weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
5,162 Commits 45 Branches 0 Tags 96 MiB
109b3e0b28
Commit Graph

436 Commits

Author SHA1 Message Date
joshvanl
109b3e0b28 Rename Wehook's API server host flag from --master to --api-server-host 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-26 17:26:28 +00:00
joshvanl
59049ee58a Add SubjectAccessReview client to validation registration on webhook start. Make API address configurable 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-26 17:26:28 +00:00
joshvanl
8f5b03427c Fix options_test.go boilerplate header 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-26 11:28:01 +00:00
joshvanl
6ef840972c Change controller options to return a set of enabled controllers, and 
log enabled controllers on start

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-26 11:28:01 +00:00
joshvanl
5c3e02d7a5 Changes the controllers flag to allow disabling controllers. This is the 
same behaviour as kube-controller-manager

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-26 11:28:01 +00:00
joshvanl
0382c9d8b2 Adds a cert-manager-controller flag to disable controllers, for example, 
the certificaterequests-approver

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-26 11:28:01 +00:00
jetstack-bot
a8c75fab1a
Merge pull request #3773 from JoshVanL/certificate-revision-history-limit 
Certificate revision history limit
 2021-03-26 11:13:58 +00:00
joshvanl
9ab0a5a77c Fix command comments 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-25 19:08:21 +00:00
joshvanl
f25be73f73 Adds comments for the Reason and Message options of the ctl approve and 
deny commands

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-24 17:17:42 +00:00
joshvanl
db617f0772 Adds kubectl cert-manager [approve|deny] CLI commands 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-23 17:30:09 +00:00
joshvanl
6957bc31df Adds the CertificateRequest approver controller to 
cert-manager-controller

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-17 13:10:39 +00:00
joshvanl
c4b918c0aa Adds RevisionManager controller to default enabled controller 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-15 14:54:35 +00:00
jetstack-bot
70c66e02a0
Merge pull request #3641 from JoshVanL/certificate-request-identity 
CertificateRequest UserInfo fields
 2021-03-15 14:26:15 +00:00
joshvanl
39a50a1903 Updates unit certificate controller tests to include ObservedGeneration 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-03-04 17:04:09 +00:00
Jake Sanders
4c935a2706
Fix expired certificate test 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-02-26 11:06:25 +00:00
irbekrm
b852e97ffb Removes the deprecated renew-before-expiry flag 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-02-21 10:22:25 +00:00
joshvanl
33f3fe473c Rename webhook SchemeBackedMutator -> RegistryBackedMutator 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-10 09:39:52 +00:00
joshvanl
90f0869899 Updates webhook command to use new mutating registry 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-02-08 19:23:15 +00:00
irbekrm
34fd9e9fef Makes /cmd/cainjector/main more DRY 
reuses util.ContextWithStopCh to create a context with cancel func

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-01-27 13:32:23 +00:00
irbekrm
1abc7107ca Passes a single context with cancel func to all the kubectl plugin commands 
Signed-off-by: irbekrm <irbekrm@gmail.com>

Don't duplicate the existing ContextWithStopCh function

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-01-27 13:06:34 +00:00
jetstack-bot
26afeceb2b
Merge pull request #3457 from meyskens/inspect-secret 
Add `inspect secret` command
 2021-01-22 16:19:03 +01:00
Maartje Eyskens
b2bd401b91 Outuput error 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-20 10:32:45 +01:00
Maartje Eyskens
aa482212c1 Use templates (not fully yet) 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-19 18:13:26 +01:00
Maartje Eyskens
83881df0db Sort imports 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-19 15:42:25 +01:00
Julien ALEXANDRE
f8fbea38b3
Add flags to configure cainjector leader election 
This commit enables users to customize the behavior of the cainjector
regarding leader election by adding `--leader-election-lease-duration`,
`--leader-election-renew-deadline` and `--leader-election-retry-period`
flags. These flags are already available on the controller.

Prior to this change, the values of these options were inherited from
controller-runtime. This commit keeps the same defaults for the
cainjector, for backward compatibility, even though they differ from
those of the controller.

Signed-off-by: Julien ALEXANDRE <22328659+ndrpnt@users.noreply.github.com>
 2020-12-19 18:00:54 +01:00
Maartje Eyskens
a5732221f4 Fix tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:09:39 +01:00
Maartje Eyskens
d65a9a3479 Update copyright 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:04:08 +01:00
Maartje Eyskens
f7f766b077 Fix describe test 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens
dbf5dc6804 Add boilerplate 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens
df7bce9b33 Add tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens
214e607b07 Clean up code 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens
f671c811cf Improve logic 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens
bedb95a0a4 Add revocation checks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:13 +01:00
Maartje Eyskens
654f16ec14 WIP add inspect secret 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-15 17:02:12 +01:00
jetstack-bot
cdc53b65cb
Merge pull request #3500 from meyskens/update-copy 
Update copyright to cert-manager project
 2020-12-15 10:12:31 +00:00
Maartje Eyskens
ab0cd57dc5 Use The cert-manager Authors. 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-11 19:04:13 +01:00
jetstack-bot
2c521609de
Merge pull request #3477 from tharun208/feat/profiling 
Added profiling for controller
 2020-12-11 14:11:10 +00:00
Maartje Eyskens
1788a9d758 Update copyright to cert-manager project 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-08 19:04:49 +01:00
Tharun
b67da63a4e Added profiling for controller 
Signed-off-by: Tharun <rajendrantharun@live.com>
 2020-11-22 12:15:52 +05:30
Richard Wall
a33abd2060 Plumb through the flag provided defaultRenewBeforeExpiryDuration 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-11-19 12:44:18 +00:00
Richard Wall
cc1412b252 Deprecate the --renew-before-expiry-duration flag 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-11-19 12:44:18 +00:00
Maartje Eyskens
7d1cd33081 Make resyncPeriod constant 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-22 10:25:10 +02:00
Maartje Eyskens
00d2b3b79e Set the resync period to 10 hours 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-21 15:19:22 +02:00
Maartje Eyskens
560eac4b06
Update cmd/controller/app/options/options.go 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
 2020-10-16 16:43:13 +02:00
Maartje Eyskens
232f21db26 Validate API values not being 0 + following k8s naming + defaults 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-16 13:08:26 +02:00
Maartje Eyskens
7c87e93950 update burst description 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-14 17:49:19 +02:00
Maartje Eyskens
ebadd4cd28 Fix defaults, description and add validation 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-14 17:46:09 +02:00
Maartje Eyskens
5dfb4d409b Make Kubernetes API QPS throtteling configurable 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-14 17:16:44 +02:00
Matthias Frey
2f2253afaf make propagation check period configurable 
Signed-off-by: Matthias Frey <freym@users.noreply.github.com>
 2020-09-24 11:28:49 +02:00
jetstack-bot
a4394510e2
Merge pull request #3275 from wallrj/3251-cainjector-3 
Load cainjector controllers independently
 2020-09-18 17:14:06 +01:00