home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-16 08:36:44 +10:00
Code Issues Packages Projects Releases Wiki Activity
4,067 Commits 37 Branches 119 Tags
d7d19d982bb65815664640272da3ed2d4ae8a8cd
Commit Graph
684 Commits
Author SHA1 Message Date
Haoxiang Zhou 6c72193678 Handle keyEncoding for temporary Certificates 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-23 10:17:41 +01:00
Haoxiang Zhou 5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-18 15:26:14 +01:00
jetstack-botandGitHub 46eaf3d1a4 Merge pull request #2923 from JoshVanL/new-metrics 
Updates the metrics package + new metrics controller
 2020-06-04 12:59:38 +01:00
JoshVanL e465329b80 Revert vault free port and expose listener port from metrics server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-26 23:01:55 +01:00
Haoxiang Zhou 7229741505 Changed tests for issuing controller to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 15:30:43 +01:00
Haoxiang Zhou 609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 14:37:40 +01:00
Haoxiang Zhou 3591de614d Changed unit tests to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:55 +01:00
Haoxiang Zhou dceae33364 Do not add ca.crt key to TLS secret if empty 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:20 +01:00
JoshVanL 9c9fe56f0b Update new files to use 2020 copyright 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:52:56 +01:00
JoshVanL 5539bf3495 Moves metrics controller into sub-package of ./controller/certificates 
and fix metrics listen address flag description

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:47:52 +01:00
JoshVanL 3e7f7eb87e Expose Prometheus listen address as a controller command line flag 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 18:21:03 +01:00
JoshVanL 92eb8d0957 Refactor controllers to use new instrumented metrics that's baked into 
all controllers

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:43:56 +01:00
JoshVanL 4dd70a6fe7 Adds new metrics controller to reconcile over Certificates and its 
Status (Ready and Expiry)

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:43:18 +01:00
James Munnelly b126a0c0e5 Use acme AccountRegistry throughout and tidy up ACME setup code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 13:14:46 +01:00
James Munnelly 982b21bb06 Fix bug that could lead to validation to fail when attempting to update immutable field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-01 12:33:14 +01:00
James Munnelly 3e8649abc2 Handle ACME orders with already valid authorizations upon first fetch through new 'initialState' field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-01 12:33:14 +01:00
JoshVanL a4cfd41ce7 Updates comments to proper working/capitalisation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 11:53:42 +01:00
JoshVanL dc4ba16051 Adds comments to clarify issuing_controller_test Certificate current 
revision

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-28 11:03:26 +01:00
JoshVanL d830db4ef7 Adds more temp cert tests, don't issue temp cert of different private 
key and use shared GenerateLocallySignedCertificate

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-27 16:31:12 +01:00
JoshVanL c115e6c2bf internal/test.go accepts fixed clock and Shares 
generaleLocallySignedCertificate

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-27 16:29:58 +01:00
JoshVanL 7d1d94fedb Adds issuing controller temporary certificate units tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 19:39:08 +01:00
JoshVanL 095976548d Adds temporary certificate logic to issuing controller based on 
annotation

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 19:16:57 +01:00
JoshVanL 92c2d3c7c4 Moves secretmanager and testing util into separate package to refactor 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 15:45:10 +01:00
JoshVanL 11961b992d Moves Certificate Issuing validation logic and key fetch earlier in sync 
loop

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 15:01:32 +01:00
Maartje Eyskens f2b36483a4 Set Issuer kind specific to Issuer if cert-manager.io/issuer is specified. 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-04-24 16:16:04 +02:00
James Munnelly 7978fbe081 Address review feedback and include truststore.jks with JKS mode enabled 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-22 15:20:49 +01:00
James Munnelly ba33c823a3 Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 17:58:18 +01:00
jetstack-botandGitHub 4aff1ce3f0 Merge pull request #2814 from munnerz/privatekey-rotation 
keymanager: support private key rotationPolicy field
 2020-04-21 16:02:53 +01:00
James Munnelly 6a827c6b8b Don't use fixed length map 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 14:49:25 +01:00
James Munnelly 019f64e841 Fix test failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 10:25:56 +01:00
James Munnelly 8a628c3315 Update field comments on ChallengeSpec 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 10:07:03 +01:00
James Munnelly a17d04260e requestmanager: copy labels and annotations onto CertificateRequest resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly f04696747c Fix SecretDataAltNamesMatchSpec for loose matching and add tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly 23892bc6e4 keymanager: support private key rotationPolicy field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly e8cc2ba4ac Fix selfsigned issuer unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly a9dd260e95 requestmanager: tidy up and add unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly 48958036bf Set NotAfter field in readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly 1c26ae412d Move some logic into separate method 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly 945dde4175 Fix PolicyFunc reference in trigger controller tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly 8aaca4a2ad expcertificates: add readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly 53fa3b70ab Move trigger policies into separate package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly 707b7a486a Fix missing append bug 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly a572f739c2 Add trigger policy for private key not matching spec 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly b5c169e35a Fix panic in issuing controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly cde13aa6fd Add requestmanager controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
jetstack-botandGitHub 91d598b1de Merge pull request #2810 from munnerz/keymanager-controller 
expcertificates: add keymanager controller
 2020-04-20 10:17:38 +01:00
jetstack-botandGitHub 687d47f832 Merge pull request #2027 from pepov/auditsink-injector 
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
 2020-04-20 08:23:38 +01:00
Maartje Eyskens db45891705 Add missing context 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-04-17 16:39:06 +02:00
James Munnelly d60cb08f13 expcertificates: add keymanager controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-16 19:10:41 +01:00
James Munnelly d0b919a2f7 expcertificates: add PrivateKeyMatchesSpec function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-16 19:10:41 +01:00