James Munnelly
48958036bf
Set NotAfter field in readiness controller
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
1c26ae412d
Move some logic into separate method
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
945dde4175
Fix PolicyFunc reference in trigger controller tests
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
8aaca4a2ad
expcertificates: add readiness controller
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
53fa3b70ab
Move trigger policies into separate package
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
707b7a486a
Fix missing append bug
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
a572f739c2
Add trigger policy for private key not matching spec
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
b5c169e35a
Fix panic in issuing controller
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
cde13aa6fd
Add requestmanager controller
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
jetstack-bot
91d598b1de
Merge pull request #2810 from munnerz/keymanager-controller
...
expcertificates: add keymanager controller
2020-04-20 10:17:38 +01:00
jetstack-bot
4adec72ac9
Merge pull request #2681 from gitirabassi/feat/azure-auth-msi-master
...
feat(azure): add usage of Managed Identities for azuredns
2020-04-20 08:42:38 +01:00
jetstack-bot
687d47f832
Merge pull request #2027 from pepov/auditsink-injector
...
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
2020-04-20 08:23:38 +01:00
jetstack-bot
f1858a89a5
Merge pull request #2816 from meyskens/license-docker
...
Add licences to Docker images
2020-04-17 17:08:20 +01:00
jetstack-bot
77dcc6c759
Merge pull request #2815 from meyskens/bump-controller
...
Bump contoller-tools and controller-runtime to latest of master
2020-04-17 17:08:12 +01:00
jetstack-bot
a299a63219
Merge pull request #2807 from HoogWater/refine_leaderelection
...
Limit the scope of leadership configmap role to specific configmaps
2020-04-17 16:27:46 +01:00
Maartje Eyskens
0ad3c81af3
Add licences to Docker images
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 16:49:14 +02:00
Maartje Eyskens
db45891705
Add missing context
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 16:39:06 +02:00
Maartje Eyskens
c72da660e1
Bump contoller-tools and controller-runtime to latest of master
...
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 15:56:59 +02:00
James Munnelly
b50f0de763
Fix RSA private key size validation on Certificates
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
a53288b4c1
Enable keymanager and issuing controller with feature gate
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
d60cb08f13
expcertificates: add keymanager controller
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
d0b919a2f7
expcertificates: add PrivateKeyMatchesSpec function
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
5e00879749
Add Secret listing function
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:38 +01:00
James Munnelly
bc2315a90f
Add IsNextPrivateKeySecretLabelKey const
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 17:08:52 +01:00
James Munnelly
26948ed459
Register additional event handlers in issuing controller
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 17:08:39 +01:00
jetstack-bot
7144b211c0
Merge pull request #2809 from munnerz/refactor-predicates
...
expcertificates: create 'predicate' package and standardise list and enqueue predicates
2020-04-16 14:49:29 +01:00
James Munnelly
c2aed0842e
Create 'predicate' package and standardise list and enqueue predicates
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 14:28:52 +01:00
jetstack-bot
f3df90305c
Merge pull request #2782 from JoshVanL/certificate-issuing-controller
...
Extensible Certificate Issuing Controller
2020-04-16 11:26:27 +01:00
Mark de Jong
d7edd6d6bf
Removed TODO comment and add details for configmap usage in comment
...
Signed-off-by: Mark de Jong <markdejong@gmail.com>
2020-04-15 22:24:17 +02:00
Mark de Jong
a6335b2244
Split verbs over 2 rules in the roles
...
one for create with no limit
one for update and patch
This is done because the "name" of a resource is not known at time of creation therefor the create verb cannot be limited to a single resource
Signed-off-by: Mark de Jong <markdejong@gmail.com>
2020-04-15 22:24:17 +02:00
Mark de Jong
0b4a00048d
Limit the scope of leadership configmap role to specific configmaps created by the deployment
...
Signed-off-by: Mark de Jong <markdejong@gmail.com>
2020-04-15 22:24:17 +02:00
James Munnelly
9da334164c
Update references to cmapi.CertificateRequestRevisionAnnotationKey
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 16:49:47 +01:00
James Munnelly
572e46759c
Fixup error text and cleanup test instantiation
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 16:28:29 +01:00
JoshVanL
38716d69ae
Adds issuing controller issuing integration test
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
b5405adb54
Adds some logging to issuing controller
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
f297ead1f3
Update generate files
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
48ca027906
Adds unit tests for issuing controller
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
a6a8ee29e3
Moves issuing controller secret handler into secretsManager struct
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
ffb5201d95
Adds extensible issuing controller
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
jetstack-bot
9556b32e81
Merge pull request #2756 from munnerz/new-certificates-controller
...
Add experimental 'trigger' controller
2020-04-15 16:12:09 +01:00
James Munnelly
b3fcd23f8d
Fixup tautological condition
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
919a160bc4
Fix error message when looking up an owner fails
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
645ed70579
Add trigger controller unit tests
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
93a6dc56d2
Fix bug causing certificates to not be triggered after failure
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
221f6d4eb7
Log message when parsing a workqueue item fails
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
0f32bb46a8
Allow multiple predicate functions when listing CertificateRequests
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
cf7e344425
Export PolicyChain type
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:46 +01:00
James Munnelly
97b33abf11
Add missing boilerplate headers
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:27:25 +01:00
James Munnelly
7f3d811978
Add comments to new field types and regenerate CRDs
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:27:25 +01:00
James Munnelly
1fc9981359
Fix up use of Kubernetes clientset after rebase
...
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:27:15 +01:00