Commit Graph

449 Commits

Author SHA1 Message Date
joshvanl
9e1b0342d0 Updates with review comments
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-05-27 18:48:50 +01:00
joshvanl
60d5974115 Moves CertificateSigningRequest controller to feature gate flag
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-05-27 12:00:56 +01:00
joshvanl
62dee4783e Adds CertificateSigningRequest CA Issuer controller as optional
controller

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-05-27 00:32:24 +01:00
irbekrm
b539cbea89 Use ConfigmapsLeases Multilock for controller's leader election
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-05-17 18:19:38 +01:00
Tamal Saha
7b63788f52 Cleanup codegen script
Signed-off-by: Tamal Saha <tamal@appscode.com>
2021-05-17 08:11:19 -07:00
Jake Sanders
79d8d9cb7b
Revert "Merge pull request #3724 from inteon/istio-virtualservice-for-http01"
This reverts commit 80f27739b5, reversing
changes made to 96604d02a3.

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-11 14:50:25 +01:00
Jake Sanders
423e82b65b
Revert "Merge pull request #3939 from JoshVanL/istio-api-to-internal-apis"
This reverts commit f2a74ade5e, reversing
changes made to 7ff54e61e9.

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-05-11 14:50:23 +01:00
joshvanl
01716e2907 Fixes stutter: istio.IsIstioInstalled -> istio.IsInstalled
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 11:42:21 +01:00
joshvanl
00ceff3421 Update bazel
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 11:36:49 +01:00
joshvanl
3af22cf6c6 Move istio util duncs to pkg/util/istio
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-04-29 11:35:41 +01:00
Inteon
2d7dfcb462 start DynamicSharedInformerFactory unconditionally; only listen for VirtualServices conditionally
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-04-28 09:20:49 +02:00
Inteon
624e2b9e69 add ACME HTTP01 Istio support
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
2021-04-28 09:19:53 +02:00
joshvanl
56a604c6f0 Init plugins in webhook cmd
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl
109b3e0b28 Rename Wehook's API server host flag from --master to --api-server-host
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl
59049ee58a Add SubjectAccessReview client to validation registration on webhook start. Make API address configurable
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 17:26:28 +00:00
joshvanl
8f5b03427c Fix options_test.go boilerplate header
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 11:28:01 +00:00
joshvanl
6ef840972c Change controller options to return a set of enabled controllers, and
log enabled controllers on start

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 11:28:01 +00:00
joshvanl
5c3e02d7a5 Changes the controllers flag to allow disabling controllers. This is the
same behaviour as kube-controller-manager

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 11:28:01 +00:00
joshvanl
0382c9d8b2 Adds a cert-manager-controller flag to disable controllers, for example,
the certificaterequests-approver

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-26 11:28:01 +00:00
jetstack-bot
a8c75fab1a
Merge pull request #3773 from JoshVanL/certificate-revision-history-limit
Certificate revision history limit
2021-03-26 11:13:58 +00:00
joshvanl
9ab0a5a77c Fix command comments
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-25 19:08:21 +00:00
joshvanl
f25be73f73 Adds comments for the Reason and Message options of the ctl approve and
deny commands

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-24 17:17:42 +00:00
joshvanl
db617f0772 Adds kubectl cert-manager [approve|deny] CLI commands
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-23 17:30:09 +00:00
joshvanl
6957bc31df Adds the CertificateRequest approver controller to
cert-manager-controller

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-17 13:10:39 +00:00
joshvanl
c4b918c0aa Adds RevisionManager controller to default enabled controller
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-15 14:54:35 +00:00
jetstack-bot
70c66e02a0
Merge pull request #3641 from JoshVanL/certificate-request-identity
CertificateRequest UserInfo fields
2021-03-15 14:26:15 +00:00
joshvanl
39a50a1903 Updates unit certificate controller tests to include ObservedGeneration
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-03-04 17:04:09 +00:00
Jake Sanders
4c935a2706
Fix expired certificate test
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
2021-02-26 11:06:25 +00:00
irbekrm
b852e97ffb Removes the deprecated renew-before-expiry flag
Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-02-21 10:22:25 +00:00
joshvanl
33f3fe473c Rename webhook SchemeBackedMutator -> RegistryBackedMutator
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-02-10 09:39:52 +00:00
joshvanl
90f0869899 Updates webhook command to use new mutating registry
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2021-02-08 19:23:15 +00:00
irbekrm
34fd9e9fef Makes /cmd/cainjector/main more DRY
reuses util.ContextWithStopCh to create a context with cancel func

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-01-27 13:32:23 +00:00
irbekrm
1abc7107ca Passes a single context with cancel func to all the kubectl plugin commands
Signed-off-by: irbekrm <irbekrm@gmail.com>

Don't duplicate the existing ContextWithStopCh function

Signed-off-by: irbekrm <irbekrm@gmail.com>
2021-01-27 13:06:34 +00:00
jetstack-bot
26afeceb2b
Merge pull request #3457 from meyskens/inspect-secret
Add `inspect secret` command
2021-01-22 16:19:03 +01:00
Maartje Eyskens
b2bd401b91 Outuput error
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-20 10:32:45 +01:00
Maartje Eyskens
aa482212c1 Use templates (not fully yet)
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-19 18:13:26 +01:00
Maartje Eyskens
83881df0db Sort imports
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2021-01-19 15:42:25 +01:00
Julien ALEXANDRE
f8fbea38b3
Add flags to configure cainjector leader election
This commit enables users to customize the behavior of the cainjector
regarding leader election by adding `--leader-election-lease-duration`,
`--leader-election-renew-deadline` and `--leader-election-retry-period`
flags. These flags are already available on the controller.

Prior to this change, the values of these options were inherited from
controller-runtime. This commit keeps the same defaults for the
cainjector, for backward compatibility, even though they differ from
those of the controller.

Signed-off-by: Julien ALEXANDRE <22328659+ndrpnt@users.noreply.github.com>
2020-12-19 18:00:54 +01:00
Maartje Eyskens
a5732221f4 Fix tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:09:39 +01:00
Maartje Eyskens
d65a9a3479 Update copyright
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:04:08 +01:00
Maartje Eyskens
f7f766b077 Fix describe test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:13 +01:00
Maartje Eyskens
dbf5dc6804 Add boilerplate
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:13 +01:00
Maartje Eyskens
df7bce9b33 Add tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:13 +01:00
Maartje Eyskens
214e607b07 Clean up code
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:13 +01:00
Maartje Eyskens
f671c811cf Improve logic
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:13 +01:00
Maartje Eyskens
bedb95a0a4 Add revocation checks
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:13 +01:00
Maartje Eyskens
654f16ec14 WIP add inspect secret
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:02:12 +01:00
jetstack-bot
cdc53b65cb
Merge pull request #3500 from meyskens/update-copy
Update copyright to cert-manager project
2020-12-15 10:12:31 +00:00
Maartje Eyskens
ab0cd57dc5 Use The cert-manager Authors.
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-11 19:04:13 +01:00
jetstack-bot
2c521609de
Merge pull request #3477 from tharun208/feat/profiling
Added profiling for controller
2020-12-11 14:11:10 +00:00