970 Commits

Author	SHA1	Message	Date
Richard Wall	e21a57a88c	Enable metrics server on the webhook ... Signed-off-by: Richard Wall <richard.wall@venafi.com>	2024-07-19 17:04:52 +01:00
Richard Wall	c5e95aac63	Fix incorrect indentation of the PodMonitor template in the Helm chart ... Signed-off-by: Richard Wall <richard.wall@venafi.com>	2024-07-19 09:22:58 +01:00
Yuedong Wu	df37eba376	fix API fields description for venafi tpp ... Signed-off-by: Yuedong Wu <dwcn22@outlook.com>	2024-07-01 20:55:51 +08:00
cert-manager-prow[bot]	50abeda40d	Merge pull request #6987 from cbroglie/renew-before-pct ... feat: Add renewBeforePercentage alternative to renewBefore	2024-07-01 09:45:23 +00:00
Christopher Broglie	0f74d7536e	Add renewBeforePercentage alternative to renewBefore ... Since the actual duration is unknown until a cert has been issued, providing an absolute duration for renewBefore can result in accidental renewal loops. The new renewBeforePercentage field computes the effective renewBefore using the actual duration, allowing users to better express intent while maintaining backwards compatibility. Fixes #4423, resolves #5821 Signed-off-by: Christopher Broglie <cbroglie@cloudflare.com>	2024-06-29 21:18:15 -07:00
Adam Talbot	e30ad68ab2	feat: default ControllerConfiguration apiVersion and kind in helm ... Signed-off-by: Adam Talbot <adam.talbot@venafi.com>	2024-06-25 11:58:44 +01:00
cert-manager-prow[bot]	837c6a1e06	Merge pull request #7036 from fidelity-contributions/feature/5514-venafi-issuer-ca-ref-support ... Feature/5514 - Add SecretRef support for venafi TPP issuer CA Bundle	2024-06-24 14:18:20 +00:00
Tim Ramlot	363a63ac96	Add client certificate authentication for Vault issuers ... Co-authored-by: Maël Valais <mael@vls.dev> Signed-off-by: Joshua Mühlfort <muehlfort@gonicus.de>	2024-06-17 09:16:26 +02:00
cert-manager-prow[bot]	356f7411e0	Merge pull request #7057 from inteon/startupapicheck ... Startupapicheck: validate that the validating and mutating webhooks are doing their job	2024-06-10 12:27:59 +00:00
Tim Ramlot	ad09af884a	enable Helm values.yaml jsonschema validation ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-06-06 10:18:56 +02:00
Tim Ramlot	18b701b73e	overhaul of startupapicheck: add checks that mutation and validation work and add extensive testing ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-05-30 15:54:08 +02:00
cert-manager-prow[bot]	4921b0bd83	Merge pull request #7052 from inteon/helm_fix_configmap ... BUGFIX: correctly mount config files for components	2024-05-28 11:29:07 +00:00
Tim Ramlot	cc355c3468	BUGFIX: correctly mount config files for components ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-05-28 12:34:57 +02:00
Tim Ramlot	a2a06a1d12	run 'make generate-helm-docs' ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-05-23 13:40:51 +02:00
Tim Ramlot	c176aac45a	add Helm options to extend auto-approval or disable it ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-05-23 13:35:19 +02:00
Tim Ramlot	515559ac7c	re-generate crds ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-05-17 14:33:23 +02:00
cert-manager-prow[bot]	a9b28df5bc	Merge pull request #7030 from inteon/promote_literalsubject_to_beta ... Promote the LiteralCertificateSubject feature to Beta	2024-05-14 17:01:51 +00:00
Tim Ramlot	e51f4a46db	update CRD field comments ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-05-14 17:49:56 +02:00
Pieter van der Giessen	22516fddf5	Add hostAliases to controller pod ... Signed-off-by: Pieter van der Giessen <pieter@pionative.com>	2024-05-14 13:16:53 +02:00
pwhitehead	35571e014d	refactor to use token request API ... Signed-off-by: Paul Whitehead <pwhitehead@splunk.com>	2024-05-07 11:11:21 -06:00
Paul Whitehead	528428b31f	support assumeRoleWithWebIdentity for Route53 issuer ... Signed-off-by: Paul Whitehead <pwhitehead@splunk.com> fix test signature	2024-05-07 11:10:17 -06:00
cert-manager-prow[bot]	54aab4b8a0	Merge pull request #6424 from gplessis/helm_extraObjects ... Helm chart: Allow the creation of extra manifests via values	2024-05-07 13:53:15 +00:00
Tim Ramlot	a8b5178fc5	fix dupword linter ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-04-29 13:47:25 +02:00
cert-manager-prow[bot]	54feeece10	Merge pull request #6970 from erikgb/additional-formats-beta ... Promote AdditionalCertificateOutputFormats feature gate to Beta	2024-04-29 07:42:36 +00:00
Erik Godding Boye	003c1b12e8	Promote AdditionalCertificateOutputFormats feature gate to Beta and enable by default ... Signed-off-by: Erik Godding Boye <egboye@gmail.com>	2024-04-28 17:29:35 +02:00
Erik Godding Boye	8f99f40cbb	Upgrade K8s dependencies to v0.30.0 ... Signed-off-by: Erik Godding Boye <egboye@gmail.com>	2024-04-28 13:02:36 +02:00
Sankalp Yengaldas	adc7cd0f06	add testcases and generate deepcopy methods ... Signed-off-by: Sankalp Yengaldas <sankalp.yb@fmr.com>	2024-04-24 10:14:31 -04:00
Guillaume Plessis	b1767b4aa9	Address comments from @wallrj ... Signed-off-by: Guillaume Plessis <gui@endor.ai>	2024-04-23 15:02:47 -07:00
Guillaume Plessis	f98cfacd1c	Fix a typo ... Signed-off-by: Guillaume Plessis <gui@endor.ai>	2024-04-23 15:02:47 -07:00
Guillaume Plessis	fd2645776c	Update the documentation ... Signed-off-by: Guillaume Plessis <gui@endor.ai>	2024-04-23 15:02:47 -07:00
Guillaume Plessis	3d58fb7019	Remove the tpl fuction to allow more complex use cases ... Signed-off-by: Guillaume Plessis <gui@endor.ai>	2024-04-23 15:02:47 -07:00
Guillaume Plessis	76c976bc2d	Allow the creation of extra manifests via values ... Signed-off-by: Guillaume Plessis <gui@endor.ai>	2024-04-23 15:02:47 -07:00
Ludovic Ortega	a4aea9e30f	fix: capitalise acronyms ... Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>	2024-04-19 17:51:02 +02:00
Ludovic Ortega	7df6e20e56	fix: helm documentation ... Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>	2024-04-19 17:25:58 +02:00
Ludovic Ortega	65cc7cb0df	fix: add suggestion ... Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>	2024-04-19 10:34:10 +02:00
Ludovic Ortega	55d546c111	feat: add support for dual stack clusters ... Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>	2024-04-06 18:52:43 +02:00
Bill Waldrep	d4911ebfaa	Add optional flag to specify jks keystore alias. ... Previously the JKS keystore alias was hardcoded to "certificate". This change adds an optional configuration point to allow users to specify a custom keystore alias. If the flag is omitted we will default to the previous behavior. Signed-off-by: Bill Waldrep <bwaldrep@palantir.com>	2024-03-04 13:23:09 -05:00
Tim Ramlot	5af22527ee	fix matchLabels selector - select on minimum subset of labels that uniquely identifies the resources ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-26 10:06:05 +01:00
Tim Ramlot	d7a23387c3	run 'make update-crds' ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-22 13:26:29 +01:00
jetstack-bot	f643eef2b2	Merge pull request #6755 from import-shiburin/master ... bugfix: wrong certificate chain is used if preferredChain is configured	2024-02-20 15:29:07 +00:00
jetstack-bot	0b379e4b5c	Merge pull request #6760 from inteon/add_crd_keep ... Add `crds.keep` and `crds.enabled` Helm options	2024-02-20 12:09:35 +00:00
Tim Ramlot	815dbc9e8f	remove unused and in Helm template ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-19 14:24:57 +01:00
Tim Ramlot	2deaaaa233	fix typo ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-19 14:24:04 +01:00
Tim Ramlot	f44238fd80	run 'make update-crds' ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-18 20:16:09 +01:00
jetstack-bot	7f92e38988	Merge pull request #6614 from rodrigorfk/feat-vault-mtls ... feat: Add the ability to communicate with Vault via mTLS	2024-02-16 18:11:26 +00:00
Tim Ramlot	d34e2c8589	add CRD keep annotation ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-15 15:28:09 +01:00
Tim Ramlot	ad018a7b1a	improve Chart.yaml and README.md ... Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>	2024-02-15 11:10:58 +01:00
Jason Witkowski	72b627d12a	Move helm hook from labels to annotations ... Signed-off-by: Jason Witkowski <jwitko1@gmail.com>	2024-02-15 10:49:35 +01:00
Jason Witkowski	a6f665353f	feat: Add option to keep CRDs when helm chart is uninstalled ... Signed-off-by: Jason Witkowski <jwitko1@gmail.com>	2024-02-15 10:49:35 +01:00
cloudwiz	75d1449903	move audiences under the SA ref ... Signed-off-by: cloudwiz <andrey.dubnik@maersk.com>	2024-02-08 14:07:03 +00:00