Commit Graph

274 Commits

Author SHA1 Message Date
Greg Taylor
3f2e9dd37f Fix Helm chart cainjector.enabled
cainjector previously disregarded the cainjector.enabled
value when passed in. This commit leaves it defaulted to
enabled (per the docs) but causes cainjector to not be
deployed when cainjector.enabled = false.

Signed-off-by: Greg Taylor <greg@gctaylor.com>
2020-01-23 16:22:41 -08:00
James Munnelly
86d7160499 Update version numbers in Helm chart README
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-21 14:24:18 +00:00
jetstack-bot
5eb56efdad
Merge pull request #2529 from munnerz/v0130-readme
Update version tags in Helm chart
2020-01-20 17:12:31 +00:00
jetstack-bot
b7e83b5382
Merge pull request #2508 from JoshVanL/cr-invalid-request
CertificateRequest InvalidRequest
2020-01-20 14:17:31 +00:00
James Munnelly
71c2e6f5cd Update version tags in Helm chart
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-20 14:14:23 +00:00
jetstack-bot
44535d60ab
Merge pull request #2504 from appian/add-support-for-volumes
Add support for volumes and volume mounts to cert-manager chart
2020-01-17 10:18:05 +00:00
Joshua Stern
72aa16c7be Add support for volumes and volume mounts to cert-manager chart
Signed-off-by: Joshua Stern <joshua.stern@appian.com>
2020-01-16 11:11:48 -05:00
Joshua Mathianas
05ff21250d Updates plural names and destination attribute name to match source
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 10:30:20 -05:00
Joshua Mathianas
9ee6ea7b7d Fixed a typo and ran generators
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:49:40 -05:00
Joshua Mathianas
e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 07:50:26 -05:00
jetstack-bot
29389b19d5
Merge pull request #2509 from castlemilk/rbac-fix
updating serviceAccount reference in leaderelection rolebinding
2020-01-14 12:00:59 +00:00
Nicolas Fischer
2bb792943a ensure space after comment character
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Nicolas Fischer
3b838758a3 support an arbitrary SecurityContext block for the main deployment
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2020-01-10 10:15:42 +00:00
Ben Ebsworth
263459da05 updating serviceAccount reference to use serviceAccountName instead of fullname
Signed-off-by: Ben Ebsworth <ben.ebsworth@gmail.com>
2020-01-10 09:01:56 +11:00
JoshVanL
0a10343e2c
Updates crds
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-01-09 15:56:52 +00:00
Christian Zunker
7f5ac29d2f Add configuration switch for use of apparmor in PSP
Fixes #2293

Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>
2020-01-08 06:42:28 +01:00
James Munnelly
ff8ebef492 Bump Helm chart strings for v0.13.0-alpha.0
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 09:29:50 +00:00
jetstack-bot
adce70f649
Merge pull request #2436 from ttarczynski/patch-1
Bump default 'image.tag' value in helm chart README.md
2019-12-12 15:32:15 +00:00
Nicolas Fischer
f8c83a1411 issue 2443 - annotations for cert-manager deployments
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2019-12-11 15:37:21 +00:00
jetstack-bot
6544ab93c5
Merge pull request #2449 from UKHomeOffice/issue-2448
issue 2448 - Optional securityContext for cainjector and webhook char…
2019-12-11 15:27:32 +00:00
James Munnelly
5c4e27830f Use enum for HMAC algorithm field
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 12:28:49 +00:00
James Munnelly
80bc253d74 acme: Add API fields for ExternalAccountBinding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-11 10:37:16 +00:00
Nicolas Fischer
b574c4f16d issue 2448 - Optional securityContext for cainjector and webhook chart deployments
Signed-off-by: Nicolas Fischer <nicolas@emberspark.io>
2019-12-10 16:12:47 +00:00
jetstack-bot
e6bf2c0ace
Merge pull request #2383 from colek42/fix-2375-falsy-fields
Fixes false/null fields in the helm chart.
2019-12-10 12:15:14 +00:00
Tomasz Tarczynski
6c97c2472e
Bump devault image.tag value in README.md
I think the default value of `image.tag` is now `v0.12.0`
2019-12-06 12:24:32 +01:00
Cole Kennedy
036d6ea4aa This commit fixes false/null fields in the helm charts
Signed-off-by: Cole Kennedy <colek42@gmail.com>

Signed-off-by: Cole Kennedy <colek42@gmail.com>
2019-12-04 09:25:27 -06:00
Bouke van der Bijl
852f4876c7 deploy/charts/cert-manager: explicitly define ContainerPort protocol
Server-side apply currently needs it to resolve conflicts.

Signed-off-by: Bouke van der Bijl <bvanderbijl@digitalocean.com>
2019-11-27 15:41:05 +00:00
jetstack-bot
df265ddbfd
Merge pull request #2170 from matevzmihalic/cloudflare-apitoken
Add API token authentication option to Cloudflare issuer
2019-11-27 13:22:21 +00:00
Christophe Courtaut
7534dcd33e deploy/charts/cert-manager: Fixes typo in webhook-psp definition
This kind of issue might be detected early in the future when enabling psp
in e2e tests (https://github.com/jetstack/cert-manager/pull/2280).

A similar bug was already fixed in
be0b865522.

This commit fixes the typo.

Signed-off-by: Christophe Courtaut <christophe.courtaut@gmail.com>
2019-11-20 16:50:55 +01:00
Matevz Mihalic
b5972a379f
Add API token auth option to Cloudflare issuer
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
2019-11-18 17:51:43 +01:00
James Munnelly
1859e5e062 Update Helm chart README for v0.12.0-beta.1
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 16:10:35 +00:00
James Munnelly
7c1dd0b30e Set preserveUnknownFields: false
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 12:26:11 +00:00
James Munnelly
1527c06e0f Remove reference to metav1.ObjectMeta
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 12:26:11 +00:00
jetstack-bot
071921636a
Merge pull request #2234 from sam-cogan/psp-fixes
Fixes for PSP Issues
2019-11-15 02:56:55 +00:00
jetstack-bot
0f99bcdeac
Merge pull request #2368 from munnerz/cr-csr-required
Mark 'csr' field as required in CertificateRequest
2019-11-15 02:29:02 +00:00
jetstack-bot
8ac1ba859b
Merge pull request #2325 from CoaxVex/fix-2305
Add update permission to certificaterequests/finalizers to the cert-manager-controller-certificates clusterrole.
2019-11-15 01:35:55 +00:00
James Munnelly
e8fbd37634 Mark 'csr' field as required in CertificateRequest
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-15 01:01:43 +00:00
JoshVanL
1c5a5caaf8 Adds all key usage possible values to key usage comment
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-14 13:51:28 +00:00
James Munnelly
fc9c11cc38 Bump Helm chart README for v0.12.0-beta.0
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-13 17:10:09 +00:00
jetstack-bot
1bfec37482
Merge pull request #2349 from JoshVanL/2205-kubernetes-auth-path
Changes the vault issuer Kubernetes auth path to require the full *mount* path
2019-11-13 09:58:26 +00:00
JoshVanL
0e739bdde9 Mount path now hard codes /login endpoint in code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-12 18:37:54 +00:00
jetstack-bot
f83dc13a39
Merge pull request #2326 from JoshVanL/cli-output-issuer
Increases issuer CLI output
2019-11-11 13:52:40 +00:00
JoshVanL
7ec3103eb4 Changes the vault issuer Kubernetes auth path to require the full path
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 12:49:02 +00:00
JoshVanL
06ce5061ba Set printer columns by changing crds in deploy
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-11-11 12:25:37 +00:00
Harold Drost
62c4e0b6eb serviceAccountSecretRef is not always required
The cert-manager code will use what it's called ambient permissions.
This worked for us until we moved from v0.8 to v0.11 though I've found
the issue present in v10 also.

Signed-off-by: Harold Drost <baelish@bluecell.net>
2019-11-05 15:57:58 +00:00
Nils Cant
c51c179a42 Add update permission to certificaterequests/finalizers to the
cert-manager-controller-certificates clusterrole.

Fixes: #2305

Signed-off-by: Nils Cant <nils.cant@vargen.io>
2019-11-05 15:41:57 +01:00
jetstack-bot
79711c5e34
Merge pull request #2270 from yurrriq/fix-chart
Chart.yaml: add missing apiVersion
2019-10-28 15:39:06 +00:00
jetstack-bot
dddc6abd2e
Merge pull request #2285 from munnerz/helm-chart-simplify
Remove nested cainjector subchart
2019-10-28 12:11:21 +00:00
jetstack-bot
c11d983d82
Merge pull request #2278 from munnerz/webhook-port-10250
Default webhook port to 10250 for better compatibility with GKE
2019-10-28 12:11:14 +00:00
jetstack-bot
24883ea2b5
Merge pull request #2286 from munnerz/schemapatch-ct
Use controller-gen schemapatch to generate CRD schemas
2019-10-28 11:46:14 +00:00