James Munnelly
a13543013d
Use logr in pkg/util/kube
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-03-12 14:24:50 +00:00
James Munnelly
dfabece6eb
Use a one-use CA to sign temporary certificates
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-02-25 20:48:13 +00:00
James Munnelly
2f30258f0e
Switch to klog
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-02-22 12:34:02 +00:00
James Munnelly
0bde3dacba
Create pkg/api/util and re-arrange controller instantiation code
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-02-19 11:25:54 +00:00
James Munnelly
948a2cf77c
Add more OWNERS files with auto-labels
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-01-24 19:38:31 +00:00
James Munnelly
0fcc0c666c
Update copyright header year
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2019-01-07 15:07:55 +00:00
James Munnelly
943e545697
Switch issuer.Issue to return a pointer and fix up setting secret fields
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-11-30 11:47:08 +00:00
James Munnelly
f8fe9ef21f
Remove requeue option and fix small race in controllers
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-11-29 12:23:21 +00:00
James Munnelly
dc97dde2ef
Make Certificate Ready condition behaviour consistent between all issuer types
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-11-28 17:00:51 +00:00
James Munnelly
03c6f1229f
Remove unused arg from GenerateTemplate
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-10-16 12:29:38 +01:00
James Munnelly
039a086f58
run //hack:update-bazel
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-10-12 12:40:40 +01:00
James Munnelly and James Munnelly
847d0c6152
Refactor controllers to return Response structures
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-10-12 12:40:38 +01:00
Max Ehrlich
213d5ec6b5
Self-signed issuers return a copy of the same certificate that was issued as the CA
...
Signed-off-by: Max Ehrlich <max.ehr@gmail.com >
2018-09-13 17:07:14 -04:00
James Munnelly
db65d6a170
run //hack:update-bazel
...
Signed-off-by: James Munnelly <james@munnelly.eu >
2018-09-13 11:24:48 +01:00
James Munnelly
51195e4c5f
Update license header and add header to every file
...
Signed-off-by: James Munnelly <james.munnelly@jetstack.io >
2018-08-13 15:53:37 +01:00
James Munnelly
e9285c6bdb
Update selfsigned issuer
2018-08-07 16:13:46 +01:00
James Munnelly
fcf812c654
Add OWNERS files to auto-label PRs. Mark apis directory as requiring a review by @munnerz.
2018-07-26 13:01:58 +01:00
Afolabi Badmos
445e522432
Add support for EC keys
...
- This PR adds two fields to CertificateSpec:
- `keyAlgorithm`, denotes which algorithm to use when generating
a private key. Can be either `rsa` or `ecdsa`. When not set, the
default algorithm used `rsa`.
- `keySize`, denotes the key size of the private key being generated.
For `rsa`, minimum key size is 2048 and maximum is 8192.
For `ecdsa`, sizes 224, 256, 384 & 521 are supported.
See https://golang.org/pkg/crypto/elliptic
- `keySize` can be set without being explicit about `keyAlgorithm`.
- If `keySize` is specified and `keyAlgorithm` is not provided, `rsa` will
be used as the key algorithm.
- `keyAlgorithm` can be set without being explicit about `keySize`.
- If `keyAlgorithm` is specified and `keySize` is not provided, key size
key size of `256` will be used for `ecdsa` key algorithm and
key size of `2048` will be used for `rsa` key algorithm.
- helper functions in `pki` package now return crypto.PrivateKey
2018-07-17 12:42:07 -04:00
James Munnelly
00e558a9e7
Fix package naming
2018-06-08 17:49:26 +01:00
James Munnelly
6cfdc62f6b
Add self signed Issuer type
2018-06-08 15:48:30 +01:00