weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
908 Commits 45 Branches 0 Tags 96 MiB
12d603f511
Commit Graph

908 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jetstack-bot
12d603f511
Merge pull request #629 from groner/check-acme-issuer-challenge-type 
Check the acme issuer has the challenge type configured.
 2018-06-14 11:54:37 +01:00
jetstack-bot
0153587455
Merge pull request #655 from jetstack/munnerz-patch-5 
Update e2e test ACME email
 2018-06-14 11:08:36 +01:00
James Munnelly
b0b7ae9c1f
Update e2e test ACME email 
Let's encrypt no longer allow use of @example.com emails for ACME accounts.

This PR switches us to use a @cert-manager.io email for the ACME account used during e2e tests, as currently the dns01 e2e tests are performed against the let's encrypt staging endpoint due to issues described in https://github.com/letsencrypt/pebble/issues/118
 2018-06-13 23:11:55 +01:00
jetstack-bot
df4b493b38
Merge pull request #582 from ThatWasBrilliant/master 
FindZoneByFqdn fixes from lego
 2018-06-12 16:25:41 +01:00
jetstack-bot
17acf81b26
Merge pull request #642 from munnerz/refactor-create 
Create common GenerateCSR and GenerateTemplate methods for creating Certificate/CertificateRequest
 2018-06-08 15:45:44 +01:00
James Munnelly
1fd8cdf13e Create common GenerateCSR and GenerateTemplate methods for creating Certificate/CertificateRequest 2018-06-08 15:15:27 +01:00
jetstack-bot
4a5fe3823e
Merge pull request #635 from munnerz/vendor-prune 
Enable vendor pruning
 2018-06-08 11:36:46 +01:00
jetstack-bot
456722ce04
Merge pull request #638 from wallrj/richardw-owners 
Add Richard Wall to OWNERS file
 2018-06-07 16:23:34 +01:00
Richard Wall
21faf290af Add Richard Wall to OWNERS file 2018-06-07 15:50:43 +01:00
James Munnelly
bea5dccec4 Run dep ensure 2018-06-07 14:25:27 +01:00
James Munnelly
4c0d58bf94 Enable vendor pruning 2018-06-07 14:24:39 +01:00
Kai Groner
b7a8c4c623 Check the acme issuer has the challenge type configured. 2018-06-06 10:19:22 -04:00
jetstack-bot
5f8e9ccf94
Merge pull request #628 from JrCs/doc-vault-issuer 
Vault issuer MUST USE the vault 'sign' endpoint
 2018-06-06 15:00:53 +01:00
JrCs
bafd0f2986 Vault issuer MUST USE the vault 'sign' endpoint 2018-06-06 13:24:15 +02:00
jetstack-bot
3cafdd9401
Merge pull request #598 from euank/log-namespaces 
issuer/acme/*: log namespaces for resources
 2018-06-06 09:52:53 +01:00
jetstack-bot
c61f392163
Merge pull request #555 from paultiplady/debug/gcloud-errors 
Improve logs for CloudDNS service account errors
 2018-06-06 01:40:39 +01:00
jetstack-bot
787b8d7084
Merge pull request #623 from jetstack/munnerz-patch-4 
Update labels.yaml
 2018-06-06 01:18:39 +01:00
James Munnelly
e16c7434d7
Update labels.yaml 2018-06-06 00:55:10 +01:00
jetstack-bot
fe288c18da
Merge pull request #621 from jetstack/munnerz-patch-3 
Add note about Google Group to readme
 2018-06-06 00:53:40 +01:00
jetstack-bot
ee657637c3
Merge pull request #620 from jetstack/munnerz-patch-2 
Fix links in pull request template
 2018-06-05 23:45:40 +01:00
James Munnelly
3132fa7622
Add note about Google Group to readme 2018-06-05 23:00:59 +01:00
James Munnelly
87283aa5f6
Fix links in pull request template 2018-06-05 22:55:55 +01:00
jetstack-bot
2f69555a1f
Merge pull request #522 from fgrehm/support-for-custom-dns-settings 
Support for custom dns settings
 2018-06-05 10:48:39 +01:00
Fabio Rehm
e90fb5a261
Regenerate static deployment manifest files with ./hack/update-deploy-gen.sh 2018-06-04 16:43:41 -03:00
Fabio Rehm
52142d084f
Bump chart version to v0.3.2 2018-06-04 16:36:23 -03:00
Fabio Rehm
a923113e65
Update chart's README 2018-06-04 16:32:08 -03:00
Fabio Rehm
94310f09a2
Add support for custom DNS settings for the cert-manager pod 
This allows HTTP / DNS challenges to be self checked in AWS setups in
which both a public and private DNS zone are present for the same
domains. Without this the pod will never see the challenge that is going
to be presented to LE because they'll be added to public ingresses / DNS
zones
 2018-06-04 16:32:04 -03:00
jetstack-bot
2439c8e21e
Merge pull request #609 from SaaldjorMike/docs_fixes 
Fix references to other documentation sections.
 2018-06-02 10:51:14 +01:00
Mike Rostermund
a68b54ec3e Fix references to other documentation sections. 2018-06-02 10:31:51 +02:00
jetstack-bot
137e14e5e0
Merge pull request #585 from klausenbusk/non-root 
acmesolver: Run as non-root
 2018-05-31 11:52:09 +01:00
Euan Kemp
a09e9037de issuer/acme/http: log namespaces for resources 
It's useful to know what namespace is being operated on, so log
namespaces all over the place!
 2018-05-30 20:10:17 -07:00
Euan Kemp
09a5846412 issuer/acme/http: remove unused test code 
¯\_(ツ)_/¯
 2018-05-30 20:03:00 -07:00
Euan Kemp
36b57ba475 issuer/acme/dns: log namespace for secret errors 
If we can't find the secret, the user should probably also know what
namespace we looked in.

xref #540 for a case where this might help with debugging
 2018-05-30 20:00:21 -07:00
Euan Kemp
910a9e8859 issuer/acme/dns: remove redundant 'Error' calls 2018-05-30 19:57:44 -07:00
jetstack-bot
e51edb398e
Merge pull request #587 from vdesjardins/fix-vault-panic-on-sealed 
vault: fix panic when vault is sealed or uninitialized
 2018-05-29 12:13:15 +01:00
jetstack-bot
9f5781cc11
Merge pull request #584 from anderspetersson/patch-1 
Fixed a typo in error msg.
 2018-05-29 10:23:52 +01:00
Vincent Desjardins
37db332b46 vault: fix panic when vault is sealed or uninitialized 2018-05-29 01:36:00 +00:00
Kristian Klausen
4733fb6fcd acmesolver: Run as non-root 
acmesolver won't run in a namespace with a restrictive PSP
(Pod Security Policy)[1] without this change.
Note: A numeric user id is required due to [1]

[1] https://kubernetes.io/docs/concepts/policy/pod-security-policy/#users-and-groups
[2] https://github.com/kubernetes/kubernetes/pull/56503
 2018-05-28 01:43:28 +02:00
Anders Petersson
6d5b199d74
Fixed a typo in error msg. 2018-05-27 19:52:05 +02:00
Brian Hardy
e52aefb34a FindZoneByFqdn fixes from lego 2018-05-25 14:00:29 -05:00
jetstack-bot
33210637fd
Merge pull request #577 from munnerz/https-docs 
Use https docs URL in chart NOTES.txt
 2018-05-24 22:11:09 +01:00
James Munnelly
0aed6a960a Use https docs url 2018-05-24 21:45:07 +01:00
jetstack-bot
1e606b3ead
Merge pull request #575 from munnerz/03 
Bump chart and manifests for v0.3.0 release
 2018-05-24 13:31:40 +01:00
James Munnelly
a7b4e0208d Bump manifests and chart for v0.3.0 2018-05-24 13:06:26 +01:00
jetstack-bot
bc0a550663
Merge pull request #574 from munnerz/single-static-manifest 
Output a single file instead of directories for static manifests
 2018-05-24 13:05:40 +01:00
James Munnelly
7a7e6da692 Output a single file instead of directories for static manifests 2018-05-24 12:23:30 +01:00
jetstack-bot
a7b382b974
Merge pull request #563 from khrisrichardson/pod-labels 
add pod labels
 2018-05-24 12:07:41 +01:00
Khris Richardson
7ba5846051 revert fullname in lieu of #572 2018-05-22 16:56:32 -07:00
Khris Richardson
73037cbd3a add pod labels 2018-05-14 14:28:14 -07:00
Paul Tiplady
1089667ceb Make CloudDNS service account errors debuggable 
Improve logging in the case where the Service Account Secret is
loaded, but the Key is not found.

Previous behaviour was to fail without giving much help as to
why.

New behaviour confirms the key name and namespace/secret-name.

FIXES: 539
 2018-05-11 08:56:09 -07:00