home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-27 14:06:09 +10:00
Code Issues Packages Projects Releases Wiki Activity
1,922 Commits 37 Branches 119 Tags
cf77fbef06a0d2e3ec6339d830d5b62042e63613
Commit Graph
759 Commits
Author SHA1 Message Date
jetstack-botandGitHub fd9567f1e4 Merge pull request #1318 from munnerz/crt-ctrl-use-lister 
Use secretLister in updateSecret
 2019-02-06 16:39:55 +00:00
James Munnelly 094ae3e50c Fix CLI flag not being respected 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 16:11:37 +00:00
James Munnelly da39d636d9 Fix ACME issuer unit test 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 15:43:59 +00:00
James Munnelly fac0a32c7e Fix bug causing certficates to be re-issued with misconfigured renewBefore/duration 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 15:43:59 +00:00
James Munnelly e53312463d Use secretLister in updateSecret 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-05 17:56:16 +00:00
James Munnelly 6c66185358 Fix bug when specify keyAlgorithm without an explicit keySize 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-04 17:34:56 +00:00
jetstack-botandGitHub 22b0863801 Merge pull request #1128 from lrolaz/certificate-ip-sans 
Add IP Address in CSR
 2019-01-31 23:05:25 +00:00
jetstack-botandGitHub e848bcec57 Merge pull request #1191 from chr-fritz/parse-pkcs8 
Adds key parser for PKCS#8 encoded private keys.
 2019-01-31 22:49:26 +00:00
Laurent ROLAZ ed82465df5 Refactoring 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-30 13:04:28 +01:00
jetstack-botandGitHub f27036cc38 Merge pull request #1266 from munnerz/fix-dns01-zone-lookup 
Respect recursive nameservers flag when finding zone for fqdn
 2019-01-28 11:18:50 +00:00
Laurent RolazandLaurent ROLAZ 597cda40af Fix some GO Style 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-25 18:50:16 +01:00
Laurent RolazandLaurent ROLAZ 18daea16ae Remove duplicate IPAddressesToString 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-25 18:50:16 +01:00
Laurent RolazandLaurent ROLAZ c5fa202239 Fix some GO Style 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com> (+2 squashed commits)
Squashed commits:
[ce6cc2eb] Fix some GO Style

Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
[563b7275] Fix some GO Style

Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-25 18:50:16 +01:00
Laurent RolazandLaurent ROLAZ 531c26061c GO Format 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>

Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-25 18:38:12 +01:00
Laurent RolazandLaurent ROLAZ 6dcc408741 Add IP Address in CSR 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-25 18:38:12 +01:00
jetstack-botandGitHub 14431c7f55 Merge pull request #1265 from DanielMorsing/clientreuse 
Reuse acme clients to limit use of nonce/directory/accounts endpoints
 2019-01-25 00:18:22 +00:00
James Munnelly 948a2cf77c Add more OWNERS files with auto-labels 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-24 19:38:31 +00:00
James Munnelly e6169f6b13 Respect recursive nameservers flag when finding zone for fqdn 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-24 18:11:53 +00:00
Daniel Morsing e2123ccbb3 clear acme client cache whenever an acme issuer is changed 
This is a very in-elegant solution to the problem, but it avoids
having to look at other extant issuers and having background processes.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-24 15:41:11 +00:00
Daniel Morsing 19f66c4053 add client repository for acme clients 
In its current state, this will leak acme clients if issuers are
being changed a lot

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-24 14:00:50 +00:00
jetstack-botandGitHub e930bd3ca7 Merge pull request #1244 from DanielMorsing/self-check-errs 
Surface self-check errors in challenge resource
 2019-01-23 14:50:16 +00:00
Daniel Morsing 99c16b77dc fix other test 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-21 13:33:34 +00:00
Daniel Morsing 336e9e353a fix missed test 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-21 13:13:05 +00:00
Daniel Morsing b0a9b8276c surface self-check errors in challenge resource 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-21 11:49:46 +00:00
jetstack-botandGitHub 438d0a6775 Merge pull request #1240 from munnerz/expired-orders-no-cert 
Update order status if state changes while retrieving an existing certificate
 2019-01-18 14:28:23 +00:00
James Munnelly 3d1183a169 Fix nil map panic when writing to an empty existing Secret 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-18 11:16:44 +00:00
James Munnelly c91833f43a Update order status if state changes will retrieving an existing certificate 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-17 18:29:55 +00:00
jetstack-botandGitHub 1a75d41429 Merge pull request #1226 from munnerz/acme-client-metrics 
Add prometheus metrics for ACME client HTTP requests
 2019-01-17 17:28:02 +00:00
Daniel Morsing 88d811b34c change Check function signature 
This makes the check function into a simple precondition

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-17 16:45:03 +00:00
jetstack-botandGitHub 63562421b8 Merge pull request #1227 from munnerz/use-cached-account-uri 
Use cached ACME account URL when constructing ACME client
 2019-01-17 15:50:01 +00:00
jetstack-botandGitHub e2e2b5998f Merge pull request #1230 from munnerz/clear-url-on-reverify 
Clear issuer account URL if the directory and account URL's hosts differ
 2019-01-17 15:28:12 +00:00
Daniel Morsing 921f5c6d10 absorb every error from http self-check 
Body read errors are just regular errors, so we can reclassify them
all into absorb errors

Since we only have absorb errors, flip the switch so that all errors
are absorbed. This will make it easier to surface errors into the
controller.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-17 15:26:13 +00:00
jetstack-botandGitHub d9a3cd0b3f Merge pull request #1228 from munnerz/retrieve-valid-order 
If an Order is already valid, attempt to retrieve existing certificate
 2019-01-17 15:12:11 +00:00
James Munnelly 425f9c757a Clear issuer account URL if the directory and account URL's hosts differ 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-17 14:36:33 +00:00
Daniel Morsing ac5745d8f0 Remove need for provider config in DNS self-check 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-17 14:25:19 +00:00
Daniel Morsing dc8a4cb95e Avoid connection leaking 
An empty transport will by default keep connections alive indefinitely.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-17 14:09:15 +00:00
James Munnelly e88e4f4406 If an Order is already valid, attempt to retrieve existing certificate 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-17 13:19:04 +00:00
Daniel Morsing d374619ba6 thread controller context into self-check 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-17 13:05:34 +00:00
James Munnelly 4b6351a4f2 🤦 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-17 12:57:19 +00:00
Daniel Morsing 62923a9ba8 don't roundtrip url into strings and back 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-17 12:46:01 +00:00
James Munnelly 26ef11d2dc Use cached account URI on Issuer resource when constructing ACME client 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-16 23:48:19 +00:00
James Munnelly 804d328b14 Add prometheus metrics for ACME client HTTP requests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-16 23:05:53 +00:00
Daniel Morsing f72b59bee1 Disable TLS verification when self-checking 
Fixes #949

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-16 13:39:27 +00:00
James Munnelly 7fd1c2a0e3 Fix issuing a certificate into a pre-existing secret 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-15 14:44:11 +00:00
Christian Fritz 96ae76b89d Adds key parser for PKCS#8 encoded private keys. 
Signed-off-by: Christian Fritz <christian.fritz@qaware.de>
 2019-01-14 08:46:52 +01:00
jetstack-botandGitHub 5f96b378e6 Merge pull request #1184 from tlmiller/feature/authnss 
Control authoritative dns01 server check.
 2019-01-12 15:25:07 +00:00
Thomas Miller dacd0b45cb Control authoritative dns01 server check. 
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
 2019-01-12 20:17:28 +10:00
jetstack-botandGitHub 2fc68d9b33 Merge pull request #1197 from munnerz/acme-retain-challenges 
Retain Challenge resources for debugging if an Order enters an invalid state
 2019-01-11 17:22:11 +00:00
jetstack-botandGitHub c512319bfb Merge pull request #1188 from kragniz/controller-namespace 
Add --namespace flag
 2019-01-11 15:14:11 +00:00
James Munnelly b1df71dd66 Retain Challenge resources for debugging if an Order enters an invalid state 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-11 14:04:23 +00:00