Commit Graph

165 Commits

Author SHA1 Message Date
Maartje Eyskens
1672a01e49 Remove managed by Helm labels from static manifests and CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-13 20:09:35 +02:00
James Munnelly
a4cbd146c3 Avoid duplicate CRDs in static manifests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-08 17:45:19 +01:00
James Munnelly
b955abed17 Fix up chart and bazel build rules
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-01 18:22:35 +01:00
James Munnelly
f33beefc32 Add installCRDs option to Helm chart
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-01 13:15:15 +01:00
James Munnelly
1700833601 Default webhook to use the dynamic secret source
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-30 14:25:54 +01:00
James Munnelly
d08299c846 Update Helm chart & other docs with new URLs and info
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-24 16:21:48 +00:00
jetstack-bot
35add56ef5
Merge pull request #2625 from srbraun/crl
adds option to specify CRL Distribution Point. #2612
2020-03-23 13:33:32 +00:00
jetstack-bot
6a16550698
Merge pull request #2023 from zeeZ/configure-annotations
Add option to set custom annotations for HTTP01 resolver Ingress resources.
2020-03-23 12:24:37 +00:00
Sergey Braun
9b76cdd402
adds CDP field and description to CA issuer
Signed-off-by: Sergey Braun <dev@skra.space>
2020-03-19 12:52:43 +01:00
zeeZ
1c96ea9c57 Add option to set annotations and labels for HTTP01 resolver Ingress resources.
Signed-off-by: zeeZ <zeeZinator+github@gmail.com>
2020-03-12 21:12:11 +01:00
Johan Fleury
08db170a36
feat(rfc2136): add support for IPv6 address in nameserver
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
2020-03-09 21:43:56 -04:00
Johan Fleury
51d46e5f76
feat(rfc2136): allow FQDN and hostname in nameserver
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
2020-03-09 21:12:23 -04:00
James Munnelly
61cff09573 Automatically prepend license boilerplate header to release manifests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-11 12:08:43 +00:00
James Munnelly
73c8c6747f Include CRDs as part of release assets published to GitHub
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-06 14:09:46 +00:00
Maartje Eyskens
3307e3a946 Update bazel
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-04 15:07:47 +01:00
Maartje Eyskens
aaae73a45d Replace openshift/no-webhook manifests with legacy
This releases a new manifest type "legacy" to support Kubernetes <1.15 and OpenShift 3.
This version uses the webhook but disables the conversions as they are not supported.
For this reason only the v1alpha2 API is added in these manifests.
All newer APIs are filtered by the filter-crd tool.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-04 14:26:25 +01:00
jetstack-bot
f2c462d29f
Merge pull request #2642 from meyskens/manifest-phase1
Put OpenShift specific RBAC in all manifests
2020-03-04 13:02:58 +00:00
jetstack-bot
00b101de76
Merge pull request #2597 from meyskens/emailsans
Add Email SANs
2020-03-03 16:31:56 +00:00
Maartje Eyskens
ce4c33f3b5 Put OpenShift specific RBAC in all manifests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-03 14:57:26 +01:00
James Munnelly
5eb3cb6313 Mark filter-crd target as a tool dependency instead of src
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-03 10:29:54 +00:00
srBraun
04bfddefc3 adds support for CDP to selfsigned issuer
Signed-off-by: srBraun <dev@skra.space>
2020-03-02 12:40:46 +01:00
Josh Soref
8d801fc100 spelling: certificate
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:15:51 -05:00
Josh Soref
b93d64c09d spelling: authorizations
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:15:18 -05:00
Josh Soref
ec5da97f2b spelling: account
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:14:20 -05:00
Maartje Eyskens
d3a623314c Add EmailSANs field
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-21 08:49:00 +01:00
Maartje Eyskens
1439ca350c Write CRD filter for OpenShift
This adds a Go binary that filters certain keys from the CRDs.
This is meant to remove keys that are not compatible with OpenShift 3.11.
This then is ran on creating the deployment manifests.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-18 10:52:42 +01:00
jetstack-bot
2862c31386
Merge pull request #2593 from JoshVanL/encode-openapi-validation
Certificate KeySize encode openapi validation
2020-02-17 11:42:24 +00:00
James Munnelly
71373d1e50 Fix including CRDs as part of static manifests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-13 15:52:01 +00:00
JoshVanL
9b9b66d7b4
Updates CRDs with max/min keysize validation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-02-12 10:18:11 +00:00
jetstack-bot
f9c23dcb8f
Merge pull request #2556 from munnerz/release-tars
Add release-tars targets to construct cert-manager release artifacts
2020-02-10 16:10:13 +00:00
James Munnelly
48c56dbe5a Run ./hack/update-crds.sh
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-10 12:16:29 +00:00
Maartje Eyskens
3c09a7b80c Document more info on CN behaviour
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-07 09:22:24 +01:00
Maartje Eyskens
7e318dbfbb update CRDs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-07 09:16:49 +01:00
James Munnelly
5b9cd23d0f Make the Venafi Cloud URL field optional
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-02-03 18:18:38 +00:00
James Munnelly
22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-30 21:02:58 +00:00
jetstack-bot
b7e83b5382
Merge pull request #2508 from JoshVanL/cr-invalid-request
CertificateRequest InvalidRequest
2020-01-20 14:17:31 +00:00
Joshua Mathianas
05ff21250d Updates plural names and destination attribute name to match source
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 10:30:20 -05:00
Joshua Mathianas
9ee6ea7b7d Fixed a typo and ran generators
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:49:40 -05:00
Joshua Mathianas
e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 07:50:26 -05:00
JoshVanL
0a10343e2c
Updates crds
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:56:52 +00:00
James Munnelly
5c4e27830f Use enum for HMAC algorithm field
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly
80bc253d74 acme: Add API fields for ExternalAccountBinding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 10:37:16 +00:00
Matevz Mihalic
b5972a379f
Add API token auth option to Cloudflare issuer
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:43 +01:00
James Munnelly
7c1dd0b30e Set preserveUnknownFields: false
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 12:26:11 +00:00
James Munnelly
1527c06e0f Remove reference to metav1.ObjectMeta
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 12:26:11 +00:00
James Munnelly
e8fbd37634 Mark 'csr' field as required in CertificateRequest
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 01:01:43 +00:00
JoshVanL
1c5a5caaf8 Adds all key usage possible values to key usage comment
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-14 13:51:28 +00:00
jetstack-bot
1bfec37482
Merge pull request #2349 from JoshVanL/2205-kubernetes-auth-path
Changes the vault issuer Kubernetes auth path to require the full *mount* path
2019-11-13 09:58:26 +00:00
JoshVanL
0e739bdde9 Mount path now hard codes /login endpoint in code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-12 18:37:54 +00:00
jetstack-bot
f83dc13a39
Merge pull request #2326 from JoshVanL/cli-output-issuer
Increases issuer CLI output
2019-11-11 13:52:40 +00:00