weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
8,918 Commits 45 Branches 0 Tags 96 MiB
4cec43bf93
Commit Graph

163 Commits

Author SHA1 Message Date
Maartje Eyskens
c7522c2b91 Cast conversion request in the correct API group 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-02 16:03:14 +02:00
jetstack-bot
647035a266
Merge pull request #3211 from meyskens/csr-extkey 
Extended key usages into CSR
 2020-08-27 15:33:37 +01:00
Maartje Eyskens
47266ffbbc Implement feedback from review 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-27 14:46:28 +02:00
Maartje Eyskens
db0a321d32 Add boilerplate 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-27 13:33:02 +02:00
Maartje Eyskens
71c3d2fb6b Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-27 13:10:06 +02:00
Maartje Eyskens
e0749ad822 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-27 13:02:18 +02:00
Maartje Eyskens
136085ac6b Fix conversion (insert facepalm here) 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-26 19:03:15 +02:00
Maartje Eyskens
697fe1052a DIY conversions for admissions 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-26 17:52:28 +02:00
Maartje Eyskens
60db2d16c2 Fix unit tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 14:59:22 +02:00
Maartje Eyskens
627b57fed5 Add validation for CR creation only to match Key usages with the CSR if both are set 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 14:38:57 +02:00
Richard Wall
81eb53f597 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00
Richard Wall
a70298180a Run a script to update v1alpha2 usage to v1 
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:26:51 +01:00
Maartje Eyskens
351c03a66d Add better error 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-17 09:29:23 +02:00
Maartje Eyskens
0d14b65b8e Fix conversion of the conversion 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 20:29:10 +02:00
Maartje Eyskens
70aa8f1ebb fix unit test 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 20:18:19 +02:00
Maartje Eyskens
f2aad8b6ff run update all 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 20:06:48 +02:00
Maartje Eyskens
19cc376f79 support v1 conversion webhooks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-14 20:04:19 +02:00
jetstack-bot
9822581393
Merge pull request #3167 from meyskens/admission-v1 
Support v1 admission webhooks
 2020-08-13 16:04:40 +01:00
Maartje Eyskens
3259fdfe9b Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
JoshVanL
40dd8b961d Remove klog v1 from webhook unit tests in favour of v2 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens
827ce9c5ad Revert log levels on errors 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens
86dee5ed41 Set error log levels 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens
fecd0b3518 Set all log levels for info 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens
50686d3e26 Support v1 admission webhooks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-10 16:39:49 +02:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 12:25:08 +01:00
James Munnelly
c641443e92 Support Kubernetes 1.15 and below properly in validating webhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-28 11:51:58 +01:00
James Munnelly
793f9677ae Use default Golang ciphersuites if none are specified 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-31 09:32:21 +01:00
James Munnelly
0712d008d9 Specify names of tests in filesource temp dirs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 15:37:21 +01:00
James Munnelly
42dc66cc31 Plumb context through pkg/webhook/authority 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 15:35:21 +01:00
James Munnelly
e0db0296d2 Run webhook on random port during integration tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:26:05 +01:00
James Munnelly
3d1b43d343 Add 'dynamic' certificate source backed by an authority 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly
aa2e653b2e Add 'dynamic authority' controller for managing a Secret containing a CA 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly
577e53b9bb webhook: create 'tls' package containing certificates sources + tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly
38f952e88a webhook: don't log messages during normal operation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-05 20:12:07 +00:00
Will Thames
e1bf54d0e3 Add cipher suites configuration and defaults 
Add a --tls-cipher-suites command line flag and set to sensible
defaults.

Signed-off-by: Will Thames <will@thames.id.au>
 2020-02-03 22:57:59 +10:00
James Munnelly
c27ccd78d7 Update webhook validation handler for validation registry 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
a867bc9c7a Update testgroup validation to use internal type 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
866d89ffb0 Update pkg/webhook to use internal types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
jetstack-bot
5ee9e6c7aa
Merge pull request #2452 from munnerz/kubernetes-1.17.0 
Bump Kubernetes dependencies to v0.17.0
 2020-01-14 14:19:57 +00:00
James Munnelly
d3b785c263 Bump generated files copyright header year 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-07 12:43:44 +00:00
James Munnelly
df27fff9ce Don't use time.Tick to prevent leaks 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-16 12:45:49 +00:00
James Munnelly
ae5c13c1b2 Update codegen 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-11 15:42:12 +00:00
James Munnelly
f3a58ed991 webhook: register pprof http handlers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-10 16:54:15 +00:00
James Munnelly
62c61ca59b Add extra comments to the webhook's server.go 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-24 19:41:55 +01:00
James Munnelly
b4df41dd1d Copy UID from admission request to response struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-24 19:41:55 +01:00
James Munnelly
dbd92f88ef Add conversion webhook handler 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-24 19:41:55 +01:00
James Munnelly
0209686ed7 Add v2 version to testgroup API 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-24 19:41:55 +01:00
James Munnelly
ec8d6e12e4 Add validation to ensure Order & Challenge fields are immutable 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 16:54:15 +01:00
James Munnelly
c5ee500a2e Add unit tests for validation webhook handler 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 16:54:15 +01:00
James Munnelly
ed284084b3 Refactor validation handler to support updates 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 13:27:08 +01:00
James Munnelly
ca9e8f33b2 Clean up webhook handler interface 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 12:56:13 +01:00
James Munnelly
da8bf264fd Use standard golang http server for webhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 12:29:34 +01:00
James Munnelly
973f4aa424 Update codebase for external dependencies 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-26 12:52:43 +01:00
James Munnelly
68cf0c0fcc Add ACME apigroup to scheme 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-23 10:07:53 +01:00
James Munnelly
4f32c680dd Register meta api group with scheme 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 19:25:04 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 16:22:43 +01:00
James Munnelly
1346d5a67c Fix test failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:11:02 +01:00
James Munnelly
6d0853de61 Add dedicated testgroup for webhook handler tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:11:02 +01:00
James Munnelly
504d2f911d Cleanup scheme building and add comments 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:11:01 +01:00
James Munnelly
73d66c44ab Move API validations package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:11:01 +01:00
James Munnelly
00410e3831 Switch to use new webhook handlers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:10:31 +01:00
James Munnelly
20a6dd6233 Add new webhook handlers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:10:31 +01:00
James Munnelly
d56b6be948 Move API webhook validation package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-13 20:41:53 +01:00