home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-22 19:46:53 +10:00
Code Issues Packages Projects Releases Wiki Activity
4,935 Commits 37 Branches 119 Tags
eff5bc069e29eb8951fa6bb76253bfa511757b3b
Commit Graph
2070 Commits
Author SHA1 Message Date
joshvanl eff5bc069e Updates webhook validation handler to use new function signature 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:15:23 +00:00
joshvanl cdeca6a9f4 Updates testdata to use new validation function signature. Updates 
registry and scheme install

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:14:35 +00:00
joshvanl 77d382c355 Updates validation functions to use new admission request signature. 
Updates installs to include mutation and identity

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:09:58 +00:00
joshvanl d043a6ada6 Updates CertificateRequest validation to make the resource immutable 
upon creation. The spec and metadata.annotation fields cannot be
changed after creation

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:08:54 +00:00
joshvanl 66276927f6 Adds internal identity validation and mutation functions, and registers 
with registries

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:07:39 +00:00
joshvanl c09f47afed Updates internal validation function registry to include admission 
request

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:06:37 +00:00
joshvanl 6e35e96058 Adds internal mutation function registry 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:06:18 +00:00
joshvanl e6bd2e3538 Updates client-gen for CR identity 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-05 16:49:55 +00:00
joshvanl 46999ff8f1 Adds identity fields to CertificateRequest types 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-05 14:23:40 +00:00
jetstack-botandGitHub 35febb1717 Merge pull request #3505 from hugoboos/ocsp-server 
Add option to specify OCSP server #3497
 2021-02-05 11:27:37 +00:00
Maël ValaisandJames Munnelly 95f8410194 remove the unit test, see reason in the commit message 
The reason I had to withdraw from writing this unit test is that the
ca.CA type in pkg/issuer/ca does not implement the Sign function, which
means I cannot test the Sign feature.

I then tried to implement the same unit test to
pkg/controller/certificaterequests/ca, but the existing unit test do not
check the fields inside the produced certificate, which means I cannot
ensure that the ocspServers fields has properly been applied to the
certificate.

I will write a proper unit test... a bit later.

Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: James Munnelly <james@munnelly.eu>
 2021-02-05 10:21:27 +01:00
Maël ValaisandJames Munnelly 11b9d71708 ca issuer: add a unit test with the ocsp servers field 
Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: James Munnelly <james@munnelly.eu>
 2021-02-05 10:20:55 +01:00
joshvanl 15536801f0 Revert ingress key usage annotation to default the same as Certificate 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-04 16:08:30 +00:00
Maartje Eyskensandjoshvanl 577c039220 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-02-04 15:11:00 +00:00
Maartje Eyskensandjoshvanl bfce24fd59 Fix sync tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-02-04 15:11:00 +00:00
Maartje Eyskensandjoshvanl 8ec816814f update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-02-04 15:11:00 +00:00
Maartje Eyskensandjoshvanl bbb75ee52f Allow ingress-shim to specify key usages + add server-auth to default 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-02-04 15:11:00 +00:00
jetstack-botandGitHub 4fe609156b Merge pull request #3538 from chulkilee/patch-1 
Fix comments for docs on types_certificate.go
 2021-02-03 15:09:11 +00:00
Maël ValaisandJames Munnelly ba22785445 Rename ocspServer to oscpServers 
Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: James Munnelly <james@munnelly.eu>
 2021-02-03 11:13:32 +01:00
Maël Valais d5c485970d issuer's ocsp server: add an example URL to the API 
Signed-off-by: Maël Valais <mael@vls.dev>
 2021-02-03 09:42:34 +01:00
Maël Valais 9fb0876d21 issuer's ocsp server: add validation of the URL 
Signed-off-by: Maël Valais <mael@vls.dev>
 2021-02-03 09:42:01 +01:00
Hugo StijnsandMaël Valais 5f18cce622 add option to specify OCSP server 
Signed-off-by: Hugo Stijns <hugo@boosboos.net>
Signed-off-by: Maël Valais <mael@vls.dev>
 2021-02-03 09:09:03 +01:00
irbekrm be5ba022a9 Improves error checking in TestSync function 
Also corrects some expected error values in test cases

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-02-02 11:23:42 +00:00
irbekrm bb99260365 Skips an invalid Ingress.spec.tls entry instead of invalidating the whole Ingress 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-02-01 19:32:36 +00:00
Maartje EyskensandGitHub 33f1881190 Merge pull request #3532 from meyskens/recursive-cname 
Make CNAME resolver recursive
 2021-01-27 16:28:40 +01:00
jetstack-botandGitHub 26afeceb2b Merge pull request #3457 from meyskens/inspect-secret 
Add `inspect secret` command
 2021-01-22 16:19:03 +01:00
Maartje Eyskens e081410d29 rename a function call 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-22 16:00:34 +01:00
Maartje Eyskens d4f2934609 actually rename function 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-22 15:54:30 +01:00
Maartje EyskensGitHubMaël Valais
 		910cba9538 Update pkg/issuer/acme/dns/util/wait.go 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Maël Valais <mael@vls.dev>
 2021-01-22 15:46:06 +01:00
Chulki Lee e90b494da6 Fix go comments for API docs 
- Use backticks, not single/double quotes for enum values
- Fix allowed values
- Remove unnecessary quote

Signed-off-by: Chulki Lee <chulki.lee@gmail.com>
 2021-01-22 20:21:19 +09:00
Maartje Eyskens d0b13b6c8a Update code structure of cname following 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-20 17:11:40 +01:00
Maartje Eyskens f9d34991bc Revert one too many rename 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-20 17:10:52 +01:00
Maartje Eyskens 7591304af8 update fn name 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-20 17:08:35 +01:00
Maartje EyskensGitHubMaël Valais
 		985c8b6e30 Apply suggestions from code review 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Maël Valais <mael@vls.dev>
 2021-01-20 17:05:45 +01:00
Richard Wall 50a388a8a1 Fix unit tests 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-01-20 14:26:43 +00:00
Richard Wall 95d26b7c60 Extract the CA from Venafi response 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-01-20 14:14:48 +00:00
jetstack-botandGitHub 89cff72df2 Merge pull request #3552 from mt-inside/clarify-cert-ref-namespace 
Minor log message clarification
 2021-01-15 11:54:55 +01:00
Maartje Eyskens be205c04e6 Run a codegen update 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-08 15:05:32 +01:00
Matt Turner 44f69ce015 Minor log message clarification 
Supplying just a name, rather than a namespace/name, for a cainjector
source reference, results in the generic error message "invalid
certificate name". This condition is detected on its own branch so we
can be more specific.

Signed-off-by: Matt Turner <matturner@gmail.com>
 2021-01-07 19:21:11 +00:00
Maartje Eyskens 59afa7c5a5 Add unit tests for CNAME resolving 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-23 15:20:29 +01:00
Maartje Eyskens 4708d890c7 Make CNAME resolver recursive 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-22 16:03:40 +01:00
jetstack-botandGitHub f19a5e6402 Merge pull request #3463 from wallrj/2667-acme-stalled-orders 
Wait for order-controller to add certificate data to the Order
 2020-12-17 16:30:41 +00:00
jetstack-botandGitHub 5b2d0d660e Merge pull request #3465 from wallrj/3396-ingress-renew-before 
Add duration and renew-before Ingress annotations to set those fields on the Certificate
 2020-12-16 15:50:04 +00:00
Richard Wall 9cd3eaabf7 Add a duration Ingress annotation to set the duration field on Certificate 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-16 09:40:28 +00:00
Maartje Eyskens 7078a5c7b8 Rename the User Agent fields 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:25:18 +01:00
Maartje Eyskens a5732221f4 Fix tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:09:39 +01:00
Maartje Eyskens 7dcfd44690 Update pkg/controller/acmeorders/controller.go 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens df7bce9b33 Add tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Richard Wall 27d0f011be Delete Order if its certificate data is bad or unexpected 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 13:46:52 +00:00
Richard Wall fb01c3b3c2 Tests for handling of Orders with bad certificates 
* Badly formed certificates, and
* certificates with an unexpected public key.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-12-15 13:44:59 +00:00