weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
4,116 Commits 45 Branches 0 Tags 96 MiB
4f26537ff7
Commit Graph

1681 Commits

Author SHA1 Message Date
Haoxiang Zhou
4f26537ff7 Set visibility to public 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 16:12:47 +01:00
Haoxiang Zhou
fe80b7d760 Moved predicate package to pkg/util 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 12:23:15 +01:00
James Munnelly
8a1d7c6831 Remove AuditSink support from cainjector 
The AuditSink resource type (previously in alpha) has been removed
as per https://groups.google.com/g/kubernetes-sig-auth/c/aV_nXpa5uWU.

Remove all support for it from our cainjector so we are able to
continue to upgrade dependencies, and to avoid more users coming
to rely on this functionality ahead of it being removed from
Kubernetes.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 19:35:20 +01:00
jetstack-bot
e06a1dadd1
Merge pull request #3053 from meyskens/venafi-dn 
Error on venafi CertificateRequest when DN is empty
 2020-07-01 16:29:08 +01:00
Maartje Eyskens
ef5356f0e0 Add unit test 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-01 16:57:17 +02:00
Maartje Eyskens
471df65dfd Implement feedback on error message 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-01 16:52:24 +02:00
Maartje Eyskens
32a167d7c7 Error on venafi CertificateRequest when DN is empty 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-01 16:00:02 +02:00
James Munnelly
9e2d6a514b Move expcertificates into certificates package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 12:16:25 +01:00
James Munnelly
2280480c02 Remove old certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 11:46:13 +01:00
James Munnelly
636083f8e9 Fix up use of omitempty and optional in Cloudflare config struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:50:43 +01:00
James Munnelly
bfe3dd2c2b review feedback 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:49:19 +01:00
James Munnelly
d01d921a71 generated files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:49:19 +01:00
James Munnelly
8f0b81490d address review feedback 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:49:19 +01:00
James Munnelly
b8d1f294b9 Update acme API group doc comments 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:49:18 +01:00
James Munnelly
463e08a467 Address review feedback 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:47:27 +01:00
James Munnelly
6caa4c451d Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:47:27 +01:00
James Munnelly
aacaaa2cd8 Update API type documentation for 'certmanager' and 'meta' API groups 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:47:27 +01:00
jetstack-bot
220b98923c
Merge pull request #3037 from munnerz/verify-staticcheck 
Add verify-staticcheck.sh script
 2020-06-26 13:15:39 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 12:25:08 +01:00
jetstack-bot
deac83e6fb
Merge pull request #2989 from meyskens/cf-no-email 
Make Cloudflare email an optional field
 2020-06-26 10:58:39 +01:00
jetstack-bot
63b7ca26b8
Merge pull request #3027 from munnerz/expcerts-renewal 
expcertificates: fix bug renewing certificates automatically near expiry
 2020-06-26 09:21:39 +01:00
James Munnelly
86b8cab328 expand out 'clearCertificateFields' function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-25 10:44:08 +01:00
jetstack-bot
83f391c177
Merge pull request #3018 from hzhou97/fix-convert-cmd 
Fix ctl convert cmd
 2020-06-23 18:14:12 +01:00
Haoxiang Zhou
24404aa1eb Added new scheme to use for ctl commands 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-23 17:18:56 +01:00
James Munnelly
ba26d65c68 schedule resyncs once renewalTime has passed to handle certificate renewals in the future 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:48:33 +01:00
James Munnelly
b3300b8673 update trigger policies unit tests for status.renewalTime field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:48:33 +01:00
James Munnelly
fe51a02227 use status.renewalTime in trigger policies and correctly plumb through clock 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:37:50 +01:00
James Munnelly
8bb4bb389a use correct PolicyChain in readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:37:50 +01:00
James Munnelly
7cf74ec442 set notBefore and renewalTime status fields in certificate readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
James Munnelly
cbe5f5dfb5 generated files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
James Munnelly
2d5901df3f pkg/apis: add 'notBefore' and 'renewalTime' fields to Certificate status 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
James Munnelly
1d6424b8f2 Use 'clock' package in pkg/scheduler 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
James Munnelly
281b9ffcbd add RenewBeforeExpiryDuration function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
Haoxiang Zhou
6c72193678 Handle keyEncoding for temporary Certificates 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-23 10:17:41 +01:00
Haoxiang Zhou
5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-18 15:26:14 +01:00
jetstack-bot
abd13992c8
Merge pull request #2839 from meyskens/update-miekg-dns 
Update to the latest miekg/dns
 2020-06-11 15:26:23 +01:00
jetstack-bot
89c8fc3c8d
Merge pull request #2898 from diversario/2159-remove-custom-retryer 
Remove custom retry logic from route53 package
 2020-06-11 13:58:23 +01:00
Maartje Eyskens
4a59c875ee Do not send email if not set 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-06-08 17:25:15 +02:00
Maartje Eyskens
963c5566ae Make Cloudflare email an optional field 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-06-08 16:48:47 +02:00
jetstack-bot
46eaf3d1a4
Merge pull request #2923 from JoshVanL/new-metrics 
Updates the metrics package + new metrics controller
 2020-06-04 12:59:38 +01:00
jetstack-bot
485e2e59a4
Merge pull request #2947 from hzhou97/no_empty_cacrt 
Do not add empty ca.crt
 2020-05-29 09:13:01 +01:00
Maartje Eyskens
c867bc7d36 Implement MessageAcceptFunc 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-27 17:42:34 +02:00
Maartje Eyskens
c9fbbdbde8 Update to the latest miekg/dns 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-27 17:42:34 +02:00
jetstack-bot
78ee463a98 Merge pull request #2946 from meyskens/fix-venafi-dn 
Add default DN back in Venafi issuer
 2020-05-27 10:35:22 +01:00
JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-26 23:01:55 +01:00
Haoxiang Zhou
7229741505 Changed tests for issuing controller to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 15:30:43 +01:00
Maartje Eyskens
3fa7f038b3 Check for empty Organizations instead 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-26 16:03:42 +02:00
Haoxiang Zhou
609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 14:37:40 +01:00
Haoxiang Zhou
3591de614d Changed unit tests to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:55 +01:00
Haoxiang Zhou
dceae33364 Do not add ca.crt key to TLS secret if empty 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:20 +01:00