weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
4,679 Commits 45 Branches 0 Tags 96 MiB
4758efe7da
Commit Graph

162 Commits

Author SHA1 Message Date
jetstack-bot
4a13dd72f3
Merge pull request #3279 from meyskens/fix-double-signing-validation 
Fix double "signing" KU validation
 2020-09-22 10:27:51 +01:00
Maartje Eyskens
e01bf377de Split out logic 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-17 14:46:23 +02:00
Maartje Eyskens
ce8ca4ca20 Fixes validation when teh 2 signing keys are set 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-14 11:05:44 +02:00
Maartje Eyskens
e989384c96 Update tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-07 09:30:11 +02:00
Maartje Eyskens
8d15ec6bc8 Only encode EKUs if there are EKUs to be encoded 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-07 09:00:53 +02:00
Lars Lehtonen
ae8afe2257
pkg/util/pki: fix dropped errors 
Signed-off-by: Lars Lehtonen <lars.lehtonen@gmail.com>
 2020-09-03 19:32:24 -07:00
Maartje Eyskens
3154be722c Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 14:44:43 +02:00
Maartje Eyskens
abb56fb0b5 Add CSR validation 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 10:39:24 +02:00
Maartje Eyskens
f6610fb744 Support key usages 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-24 20:10:01 +02:00
Maartje Eyskens
0e17b9d237 Add boilerplate 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-24 11:21:41 +02:00
Maartje Eyskens
d15054e4ea Add extended key usages into CSR 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-24 10:22:58 +02:00
Richard Wall
01b5d0fa88 Fix tests in ./pkg/controller/certificates/... 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00
Richard Wall
81eb53f597 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00
Richard Wall
a70298180a Run a script to update v1alpha2 usage to v1 
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:26:51 +01:00
Maartje Eyskens
9dd00905e9 Update klog 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

klog v2

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
JoshVanL
49ee468161
Adds integration test for issuer controller secret annotations, and 
fixes GenerateTempalate func

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-08-06 11:08:13 +01:00
Haoxiang Zhou
4f26537ff7 Set visibility to public 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 16:12:47 +01:00
Haoxiang Zhou
fe80b7d760 Moved predicate package to pkg/util 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 12:23:15 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 12:25:08 +01:00
Haoxiang Zhou
5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-18 15:26:14 +01:00
James Munnelly
9cb68d1d91 Remove serverAuth default usage & remove unused DefaultKeyUsage functions 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-30 15:57:12 +01:00
James Munnelly
212ef42a66 util/pki: allow certificates only specifying IP, URI or Email SANs to be signed 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 09:49:32 +01:00
JoshVanL
a6a8ee29e3 Moves issuing controller secret handler into secretsManager struct 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-15 16:16:08 +01:00
James Munnelly
75c8fcef8c pkg/util: add EqualKeyUsagesUnsorted function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-15 12:26:21 +01:00
James Munnelly
8b3b9dc5eb Remove defaulting of Organization name 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-15 12:25:29 +01:00
jetstack-bot
fba7b09ac8
Merge pull request #2725 from JoshVanL/ctl-version 
cert-manager-ctl CLI with version
 2020-04-08 12:45:15 +01:00
JoshVanL
49d3bde7eb
Move cmd signal handler into shared util 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-02 11:02:33 +01:00
James Munnelly
e36c1acf1c Add '-ubi' suffix to AppVersion in UBI artifacts 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-01 19:34:34 +01:00
JoshVanL
19bc4734b6
Adds cert-manager-ctl with version command 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-01 18:54:19 +01:00
James Munnelly
acff2b12bb Fix JKS keystore functionality and add additional tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-23 10:02:42 +00:00
jetstack-bot
00b101de76
Merge pull request #2597 from meyskens/emailsans 
Add Email SANs
 2020-03-03 16:31:56 +00:00
Maartje Eyskens
1c27fcb8d9 Fix CSR validation for Email SANs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-03 15:02:51 +01:00
Josh Soref
126edc1095 spelling: convenient 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:32:23 -05:00
Maartje Eyskens
d3a623314c Add EmailSANs field 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-21 08:49:00 +01:00
James Munnelly
22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-30 21:02:58 +00:00
Joshua Mathianas
39cc63a205 resolve failing unit tests 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 11:34:44 -05:00
Joshua Mathianas
b096e0f0af Made requested changes from review 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 09:41:16 -05:00
Joshua Mathianas
e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set 
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 07:50:26 -05:00
James Munnelly
361fdfac3f Don't log misleading error messages 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-16 16:31:18 +00:00
James Munnelly
f3a58ed991 webhook: register pprof http handlers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-10 16:54:15 +00:00
jetstack-bot
1793e7b573
Merge pull request #2236 from munnerz/covered-images 
Add Bazel image targets with coverage enabled
 2019-11-14 10:54:09 +00:00
JoshVanL
d38abbe23a Update csr_test.go to include server auth key usage 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-11 13:19:25 +00:00
JoshVanL
a03560b93a Updates tests to ensure that key usages are correctly checked 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:22:25 +00:00
chenjun.cj
fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file 
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
 2019-10-17 12:14:28 +08:00
James Munnelly
5057da1b89 Add Bazel image targets with coverage enabled 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 08:59:24 +01:00
JoshVanL
7965be9b41 Adds from comments 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL
13b0584838 Change behaviour to be more relaxed around common names 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL
88cadca433 Adds proper checking for common name in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL
dd7213866f Adds validation for URIs to certificate validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL
832e20ae29 Adds URISANs field to Certificate 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00