnelly 85d433cff9 Add ACME challenge scheduler and process challenges for matching domains/types in serial
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-11-06 12:31:16 +00:00
Rohith e2f13f5f9c Requested Changes
- changing the name of the command line option to --auto-certificate-annotations
- making the option an array to allow for multiple annotations settings

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
2018-11-06 12:09:47 +00:00
Rohith 712a7a85ee Configurable ACME Annotation
- adds a option command line (default to the current behavour) which allows the user to control the acme annotation used by the shim controller
- a current mitgration requires use to run multiple providers at the same

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
2018-11-06 12:09:18 +00:00
Cosmin Cojocar 5d36fba075 Add a flag which controls whether the certificate is configured as an owner of the secret where the effective TLS certificate is stored
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
2018-10-28 19:55:26 +01:00
James Munnelly 039a086f58 run //hack:update-bazel
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-12 12:40:40 +01:00
James MunnellyandJames Munnelly 967a48e1dc Add ACME Order & Challenge controllers
Signed-off-by: James Munnelly <james@munnelly.eu>
2018-10-12 12:40:38 +01:00