weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,710 Commits 45 Branches 0 Tags 96 MiB
40b68a3e10
Commit Graph

704 Commits

Author SHA1 Message Date
Louis Taylor
40b68a3e10 Fix more references to clusterIssuer 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
Louis Taylor
bbda87b3c8 Add --namespace flag 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
James Munnelly
8840925e3e Fix append in CA issue function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-09 11:39:48 +00:00
James Munnelly
22342b61b3 Fix use of SecretTLSKeyPair in certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-09 11:39:48 +00:00
Mike Bryant
4fa6d9775c feat: Include entire certificate chain if provided 
Allow a user to provide an entire certificate chain to the ca issuer. Include that chain in all generated certificates

Signed-off-by: Mike Bryant <m@ocado.com>
 2019-01-09 11:39:48 +00:00
James Munnelly
3e7509b51f Remove flakey unit test in dns utils package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 20:18:49 +00:00
James Munnelly
3ac4d19874 Fix bug in challenge scheduler causing invalid results 
Previously, we shared a single backing slice when
performing filter operations on slices, causing issues
when we perform sorting operations on that same
underlying slice.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 13:53:58 +00:00
James Munnelly
0fcc0c666c Update copyright header year 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 15:07:55 +00:00
James Munnelly
e3ab52861a Only follow CNAMEs if the Issuer's cnameStrategy is 'Follow' 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-12-04 13:57:13 +00:00
jetstack-bot
fafa0d5b1d
Merge pull request #1120 from munnerz/improved-challenge-scheduler 
Switch ACME challenge scheduler to evaluate all challenges at once
 2018-11-30 12:29:12 +00:00
jetstack-bot
670cd8564f
Merge pull request #1111 from kellycampbell/udp-timeout-workaround 
Retry dns queries with TCP if UDP has an i/o timeout
 2018-11-30 12:12:12 +00:00
jetstack-bot
bed2934534
Merge pull request #1125 from munnerz/issueresponse-ptr 
Switch issuer.Issue to return a pointer and fix up setting secret fields
 2018-11-30 11:59:12 +00:00
James Munnelly
943e545697 Switch issuer.Issue to return a pointer and fix up setting secret fields 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-30 11:47:08 +00:00
James Munnelly
c890913fb1 Don't update Certificate status condition upon issuance 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-30 10:42:33 +00:00
James Munnelly
bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 22:49:55 +00:00
Kelly Campbell
a90e833c3b Retry dns queries with TCP if UDP has an i/o timeout 
Signed-off-by: Kelly Campbell <kelly.a.campbell@gmail.com>
 2018-11-29 10:32:55 -05:00
jetstack-bot
f4e5203f1c
Merge pull request #1116 from munnerz/cleanup-challenges 
CleanUp ACME challenges after issuing and on delete using finalizer
 2018-11-29 15:07:17 +00:00
jetstack-bot
28162cebff
Merge pull request #1119 from munnerz/remove-requeue 
Remove requeue option and fix small race in controllers
 2018-11-29 13:42:16 +00:00
James Munnelly
f8fe9ef21f Remove requeue option and fix small race in controllers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 12:23:21 +00:00
James Munnelly
1f68b0c583 Fix up unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 12:11:42 +00:00
James Munnelly
e5830af6ba Fix event log format & add additional event 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 12:11:42 +00:00
James Munnelly
a4a23d432c Set Certificate field on valid test order 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 12:11:42 +00:00
James Munnelly
939c90c356 Log events in the FakeRecorder in e2e tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 12:11:42 +00:00
James Munnelly
34c3590052 Store a copy of the signed certificate on the Order resource after Finalize 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 12:11:42 +00:00
jetstack-bot
3fbd2ec79c
Merge pull request #1118 from munnerz/controller-remove-rate-limit 
Only add resources to the rate limited queue when an error occurs
 2018-11-29 11:26:26 +00:00
jetstack-bot
8f37cf6c40
Merge pull request #1117 from munnerz/wildcard-challenge-check 
Include wildcard field in comparison of challenge specs
 2018-11-29 11:26:17 +00:00
James Munnelly
08882e5fc2 Wrap missing secret data errors with Invalid 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 01:18:43 +00:00
James Munnelly
93a7a89d4e Ensure finalizer is always removed after one sync 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 23:19:52 +00:00
James Munnelly
0656d6cf77 Update acmechallenges unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 22:06:03 +00:00
James Munnelly
dd8f98768b CleanUp ACME challenges after issuing and on delete using finalizer 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 22:05:47 +00:00
James Munnelly
5907876d47 Only add resources to the rate limited queue when an error occurs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 21:32:09 +00:00
James Munnelly
2e066fdc57 Include wildcard field in comparison of challenge specs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 21:31:21 +00:00
James Munnelly
f358d987ea Retrieve private key before certificate in kube TLS function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 19:18:30 +00:00
James Munnelly
87f91a6e8e Add explicit check for certificate.spec.acme when issuing acme certificates 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 19:18:09 +00:00
James Munnelly
32c230656f Use certificateMatchesSpec for detecting need for re-issuance 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 19:17:41 +00:00
James Munnelly
a6b7cade09 Fix up event logging and add an extra event 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 19:16:59 +00:00
James Munnelly
2da01a0a01 Resync order resources when their issuers change 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 19:16:00 +00:00
James Munnelly
5a9553e5ca Update comment on Ready condition API type 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 17:10:28 +00:00
James Munnelly
1cbfa7ada7 Resync certificates on changes to their referenced issuers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 17:01:15 +00:00
James Munnelly
dc97dde2ef Make Certificate Ready condition behaviour consistent between all issuer types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-28 17:00:51 +00:00
jetstack-bot
516622ad55
Merge pull request #1061 from munnerz/ingress-shim-def-issuer-msg 
Use Events API to report validation errors with ingress-shim
 2018-11-27 17:18:28 +00:00
jetstack-bot
e0691e5827
Merge pull request #1060 from munnerz/orders-events 
Add more Events to Orders and Challenges
 2018-11-26 17:28:33 +00:00
James Munnelly
4232041710 Use test builder in ingress-shim units and fix tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-26 17:07:00 +00:00
jetstack-bot
e2c71e0876
Merge pull request #1062 from munnerz/order-errors 
Add Errored type and mark orders as errored when creating fails
 2018-11-26 16:48:33 +00:00
James Munnelly
d360eea5e4 Use Events API to report validation errors with ingress-shim 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-26 15:48:47 +00:00
jetstack-bot
a21ac37a74
Merge pull request #713 from kragniz/add-prometheus-metrics-endpoint 
Add cert-manager specific metrics to Prometheus endpoint
 2018-11-26 15:45:33 +00:00
jetstack-bot
2c74eabb1c
Merge pull request #819 from ccojocar/cert_secret_ref 
Set the certificate as an owner of the secret
 2018-11-26 15:06:33 +00:00
Louis Taylor
39dd82b8a2
Defer UpdateCertificateExpiry earlier 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2018-11-26 13:13:57 +00:00
Louis Taylor
e5f60c1220
Update comment 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2018-11-26 13:13:56 +00:00
Louis Taylor
0241f14263
Rename metric to certificate_expiration_timestamp_seconds 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2018-11-26 13:13:55 +00:00