Commit Graph
445 Commits
Author SHA1 Message Date
JoshVanL e2b9b21766 Adds acme CertificateRequest controller with unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-15 17:18:11 +01:00
jetstack-botandGitHub d4a675ee66 Merge pull request #1995 from JoshVanL/cr-test-refactor-sync
Include the shared controller Sync function in all CR controller tests
2019-08-15 17:13:56 +01:00
JoshVanL 92a6e32a73 Remove the possibility to set the generic CR controller to set issuance
pending

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-15 13:20:57 +01:00
JoshVanL ec204def7e Updates vault CR controller tests to include Sync
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-14 23:40:37 +01:00
JoshVanL 1814a09580 Update CA CR controller tests with now correct conditions
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-14 22:54:47 +01:00
JoshVanL ebf38dbfbb Refactor and cleans up SelfSigned CR controller tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-14 22:24:14 +01:00
JoshVanL 2948280f01 Fixes CR condition reporting and cleans up main sync tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-14 21:17:18 +01:00
JoshVanL 6e983fd7e6 Refactors CA cr controller to use sync
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-14 18:17:26 +01:00
James Munnelly 9b5f2bf669 Address review comments
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 13:02:14 +01:00
James Munnelly 6967baad8e Only allow injecting from Secrets that have the AllowsInjectionFromSecretAnnotation annotation
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:03 +01:00
James Munnelly dd66c11115 Extend cainjector to support injecting from secrets
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:01 +01:00
jetstack-botandGitHub f7f0e9f16a Merge pull request #1987 from munnerz/ca-crt-api
Move TLSCAKey to v1alpha1 package
2019-08-14 12:02:55 +01:00
James Munnelly ce475e1640 Move TLSCAKey to v1alpha1 package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 01:21:15 +01:00
JoshVanL b11d69afa6 Update reporter in vault CR controller to use new signature
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:40:59 +01:00
JoshVanL d588d5feba Improve code flow and remove unused issuer helper in vault cr controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL 5f70998acb Cleans up some code and clearer naming
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL 25f374da19 Fix pkg/internal/vault/fake
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL f6075035ee Move pkg/internal/internal.go into ./pkg/internal/vault
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL ea84dfdb2b Code organisation and cleaning up code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL 1bbdd03bfe Move DefaultCertDuration to pkg/util/api
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL cefd45b7de Rebase vault CR controller to use new reporter
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL 179fc0349b Adds issuer to CR sign function
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL 635aae6ffc Fix vault duration panic + util.CertDuration to default
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL 779c07baad Fix circular dependency
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL a8e7584b36 Adds unit tests to vault CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL bf133665a3 Both CR controller and legacy issuer use new vault client for signing
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL 5923c0bdfe Adds new internal vault client pkg
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL ad5e109983 Adds initial cr vault unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL 312a050560 Fixes CR sync api reporting
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL 356953c476 Adds status reports to vault sign method
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:36:43 +01:00
JoshVanL 6b1341505e Update CA CR controller to use a shared reporter util
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:34:18 +01:00
JoshVanL 60b349e162 Adds initial vault CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:34:17 +01:00
jetstack-botandGitHub 0c5694723f Merge pull request #1979 from JoshVanL/cr-failure-time
Adds CertificateRequest FailureTime
2019-08-13 20:50:15 +01:00
JoshVanL 7e56ce1c01 Adds CR reporter tests and cleans up code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 17:24:38 +01:00
JoshVanL f1e4e2b16c Remove fired event when a certificate request is re-scheduled when
failed but < 1 hour

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 12:21:28 +01:00
JoshVanL eed1e4ba21 Move certificates cr controller to use a switch on condition status
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 12:10:13 +01:00
James Munnelly 3bb5fb1897 Fix concurrent map write panic
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-13 12:07:41 +01:00
JoshVanL 0eb4ef385b Change CR reporter to be a long lived struct
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 11:36:53 +01:00
JoshVanL 0361a83c20 Fix reporter not setting correct conditions
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 10:02:53 +01:00
JoshVanL d7ada47686 Retry failed CertificateRequests in the Certificate controller based on
FailureTime of the CertificateRequest status

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-12 14:03:37 +01:00
JoshVanL f8c617a582 Adds failure time to CertificateRequest Status
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-12 12:41:54 +01:00
JoshVanL 233afd2f94 Remove fake in CR controller and fail hard for no annotations for
selfsigned

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-02 12:36:01 +01:00
JoshVanL 6bd9de1253 Have CR selfsigned to use reporter
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 17:01:39 +01:00
JoshVanL 071e5ab208 Always set secret ref annotation for CRs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
JoshVanL 42c47c7754 Ensures certificate controller add selfsigned annotations to CRs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
JoshVanL 46fd159f81 Register self signed CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
JoshVanL 97f2183a16 Adds fake secrets lister to simulate network failure
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
JoshVanL 6d3416325e Move tests to use new slimmer controller test builder
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
JoshVanL d98a6dc9d6 Adds events checks to SelfSigned sign unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
JoshVanL f26ea8dfb6 Adds selfsigned certificaterequest e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00