Commit Graph
55 Commits
Author SHA1 Message Date
Matt Turner 44f69ce015 Minor log message clarification
Supplying just a name, rather than a namespace/name, for a cainjector
source reference, results in the generic error message "invalid
certificate name". This condition is detected on its own branch so we
can be more specific.

Signed-off-by: Matt Turner <matturner@gmail.com>
2021-01-07 19:21:11 +00:00
Maartje Eyskens ab0cd57dc5 Use The cert-manager Authors.
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-11 19:04:13 +01:00
Maartje Eyskens 1788a9d758 Update copyright to cert-manager project
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-08 19:04:49 +01:00
Richard Wall 0a2a4b0d7a Revert the introduction of errors.WithStack
* The logging isn't configured to show the stack traces anyway.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 12:08:10 +01:00
Richard Wall ea73ab534c Document newIndependentCacheAndDelegatingClient
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 12:02:52 +01:00
Richard Wall 35f10ef439 Explain why we're not using the controller.Builder
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 11:58:30 +01:00
Richard Wall 975e98e285 Log an error if WaitForCacheSync fails
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 11:51:45 +01:00
Richard Wall a5e6f6c262 Stop creating new controllers if one of the errgroup has already erred
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 11:41:11 +01:00
Richard Wall 602043013e Revert the increased number of reconcile threads
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 11:39:52 +01:00
Richard Wall 2bffaf9270 A clearer name for the function which creates each controller
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 11:38:00 +01:00
Richard Wall 7c6374ff07 Explain why we ignore objects with a deletionTimestamp
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 10:28:32 +01:00
Richard Wall e2765f720a Remove debug log
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 10:04:28 +01:00
Richard Wall e27e503624 Ensure that each controller's delegating client refers to the correct cache
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-18 08:29:07 +01:00
Richard Wall 98fff7dcf8 Clearer logging
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-17 16:43:15 +01:00
Richard Wall 1bb99dee1a Increase the number of reconciler goroutines
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-17 16:42:51 +01:00
Richard Wall ebd7ba5e70 Ignore objects that are being deleted
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-17 16:41:58 +01:00
Richard Wall 3d63a76da9 Make the injector sources read from the same cache as the controller
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-17 14:41:28 +01:00
Richard Wall b772f3295b Use cancellable contexts and errgroups
...to control the starting and stopping of controllers and caches

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-17 09:37:05 +01:00
Richard Wall 3723ea5a52 Update all
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-11 10:32:07 +01:00
Richard Wall 0f7b23c23b Pass the specific cache to the indexer functions
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-11 10:21:12 +01:00
Richard Wall 81874895b0 Use NewUnmanaged and separate caches for each controller
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-09-11 10:09:27 +01:00
Richard Wall 81eb53f597 ./hack/update-all.sh
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:28:06 +01:00
Richard Wall a70298180a Run a script to update v1alpha2 usage to v1
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:26:51 +01:00
Maartje Eyskens 3259fdfe9b Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens 827ce9c5ad Revert log levels on errors
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens 86dee5ed41 Set error log levels
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
Maartje Eyskens fecd0b3518 Set all log levels for info
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
James Munnelly 8a1d7c6831 Remove AuditSink support from cainjector
The AuditSink resource type (previously in alpha) has been removed
as per https://groups.google.com/g/kubernetes-sig-auth/c/aV_nXpa5uWU.

Remove all support for it from our cainjector so we are able to
continue to upgrade dependencies, and to avoid more users coming
to rely on this functionality ahead of it being removed from
Kubernetes.

Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 19:35:20 +01:00
jetstack-botandGitHub 687d47f832 Merge pull request #2027 from pepov/auditsink-injector
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
2020-04-20 08:23:38 +01:00
Maartje Eyskens db45891705 Add missing context
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 16:39:06 +02:00
pepov 9b764960b9 restore Register method
Signed-off-by: pepov <peterwilcsinszky@gmail.com>
2020-03-30 18:41:26 +02:00
pepov c75b9ba56a simplify error handling for registerAllInjectors
Signed-off-by: pepov <peterwilcsinszky@gmail.com>
2020-03-30 14:33:50 +02:00
pepov 5ba789934d add comment, rename/unexport Register method
Signed-off-by: pepov <peterwilcsinszky@gmail.com>
2020-03-30 14:33:50 +02:00
pepov 9b82e465b9 reword comments
Signed-off-by: pepov <peterwilcsinszky@gmail.com>
2020-03-30 14:33:50 +02:00
pepov f4813fdda9 log with the Info level instead of error when the injector is alpha and the type cannot be found
Signed-off-by: pepov <peterwilcsinszky@gmail.com>
2020-03-30 14:33:50 +02:00
pepov 24507f70c6 add auditsinks in api/auditregistration/v1alpha1 to the supported targets and handle injector "no matching kind" errors as something that shouldn't break the operator
Signed-off-by: pepov <peterwilcsinszky@gmail.com>
2020-03-30 14:33:50 +02:00
Josh Soref 093d6eb504 spelling: indices
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:42:58 -05:00
Ingo Gottwald be3f1e3fd2 Remove use of deprecated client.MatchingField
Signed-off-by: Ingo Gottwald <in.gottwald@gmail.com>
2019-10-02 20:47:58 +02:00
James Munnelly 973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly f2f3aee50d Update codebase for new API group
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-23 12:06:13 +01:00
James Munnelly bf9fbea23f Update codebase for new meta apigroup
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 19:25:04 +01:00
James Munnelly 58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly e5f3b46018 Update OwningCertForSecret to use annotations to discover owner
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 15:35:46 +01:00
James Munnelly dbf3258f4c Move cainjector annotations into apis package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 19:36:56 +01:00
James Munnelly 9b5f2bf669 Address review comments
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 13:02:14 +01:00
James Munnelly 6967baad8e Only allow injecting from Secrets that have the AllowsInjectionFromSecretAnnotation annotation
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:03 +01:00
James Munnelly dd66c11115 Extend cainjector to support injecting from secrets
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:01 +01:00
James Munnelly ce475e1640 Move TLSCAKey to v1alpha1 package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 01:21:15 +01:00
Solly Ross dc613f5dc3 [CA Injector] Don't requeue on deletes
We need to silently ignore non-found on the initial get, otherwise we'll
requeue on deletes.

Signed-off-by: Solly Ross <sollyross@google.com>
2019-06-13 13:31:42 -07:00
Solly Ross 95ac5a498c Add support for CRDs to the CA injector
This adds support for the CRD conversion webhook configuration to the CA
injector controller.

Signed-off-by: Solly Ross <sollyross@google.com>
2019-06-13 13:31:42 -07:00