Adds IssuanceAttempts field to Certificate's status

Signed-off-by: irbekrm <irbekrm@gmail.com>

deploy/crds/crd-certificates.yaml

@@ -338,6 +338,9 @@ spec:
                   x-kubernetes-list-map-keys:
                     - type
                   x-kubernetes-list-type: map
+                issuanceAttempts:
+                  description: The number of times certificate issuance has been attempted and failed for this revision (see the description of status.revision field). If an issuance has failed, the delay till the next issuance will be calculated using formula time.Hour * 2 ^ (issuanceAttempts - 1). This field will only be set if the issuance is currently failing.
+                  type: integer
                 lastFailureTime:
                   description: LastFailureTime is the time as recorded by the Certificate controller of the most recent failure to complete a CertificateRequest for this Certificate resource. If set, cert-manager will not re-request another Certificate until 1 hour has elapsed from this time.
                   type: string

internal/apis/certmanager/types_certificate.go

@@ -372,6 +372,14 @@ type CertificateStatus struct {
 	// It will automatically unset this field when the Issuing condition is
 	// not set or False.
 	NextPrivateKeySecretName *string
+
+	// The number of times certificate issuance has been attempted and
+	// failed for this revision (see the description of status.revision
+	// field). If an issuance has failed, the delay till the next issuance
+	// will be calculated using formula time.Hour * 2 ^ (issuanceAttempts - 1).
+	// This field will only be set if the issuance is currently failing.
+	// +optional
+	IssuanceAttempts *int `json:"issuanceAttempts,omitempty"`
 }
 
 // CertificateCondition contains condition information for an Certificate.

internal/apis/certmanager/v1/zz_generated.conversion.go

@@ -877,6 +877,7 @@ func autoConvert_v1_CertificateStatus_To_certmanager_CertificateStatus(in *v1.Ce
 	out.RenewalTime = (*metav1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 
@@ -893,6 +894,7 @@ func autoConvert_certmanager_CertificateStatus_To_v1_CertificateStatus(in *certm
 	out.RenewalTime = (*metav1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 

internal/apis/certmanager/v1alpha2/types_certificate.go

@@ -377,6 +377,14 @@ type CertificateStatus struct {
 	// not set or False.
 	// +optional
 	NextPrivateKeySecretName *string `json:"nextPrivateKeySecretName,omitempty"`
+
+	// The number of times certificate issuance has been attempted and
+	// failed for this revision (see the description of status.revision
+	// field). If an issuance has failed, the delay till the next issuance
+	// will be calculated using formula time.Hour * 2 ^ (issuanceAttempts - 1).
+	// This field will only be set if the issuance is currently failing.
+	// +optional
+	IssuanceAttempts *int `json:"issuanceAttempts,omitempty"`
 }
 
 // CertificateCondition contains condition information for an Certificate.

internal/apis/certmanager/v1alpha2/zz_generated.conversion.go

@@ -893,6 +893,7 @@ func autoConvert_v1alpha2_CertificateStatus_To_certmanager_CertificateStatus(in
 	out.RenewalTime = (*v1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 
@@ -909,6 +910,7 @@ func autoConvert_certmanager_CertificateStatus_To_v1alpha2_CertificateStatus(in
 	out.RenewalTime = (*v1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 

internal/apis/certmanager/v1alpha2/zz_generated.deepcopy.go

@@ -521,6 +521,11 @@ func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus) {
 		*out = new(string)
 		**out = **in
 	}
+	if in.IssuanceAttempts != nil {
+		in, out := &in.IssuanceAttempts, &out.IssuanceAttempts
+		*out = new(int)
+		**out = **in
+	}
 	return
 }
 

internal/apis/certmanager/v1alpha3/types_certificate.go

@@ -384,6 +384,14 @@ type CertificateStatus struct {
 	// not set or False.
 	// +optional
 	NextPrivateKeySecretName *string `json:"nextPrivateKeySecretName,omitempty"`
+
+	// The number of times certificate issuance has been attempted and
+	// failed for this revision (see the description of status.revision
+	// field). If an issuance has failed, the delay till the next issuance
+	// will be calculated using formula time.Hour * 2 ^ (issuanceAttempts - 1).
+	// This field will only be set if the issuance is currently failing.
+	// +optional
+	IssuanceAttempts *int `json:"issuanceAttempts,omitempty"`
 }
 
 // CertificateCondition contains condition information for an Certificate.

internal/apis/certmanager/v1alpha3/zz_generated.conversion.go

@@ -892,6 +892,7 @@ func autoConvert_v1alpha3_CertificateStatus_To_certmanager_CertificateStatus(in
 	out.RenewalTime = (*v1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 
@@ -908,6 +909,7 @@ func autoConvert_certmanager_CertificateStatus_To_v1alpha3_CertificateStatus(in
 	out.RenewalTime = (*v1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 

internal/apis/certmanager/v1alpha3/zz_generated.deepcopy.go

@@ -516,6 +516,11 @@ func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus) {
 		*out = new(string)
 		**out = **in
 	}
+	if in.IssuanceAttempts != nil {
+		in, out := &in.IssuanceAttempts, &out.IssuanceAttempts
+		*out = new(int)
+		**out = **in
+	}
 	return
 }
 

internal/apis/certmanager/v1beta1/types_certificate.go

@@ -382,6 +382,14 @@ type CertificateStatus struct {
 	// not set or False.
 	// +optional
 	NextPrivateKeySecretName *string `json:"nextPrivateKeySecretName,omitempty"`
+
+	// The number of times certificate issuance has been attempted and
+	// failed for this revision (see the description of status.revision
+	// field). If an issuance has failed, the delay till the next issuance
+	// will be calculated using formula time.Hour * 2 ^ (issuanceAttempts - 1).
+	// This field will only be set if the issuance is currently failing.
+	// +optional
+	IssuanceAttempts *int `json:"issuanceAttempts,omitempty"`
 }
 
 // CertificateCondition contains condition information for an Certificate.

internal/apis/certmanager/v1beta1/zz_generated.conversion.go

@@ -885,6 +885,7 @@ func autoConvert_v1beta1_CertificateStatus_To_certmanager_CertificateStatus(in *
 	out.RenewalTime = (*v1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 
@@ -901,6 +902,7 @@ func autoConvert_certmanager_CertificateStatus_To_v1beta1_CertificateStatus(in *
 	out.RenewalTime = (*v1.Time)(unsafe.Pointer(in.RenewalTime))
 	out.Revision = (*int)(unsafe.Pointer(in.Revision))
 	out.NextPrivateKeySecretName = (*string)(unsafe.Pointer(in.NextPrivateKeySecretName))
+	out.IssuanceAttempts = (*int)(unsafe.Pointer(in.IssuanceAttempts))
 	return nil
 }
 

internal/apis/certmanager/v1beta1/zz_generated.deepcopy.go

@@ -516,6 +516,11 @@ func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus) {
 		*out = new(string)
 		**out = **in
 	}
+	if in.IssuanceAttempts != nil {
+		in, out := &in.IssuanceAttempts, &out.IssuanceAttempts
+		*out = new(int)
+		**out = **in
+	}
 	return
 }
 

internal/apis/certmanager/zz_generated.deepcopy.go

@@ -516,6 +516,11 @@ func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus) {
 		*out = new(string)
 		**out = **in
 	}
+	if in.IssuanceAttempts != nil {
+		in, out := &in.IssuanceAttempts, &out.IssuanceAttempts
+		*out = new(int)
+		**out = **in
+	}
 	return
 }
 

pkg/apis/certmanager/v1/types_certificate.go

@@ -437,6 +437,14 @@ type CertificateStatus struct {
 	// not set or False.
 	// +optional
 	NextPrivateKeySecretName *string `json:"nextPrivateKeySecretName,omitempty"`
+
+	// The number of times certificate issuance has been attempted and
+	// failed for this revision (see the description of status.revision
+	// field). If an issuance has failed, the delay till the next issuance
+	// will be calculated using formula time.Hour * 2 ^ (issuanceAttempts - 1).
+	// This field will only be set if the issuance is currently failing.
+	// +optional
+	IssuanceAttempts *int `json:"issuanceAttempts,omitempty"`
 }
 
 // CertificateCondition contains condition information for an Certificate.

pkg/apis/certmanager/v1/zz_generated.deepcopy.go

@@ -516,6 +516,11 @@ func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus) {
 		*out = new(string)
 		**out = **in
 	}
+	if in.IssuanceAttempts != nil {
+		in, out := &in.IssuanceAttempts, &out.IssuanceAttempts
+		*out = new(int)
+		**out = **in
+	}
 	return
 }