Commit Graph
480 Commits
Author SHA1 Message Date
jetstack-botandGitHub ff19e63ea4 Merge pull request #1563 from munnerz/webhook-dns-provider
Add webhook dns provider implementation
2019-04-18 18:59:04 +01:00
James Munnelly 2e2699a7a6 Improve RFC2136 test DNS server
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 17:20:19 +01:00
James Munnelly af9bce7221 Add 'webhook' DNS01 provider type
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 17:19:32 +01:00
James Munnelly 14dd0b1ffe Rename DNS01Record to DNS01LookupFQDN
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:34:15 +01:00
James Munnelly 3e58213894 Export dnsQuery function
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:34:15 +01:00
Daniel Morsing 66f0436ad4 use authoritative nameservers for CAA checks
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-04-03 13:48:58 +01:00
Steve Huff abd0159b0f Fix "it's" typo in log message
Signed-off-by: Steve Huff <shuff@vecna.org>
2019-03-29 15:39:09 +00:00
Matthew Donoughe d7fa5b95f5 also whitelist ipv6
otherwise it's blacklisted

Signed-off-by: Matthew Donoughe <mdonoughe@gmail.com>
2019-03-23 23:50:04 -04:00
jetstack-botandGitHub 2d69622826 Merge pull request #1474 from munnerz/logr-acme-http
Use logr in ACME HTTP01 solver
2019-03-20 15:55:06 +00:00
Daniel Morsing b987d2772d stop cloudflare auth key from being leaked into the logs
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-03-18 16:22:14 +00:00
James Munnelly 96353dba96 Use logr in ACME HTTP01 solver
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-14 14:29:56 +00:00
James Munnelly 46faba06b6 Update acmesolver to use logr
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:51 +00:00
James Munnelly a13543013d Use logr in pkg/util/kube
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 6f743dbfae Update ACME issuer
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
James Munnelly 591f8b690f Update CA issuer
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-12 14:24:50 +00:00
Aditya Sundaramurthy 0690592a2f Fallback to hostedZoneName param if set in ClusterIssuer CRD
Signed-off-by: Aditya Sundaramurthy <aditya.sundaramurthy@gmail.com>
2019-03-12 00:23:25 +01:00
Aditya Sundaramurthy f0a3e081e5 Fixes trimming of zone inferred via zone discovery over configured 'hostedZoneName'
Signed-off-by: Aditya Sundaramurthy <aditya.sundaramurthy@gmail.com>
2019-03-11 15:52:23 +01:00
Daniel Morsing 0faf01937e treat domain not found as ok for CAA checks
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-03-04 12:26:08 +00:00
James Munnelly 2f67c78f62 Address review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-01 14:37:11 +00:00
James MunnellyandJames Munnelly 42428ed19f Update events logged during issuance
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2019-03-01 13:18:45 +00:00
James MunnellyandJames Munnelly f4a990917e Fixes after rebasing
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2019-03-01 13:18:43 +00:00
James Munnelly cb7dbc830c Add Venafi Issuer implementation
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-03-01 13:16:01 +00:00
James Munnelly dfabece6eb Use a one-use CA to sign temporary certificates
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-25 20:48:13 +00:00
jetstack-botandGitHub 01903f06ba Merge pull request #1384 from munnerz/unit-compare-reading
Print unit test failures in action matchers as part of failure message
2019-02-22 18:16:38 +00:00
James Munnelly 439499561c Remove dependence on k8s.io/ingress
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:52 +00:00
James Munnelly 2f30258f0e Switch to klog
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 12:34:02 +00:00
James Munnelly a9d8f7de8a Fixup for Kubernetes 1.13.2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-22 11:53:19 +00:00
James MunnellyandJames Munnelly 381bed1fd8 Print unit test failures in action matchers as part of failure message
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-20 17:27:31 +00:00
jetstack-botandGitHub 10924002e5 Merge pull request #1388 from DanielMorsing/killedpod
Recreate dead solver pods during self-check
2019-02-20 17:13:39 +00:00
Daniel Morsing 29ffbaecb6 oops
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-20 15:24:49 +00:00
Daniel Morsing bad7f52dc6 Revert "recreate pod if multiple pods were deleted"
This reverts commit 6b81093231.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-20 14:30:18 +00:00
Daniel Morsing 2881978a02 Fix check tests
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-20 14:27:45 +00:00
Brian ToppingandJames Munnelly d0712bb05e Add additional logging per #926, add documentation for rfc2136 provider.
Signed-off-by: Brian Topping <brian@coglative.com>
2019-02-20 13:47:51 +00:00
Daniel Morsing 4f4d7d1d0f ensure pod inside self-check
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-20 13:23:21 +00:00
Daniel Morsing 6b81093231 recreate pod if multiple pods were deleted
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-19 15:42:57 +00:00
James Munnelly 324e8319b6 Add basic Certificate unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:55 +00:00
James Munnelly 0bde3dacba Create pkg/api/util and re-arrange controller instantiation code
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-19 11:25:54 +00:00
jetstack-botandGitHub dc069276ba Merge pull request #1327 from munnerz/acme-improved-errors
Fire more Events in ACME Issue function on failure
2019-02-13 14:54:11 +00:00
jetstack-botandGitHub 1476aed737 Merge pull request #1293 from munnerz/test-builder-logger
Plumb testing.T through to test Builder
2019-02-13 13:48:26 +00:00
jetstack-botandGitHub cb532cc3b8 Merge pull request #1325 from DanielMorsing/caaCheck
Extend ACME self check to check CAA records
2019-02-12 16:53:11 +00:00
Daniel Morsing a01514ad63 use configured nameservers for CAA validation
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-11 12:05:18 +00:00
James Munnelly da39d636d9 Fix ACME issuer unit test
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 15:43:59 +00:00
James Munnelly fac0a32c7e Fix bug causing certficates to be re-issued with misconfigured renewBefore/duration
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 15:43:59 +00:00
James Munnelly 10dd6937dc Fire more Events in ACME Issue function on failure
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-02-06 15:23:47 +00:00
Daniel Morsing ec1305cfd6 follow CNAMEs, go up labels in CAA check
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-06 13:54:38 +00:00
Daniel Morsing bb853e5e79 first draft CAA checking
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-02-05 14:25:10 +00:00
jetstack-botandGitHub 22b0863801 Merge pull request #1128 from lrolaz/certificate-ip-sans
Add IP Address in CSR
2019-01-31 23:05:25 +00:00
James Munnelly d055d370bb Plumb testing.T through to test Builder
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-01-31 20:20:20 +00:00
jetstack-botandGitHub f27036cc38 Merge pull request #1266 from munnerz/fix-dns01-zone-lookup
Respect recursive nameservers flag when finding zone for fqdn
2019-01-28 11:18:50 +00:00
Laurent RolazandLaurent ROLAZ 597cda40af Fix some GO Style
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
2019-01-25 18:50:16 +01:00