Commit Graph

3878 Commits

Author SHA1 Message Date
James Munnelly
48958036bf Set NotAfter field in readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
1c26ae412d Move some logic into separate method
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
945dde4175 Fix PolicyFunc reference in trigger controller tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
8aaca4a2ad expcertificates: add readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
53fa3b70ab Move trigger policies into separate package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
707b7a486a Fix missing append bug
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
a572f739c2 Add trigger policy for private key not matching spec
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
b5c169e35a Fix panic in issuing controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
James Munnelly
cde13aa6fd Add requestmanager controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-20 15:08:31 +01:00
jetstack-bot
91d598b1de
Merge pull request #2810 from munnerz/keymanager-controller
expcertificates: add keymanager controller
2020-04-20 10:17:38 +01:00
jetstack-bot
4adec72ac9
Merge pull request #2681 from gitirabassi/feat/azure-auth-msi-master
feat(azure): add usage of Managed Identities for azuredns
2020-04-20 08:42:38 +01:00
jetstack-bot
687d47f832
Merge pull request #2027 from pepov/auditsink-injector
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
2020-04-20 08:23:38 +01:00
jetstack-bot
f1858a89a5
Merge pull request #2816 from meyskens/license-docker
Add licences to Docker images
2020-04-17 17:08:20 +01:00
jetstack-bot
77dcc6c759
Merge pull request #2815 from meyskens/bump-controller
Bump contoller-tools and controller-runtime to latest of master
2020-04-17 17:08:12 +01:00
jetstack-bot
a299a63219
Merge pull request #2807 from HoogWater/refine_leaderelection
Limit the scope of leadership configmap role to specific configmaps
2020-04-17 16:27:46 +01:00
Maartje Eyskens
0ad3c81af3 Add licences to Docker images
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 16:49:14 +02:00
Maartje Eyskens
db45891705 Add missing context
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 16:39:06 +02:00
Maartje Eyskens
c72da660e1 Bump contoller-tools and controller-runtime to latest of master
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-04-17 15:56:59 +02:00
James Munnelly
b50f0de763 Fix RSA private key size validation on Certificates
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
a53288b4c1 Enable keymanager and issuing controller with feature gate
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
d60cb08f13 expcertificates: add keymanager controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
d0b919a2f7 expcertificates: add PrivateKeyMatchesSpec function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:41 +01:00
James Munnelly
5e00879749 Add Secret listing function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 19:10:38 +01:00
James Munnelly
bc2315a90f Add IsNextPrivateKeySecretLabelKey const
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 17:08:52 +01:00
James Munnelly
26948ed459 Register additional event handlers in issuing controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 17:08:39 +01:00
jetstack-bot
7144b211c0
Merge pull request #2809 from munnerz/refactor-predicates
expcertificates: create 'predicate' package and standardise list and enqueue predicates
2020-04-16 14:49:29 +01:00
James Munnelly
c2aed0842e Create 'predicate' package and standardise list and enqueue predicates
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-16 14:28:52 +01:00
jetstack-bot
f3df90305c
Merge pull request #2782 from JoshVanL/certificate-issuing-controller
Extensible Certificate Issuing Controller
2020-04-16 11:26:27 +01:00
Mark de Jong
d7edd6d6bf Removed TODO comment and add details for configmap usage in comment
Signed-off-by: Mark de Jong <markdejong@gmail.com>
2020-04-15 22:24:17 +02:00
Mark de Jong
a6335b2244 Split verbs over 2 rules in the roles
one for create with no limit
one for update and patch

This is done because the "name" of a resource is not known at time of creation therefor the create verb cannot be limited to a single resource

Signed-off-by: Mark de Jong <markdejong@gmail.com>
2020-04-15 22:24:17 +02:00
Mark de Jong
0b4a00048d Limit the scope of leadership configmap role to specific configmaps created by the deployment
Signed-off-by: Mark de Jong <markdejong@gmail.com>
2020-04-15 22:24:17 +02:00
James Munnelly
9da334164c Update references to cmapi.CertificateRequestRevisionAnnotationKey
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 16:49:47 +01:00
James Munnelly
572e46759c Fixup error text and cleanup test instantiation
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 16:28:29 +01:00
JoshVanL
38716d69ae Adds issuing controller issuing integration test
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
b5405adb54 Adds some logging to issuing controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
f297ead1f3 Update generate files
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
48ca027906 Adds unit tests for issuing controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
a6a8ee29e3 Moves issuing controller secret handler into secretsManager struct
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
JoshVanL
ffb5201d95 Adds extensible issuing controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
jetstack-bot
9556b32e81
Merge pull request #2756 from munnerz/new-certificates-controller
Add experimental 'trigger' controller
2020-04-15 16:12:09 +01:00
James Munnelly
b3fcd23f8d Fixup tautological condition
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
919a160bc4 Fix error message when looking up an owner fails
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
645ed70579 Add trigger controller unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
93a6dc56d2 Fix bug causing certificates to not be triggered after failure
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
221f6d4eb7 Log message when parsing a workqueue item fails
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
0f32bb46a8 Allow multiple predicate functions when listing CertificateRequests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:47 +01:00
James Munnelly
cf7e344425 Export PolicyChain type
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 15:14:46 +01:00
James Munnelly
97b33abf11 Add missing boilerplate headers
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:27:25 +01:00
James Munnelly
7f3d811978 Add comments to new field types and regenerate CRDs
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:27:25 +01:00
James Munnelly
1fc9981359 Fix up use of Kubernetes clientset after rebase
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:27:15 +01:00