home/cert-manager
2
0
Fork 0
mirror of https://github.com/wahyd4/cert-manager.git synced 2026-08-27 22:16:49 +10:00
Code Issues Packages Projects Releases Wiki Activity
2,129 Commits 37 Branches 119 Tags
v0.7.2
Commit Graph
821 Commits
Author SHA1 Message Date
James Munnelly 4a1ce63f51 Fix update loop due to changing notAfter struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 18:17:41 +01:00
snobuandJames Munnelly 800e71ea57 Fix escape in resource def 
Signed-off-by: snobu <foo@snobu.org>

Fixes https://github.com/jetstack/cert-manager/issues/1473
 2019-05-01 17:16:58 +01:00
James Munnelly c162c76395 Add feature gate for ValidateCAA functionality and default it to off 
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 10:52:31 +01:00
jetstack-botandGitHub 113c424c44 Merge pull request #1580 from munnerz/automated-cherry-pick-of-#1579-release-0.7 
Automated cherry pick of #1579
 2019-04-24 13:01:27 +01:00
James Munnelly 5c3b92d73d Use v1beta1 API version in cainjector controller 
This resolves issues when running the cainjector on Kubernetes 1.9,
as the 1.9 apiserver is not aware of the 'v1' API version.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-24 12:12:20 +01:00
James Munnelly da253eec6d Add omitempty to fields on conditions 
This is the standard in upstream k8s, and prevents errors
when malformed 'condition' stanzas are included in resources.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-24 11:03:57 +01:00
Daniel MorsingandJames Munnelly 9bd132e202 use authoritative nameservers for CAA checks 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-04-12 14:47:59 +01:00
Daniel Morsing 0faf01937e treat domain not found as ok for CAA checks 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-03-04 12:26:08 +00:00
jetstack-botandGitHub 5e3c1a813b Merge pull request #1250 from munnerz/venafi 
add Venafi Cloud & TPP issuer type
 2019-03-01 19:42:38 +00:00
jetstack-botandGitHub 687dcd0db7 Merge pull request #1420 from munnerz/cainjector-apiserverca 
cainjector: support injecting apiserver ca
 2019-03-01 15:19:05 +00:00
James Munnelly 2f67c78f62 Address review feedback 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 14:37:11 +00:00
James MunnellyandJames Munnelly 42428ed19f Update events logged during issuance 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2019-03-01 13:18:45 +00:00
James MunnellyandJames Munnelly f4a990917e Fixes after rebasing 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2019-03-01 13:18:43 +00:00
James Munnelly cb7dbc830c Add Venafi Issuer implementation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:16:01 +00:00
James Munnelly c3f696fa1a Add support for Venafi API types to certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:00:55 +00:00
James Munnelly 535af6d14e Add Venafi API types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:00:54 +00:00
James Munnelly 1618ebde43 Fix loading apiserver caBundle 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-28 19:34:40 +00:00
jetstack-botandGitHub 334477ec73 Merge pull request #1392 from munnerz/gen-tmp-selfsigned 
Generate temporary certificate to appease ingress-gce
 2019-02-28 19:20:03 +00:00
James Munnelly b34adf88ff cainjector: support injecting apiserver ca 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-28 16:45:26 +00:00
Solly Ross 42248a91d7 CA Injector Controller 
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-02-26 21:47:34 -08:00
James Munnelly dfabece6eb Use a one-use CA to sign temporary certificates 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-25 20:48:13 +00:00
James Munnelly cf2f9eac74 Generate a temporary certificate whilst waiting for Issuer to issue 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-25 17:48:22 +00:00
jetstack-botandGitHub 01903f06ba Merge pull request #1384 from munnerz/unit-compare-reading 
Print unit test failures in action matchers as part of failure message
 2019-02-22 18:16:38 +00:00
James Munnelly be915d0567 Update generated files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:55 +00:00
James Munnelly 439499561c Remove dependence on k8s.io/ingress 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:52 +00:00
James Munnelly 2f30258f0e Switch to klog 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:02 +00:00
James Munnelly a9d8f7de8a Fixup for Kubernetes 1.13.2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 11:53:19 +00:00
James MunnellyandJames Munnelly 381bed1fd8 Print unit test failures in action matchers as part of failure message 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-20 17:27:31 +00:00
jetstack-botandGitHub 10924002e5 Merge pull request #1388 from DanielMorsing/killedpod 
Recreate dead solver pods during self-check
 2019-02-20 17:13:39 +00:00
Daniel Morsing 29ffbaecb6 oops 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-20 15:24:49 +00:00
Daniel Morsing bad7f52dc6 Revert "recreate pod if multiple pods were deleted" 
This reverts commit 6b81093231.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-20 14:30:18 +00:00
Daniel Morsing 2881978a02 Fix check tests 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-20 14:27:45 +00:00
Brian ToppingandJames Munnelly d0712bb05e Add additional logging per #926, add documentation for rfc2136 provider. 
Signed-off-by: Brian Topping <brian@coglative.com>
 2019-02-20 13:47:51 +00:00
Daniel Morsing 4f4d7d1d0f ensure pod inside self-check 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-20 13:23:21 +00:00
Daniel Morsing 6b81093231 recreate pod if multiple pods were deleted 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-19 15:42:57 +00:00
James Munnelly fe2fcd4e83 go fmt 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 15:00:39 +00:00
James Munnelly 14a1b5373f Update bazel files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:36:07 +00:00
James Munnelly 1f48f3d1d4 gofmt 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:56 +00:00
James Munnelly bbd73477cd Fixes after rebasing 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:56 +00:00
James Munnelly 324e8319b6 Add basic Certificate unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:55 +00:00
James Munnelly cee0e28a05 Add initial unit test for certificate controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:55 +00:00
James Munnelly 0bde3dacba Create pkg/api/util and re-arrange controller instantiation code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:54 +00:00
James Munnelly 3a19501e26 Add initial unit test framework for Certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:22:36 +00:00
James Munnelly 804240da9d Switch Certificate controller to use Helper struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:22:36 +00:00
jetstack-botandGitHub bfafc7354e Merge pull request #1322 from munnerz/gen-validation-schema 
Generate CRDs using controller-tools, including validation schema
 2019-02-13 16:35:07 +00:00
jetstack-botandGitHub dc069276ba Merge pull request #1327 from munnerz/acme-improved-errors 
Fire more Events in ACME Issue function on failure
 2019-02-13 14:54:11 +00:00
jetstack-botandGitHub eafda2a31a Merge pull request #1307 from munnerz/helper-everywhere 
Use Helper structure to call GetGenericIssuer everywhere
 2019-02-13 13:48:37 +00:00
jetstack-botandGitHub 1476aed737 Merge pull request #1293 from munnerz/test-builder-logger 
Plumb testing.T through to test Builder
 2019-02-13 13:48:26 +00:00
jetstack-botandGitHub cb532cc3b8 Merge pull request #1325 from DanielMorsing/caaCheck 
Extend ACME self check to check CAA records
 2019-02-12 16:53:11 +00:00
Daniel Morsing a01514ad63 use configured nameservers for CAA validation 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-11 12:05:18 +00:00