weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
3,660 Commits 45 Branches 0 Tags 96 MiB
3307e3a946
Commit Graph

150 Commits

Author SHA1 Message Date
Maartje Eyskens
3307e3a946 Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-04 15:07:47 +01:00
Maartje Eyskens
aaae73a45d Replace openshift/no-webhook manifests with legacy 
This releases a new manifest type "legacy" to support Kubernetes <1.15 and OpenShift 3.
This version uses the webhook but disables the conversions as they are not supported.
For this reason only the v1alpha2 API is added in these manifests.
All newer APIs are filtered by the filter-crd tool.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-04 14:26:25 +01:00
jetstack-bot
f2c462d29f
Merge pull request #2642 from meyskens/manifest-phase1 
Put OpenShift specific RBAC in all manifests
 2020-03-04 13:02:58 +00:00
jetstack-bot
00b101de76
Merge pull request #2597 from meyskens/emailsans 
Add Email SANs
 2020-03-03 16:31:56 +00:00
Maartje Eyskens
ce4c33f3b5 Put OpenShift specific RBAC in all manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-03 14:57:26 +01:00
James Munnelly
5eb3cb6313 Mark filter-crd target as a tool dependency instead of src 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-03 10:29:54 +00:00
Josh Soref
8d801fc100 spelling: certificate 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:51 -05:00
Josh Soref
b93d64c09d spelling: authorizations 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:18 -05:00
Josh Soref
ec5da97f2b spelling: account 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:14:20 -05:00
Maartje Eyskens
d3a623314c Add EmailSANs field 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-21 08:49:00 +01:00
Maartje Eyskens
1439ca350c Write CRD filter for OpenShift 
This adds a Go binary that filters certain keys from the CRDs.
This is meant to remove keys that are not compatible with OpenShift 3.11.
This then is ran on creating the deployment manifests.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-18 10:52:42 +01:00
jetstack-bot
2862c31386
Merge pull request #2593 from JoshVanL/encode-openapi-validation 
Certificate KeySize encode openapi validation
 2020-02-17 11:42:24 +00:00
James Munnelly
71373d1e50 Fix including CRDs as part of static manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-13 15:52:01 +00:00
JoshVanL
9b9b66d7b4
Updates CRDs with max/min keysize validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-02-12 10:18:11 +00:00
jetstack-bot
f9c23dcb8f
Merge pull request #2556 from munnerz/release-tars 
Add release-tars targets to construct cert-manager release artifacts
 2020-02-10 16:10:13 +00:00
James Munnelly
48c56dbe5a Run ./hack/update-crds.sh 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-10 12:16:29 +00:00
Maartje Eyskens
3c09a7b80c Document more info on CN behaviour 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-07 09:22:24 +01:00
Maartje Eyskens
7e318dbfbb update CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-07 09:16:49 +01:00
James Munnelly
5b9cd23d0f Make the Venafi Cloud URL field optional 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-03 18:18:38 +00:00
James Munnelly
22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-30 21:02:58 +00:00
jetstack-bot
b7e83b5382
Merge pull request #2508 from JoshVanL/cr-invalid-request 
CertificateRequest InvalidRequest
 2020-01-20 14:17:31 +00:00
Joshua Mathianas
05ff21250d Updates plural names and destination attribute name to match source 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 10:30:20 -05:00
Joshua Mathianas
9ee6ea7b7d Fixed a typo and ran generators 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 09:49:40 -05:00
Joshua Mathianas
e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set 
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 07:50:26 -05:00
JoshVanL
0a10343e2c
Updates crds 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-09 15:56:52 +00:00
James Munnelly
5c4e27830f Use enum for HMAC algorithm field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-11 12:28:49 +00:00
James Munnelly
80bc253d74 acme: Add API fields for ExternalAccountBinding 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-11 10:37:16 +00:00
Matevz Mihalic
b5972a379f
Add API token auth option to Cloudflare issuer 
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
 2019-11-18 17:51:43 +01:00
James Munnelly
7c1dd0b30e Set preserveUnknownFields: false 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-11-15 12:26:11 +00:00
James Munnelly
1527c06e0f Remove reference to metav1.ObjectMeta 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-11-15 12:26:11 +00:00
James Munnelly
e8fbd37634 Mark 'csr' field as required in CertificateRequest 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-11-15 01:01:43 +00:00
JoshVanL
1c5a5caaf8 Adds all key usage possible values to key usage comment 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-14 13:51:28 +00:00
jetstack-bot
1bfec37482
Merge pull request #2349 from JoshVanL/2205-kubernetes-auth-path 
Changes the vault issuer Kubernetes auth path to require the full *mount* path
 2019-11-13 09:58:26 +00:00
JoshVanL
0e739bdde9 Mount path now hard codes /login endpoint in code 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-12 18:37:54 +00:00
jetstack-bot
f83dc13a39
Merge pull request #2326 from JoshVanL/cli-output-issuer 
Increases issuer CLI output
 2019-11-11 13:52:40 +00:00
JoshVanL
7ec3103eb4 Changes the vault issuer Kubernetes auth path to require the full path 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 12:49:02 +00:00
JoshVanL
06ce5061ba Set printer columns by changing crds in deploy 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 12:25:37 +00:00
Harold Drost
62c4e0b6eb serviceAccountSecretRef is not always required 
The cert-manager code will use what it's called ambient permissions.
This worked for us until we moved from v0.8 to v0.11 though I've found
the issue present in v10 also.

Signed-off-by: Harold Drost <baelish@bluecell.net>
 2019-11-05 15:57:58 +00:00
James Munnelly
a292400c3a Add source CRD manifests for schemapatch 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-25 14:44:41 +01:00
James Munnelly
9d5372c93a Use schemapatch to generate openapi schemas 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-25 14:44:02 +01:00
James Munnelly
a9ea30704b Regenerate 00-crds.yaml using schemapatch 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-25 14:14:38 +01:00
jetstack-bot
87aedeb04c
Merge pull request #2225 from munnerz/wildcard-field-ptr 
Make ACMEAuthorization.Wildcard field a pointer
 2019-10-15 19:05:05 +01:00
James Munnelly
e9796e79f2 Update generated files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-15 12:40:17 +01:00
Pierre Dorbais
bac9b39707 fix namespace yaml file format 
Signed-off-by: Pierre Dorbais <chdorb@gmail.com>
 2019-10-11 15:45:10 +02:00
Pierre Dorbais
5a131155c6 crds file generated 
Signed-off-by: Pierre Dorbais <chdorb@gmail.com>
 2019-10-11 14:19:50 +02:00
jetstack-bot
13fcbb9384
Merge pull request #1946 from munnerz/update-controller-tools 
Update controller-tools to correctly set x-kubernetes-preserve-unknown-fields
 2019-10-03 12:45:47 +01:00
jetstack-bot
482eac596a
Merge pull request #2085 from JoshVanL/certificate-URISANs 
Adds URISANs field to Certificate
 2019-10-03 10:59:47 +01:00
James Munnelly
534e36e362 Bump controller-tools to set x-kubernetes-preserve-unknown-fields correctly 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-02 19:44:14 +01:00
jetstack-bot
2f03013a64
Merge pull request #2135 from JoshVanL/update-docs-webhook-v0.11 
Updates documentation to remove outdated information and namespace validation
 2019-10-02 19:17:11 +01:00
JoshVanL
7965be9b41 Adds from comments 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00