weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
7,352 Commits 45 Branches 0 Tags 96 MiB
2eef0dad06
Commit Graph

215 Commits

Author SHA1 Message Date
Richard Wall
2eef0dad06 Add ko tool 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2022-12-20 15:38:19 +00:00
jetstack-bot
501f4928ea
Merge pull request #5646 from SgtCoDFish/k8s1.26 
Enable + use k8s 1.26 for e2e tests by default
 2022-12-16 17:57:00 +00:00
Ashley Davis
1e419a468f
Enable + use k8s 1.26 for e2e tests by default 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-16 17:06:18 +00:00
jetstack-bot
6806035cb7
Merge pull request #5637 from RomanenkoDenys/fix-kubebuilder-sha 
fix kubebuilder tools arm64 sha256sum
 2022-12-15 11:46:21 +00:00
Tim Ramlot
8baaffc02b
kubebuilder did not yet create a 1.26 release 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-12-14 21:53:42 -08:00
Luca Comellini
c99c147059
Bump k8s.io deps to v0.26.0 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-12-14 21:53:42 -08:00
jetstack-bot
a1391d6995
Merge pull request #5604 from maelvls/upgrade-vault-in-e2e 
End-to-end tests: use Vault 1.12.1 instead of the outdated Vault 1.2.3
 2022-12-13 14:50:30 +00:00
Denis Romanenko
d62bf032f5 fix kubebuilder tools arm64 sha256sum 
Signed-off-by: Denis Romanenko <denis.romanenko@flant.com>
 2022-12-13 09:41:29 +03:00
jetstack-bot
2f24231383
Merge pull request #5618 from SgtCoDFish/no-licenses-ci-presubmit 
Remove verify-licenses from ci-presubmit
 2022-12-07 11:25:20 +00:00
Ashley Davis
22f3a6152d
bump go to 1.19.4 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-07 10:10:35 +00:00
Ashley Davis
79bd127d3b
remove verify-licenses from ci-presubmit 
see https://github.com/cert-manager/release/pull/111

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-06 16:40:20 +00:00
irbekrm
c60a181baf Gateway and GatewayClass for tests are created against beta Gateway API 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:05:47 +00:00
irbekrm
9709833bb6 Removes unused check 
current cert-manager version no longer supports Kubernetes 1.19

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
irbekrm
75e2d1145a Updates Gateway API test dependency 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
irbekrm
608c3a1df0 Bumps Contour Helm chart version 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
irbekrm
bc70233256 Tests download Gateway installation bundle 
Rather than whole gateway git repo

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
Maël Valais
f4f72c16e6 e2e: use Vault 1.12.1 instead of the outdated 1.2.3 
The main reason for bumping Vault's version is because 1.2.3 is not
compatible with the config parameter `disable_iss_validation`, which is
needed for accommodating the future tests [1] that rely on bound tokens
and static tokens.

For context, Vault 1.2.3 was released on Sep 9, 2019 [2] but
`disable_iss_validation` was only added on July 21st, 2020 in Vault
1.5.0.

Due to a breaking change that happened in Vault 1.5.0 [3] in which Vault
started loading the pod's token instead of using the same token (to be
reviewed) for authenticating. An alternative solution could have been to
prevent the service account from being mounted to the pod, but I figured
that having the two service accounts separated is a better practice.

[1]: https://github.com/cert-manager/cert-manager/pull/5502
[2]: https://github.com/hashicorp/vault/commit/c14bd9a2
[3]: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#150

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-12-02 16:36:16 +01:00
Ashley Davis
4d12251fa7
Use distinct manifest dirs for signed / unsigned manifests 
This avoids a race condition with the `release-manifests` and
`release-manifests-signed` targets.

When running in parallel, one could execute `rm -rf
$(BINDIR)/scratch/manifests` while the other was running.

This could also conceivably have led to incorrectly packaged
manifests when both were run in parallel.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-29 16:14:59 +00:00
Houssem El Fekih
c7952fd054 e2e test confirming LDAP rdn literalsubject in generated certificate 
* Enabled feature flag for literalsubject in e2e test runner
* Added "happy path" test

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2022-11-28 21:56:00 +00:00
Ashley Davis
d2aab5f0d3
enable basicConstraints feature in e2e environments by default 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-10 13:47:30 +00:00
Ashley Davis
96e500f189
bump to latest go minor version to fix vulns 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-07 11:11:11 +00:00
Ashley Davis
cdcfd552ff
add make target for updating base images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-04 16:31:20 +00:00
Ashley Davis
40b4bd8b68
bump base / kind images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-04 16:28:51 +00:00
Ashley Davis
13c3507d1a
remove devel folder 
In #5473 we saw a user being confused by devel's continued existance.
No bazel stuff will work any more and there's value in having just one
place where our e2e setup scripts are located, and that's now in `make`.

It was considered that we might keep some of these scripts but
converting them to call make commands, but that might be a lot of work
for minimal reward.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-10-22 18:47:33 -04:00
Ashley Davis
21b9b65dd6
update base and kind images 
involves running:

- `./hack/latest-kind-images.sh` and
- `./hack/latest-base-images.sh`

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-10-21 13:10:42 +01:00
irbekrm
d01dd96b47 Updates base images 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-10-07 14:42:57 +01:00
jetstack-bot
04019b2c3c
Merge pull request #5491 from irbekrm/kubebuilder_shas_script 
Adds a script that generates kubebuilder tools SHAs for a version
 2022-10-06 16:05:27 +01:00
jetstack-bot
dc96eb7d65
Merge pull request #5476 from Git-Jiro/master 
Deploy contour from HELM chart instead of plain yaml
 2022-10-06 14:50:27 +01:00
irbekrm
aa886e78d6 Adds a script to quickly generate latest SHAs 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-10-06 14:29:24 +01:00
irbekrm
5bbd5ca3a9 Updates SHAs for kubebuilder-tools 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-10-06 13:23:31 +01:00
Martin Schimandl
e24ff641c6 Deploy contour from HELM chart instead of plain yaml 
Signed-off-by: Martin Schimandl <martin.schimandl@gmail.com>
 2022-10-01 11:22:31 +01:00
Luca Comellini
4498b7cc47
Bump Go to 1.19 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-09-27 11:38:51 -07:00
Tim Ramlot
39fa9f51b4 upgrade dependencies 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-09-26 11:43:12 +02:00
Luca Comellini
97fbe24a74
Bump k8s.io dependencies 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-09-23 10:52:44 -07:00
Tim Ramlot
519e2d1337 add kind 1.25 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-09-22 15:29:10 +02:00
jetstack-bot
edc9363f7d
Merge pull request #5353 from bodgit/update-year 
Update year to 2022
 2022-08-30 12:24:31 +01:00
jetstack-bot
8465f1223e
Merge pull request #5411 from inteon/automate_tools 
Use new tools.mk structure for rclone
 2022-08-29 12:38:03 +01:00
jetstack-bot
3d6534120c
Merge pull request #5403 from jahrlin/always-upload-kind-logs 
move e2e-ci to a script
 2022-08-29 10:10:03 +01:00
Tim Ramlot
785d30dd90 bugfix: use new tools.mk structure for rclone 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-28 21:59:36 +02:00
Tim Ramlot
36b55c1561 improve tools.mk docs 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-26 12:55:53 +02:00
Joakim Ahrlin
6cfce6459e set errexit, trap kind-logs 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2022-08-26 11:46:48 +02:00
Tim Ramlot
5802b3a963 use variables for binaries 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-26 07:43:17 +00:00
Tim Ramlot
0e8eb38d5c generate build targets dynamically 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-26 07:23:44 +00:00
Joakim Ahrlin
58de2e57a8 move e2e-ci to a script 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2022-08-25 14:28:34 +02:00
Tim Ramlot
37f64ca5a0 partial undo of replace-all for contour-gateway.yaml 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-19 07:36:43 +00:00
Tim Ramlot
836793e7e3 upgrade gateway api to v0.5.0 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-08 08:52:59 +00:00
jetstack-bot
88bda66693
Merge pull request #5345 from inteon/ginkgo_v2 
Upgrade to Ginkgo v2
 2022-08-04 21:06:15 +01:00
jetstack-bot
b52d116fa4
Merge pull request #5363 from inteon/gotestsum_junit 
Output junit xml using gotestsum
 2022-08-04 12:46:14 +01:00
Tim Ramlot
ba9a6bd5b3 add pruning logic for gotestsum junit xml output 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2022-08-04 11:15:18 +00:00
jetstack-bot
b7c47298a0
Merge pull request #5362 from inteon/simplify_manifest 
Simplify static manifest generation
 2022-08-04 11:25:14 +01:00