Commit Graph

4116 Commits

Author SHA1 Message Date
Haoxiang Zhou
4f26537ff7 Set visibility to public
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 16:12:47 +01:00
Haoxiang Zhou
fe80b7d760 Moved predicate package to pkg/util
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 12:23:15 +01:00
jetstack-bot
f247982276
Merge pull request #3056 from munnerz/remove-auditregistration
Remove AuditSink support from cainjector
2020-07-02 10:56:41 +01:00
James Munnelly
8a1d7c6831 Remove AuditSink support from cainjector
The AuditSink resource type (previously in alpha) has been removed
as per https://groups.google.com/g/kubernetes-sig-auth/c/aV_nXpa5uWU.

Remove all support for it from our cainjector so we are able to
continue to upgrade dependencies, and to avoid more users coming
to rely on this functionality ahead of it being removed from
Kubernetes.

Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 19:35:20 +01:00
jetstack-bot
bd806ea490
Merge pull request #3043 from meyskens/bump-acmedns
Bump goacmedns to v0.0.3
2020-07-01 17:09:07 +01:00
jetstack-bot
e06a1dadd1
Merge pull request #3053 from meyskens/venafi-dn
Error on venafi CertificateRequest when DN is empty
2020-07-01 16:29:08 +01:00
Maartje Eyskens
ef5356f0e0 Add unit test
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-01 16:57:17 +02:00
Maartje Eyskens
471df65dfd Implement feedback on error message
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-01 16:52:24 +02:00
jetstack-bot
2e427352c4
Merge pull request #3049 from munnerz/rm-old-certs
Remove old 'certificates' controller and promote 'expcertificates' to be default
2020-07-01 15:49:07 +01:00
Maartje Eyskens
32a167d7c7 Error on venafi CertificateRequest when DN is empty
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-07-01 16:00:02 +02:00
James Munnelly
9e2d6a514b Move expcertificates into certificates package
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 12:16:25 +01:00
James Munnelly
2280480c02 Remove old certificates controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-07-01 11:46:13 +01:00
jetstack-bot
2f035e9337
Merge pull request #3042 from meyskens/fix-old-e2e
Disable controller admission webhook in ingress nginx for e2e
2020-06-29 14:28:26 +01:00
Maartje Eyskens
e8ad24abea Bump goacmedns to v0.0.3
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-29 10:01:19 +02:00
Maartje Eyskens
0dfdfcfc82 Disable controller admission webhook in ingress nginx for e2e
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-06-29 09:48:39 +02:00
jetstack-bot
9dc044d033
Merge pull request #3031 from munnerz/update-api-doc-comments
Update API type documentation for 'certmanager', 'meta' and 'acme' API groups
2020-06-26 16:07:39 +01:00
James Munnelly
636083f8e9 Fix up use of omitempty and optional in Cloudflare config struct
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:50:43 +01:00
jetstack-bot
4018712a53
Merge pull request #3036 from hzhou97/create_cr_scheme
Use ctl.Scheme in create cr ctl command
2020-06-26 14:50:39 +01:00
James Munnelly
7d1ba9e2ae generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly
bfe3dd2c2b review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly
d01d921a71 generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly
8f0b81490d address review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:19 +01:00
James Munnelly
565210f0df generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:18 +01:00
James Munnelly
b8d1f294b9 Update acme API group doc comments
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:49:18 +01:00
James Munnelly
0fbb31b10e generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly
463e08a467 Address review feedback
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly
6caa4c451d Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly
a818975c36 Update generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
James Munnelly
aacaaa2cd8 Update API type documentation for 'certmanager' and 'meta' API groups
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 14:47:27 +01:00
jetstack-bot
220b98923c
Merge pull request #3037 from munnerz/verify-staticcheck
Add verify-staticcheck.sh script
2020-06-26 13:15:39 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 12:25:08 +01:00
James Munnelly
d09a437c7c Add verify-staticcheck.sh script
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 12:02:55 +01:00
Haoxiang Zhou
8db33a0c43 Use ctl.Scheme instead of webhook.Scheme
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-26 12:02:49 +01:00
jetstack-bot
deac83e6fb
Merge pull request #2989 from meyskens/cf-no-email
Make Cloudflare email an optional field
2020-06-26 10:58:39 +01:00
jetstack-bot
63b7ca26b8
Merge pull request #3027 from munnerz/expcerts-renewal
expcertificates: fix bug renewing certificates automatically near expiry
2020-06-26 09:21:39 +01:00
James Munnelly
86b8cab328 expand out 'clearCertificateFields' function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-25 10:44:08 +01:00
jetstack-bot
d7d19d982b
Merge pull request #3028 from munnerz/pkcs8-integration-test
expcertificates: add integration test for PKCS#8 keyFormat
2020-06-23 18:33:12 +01:00
jetstack-bot
83f391c177
Merge pull request #3018 from hzhou97/fix-convert-cmd
Fix ctl convert cmd
2020-06-23 18:14:12 +01:00
jetstack-bot
2f4c57e178
Merge pull request #2957 from hzhou97/create_cr_cmd
Add Create CertificateRequest ctl command
2020-06-23 17:21:12 +01:00
Haoxiang Zhou
24404aa1eb Added new scheme to use for ctl commands
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-23 17:18:56 +01:00
James Munnelly
7e87db23e7 Add integration test for PKCS#8 keyFormat
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 17:12:19 +01:00
James Munnelly
1ec1a07b72 surpress control plane output during integration tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly
dc01fa2394 add integration test for certificate renewal
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly
ba26d65c68 schedule resyncs once renewalTime has passed to handle certificate renewals in the future
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly
b3300b8673 update trigger policies unit tests for status.renewalTime field
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:48:33 +01:00
James Munnelly
fe51a02227 use status.renewalTime in trigger policies and correctly plumb through clock
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:37:50 +01:00
James Munnelly
8bb4bb389a use correct PolicyChain in readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:37:50 +01:00
James Munnelly
7cf74ec442 set notBefore and renewalTime status fields in certificate readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly
cbe5f5dfb5 generated files
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00
James Munnelly
2d5901df3f pkg/apis: add 'notBefore' and 'renewalTime' fields to Certificate status
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-23 16:23:42 +01:00