weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
3,999 Commits 45 Branches 0 Tags 96 MiB
378521300a
Commit Graph

1618 Commits

Author SHA1 Message Date
James Munnelly
38aa959f95 accounts: Use RWMutex instead of regular Mutex 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 14:33:49 +01:00
James Munnelly
b126a0c0e5 Use acme AccountRegistry throughout and tidy up ACME setup code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 13:14:46 +01:00
James Munnelly
81b6c74e63 Add ACME account registry structure 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 10:08:06 +01:00
James Munnelly
982b21bb06 Fix bug that could lead to validation to fail when attempting to update immutable field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-01 12:33:14 +01:00
James Munnelly
3e8649abc2 Handle ACME orders with already valid authorizations upon first fetch through new 'initialState' field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-01 12:33:14 +01:00
James Munnelly
9cb68d1d91 Remove serverAuth default usage & remove unused DefaultKeyUsage functions 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-30 15:57:12 +01:00
jetstack-bot
c0c74216d5
Merge pull request #2843 from JoshVanL/certificate-issuing-controller-temporary-certificate 
Issuing controller temporary certificate support
 2020-04-30 12:30:55 +01:00
JoshVanL
a4cfd41ce7
Updates comments to proper working/capitalisation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 11:53:42 +01:00
Mehdi Abaakouk
13c2539a78 cloudfare: update per_page max to 100 
cloudfare just changed the maximum of per_page in their API to 100.

  Warning  PresentError  2m41s (x11 over 75m)  cert-manager
  Error presenting challenge: Cloudflare API Error
  Error: 9205: Per_Page must be a number between 5 and 100

This change fixes that.

Signed-off-by: Mehdi Abaakouk <sileht@sileht.net>
 2020-04-28 15:25:27 +02:00
jetstack-bot
59ff99811b
Merge pull request #2851 from munnerz/fixup-webhook-requestkind 
Support Kubernetes 1.15 and below properly in validating webhook
 2020-04-28 13:18:29 +01:00
James Munnelly
c641443e92 Support Kubernetes 1.15 and below properly in validating webhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-28 11:51:58 +01:00
JoshVanL
dc4ba16051
Adds comments to clarify issuing_controller_test Certificate current 
revision

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-28 11:03:26 +01:00
JoshVanL
d830db4ef7
Adds more temp cert tests, don't issue temp cert of different private 
key and use shared GenerateLocallySignedCertificate

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-27 16:31:12 +01:00
JoshVanL
c115e6c2bf
internal/test.go accepts fixed clock and Shares 
generaleLocallySignedCertificate

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-27 16:29:58 +01:00
JoshVanL
7d1d94fedb
Adds issuing controller temporary certificate units tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 19:39:08 +01:00
JoshVanL
095976548d
Adds temporary certificate logic to issuing controller based on 
annotation

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 19:16:57 +01:00
JoshVanL
92c2d3c7c4
Moves secretmanager and testing util into separate package to refactor 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 15:45:10 +01:00
JoshVanL
11961b992d
Moves Certificate Issuing validation logic and key fetch earlier in sync 
loop

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-26 15:01:32 +01:00
Maartje Eyskens
f2b36483a4 Set Issuer kind specific to Issuer if cert-manager.io/issuer is specified. 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-04-24 16:16:04 +02:00
jetstack-bot
49e1a7a51c
Merge pull request #2825 from meyskens/add-origin-tag 
Add cert-manager origin tag in Venafi
 2020-04-22 16:48:02 +01:00
Maartje Eyskens
3747cf2000 Fix up test and make code look nicer 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-04-22 17:08:34 +02:00
Maartje Eyskens
453640dd4d Add cert-manager origin tag in Venafi 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-04-22 16:42:55 +02:00
James Munnelly
7978fbe081 Address review feedback and include truststore.jks with JKS mode enabled 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-22 15:20:49 +01:00
James Munnelly
ba33c823a3 Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 17:58:18 +01:00
jetstack-bot
4aff1ce3f0
Merge pull request #2814 from munnerz/privatekey-rotation 
keymanager: support private key rotationPolicy field
 2020-04-21 16:02:53 +01:00
James Munnelly
6a827c6b8b Don't use fixed length map 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 14:49:25 +01:00
James Munnelly
019f64e841 Fix test failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 10:25:56 +01:00
James Munnelly
6d02c855ee Regenerate files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 10:07:13 +01:00
James Munnelly
8a628c3315 Update field comments on ChallengeSpec 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 10:07:03 +01:00
James Munnelly
a17d04260e requestmanager: copy labels and annotations onto CertificateRequest resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly
212ef42a66 util/pki: allow certificates only specifying IP, URI or Email SANs to be signed 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly
f04696747c Fix SecretDataAltNamesMatchSpec for loose matching and add tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly
23892bc6e4 keymanager: support private key rotationPolicy field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly
4daa3b086b Update generated files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly
129b5f8303 Add fields for controlling private key rotation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
James Munnelly
e8cc2ba4ac Fix selfsigned issuer unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
a9dd260e95 requestmanager: tidy up and add unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
48958036bf Set NotAfter field in readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
1c26ae412d Move some logic into separate method 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
945dde4175 Fix PolicyFunc reference in trigger controller tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
8aaca4a2ad expcertificates: add readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
53fa3b70ab Move trigger policies into separate package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
707b7a486a Fix missing append bug 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
a572f739c2 Add trigger policy for private key not matching spec 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
b5c169e35a Fix panic in issuing controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
cde13aa6fd Add requestmanager controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
jetstack-bot
91d598b1de
Merge pull request #2810 from munnerz/keymanager-controller 
expcertificates: add keymanager controller
 2020-04-20 10:17:38 +01:00
jetstack-bot
4adec72ac9
Merge pull request #2681 from gitirabassi/feat/azure-auth-msi-master 
feat(azure): add usage of Managed Identities for azuredns
 2020-04-20 08:42:38 +01:00
jetstack-bot
687d47f832
Merge pull request #2027 from pepov/auditsink-injector 
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
 2020-04-20 08:23:38 +01:00
Maartje Eyskens
db45891705 Add missing context 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-04-17 16:39:06 +02:00