weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,373 Commits 45 Branches 0 Tags 96 MiB
36ac13bb14
Commit Graph

320 Commits

Author SHA1 Message Date
James Munnelly
36ac13bb14 Run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:12:52 +01:00
James Munnelly
c1bd9c4a2e Add missing call to retryOrder in existing order value for private key check 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
965757cce0 Retry order if existing Order certificate is invalid 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
403a746bfa Always reset LastFailureTime in retryOrder 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
87a479e6cb Add extra comments in ACME Issuer function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
f553f8e8a4 Move existing order checking into own function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
f2551d3832 Reorder checking for existingOrder 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
e4399e87c5 Move private key generation to start of Issue 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
536b6fd76f Refactor ACME issuer generate private key code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
374db0b458 Refactor ACME issuer cleanup orders code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-15 23:02:17 +01:00
James Munnelly
84978d88d8 Add extra comments to acme and pki package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-13 21:05:18 +01:00
James Munnelly
039a086f58 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:40 +01:00
James Munnelly
a98415fec7 Fix up test cases after rebase 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:39 +01:00
James Munnelly
eadbbc85c5 Add missing boilerplate headers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:39 +01:00
James Munnelly
d323a1df0d Add unit tests for acmeorders and acmechallenges 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:39 +01:00
James Munnelly
9214615d6e Fix race issues in ACME issue function. Add extended unit tests. 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:39 +01:00
James Munnelly
ad99639b44 Fix failing test 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
James Munnelly
847d0c6152 Refactor controllers to return Response structures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
James Munnelly
1f6013e39b Add unit tests for ACME Prepare function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
James Munnelly
80e0085b5a Remove old issuer check in Prepare function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
James Munnelly
d316ea6fb9 Add support for backing-off creating orders after failure 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
James Munnelly
5482ece3f5 Update unit test framework to support actions and required reactors 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
James Munnelly
65487e1d2b Update ACME HTTP solver to use Challenge resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:37 +01:00
James Munnelly
2b663eb9a9 Update ACME DNS solver to use Challenge resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:37 +01:00
James Munnelly
f8b1e653f3 Refactor ACME Issuer to create and manage Order resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:37 +01:00
jetstack-bot
620395511a
Merge pull request #924 from arnoldbechtoldt/useClusterIPsvc 
Make http01 solver serviceType configurable
 2018-10-10 13:42:11 +01:00
jetstack-bot
5ea95b6cc1
Merge pull request #923 from arnoldbechtoldt/issue892 
make http01 solver pod resource request/limits configurable, refs #892
 2018-10-10 13:06:11 +01:00
Arnold Bechtoldt
1587741820 rename setting and update docs regarding solver service type 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-10-08 15:24:17 +02:00
jetstack-bot
912c7672bd
Merge pull request #848 from Queuecumber/ca-nginx 
Include CA Certificate In Secrets
 2018-10-08 13:04:37 +01:00
Arnold Bechtoldt
d261e1f3f1 make serviceType configurable, fixes #928 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-10-08 10:55:56 +02:00
Arnold Bechtoldt
845eb7f57c make http01 solver pod resource request/limits configurable, refs #892 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-09-26 14:39:06 +02:00
splashx
4e9af51629
fix rfc2136 provider missing port error, plumb dnsNameserver01 
Signed-off-by: splashx <splash@gmail.com>
 2018-09-17 17:38:09 +02:00
Max Ehrlich
511650ca82
ACME issuers currently will not support getting the CA certificate 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-09-13 17:07:14 -04:00
James Munnelly
48ecee9cfb run //hack:update-gofmt 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:25:04 +01:00
James Munnelly
db65d6a170 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:24:48 +01:00
jetstack-bot
feb589feb5
Merge pull request #661 from splashx/master 
[ACME] Add RFC2136 DNS Provider (2nd attempt)
 2018-09-12 09:11:48 +01:00
Evan Anderson
265c9610ff Add an error check for AzureDNS failure to create a solver. 
Add documentation comments for public methods (caught by 'go lint').

Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
 2018-09-11 01:20:44 -07:00
splashx
3761c6c3a4
fix panic, wrong logic 
Signed-off-by: splashx <splash@gmail.com>
 2018-09-10 21:40:40 +02:00
splashx
51a8a57221
add tests for nameserver, tsigsecret and tsigname 
Signed-off-by: splashx <splash@gmail.com>
 2018-09-10 20:03:32 +02:00
jetstack-bot
d55cd7ffe5
Merge pull request #664 from kiwigrid/enable-clouddns-meta-auth 
enable clouddns meta auth
 2018-09-10 13:49:17 +01:00
James Munnelly
ac08365928 Fix up test failure 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-10 13:25:33 +01:00
James Munnelly
8c5c402d1e Fix up bug preventing saBytes being used. Add comments. 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-10 13:21:51 +01:00
splashx
41111f7879
patch with rfc2136 
Signed-off-by: splashx <splash@gmail.com>
 2018-09-07 00:56:00 +02:00
JuanJo Ciarlante
1266f4116b
minor cleanups 
Signed-off-by: JuanJo Ciarlante <juanjosec@gmail.com>
 2018-08-28 22:23:57 -03:00
JuanJo Ciarlante
225a37ce7c
augment acmedns unit testing 
Signed-off-by: JuanJo Ciarlante <juanjosec@gmail.com>
 2018-08-28 22:20:31 -03:00
JuanJo Ciarlante
ef2924c26a
[jjo] fix panic from acmedns.go constructor failure 
Signed-off-by: JuanJo Ciarlante <juanjosec@gmail.com>
 2018-08-27 19:36:13 -03:00
rico.pahlisch
3b270623fd enable clouddns meta auth 
Signed-off-by: Rico Pahlisch <rico.pahlisch@kiwigrid.com>
 2018-08-27 09:13:05 +02:00
Frank Hamand
8b28b5adce Fix cloudflare provider failing on cleanup if no record is found 
It's possible for cert-manager to get in a bad state where it thinks there's something to cleanup, but repeatedly fails to clean it up.

Not finding the record should not be an error when we're trying to delete the record anyway.

Signed-off-by: Frank Hamand <frankhamand@gmail.com>
 2018-08-21 09:59:37 +01:00
jetstack-bot
972f86704d
Merge pull request #787 from Queuecumber/master 
Add ACME-DNS as a DNS-01 Provider
 2018-08-17 13:33:57 +01:00
Max Ehrlich
65e6a65143
Update the test to support nameservers 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-14 14:57:21 -04:00