Commit Graph

965 Commits

Author SHA1 Message Date
Inteon
cb6030f1d9
add -prune=true & go mod tidy to update-deps.sh
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-07-10 20:35:41 +02:00
Maël Valais
e218e12d77 rfc2136 dns01: "the algothrim" -> "algorithm is not supported"
Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: Ashley Davis <ashley.davis@jetstack.io>
2021-07-06 12:51:01 +02:00
Maël Valais
d31768f61e cloudflare dns01: consistent err prefix "while querying the Clouflare API..."
Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: Richard Wall <richard.wall@jetstack.io>
2021-07-06 12:51:01 +02:00
Maël Valais
f813cc1ecd linter party: var 'accountJson' should be 'accountJSON'
Signed-off-by: Maël Valais <mael@vls.dev>

Signed-off-by: Maël Valais <mael@vls.dev>
2021-07-06 12:51:01 +02:00
Maël Valais
4e0864ff42 linter party: deadcode, remove 'messageErrorInvalidKeyPair'
Signed-off-by: Maël Valais <mael@vls.dev>
2021-07-06 12:51:01 +02:00
Maël Valais
338a6eb490 linter party: uncapitalize error messages (ST1005)
Signed-off-by: Maël Valais <mael@vls.dev>
2021-07-06 12:51:01 +02:00
Maël Valais
435e7f00ba linter party: ST1005: replace "Cloudflare" with "the Cloudflare"
Signed-off-by: Maël Valais <mael@vls.dev>
2021-07-06 12:51:01 +02:00
Simon Sanladerer
f53109642e Cloudflare: refactor DNS01 challenge to use API for finding the nearest Zone
Signed-off-by: Simon Sanladerer <simon@sanladerer.com>
2021-07-01 02:36:46 +02:00
jetstack-bot
c7dade0fc5
Merge pull request #4036 from wallrj/3875-pod-security
Enable runAsNonRoot by default
2021-05-21 18:53:26 +01:00
Richard Wall
d26caf578d Use runAsNonRoot on the HTTP01 solver
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-21 15:05:18 +01:00
jetstack-bot
d7571d3eaa
Merge pull request #4037 from SgtCoDFish/staticparty-ash
Static Analysis Fixes from Static Analysis Party
2021-05-21 13:38:25 +01:00
Ashley Davis
219a620871
static analysis fixes
pkg/ctl/scheme.go:17:1: package comment should be of the form "Package ctl ..."
pkg/issuer/acme/dns/acmedns/acmedns.go:43:2: var accountJson should be accountJSON
pkg/issuer/acme/dns/acmedns/acmedns.go:50:43: func parameter accountJson should be accountJSON
pkg/controller/certificates/trigger/policies/policies.go:57:1: comment on exported type Chain should be of the form "Chain ..." (with optional leading article)
pkg/controller/ingress-shim/sync.go:36:2: package "github.com/jetstack/cert-manager/pkg/logs" is being imported more than once (ST1019)
pkg/controller/ingress-shim/sync.go:37:2: other import of "github.com/jetstack/cert-manager/pkg/logs"

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-05-21 12:04:11 +01:00
Ashley Davis
333af8fd94
further static check fixes
pkg/internal/apis/certmanager/validation/certificate_for_issuer_test.go:34:2 deadcode `defaultTestCrtName` is unused
pkg/issuer/acme/dns/rfc2136/provider_test.go:42:23 errcheck Error return value of `server.Shutdown` is not checked
pkg/issuer/acme/dns/rfc2136/provider_test.go:77:23 errcheck Error return value of `server.Shutdown` is not checked
pkg/issuer/vault/setup.go:37:2 deadcode `messageVaultHealthCheckFailed` is unused
pkg/issuer/venafi/client/request.go:143:5 gosimple S1023: redundant break statement
pkg/logs/logs.go:68:8 errcheck Error return value of `fs.Set` is not checked

the following fixes introduce a panic when the returned error is
non-nil, which could be a breaking change but was deemed to be worth it
pkg/webhook/server/server.go:58:30 errcheck Error return value is not checked
pkg/webhook/server/server.go:59:25 errcheck Error return value is not checked

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-05-21 12:04:05 +01:00
Edward Lynes
ecc552a7de Update Aka issuer to use v2 API
Signed-off-by: Edward Lynes <elynes@akamai.com>
2021-05-14 13:31:13 -04:00
jetstack-bot
e941307bdc
Merge pull request #3938 from irbekrm/3879_test_acme_issuer_setup
3879 test acme issuer setup
2021-05-14 13:35:50 +01:00
irbekrm
9ecf896130 Implement feedback from code review
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-05-14 12:40:30 +01:00
Jake Sanders
79d8d9cb7b
Revert "Merge pull request #3724 from inteon/istio-virtualservice-for-http01"
This reverts commit 80f27739b5, reversing
changes made to 96604d02a3.

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-11 14:50:25 +01:00
Jake Sanders
423e82b65b
Revert "Merge pull request #3939 from JoshVanL/istio-api-to-internal-apis"
This reverts commit f2a74ade5e, reversing
changes made to 7ff54e61e9.

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-11 14:50:23 +01:00
Jake Sanders
8ca19b26f9
Revert "Merge pull request #3946 from inteon/fix_kubectl_apply"
This reverts commit c7514d9262, reversing
changes made to 49cbedf262.

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-11 14:50:18 +01:00
irbekrm
e82ea35744 Adds a unit test for ACME issuer Setup function
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-05-10 09:53:53 +01:00
irbekrm
f438ae30ab Refactor Setup to make it more DRY + use consts instead of string literals
This commit also ensures that issuer's observed generation is updated in cases where the issuer spec has changed, but the re-registration is skipped as the current registration seems already valid

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-05-10 09:51:24 +01:00
irbekrm
d8367cbac8 Remove direct calls to external deps from Setup function
Allow the functionality to set up a new ACME client and to retrieve and decode ACME account's key to be stubbed in tests

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-05-10 09:51:07 +01:00
jetstack-bot
3434c78188
Merge pull request #3960 from wallrj/538-lint-fixes-richardw
Fix some linting errors
2021-05-07 11:50:34 +01:00
Richard Wall
fc1f6ffea9 ./hack/update-deps.sh
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-07 09:55:09 +01:00
Richard Wall
98d2672d3a Fail test on unexpected errors
pkg/issuer/acme/dns/rfc2136/rfc2136_test.go:58:23                                        errcheck     Error return value of `server.Shutdown` is not checked
pkg/issuer/acme/dns/rfc2136/rfc2136_test.go:336:12                                       errcheck     Error return value of `w.WriteMsg` is not checked
pkg/issuer/acme/dns/rfc2136/rfc2136_test.go:355:12                                       errcheck     Error return value of `w.WriteMsg` is not checked
pkg/issuer/acme/dns/rfc2136/rfc2136_test.go:361:12                                       errcheck     Error return value of `w.WriteMsg` is not checked

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-07 09:55:09 +01:00
Jake Sanders
f2a9d5f655
staticcheck: error strings should not be capitlized (ST1005)
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-04 15:58:46 +01:00
Jake Sanders
8a8bf6fbca
staticcheck: error strings should not be capitlized (ST1005)
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-04 15:03:10 +01:00
Richard Wall
2f198993f7 Fix error string capitalization
pkg/issuer/acme/dns/akamai/akamai.go:205:15: error strings should not be capitalized (ST1005)

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-04 14:37:32 +01:00
Richard Wall
e9be325104 Simplify the return statement
pkg/issuer/acme/dns/dns.go:164:2: should use 'return strategy == cmacme.FollowStrategy' instead of 'if strategy == cmacme.FollowStrategy { return true }; return false' (S1008)

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-04 14:30:33 +01:00
Jake Sanders
a91b4e81fc
deadcode: maxRetries is unused
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-04 14:28:16 +01:00
Richard Wall
1778ac67b0 Replace loop with simpler append
pkg/issuer/acme/http/pod.go:240:2: should replace loop with pod.Spec.Tolerations = append(pod.Spec.Tolerations, podTempl.Spec.Tolerations...) (S1011)

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-04 14:26:50 +01:00
Richard Wall
227289b267 Remove duplicate import
pkg/issuer/venafi/client/venaficlient_test.go:25:2: package "k8s.io/client-go/listers/core/v1" is being imported more than once (ST1019)
pkg/issuer/venafi/client/venaficlient_test.go:26:2: other import of "k8s.io/client-go/listers/core/v1"

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-05-04 14:26:50 +01:00
Inteon
b44e347ce1 remove podTemplate field from ACMEChallengeSolverHTTP01Istio
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-04-30 13:15:01 +02:00
joshvanl
c5e2184a4a Moves /pkg/internal/apis/istio to /pkg/internal/istio
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 12:31:57 +01:00
joshvanl
01716e2907 Fixes stutter: istio.IsIstioInstalled -> istio.IsInstalled
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 11:42:21 +01:00
joshvanl
00ceff3421 Update bazel
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 11:36:49 +01:00
joshvanl
e8a585f740 Move internal istio apis from pkg/issuer to pkg/internal/apis
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 11:35:20 +01:00
jetstack-bot
fca9322c58
Merge pull request #3906 from clatour/more_descriptive
Add a more descriptive FindZoneByFqdn error message
2021-04-28 12:53:06 +01:00
Inteon
2d7dfcb462 start DynamicSharedInformerFactory unconditionally; only listen for VirtualServices conditionally
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-04-28 09:20:49 +02:00
Inteon
2299e8d8a6 Apply suggestions from code review
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-04-28 09:20:49 +02:00
Inteon
624e2b9e69 add ACME HTTP01 Istio support
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-04-28 09:19:53 +02:00
clatour
440da719a9 fixup! Add a more descriptive FindZoneByFqdn error message
Signed-off-by: clatour <chandler.latour@gmail.com>
2021-04-21 17:47:48 +00:00
clatour
40a6c2bb3c fixup! Add a more descriptive FindZoneByFqdn error message
Signed-off-by: clatour <chandler.latour@gmail.com>
2021-04-21 17:03:31 +00:00
clatour
2c2fbd483b Add a more descriptive FindZoneByFqdn error message
Spent a couple of days tracking down bad `SERVFAIL` for some of our
domains, and had a hard time finding where this was coming from. Make
the error slightly more descriptive to help locate it, and more inline
with the terminal error of the function.

Signed-off-by: clatour <chandler.latour@gmail.com>
2021-04-20 22:06:24 +00:00
irbekrm
09af959071 Issuer's ACME EAB algorithm can no longer be set
It is hardcoded to HS256 in golang.org/x/crypto

Also, we now use a fork of golang.org/x/crypto
in cert-manager org.

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-04-09 10:28:19 +01:00
jetstack-bot
805ca33b9e
Merge pull request #3622 from foosinn/fix-letsencrypt-multi
Fix letsencrypt with rfc2136 and multiple dnsNames
2021-04-08 15:11:45 +01:00
joshvanl
18ae2295f9 Pass context through to client calls in controllers and acme issuer
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-31 20:34:12 +01:00
Lalit Adithya
917b9b2b98 Checking if vault is unsealed and active using the HTTP endpoint
Signed-off-by: lalit@lalitadithya.com <lalit@lalitadithya.com>
2021-03-17 19:03:08 +05:30
joshvanl
160b16e68b Updates issuer condition update consumers to use new observedGeneration
signature

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-15 15:06:21 +00:00
joshvanl
1b82802159 Changes Vault error messages with auth has been misconfigured for each
method

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-11 11:19:00 +00:00
Ashley Davis
ef2006d7b6
skip clouddns test when gcloud isn't initialized
If gcloud hasn't been installed, or if it has but the default application credential file
at .config/gcloud/application_default_credentials.json hasn't been configured, this test
would segfault since the assertion at the start fails but doesn't stop the test

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-03-09 14:54:12 +00:00
Josh Soref
1cd3ab0db8 spelling: tenant
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2021-03-04 13:04:38 -05:00
Stefan Schwarz
aa94fc6637 fix rfc2136 validation with multiple dnsNames
Since changeRecord is called for each dnsName independently
RemoveRRset would remove all prevous TXT entries that are still not
verified.

Signed-off-by: Stefan Schwarz <ssz@bitsbeats.com>
2021-02-01 19:26:12 +01:00
Maartje Eyskens
33f1881190
Merge pull request #3532 from meyskens/recursive-cname
Make CNAME resolver recursive
2021-01-27 16:28:40 +01:00
Mike Bryant
19d8579ffe fix: Set default nodeSelector to linux
The images aren't built for Windows, so mixed-OS clusters don't work with a default deployment. Set the default nodeSelector to linux to provide a better user experience.

Signed-off-by: Mike Bryant <mike@mikebryant.me.uk>
2021-01-26 22:58:00 +00:00
Maartje Eyskens
e081410d29 rename a function call
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-22 16:00:34 +01:00
Maartje Eyskens
d4f2934609 actually rename function
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-22 15:54:30 +01:00
Maartje Eyskens
910cba9538
Update pkg/issuer/acme/dns/util/wait.go
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Maël Valais <mael@vls.dev>
2021-01-22 15:46:06 +01:00
Maartje Eyskens
d0b13b6c8a Update code structure of cname following
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-20 17:11:40 +01:00
Maartje Eyskens
f9d34991bc Revert one too many rename
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-20 17:10:52 +01:00
Maartje Eyskens
7591304af8 update fn name
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-20 17:08:35 +01:00
Maartje Eyskens
985c8b6e30
Apply suggestions from code review
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Maël Valais <mael@vls.dev>
2021-01-20 17:05:45 +01:00
Richard Wall
95d26b7c60 Extract the CA from Venafi response
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2021-01-20 14:14:48 +00:00
Maartje Eyskens
59afa7c5a5 Add unit tests for CNAME resolving
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-23 15:20:29 +01:00
Maartje Eyskens
4708d890c7 Make CNAME resolver recursive
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-22 16:03:40 +01:00
Maartje Eyskens
7078a5c7b8 Rename the User Agent fields
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:25:18 +01:00
jetstack-bot
cdc53b65cb
Merge pull request #3500 from meyskens/update-copy
Update copyright to cert-manager project
2020-12-15 10:12:31 +00:00
Maartje Eyskens
ab0cd57dc5 Use The cert-manager Authors.
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-11 19:04:13 +01:00
Maartje Eyskens
1788a9d758 Update copyright to cert-manager project
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-08 19:04:49 +01:00
Maartje Eyskens
65281efff1 Migrate Ingress to networking.k8s.io/v1beta1
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-08 14:46:01 +01:00
Maël Valais
8d8dd02245 dns01-aws: aws-sdk-go already honors the proxy settings
No need for setting http.DefaultClient manually.

Signed-off-by: Maël Valais <mael.valais@gmail.com>
2020-12-01 13:26:29 +01:00
Maël Valais
8a5748be94 dns01-aws: strip request id from aws errors
Signed-off-by: Maël Valais <mael.valais@gmail.com>
2020-12-01 11:11:05 +01:00
Maël Valais
cccc0b1d4d dns01-aws: add test that reveals the request id issue
Signed-off-by: Maël Valais <mael.valais@gmail.com>
2020-11-30 13:31:12 +01:00
Mateusz Gozdek
27fa2f1ec4
Fix various typos found by codespell
Found by running this command:

codespell -S .git,*.png,go.sum -L keypair,iam,ans,unknwon,tage,ths,creater

Signed-off-by: Mateusz Gozdek <mgozdekof@gmail.com>
2020-11-07 14:55:13 +01:00
jetstack-bot
8127f0ad42
Merge pull request #3417 from meyskens/fix-gdns-log
Fix missing log in struct
2020-10-28 17:38:12 +00:00
Maartje Eyskens
ed7b4cca60 Fix missing log in struct
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-28 15:08:37 +01:00
jetstack-bot
9654b533f4
Merge pull request #3409 from wallrj/api-validation-for-venafi-issuer-config
Add API validation for Venafi Issuer config
2020-10-28 09:52:12 +00:00
Richard Wall
885755630c Add API validation for Venafi Issuer config
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-22 15:04:11 +01:00
Lars Lehtonen
4d090fe0b7
pkg/issuer/acme/dns: replace deprecated AWS function
Signed-off-by: Lars Lehtonen <lars.lehtonen@gmail.com>
2020-10-21 09:49:47 -07:00
jetstack-bot
3cb9bd64fe
Merge pull request #3379 from wallrj/3140-tpp-access-token-only
Add support for long lived TPP access-token credentials
2020-10-16 16:21:15 +02:00
jetstack-bot
31a146a4b1
Merge pull request #3380 from wallrj/3140-tpp-ready-false-message
Always set the ready condition on Venafi issuer
2020-10-16 13:16:15 +02:00
Richard Wall
daa3b16eda Use an access-token if it is supplied in the Issuer Secret
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-16 12:08:05 +01:00
Richard Wall
8db0e49c70 Always set the ready condition on Venafi issuer
And always set a meaningful error message on the condition when the issuer setup
has failed.

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-16 11:23:10 +01:00
jetstack-bot
8e0e858199
Merge pull request #3288 from meyskens/acme-ip
Add support for IPs in ACME
2020-10-16 10:48:15 +02:00
jetstack-bot
98eb6cbb80
Merge pull request #3354 from supriya-premkumar/fix-zone-match-route-53
Fix auth zone hostedZoneID lookups.
2020-10-13 10:28:56 +01:00
Supriya Premkumar
4dbcd1fa73 Fix auth zone hosted domain lookups.
Changes:
    1. When there are multiple route53 hosted top zone and delegated
    zones within the same account, cert-manager incorrectly uses
    the top level domain as auth zone for which it doesn't have perms.
    This DOSes AWS's IAM API.
    2. This change adds the best match in determining auth zone while
    looking up hosted zone IDs.
    3. Defines a GetBestMatch util function to perform longest domain
    matches.
    4. Adds test cases
    5. Fixes #3353

Signed-off-by: Supriya Premkumar <supriyapremkumar1@gmail.com>
2020-10-09 09:55:28 -07:00
Richard Wall
f3f321bbbc Update to vcert v4.11.0
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-10-08 15:02:50 +01:00
Maartje Eyskens
7105ca6e6a Add a unit test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens
f50ef8fdf3 Fix IPv6
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Maartje Eyskens
39de7f3b99 Fix IP type
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
Richard Wall
350eff1b55 Move ACME label keys to the external API package
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-21 12:31:10 +01:00
Haoxiang Zhou
1d8de37c81 Use v1 API
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-08-21 10:17:23 +02:00
Haoxiang Zhou
acaea2d96e Rename field to DisableAccountKeyGeneration
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-08-21 09:55:21 +02:00
Haoxiang Zhou
9512a38113 Change behaviour according to onlyUseExistingAccountKey field
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-08-21 09:55:21 +02:00
Richard Wall
81eb53f597 ./hack/update-all.sh
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:28:06 +01:00
Richard Wall
a70298180a Run a script to update v1alpha2 usage to v1
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:26:51 +01:00
Maartje Eyskens
3259fdfe9b Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens
4c85d7e5b8 bazel update for log test fix
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens
04d3a8dae4 fix log related route53 test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens
83563bf81c fix log related test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens
827ce9c5ad Revert log levels on errors
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:42 +02:00
Maartje Eyskens
5d4869b20e Fix formatted logs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
Maartje Eyskens
86dee5ed41 Set error log levels
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
Maartje Eyskens
fecd0b3518 Set all log levels for info
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
Maartje Eyskens
9dd00905e9 Update klog
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

klog v2

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
Paul Jones
529cef8a93
Add serviceAccountName to issuers CRDs for http01 solvers
Signed-off-by: Paul Jones <paul.jones@jetstack.io>
2020-08-03 15:30:24 +01:00
Maartje Eyskens
2130329811 Add support for the podPriorityClass field in HTTP01 podTemplate
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-23 10:21:34 +02:00
jetstack-bot
54605ff68a
Merge pull request #2975 from meyskens/clouddns-hostedzone
Add a hostedZoneName field to Cloud DNS
2020-07-16 13:15:48 +01:00
jetstack-bot
6db412f241
Merge pull request #3101 from meyskens/improve-cf-log
Improve error output for Cloudflare
2020-07-16 11:47:48 +01:00
Maartje Eyskens
61f7bf4153 Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-16 11:03:30 +02:00
Maartje Eyskens
06d0d5c4b0 Remove double spacing
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-16 10:26:05 +02:00
Maartje Eyskens
02ba02167a Improve error output for Cloudflare
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-16 10:13:57 +02:00
jetstack-bot
d4bab3f369
Merge pull request #2979 from meyskens/venafi-async
Make Venafi issuer async
2020-07-15 15:27:34 +01:00
Maartje Eyskens
d65b9f6764 Fix one last visibility
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-10 11:09:55 +02:00
Maartje Eyskens
563f20d1b7 Fix test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-08 14:52:13 +02:00
Maartje Eyskens
9c7dcab808 Pass zone name along
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-08 14:52:12 +02:00
Maartje Eyskens
6f1ee6a1d2 Add a hostedZoneName field to Cloud DNS
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-08 14:52:11 +02:00
Maartje Eyskens
02cc9189ae Rewrite unit tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-07 14:54:59 +02:00
Maartje Eyskens
e952560810 implement review feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-07 14:16:29 +02:00
jetstack-bot
f80d79c268
Merge pull request #2909 from JoshVanL/2952-move-to-cobra
Move all commands into cobra
2020-07-07 12:30:04 +01:00
Maartje Eyskens
9c51360f83 Fix field name
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-06 17:36:00 +02:00
Maartje Eyskens
59fbe02ff8 Put function arguments in the correct order
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-03 14:12:08 +02:00
Maartje Eyskens
7c51e0b9da Use http.NewRequest
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-03 11:19:19 +02:00
Maartje Eyskens
fe02661386 Fix more unit tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje Eyskens
ca5361d79d Make unit tests work
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje Eyskens
de88345da0 Update timeout
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje Eyskens
ac9895d91b Make Venafi issuer async
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-02 10:04:21 +01:00
Maartje Eyskens
15f3872d01 Update baszel
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-30 10:13:43 +02:00
Maartje Eyskens
2f950b0a58 Add a user-agent on HTTP self-checks
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-30 09:27:33 +02:00
JoshVanL
8f924151a3
Change acmesolver parameters and catch stopCh for server shutdown
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-06-26 13:47:37 +01:00
jetstack-bot
220b98923c
Merge pull request #3037 from munnerz/verify-staticcheck
Add verify-staticcheck.sh script
2020-06-26 13:15:39 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 12:25:08 +01:00
jetstack-bot
deac83e6fb
Merge pull request #2989 from meyskens/cf-no-email
Make Cloudflare email an optional field
2020-06-26 10:58:39 +01:00
jetstack-bot
abd13992c8
Merge pull request #2839 from meyskens/update-miekg-dns
Update to the latest miekg/dns
2020-06-11 15:26:23 +01:00
jetstack-bot
89c8fc3c8d
Merge pull request #2898 from diversario/2159-remove-custom-retryer
Remove custom retry logic from route53 package
2020-06-11 13:58:23 +01:00
Maartje Eyskens
4a59c875ee Do not send email if not set
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-08 17:25:15 +02:00
Maartje Eyskens
c867bc7d36 Implement MessageAcceptFunc
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-05-27 17:42:34 +02:00
Maartje Eyskens
c9fbbdbde8 Update to the latest miekg/dns
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-05-27 17:42:34 +02:00
JoshVanL
db24ca052b
Remove the Factory interface from ACME accounts, in favour of using
package level funcs. This exposes BuildHTTPClient that instruments
metrics, which is passed to NewClient. ACME issuer has reference to
plumbed in metrics

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-21 10:44:37 +01:00
JoshVanL
54eb9da7af
Adds 'Factory' interface to consume the instrumented acme client
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-05-18 17:42:47 +01:00
James Munnelly
b126a0c0e5 Use acme AccountRegistry throughout and tidy up ACME setup code
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-05-13 13:14:46 +01:00
Ilya Shaisultanov
280aa2654d
Remove unused retryer
Signed-off-by: Ilya Shaisultanov <ilya.shaisultanov@gmail.com>
2020-05-07 11:41:13 +02:00
Ilya Shaisultanov
bebd82c1f8
Remove custom retry logic from route53 package
ACME challenges controller already handles retry logic. This
avoid an issue where cert-manager can spam Route53 under certain
conditions, leading to throttling.

Fixes #2159.

Signed-off-by: Ilya Shaisultanov <ilya.shaisultanov@gmail.com>
2020-05-07 00:14:05 +02:00
Mehdi Abaakouk
13c2539a78 cloudfare: update per_page max to 100
cloudfare just changed the maximum of per_page in their API to 100.

  Warning  PresentError  2m41s (x11 over 75m)  cert-manager
  Error presenting challenge: Cloudflare API Error
  Error: 9205: Per_Page must be a number between 5 and 100

This change fixes that.

Signed-off-by: Mehdi Abaakouk <sileht@sileht.net>
2020-04-28 15:25:27 +02:00
James Munnelly
019f64e841 Fix test failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 10:25:56 +01:00
James Munnelly
8a628c3315 Update field comments on ChallengeSpec
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 10:07:03 +01:00
gitirabassi
7a9788adba
addressed all reviewes and added all validation tests
Signed-off-by: gitirabassi <giacomo@tirabassi.eu>
2020-04-10 08:48:56 +02:00
gitirabassi
b403e83ed5
fixed test function signature
Signed-off-by: gitirabassi <giacomo@tirabassi.eu>
2020-04-10 08:48:43 +02:00
gitirabassi
fa034751dc
feat(azure): add usage of Managed Identities for azuredns provider for acme dns01 challenge
Signed-off-by: gitirabassi <giacomo@tirabassi.eu>
2020-04-10 08:48:34 +02:00
James Munnelly
881b886049 Update Kubernetes API client call-sites
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-26 12:58:50 +00:00
jetstack-bot
6a16550698
Merge pull request #2023 from zeeZ/configure-annotations
Add option to set custom annotations for HTTP01 resolver Ingress resources.
2020-03-23 12:24:37 +00:00
zeeZ
1c96ea9c57 Add option to set annotations and labels for HTTP01 resolver Ingress resources.
Signed-off-by: zeeZ <zeeZinator+github@gmail.com>
2020-03-12 21:12:11 +01:00
Johan Fleury
08db170a36
feat(rfc2136): add support for IPv6 address in nameserver
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
2020-03-09 21:43:56 -04:00
Johan Fleury
51d46e5f76
feat(rfc2136): allow FQDN and hostname in nameserver
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
2020-03-09 21:12:23 -04:00
James Munnelly
698d6ae5de Don't call GetReg before Register in registerAccount
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 20:47:17 +00:00
Josh Soref
2bbe72757b spelling: unsupported
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:59 -05:00
Josh Soref
a1eb44563b spelling: specified
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:54 -05:00
Josh Soref
a8ad68b926 spelling: relative
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 17:20:15 -05:00
Josh Soref
c36e58f999 spelling: nameserver
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:44:01 -05:00
Josh Soref
713696e329 spelling: message
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:43:55 -05:00
Josh Soref
1823697277 spelling: initializing
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:43:14 -05:00
James Munnelly
9ae1533a74 Truncate message displayed to user if fetched key does not match presented key
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-19 23:50:44 +00:00
James Munnelly
02ae799e31 Fix ownerReference GVK used during HTTP01 challenge solving
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-24 16:11:46 +00:00
jetstack-bot
5ee9e6c7aa
Merge pull request #2452 from munnerz/kubernetes-1.17.0
Bump Kubernetes dependencies to v0.17.0
2020-01-14 14:19:57 +00:00
James Munnelly
4aed3a7bbc Set namespace on Challenge resources created during tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-17 17:38:04 +00:00
Oliver Powell
7611f78793 ACME HTTP01 solver: clean up ingresses if the service name changes
Signed-off-by: Oliver Powell <oliver@opowell.com>
2019-12-14 10:05:51 +02:00
James Munnelly
5c4e27830f Use enum for HMAC algorithm field
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly
fd306c538c acme: Add support for external account binding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly
9d28261da5 Properly handle ErrNoAccount
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-03 16:49:31 +00:00
James Munnelly
641fe0da7c Switch to using upstream golang.org/x/crypto
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-03 16:49:31 +00:00
Matevz Mihalic
0abf945945
Remove ambient credentials
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:50 +01:00
Matevz Mihalic
b5972a379f
Add API token auth option to Cloudflare issuer
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:43 +01:00
James Munnelly
1527c06e0f Remove reference to metav1.ObjectMeta
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 12:26:11 +00:00
Harold Drost
62c4e0b6eb serviceAccountSecretRef is not always required
The cert-manager code will use what it's called ambient permissions.
This worked for us until we moved from v0.8 to v0.11 though I've found
the issue present in v10 also.

Signed-off-by: Harold Drost <baelish@bluecell.net>
2019-11-05 15:57:58 +00:00
Ingo Gottwald
0e59c623a0 Cleanup clouddns package
- Replace deprecated dns.New function with dns.NewService
- Remove deprecated oauth2.NoContext
- Fix unused err value in test

Signed-off-by: Ingo Gottwald <in.gottwald@gmail.com>
2019-10-03 10:58:48 +02:00
JoshVanL
259efac9bd Remove 'IngressKey' from certmanager API in favour of a single const
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-10-02 10:04:55 +01:00
JoshVanL
1c4fcdf519 Updates bazel
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
JoshVanL
4eb6335c76 Support out of tree issuers in ingress-shim
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
James Munnelly
f466aeea88 Fix govet warnings
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-27 12:07:08 +01:00
James Munnelly
973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
JoshVanL
e1875bc8c5 Updates apis to v1alpha2/meta
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 18:20:56 +01:00
JoshVanL
f2f5fccb85 Addresses comments and makes vault auth pointers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-23 13:54:48 +01:00
Adam Kunicki
7058dfc687 Added Kubernetes authentication type for Vault Issuer
Signed-off-by: Adam Kunicki <adam@streamsets.com>
2019-09-23 13:33:29 +01:00
James Munnelly
f2f3aee50d Update codebase for new API group
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-23 12:06:13 +01:00
James Munnelly
73460c158a Update pkg/issuer
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-23 10:07:53 +01:00
James Munnelly
c7584c63a1 Fix up BUILD file
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 19:25:05 +01:00
James Munnelly
bf9fbea23f Update codebase for new meta apigroup
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 19:25:04 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly
ad237cf300 Remove deprecated code from acme issuer http and dns solver
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly
66668d6004 Remove old-style issuer Issue functions
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:58 +01:00
James Munnelly
3324ca0959 Update use of DirectCodecFactory
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-07 12:32:51 +01:00
James Munnelly
1b8a286206 Rename Setup->Init and use Start to start informers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-22 13:11:33 +01:00
James Munnelly
73d66c44ab Move API validations package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:11:01 +01:00
JoshVanL
efe1d4e670 Use DefaultCertDuration in ./pkg/api/util
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
ab346453e3 Moves DefaultCertDruation to ./api/util/duration.go
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
3634f5d0db Adds venafi CertificateRequest e2e tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
1b0dd4c893 Completes tests for internal venafi and venafi issuer
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
b4a40f78f1 Adds venafi setup test and updates issue for new client
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
858caf3c34 Completes ./internal/venafi tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
28f2d071ec Beginning porting and building new venafi tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
d96c7d2e1c Adds venafi internal package with venafi CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
JoshVanL
1bbdd03bfe Move DefaultCertDuration to pkg/util/api
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:35 +01:00
JoshVanL
635aae6ffc Fix vault duration panic + util.CertDuration to default
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL
a8e7584b36 Adds unit tests to vault CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
JoshVanL
bf133665a3 Both CR controller and legacy issuer use new vault client for signing
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:37:06 +01:00
Moritz Johner
591587273e feat: add option to assume-role in route53
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-08-03 17:37:25 +02:00
James Munnelly
8055f06758 Fix enum type validation schema
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-02 13:55:40 +01:00
jetstack-bot
222d46ab99
Merge pull request #1735 from kragniz/controller-tools-crd
Use controller-gen to generate CRDs
2019-07-29 19:48:32 +01:00
James Munnelly
5aeee11598 Add unit tests for deprecated config feature flag
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 17:18:48 +01:00
James Munnelly
1da47b9e68 Add DisableDeprecatedACMECertificates feature gate
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 16:17:59 +01:00
James Munnelly
70d7d222e8 Centralise fake structures into 'fake' subpackages
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 12:30:23 +01:00
James Munnelly
406e6ad291 Don't depend on pkg/issuer in pkg/util/pki
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-25 15:12:41 +01:00
James Munnelly
f4140e2df0 Remove validation dependence on rfc2136 package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-25 14:57:51 +01:00
JoshVanL
ab838197fc Move CA signer into ./pkg/controller/certificaterequests/ca
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-23 09:27:22 +01:00
James Munnelly
b99b492827 Remove unused var from GenerateCSR
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:04:40 +01:00
James Munnelly
c6ceea4e81 Encode CSR on Order into PEM format and properly handle decoding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-12 14:00:46 +01:00
jetstack-bot
a14cd35942
Merge pull request #1852 from munnerz/fixup-update-email
Fix issues with updating ACME account email
2019-07-08 14:42:34 +01:00
jetstack-bot
1b9b83a4b8
Merge pull request #1803 from cheukwing/issue-1770
Add support for nodeSelector, tolerations & affinity in podTemplate
2019-07-08 14:27:34 +01:00
James Munnelly
aa3e2fa4aa Fix typos and tidy up imports
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 15:30:32 +01:00
James Munnelly
361ee83102 Update to use custom PodSpec struct and support Affinity too
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 15:21:40 +01:00
Michael Tsang
d34effece0 Add nodeselector and tolerations to pod building
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-05 14:57:48 +01:00
James Munnelly
8f9f962b58 Add unit tests for matchCAA function
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 14:56:02 +01:00
Michael Tsang
a5333a3e86 Fix incorrect issuewild handling in matchCAA
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-04 17:32:06 +01:00
jetstack-bot
70bc3e845b
Merge pull request #1850 from kinolaev/acme-http01-self-check-proxy
Use proxy from env in self check request
2019-07-04 13:16:38 +01:00
jetstack-bot
bd08bf6a23
Merge pull request #1830 from stuarthu/azureendpoint
make azure endpoint configurable
2019-07-04 12:19:37 +01:00
jetstack-bot
30d6664dc6
Merge pull request #1849 from munnerz/namespaced-factories
Respect --namespace flag in rfc2136 provider
2019-07-04 10:10:38 +01:00
Stuart Hu
9bdb275f49 Merge remote-tracking branch 'origin/master' into azureendpoint
Signed-off-by: Stuart Hu <shijiehu@improbable.io>
2019-07-04 15:21:23 +08:00
Stuart Hu
962489d928 fix test
Signed-off-by: Stuart Hu <shijiehu@improbable.io>
2019-07-04 15:02:35 +08:00
Stuart Hu
97518664b5 fix test
add cert-manager validation for azure environments

Signed-off-by: Stuart Hu <shijiehu@improbable.io>
2019-07-04 14:36:35 +08:00
Sergej Nikolaev
099abed3fc Use proxy from env in self check request
Signed-off-by: Sergej Nikolaev <kinolaev@gmail.com>
2019-07-03 22:46:21 +03:00
James Munnelly
6a5fad1784 Move email update handling logic into own function
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-03 19:13:10 +01:00
James Munnelly
f0feb3afb4 acme: fixup bugs with email updating
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-03 18:57:19 +01:00
James Munnelly
5f5811b81e Respect --namespace flag in rfc2136 provider
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-03 13:52:43 +01:00
jetstack-bot
8e54b32d6e
Merge pull request #1763 from cheukwing/issue-1667
Add handling of updates to ACME email field in Issuers
2019-07-03 13:04:30 +01:00
Carlos Panato
968bf753de
add cache-control header
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2019-07-03 12:41:45 +02:00
JoshVanL
79e5cf37a3 Improve comments and test coverage of pkg/issuer/ca/sign.go
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-02 11:55:45 +01:00
JoshVanL
f5d0428c78 Moves SignCSRTemplate to pkg/utils/pki
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-01 09:23:58 +01:00
JoshVanL
70b974695b Adds Sign function to CA issuer
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-06-28 16:40:12 +01:00
Stuart Hu
2025d310ec make azure endpoint configurable
Signed-off-by: Stuart Hu <shijiehu@improbable.io>
2019-06-27 13:33:21 +08:00
jetstack-bot
0ec98cfadf
Merge pull request #1807 from JoshVanL/303-sign-interface
Adds sign interfaces for Issuers
2019-06-25 15:17:43 +01:00
JoshVanL
40802d08c2 Adds sign func to Issuer interface
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-06-25 14:05:51 +01:00
James Munnelly
20b1343c88 Remove use of klog from more places
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-06-25 14:30:41 +02:00
Crystal-Chun
4f35c56443 Allows certificates to use PKCS#8 Issue 1155 (#1308)
* Added KeyEncoding spec value to Certificate type.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added validation for Certificate Spec field KeyEncoding.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added Encoding PKCS8 function for encoding private keys in generate.go.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Modified the call to the private key encoding function for each issuer in issue.go to pass in the extra KeyEncoding field.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added case for decoding pkcs8 key.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Converting decoded PKCS8 key into crypto.Signer.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added debugging log statements for decoding private keys.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Log messages for decoding private keys.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added logs for decoding private keys.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added debug logs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Add debug logs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Modified keys package.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed the key converter to the ssh package.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Testing decoding as pkcs1 key instead.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Trying to convert to crypto.Signer for PKCS8.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Converting to rsa.PrivateKey.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed return to type private key.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changing parsing.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Cleaned up logs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed logging info.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed debug logging.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fix parse test for new pkcs8 support.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed extra lines.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed extra lines and spaces.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed duplicate PKCS8 functions.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed the KeyEncoding field from an int to a string.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed issue.go for issuers to pass in the certificate when encoding private key.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Corrected capitalization of Spec.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed the error message to use the correct variable.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed selfsigned issue.go to pass in certificate object instead of the keyEncoding.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed error format.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed test to pass in certificate variable into encoding private key function.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed syntax issue.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed parameter for encode private key function in parse_test.go.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed parse test for encode private key function.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed invalid syntax.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Moved the if statement.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Cleaned up go-fmt errors.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Ran bazel run //hack:update-reference-docs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed encode private key to take keyEncoding instead of certificate.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed setting keyEncoding for ca issue test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixing passing in the correct type for encoding private key.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixing passing in the correct type for encoding private key.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed parameter passed into encode private key for parse test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added unit test for encoding different private key types.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed key encoding field from existing test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added KeyEncoding spec value to Certificate type.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added validation for Certificate Spec field KeyEncoding.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added Encoding PKCS8 function for encoding private keys in generate.go.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Modified the call to the private key encoding function for each issuer in issue.go to pass in the extra KeyEncoding field.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added case for decoding pkcs8 key.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Converting decoded PKCS8 key into crypto.Signer.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added debugging log statements for decoding private keys.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Log messages for decoding private keys.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added logs for decoding private keys.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added debug logs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Add debug logs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Modified keys package.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed the key converter to the ssh package.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Testing decoding as pkcs1 key instead.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Trying to convert to crypto.Signer for PKCS8.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Converting to rsa.PrivateKey.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed return to type private key.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changing parsing.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Cleaned up logs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed logging info.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed debug logging.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fix parse test for new pkcs8 support.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed extra lines.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed extra lines and spaces.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed duplicate PKCS8 functions.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed the KeyEncoding field from an int to a string.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed issue.go for issuers to pass in the certificate when encoding private key.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Corrected capitalization of Spec.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed the error message to use the correct variable.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed selfsigned issue.go to pass in certificate object instead of the keyEncoding.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed error format.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed test to pass in certificate variable into encoding private key function.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed syntax issue.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed parameter for encode private key function in parse_test.go.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed parse test for encode private key function.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed invalid syntax.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Moved the if statement.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Cleaned up go-fmt errors.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Ran bazel run //hack:update-reference-docs.

Signed-off-by: Crystal Chun <crystalchun@crystals-mbp.raleigh.ibm.com>
Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Changed encode private key to take keyEncoding instead of certificate.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed setting keyEncoding for ca issue test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixing passing in the correct type for encoding private key.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixing passing in the correct type for encoding private key.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed parameter passed into encode private key for parse test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added unit test for encoding different private key types.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed key encoding field from existing test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed syntax error for declaring constant.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Moving private key all to one line.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added commas after each test case and changed the private key to a pkcs1 rsa private key.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed test errors.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added default error.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Predefined actualEncoding variable.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Undeclared actualEncoding variable.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Declared actualEncoding variable to nil.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Declared actualEncoding variable to empty key encoding type.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixed unit test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Ran update go-fmt.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Added e2e test for pkcs8 certificate.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Removed unused variable.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Creating issue in pkcs8 e2e test.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Fixing no new variables on the left side of := for err variable.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* Updated docs to mention the key encoding field.

Signed-off-by: Crystal Chun <crystalchun@Crystals-MacBook-Pro.local>

* change venafi issuer to support different cert encoding

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* update crds

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
2019-06-18 11:34:03 +01:00
Michael Tsang
d7ce606456 Move email updating after register error handling
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-06-18 11:31:04 +01:00
jetstack-bot
c475eb632d
Merge pull request #1765 from cheukwing/issue-1552
Add truncation of certificate name when forming order name
2019-06-17 20:47:58 +01:00
jetstack-bot
07c34114e0
Merge pull request #1704 from cheukwing/issue-1383
Ensure managed zone picked for CloudDNS is public
2019-06-17 20:22:06 +01:00
Michael Tsang
4b349f0f27 Check ACME issuer registered emails after first verifying
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-06-12 14:51:08 +01:00
Michael Tsang
092e9c08e8 Add LastRegisteredEmail field to ACMEIssuerStatus, to track the latest registered ACME account
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-06-12 09:42:32 +01:00
Michael Tsang
407d472137 Add comment explaining magic number
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-06-12 09:19:32 +01:00
jetstack-bot
93faf9c1ef
Merge pull request #1749 from JoshVanL/pod-templating
Expose pod tempting on acme http issuer
2019-06-11 18:43:16 +01:00