Commit Graph

  • 800d6019bf Replace reflect.DeepEqual with semantic equality check and remove status marshal Salman 2021-03-27 12:49:04 +05:30
  • 572bfb9111 Replace reflect.DeepEqual with semantic equality check Salman 2021-03-26 10:42:36 +05:30
  • 820b8556a3 Fix go linting joshvanl 2021-03-26 17:41:42 +00:00
  • 55e74c3e02 Update bazel build files joshvanl 2021-03-26 17:28:14 +00:00
  • 191e448764 Updates go modules joshvanl 2021-03-26 17:25:49 +00:00
  • f8b38daa4c Update cert-manager-controller:approve RBAC naming to be more consistent joshvanl 2021-03-26 17:25:19 +00:00
  • 56a604c6f0 Init plugins in webhook cmd joshvanl 2021-03-26 17:24:59 +00:00
  • b75655fbb6 Updates approval e2e tests to include custom resource definitions joshvanl 2021-03-26 17:21:24 +00:00
  • 4be73eaec0 Add plugins to webhook server joshvanl 2021-03-26 17:20:46 +00:00
  • 3ecef47b2a Remove SubjectAccessReview validation registry joshvanl 2021-03-26 17:18:13 +00:00
  • 29a7a90d85 Remove old approval SAR registry joshvanl 2021-03-26 17:17:06 +00:00
  • 8380569470 Move approval validation to new internal webhook admission plugin joshvanl 2021-03-26 17:16:04 +00:00
  • 109b3e0b28 Rename Wehook's API server host flag from --master to --api-server-host joshvanl 2021-03-24 11:20:55 +00:00
  • 746cd7460b Updates approval review comment to correctly state cluster scope and issuer name joshvanl 2021-03-23 14:16:05 +00:00
  • d69e798b83 Update validation approved tests for new string joshvanl 2021-03-23 10:03:23 +00:00
  • 5b34d9a6cc Change cert-manager-controller approve RBAC resource names to ':approve-cert-manager-io' joshvanl 2021-03-23 09:54:45 +00:00
  • 393848ee98 Fix webhook RBAC resource names to use ':subjectaccessreviews' joshvanl 2021-03-23 09:53:35 +00:00
  • ed22fb99f6 Change approved/denied forbidden error to read better for EU joshvanl 2021-03-23 09:50:47 +00:00
  • a97be01bd8 Adds test comment to approval e2e test joshvanl 2021-03-22 18:41:46 +00:00
  • 8048034b0e Adds permissions to approve "issuer.cert-manager.io/*", "clusterissuer.cert-manager.io/*" signers to the cert-manager-controller ServiceAccount joshvanl 2021-03-22 14:38:15 +00:00
  • 157b577056 Adds Approval SubjectAccessReview checks to e2e UserInfo suite joshvanl 2021-03-22 14:37:20 +00:00
  • 59049ee58a Add SubjectAccessReview client to validation registration on webhook start. Make API address configurable joshvanl 2021-03-22 14:36:22 +00:00
  • f640f64fcb Update integration test framework to restart the API to share the address with the webhook joshvanl 2021-03-22 14:35:45 +00:00
  • 13d8cc707f Adds SubjectAccessReview checks in webhook, if ValidateUpdate Succeeds joshvanl 2021-03-22 14:34:18 +00:00
  • 92c6ce88bb Register approval checks with validation init registration joshvanl 2021-03-22 14:32:55 +00:00
  • 53cb1835f7 Adds SubjectAccessReview registry to the validation Registry joshvanl 2021-03-22 14:32:13 +00:00
  • 78aba9c01f Adds approval condition SubjectAccessReview check joshvanl 2021-03-22 14:31:31 +00:00
  • bad96f5102 Merge pull request #3582 from lalitadithya/vault_health_check_and_namespace_fix jetstack-botandGitHub 2021-03-26 15:20:58 +00:00
  • 19ae739ab7 Merge pull request #3760 from SgtCoDFish/selfsigned-validity-3634 jetstack-botandGitHub 2021-03-26 12:30:58 +00:00
  • 77b045d159 Merge pull request #3791 from JoshVanL/cert-manager-controller-diabled-controllers-flag v1.3.0-alpha.0 jetstack-botandGitHub 2021-03-26 12:00:58 +00:00
  • 5e31fa37ff selfsigned: warn when certs have empty issuer DNs Ashley Davis 2021-03-10 15:51:34 +00:00
  • 8f5b03427c Fix options_test.go boilerplate header joshvanl 2021-03-26 10:24:12 +00:00
  • 6ef840972c Change controller options to return a set of enabled controllers, and log enabled controllers on start joshvanl 2021-03-25 19:06:06 +00:00
  • 5c3e02d7a5 Changes the controllers flag to allow disabling controllers. This is the same behaviour as kube-controller-manager joshvanl 2021-03-24 17:14:45 +00:00
  • 0382c9d8b2 Adds a cert-manager-controller flag to disable controllers, for example, the certificaterequests-approver joshvanl 2021-03-23 16:31:39 +00:00
  • a8c75fab1a Merge pull request #3773 from JoshVanL/certificate-revision-history-limit jetstack-botandGitHub 2021-03-26 11:13:58 +00:00
  • 0f3aba2791 Merge pull request #3792 from JoshVanL/kubectl-cert-manager-approve-deny jetstack-botandGitHub 2021-03-26 10:38:58 +00:00
  • 9ab0a5a77c Fix command comments joshvanl 2021-03-25 19:08:21 +00:00
  • 7946df1da7 Merge pull request #3788 from maelvls/refactor-trigger-unit-tests jetstack-botandGitHub 2021-03-25 11:41:36 +00:00
  • e987591f4a Merge pull request #3786 from OmairK/StatusCheck-3663 jetstack-botandGitHub 2021-03-25 09:20:04 +00:00
  • 7e21f730cc PR comment: typo: "the following are" instead of "is" Maël ValaisandJake Sanders 2021-03-25 09:07:45 +01:00
  • fe3617a41c PR comment: a sentence starts with a capital letter and ends with a dot Maël ValaisandJosh Soref 2021-03-24 19:19:34 +01:00
  • fd78593b59 Fixes Certificates revision manager controller name joshvanl 2021-03-24 17:32:45 +00:00
  • f25be73f73 Adds comments for the Reason and Message options of the ctl approve and deny commands joshvanl 2021-03-24 17:17:42 +00:00
  • 68271f105b Certificate Readiness controller will only try to update the certificate status if there is a change. Omair Khan 2021-03-24 20:44:45 +05:30
  • 3a367927dc Merge pull request #3793 from JoshVanL/dont-log-cr-deleted jetstack-botandGitHub 2021-03-24 13:27:46 +00:00
  • 7204284063 Merge pull request #3741 from teejaded/bump-distroless jetstack-botandGitHub 2021-03-24 11:16:46 +00:00
  • dffbf391db Merge pull request #3733 from jakexks/renewBefore jetstack-botandGitHub 2021-03-24 10:53:46 +00:00
  • 6311c5fbab Merge pull request #3789 from JoshVanL/standardise-controller-names jetstack-botandGitHub 2021-03-23 18:21:34 +00:00
  • 14d6f0720a Don't log from multiple controllers when a CertificateRequest is deleted joshvanl 2021-03-23 17:49:52 +00:00
  • db617f0772 Adds kubectl cert-manager [approve|deny] CLI commands joshvanl 2021-03-23 17:30:09 +00:00
  • dd0b2bf510 Standardise the name of controllers so there is consistency across the project joshvanl 2021-03-23 16:08:59 +00:00
  • d5ccbdb277 Fix test controller name of revision manager in integration test joshvanl 2021-03-23 15:58:35 +00:00
  • 59ca6ca850 Move CertificateRequest revisionHistoryLimit validation to OpenAPI validation joshvanl 2021-03-23 15:58:14 +00:00
  • 5983290317 Change the prune and delete list function to certificateRequestsToDelete joshvanl 2021-03-23 15:57:32 +00:00
  • 71e707387a trigger-controller: refactor test, inject gatherer and policychain Maël Valais 2021-03-21 15:42:09 +01:00
  • f4f379066e Merge pull request #3781 from alrs/alrs-fix-conformance-err jetstack-botandGitHub 2021-03-22 08:10:50 +00:00
  • b98e39bfbf test/e2e/suite/conformance/certificates: fix dropped error Lars Lehtonen 2021-03-21 17:44:02 -07:00
  • cdb6c16c6d trigger-controller: log a msg when cert must be reissued Maël Valais 2021-03-08 20:25:49 +01:00
  • ef5aa91f35 improve comment to match the function definition Ashley Davis 2021-03-10 09:28:30 +00:00
  • 2404aceef4 remove unused function Ashley Davis 2021-03-08 16:38:31 +00:00
  • b246c92a45 clarify exact curve types of current ECDSA keys Ashley Davis 2021-03-08 16:37:55 +00:00
  • 442d7dbc08 Merge pull request #3735 from JoshVanL/certificate-request-approve-condition jetstack-botandGitHub 2021-03-17 14:04:49 +00:00
  • 127acfc7e1 Fix null pointer in tests lalit@lalitadithya.com 2021-01-21 19:57:50 +05:30
  • b654eaf564 Fix broken test build lalit@lalitadithya.com 2021-01-21 19:11:32 +05:30
  • 1858692619 Add vault namespace to requestTokenWithKubernetesAuth lalit@lalitadithya.com 2021-01-20 20:29:30 +05:30
  • 22fcbcfa2f Append headers instead of replacing them when headers is not nil lalit@lalitadithya.com 2021-01-18 19:52:43 +05:30
  • df80da0838 Fix typo lalit@lalitadithya.com 2021-01-16 10:59:09 +05:30
  • 917b9b2b98 Checking if vault is unsealed and active using the HTTP endpoint Lalit Adithya 2020-11-10 19:08:08 +05:30
  • 3343c69be8 Added X-VAULT-NAMESPACE header for the requestTokenWithAppRoleRef API call Lalit Adithya 2020-11-10 18:44:17 +05:30
  • 65acf10858 Don't log error output in approver when CertificateRequest is deleted joshvanl 2021-03-17 13:10:01 +00:00
  • b9646a832e Updates certificate request validation to use new signature joshvanl 2021-03-15 16:28:26 +00:00
  • 32d0c5af4e Updates Approved/Denied tests for new reasons joshvanl 2021-03-09 10:30:32 +00:00
  • c94ad99731 Updates approver controller to use custom Approved Reason joshvanl 2021-03-09 10:29:56 +00:00
  • 98a33791e4 Remove CertificateRequest Approve/Deny Reasons joshvanl 2021-03-09 10:29:33 +00:00
  • 72904ca2c1 Updates CertificateRequest printColumn with a new Denied column joshvanl 2021-03-08 13:36:58 +00:00
  • 1235ff3bef Adds tests to ensure Approve is present, and Denied is not joshvanl 2021-03-08 13:35:23 +00:00
  • a3e63b1787 Update CertificateRequest controllers to use new Denied type, and add tests for when a CertificateRequest is denied joshvanl 2021-03-08 13:34:49 +00:00
  • 09f91a2a99 Update approver controller to use new Denied condition type joshvanl 2021-03-08 13:34:23 +00:00
  • 4e042011e6 Adds CertificateRequest approval condition validation to ensure: joshvanl 2021-03-08 13:32:59 +00:00
  • 5df29e41e7 Updates api/util CertificateRequest approved helpers to use new condition type joshvanl 2021-03-08 13:32:08 +00:00
  • 417b947733 Updates CertificateRequest conditions to include a distinct 'Denied' condition type joshvanl 2021-03-08 13:31:13 +00:00
  • fb54272d17 Adds Approved condition status as additionalPrinterColumn for pretty printing joshvanl 2021-03-04 16:31:19 +00:00
  • e6c74d94b4 Adds check for approval condition in e2e CertificateRequest helper func joshvanl 2021-03-04 16:30:50 +00:00
  • 6957bc31df Adds the CertificateRequest approver controller to cert-manager-controller joshvanl 2021-03-04 16:30:25 +00:00
  • e62e8c517b Updates CertificateRequest signer tests to check Approved behaviour joshvanl 2021-03-04 16:29:46 +00:00
  • 1d758a5ccf Updates the base CertificateRequest controller to first check for the approval condition to be present and set to true, before processing further joshvanl 2021-03-04 16:28:42 +00:00
  • 2db7582586 Adds CertificateRequest approver controller. This controller will currently _always_ set the Approved condition to true on CertificateRequests joshvanl 2021-03-04 16:27:33 +00:00
  • 0ef25daeb3 Adds helper CertificateRequest api/util funcs for checking approval condition joshvanl 2021-03-04 16:26:35 +00:00
  • d61ccb1730 Adds CertificateRequest Approved condition type, with Approved and Denied Reasons joshvanl 2021-03-04 16:23:19 +00:00
  • 433cc2fa01 Merge pull request #3771 from RinkiyaKeDad/3648_docker_push_target jetstack-botandGitHub 2021-03-17 10:22:40 +00:00
  • d51c7f7325 chore: changed target position Arsh Sharma 2021-03-17 13:39:04 +05:30
  • fedea03a16 Merge pull request #3774 from JoshVanL/kubectl-get-cr-username jetstack-botandGitHub 2021-03-15 18:00:15 +00:00
  • 03b3e2f20b Merge pull request #3630 from JoshVanL/design-identity jetstack-botandGitHub 2021-03-15 17:06:16 +00:00
  • d2b98828b3 Adds Username to kubectl get output, moves issuer name from wide to default joshvanl 2021-03-15 16:52:51 +00:00
  • 0b4abcc77a Merge pull request #3770 from jonathansp/master jetstack-botandGitHub 2021-03-15 16:30:16 +00:00
  • 38ebe359ad Merge pull request #3754 from JoshVanL/issuer-observed-generation jetstack-botandGitHub 2021-03-15 15:26:16 +00:00
  • e6ece1f36b Updates Issuer CRDs with new ObservedGeneration field joshvanl 2021-03-09 18:31:47 +00:00
  • 160b16e68b Updates issuer condition update consumers to use new observedGeneration signature joshvanl 2021-03-09 18:29:34 +00:00
  • 99138733ad Adds observedGeneration to issuer condition update function joshvanl 2021-03-09 18:29:09 +00:00