weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
8,608 Commits 45 Branches 0 Tags 96 MiB
55d546c111
Commit Graph

8608 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ludovic Ortega
55d546c111
feat: add support for dual stack clusters 
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
 2024-04-06 18:52:43 +02:00
jetstack-bot
b61de55abd
Merge pull request #6865 from wallrj/5803-cert-manager-user-agent-venafi-issuer 
Add user-agent header in requests to Venafi API
 2024-03-27 15:33:00 +01:00
jetstack-bot
6b723ce63b
Merge pull request #6871 from inteon/bugfix_exitcodes 
BUGFIX: exit with correct exit codes
 2024-03-25 12:31:39 +01:00
jetstack-bot
0e5001da6d
Merge pull request #6870 from deterclosed/master 
chore: remove repetitive words
 2024-03-23 14:26:50 +01:00
Tim Ramlot
bfd7a51618
BUGFIX: exit with correct exit codes 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-23 14:21:33 +01:00
deterclosed
e50052aded chore: remove repetitive words 
Signed-off-by: deterclosed <fliter@outlook.com>
 2024-03-23 13:37:59 +08:00
jetstack-bot
99fc8fb5f8
Merge pull request #6723 from inteon/add_generate_csr_test 
Add new testcase that generates a non-critical SAN extension to the GenerateCSR tests
 2024-03-22 21:51:34 +01:00
jetstack-bot
953d8b5478
Merge pull request #6277 from inteon/controller_configfile_fuzzer 
ControllerConfiguration fuzzer, only set the value in case the random value is empty
 2024-03-22 17:12:34 +01:00
Richard Wall
30db9e2ad5 Link to upstream vcert issues that would allow us to simplify the cert-manager code 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-20 14:16:38 +00:00
Richard Wall
dd0762e71b Refactor the httpClientForVcert function so that it can also be used for Venafi Cloud 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-20 13:19:56 +00:00
Richard Wall
95a347cbc2 Supply tests with a non-nil REST config in controller.Context 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-20 12:21:48 +00:00
Richard Wall
cca333d1db Supply User-Agent string to the Venafi controllers 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-20 11:35:10 +00:00
Richard Wall
04ee7fe0e9 Set the User-Agent header in all Venafi API requests 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-20 11:02:18 +00:00
Richard Wall
112c7b2e9e An http.RoundTripper which adds the HTTP User-Agent header to all requests 
This code existed in cert-manager once before and I'm reviving it.
Here's the history:

 * Added:
 https://github.com/cert-manager/cert-manager/pull/422
 * Moved: https://github.com/cert-manager/cert-manager/pull/432
 * Obsoleted: https://github.com/cert-manager/cert-manager/pull/797
 * Deleted: https://github.com/cert-manager/cert-manager/pull/966

Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-20 10:24:47 +00:00
jetstack-bot
f56fc1ed1a
Merge pull request #6792 from inteon/bugfix_literalsubject 
bugfix: LiteralSubject match function reports incorrect mismatch
 2024-03-15 10:54:01 +01:00
jetstack-bot
c2cecf8ead
Merge pull request #6854 from wallrj/bump-go-jose-CVE-2024-28180 
Bump github.com/go-jose/go-jose to v3.0.3 to fix CVE-2024-28180
 2024-03-14 16:58:22 +01:00
Richard Wall
6e784bb6f4 make update-licenses 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-14 14:51:38 +00:00
Richard Wall
4314c3ae78 Bump github.com/go-jose/go-jose to v3.0.3 to fix CVE-2024-28180 
find . -name go.mod -execdir go get github.com/go-jose/go-jose/v3@v3.0.3 \;
make tidy

Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-03-14 14:23:41 +00:00
jetstack-bot
5213a53593
Merge pull request #6839 from mangeshhambarde/ingress-annotations-for-secret-template 
Add secretTemplate to Certificate resources created by ingress-shim
 2024-03-14 12:49:22 +01:00
Mangesh Hambarde
f3bfc93bba JSON encoded secretTemplate as Ingress annotation 
Signed-off-by: Mangesh Hambarde <1411192+mangeshhambarde@users.noreply.github.com>
 2024-03-13 14:37:28 +00:00
Mangesh Hambarde
717269e809 Add tests 
Signed-off-by: Mangesh Hambarde <1411192+mangeshhambarde@users.noreply.github.com>
 2024-03-13 14:18:21 +00:00
Mangesh Hambarde
efe2e06288 New Ingress annotation for copying custom annotations to secret template 
Signed-off-by: Mangesh Hambarde <1411192+mangeshhambarde@users.noreply.github.com>
 2024-03-13 14:18:21 +00:00
jetstack-bot
3a26313c51
Merge pull request #6784 from inteon/fix_dynamic_source 
Refactor the webhook dynamic source and add unit tests
 2024-03-12 13:50:25 +01:00
Tim Ramlot
9dcb422164
use errors.Is() 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-11 19:33:01 +01:00
Tim Ramlot
f4ae942b8e
add test that validates leaderelection behavior 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-11 19:22:38 +01:00
Tim Ramlot
b32382fead
improve the dynamic source implementation and add a lot of unit tests 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-11 15:10:39 +01:00
jetstack-bot
b9bbbf5a83
Merge pull request #6771 from inteon/fix_loggers_and_contexts 
Initialize logger and create root context in main.go
 2024-03-11 14:07:45 +01:00
Tim Ramlot
23373e4323
correctly initialize loggers, create contexts and pass contexts 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-08 14:32:31 +01:00
jetstack-bot
fe39c52aaf
Merge pull request #6807 from bwaldrep/bw/alias 
feat: Add optional flag to specify jks keystore alias
 2024-03-07 18:27:06 +01:00
jetstack-bot
b2d7284881
Merge pull request #6840 from inteon/bump_base_images 
Run ./hack/latest-base-images.sh
 2024-03-07 17:55:06 +01:00
jetstack-bot
4e0c54509d
Merge pull request #6831 from inteon/bump_go 
Bump to latest go version (1.22.1)
 2024-03-07 17:29:07 +01:00
Tim Ramlot
6134af7341
run ./hack/latest-base-images.sh 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-07 17:00:20 +01:00
Tim Ramlot
c052ff6e4e
bump to latest go version 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-07 14:20:29 +01:00
jetstack-bot
f3737e6dbf
Merge pull request #6827 from inteon/cve_fix 
Bump google.golang.org/protobuf fixing GO-2024-2611
 2024-03-07 14:13:40 +01:00
Tim Ramlot
e0392eac5d
run 'make update-licenses' 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-07 13:58:26 +01:00
Tim Ramlot
531e1e46c7
bump google.golang.org/protobuf fixing GO-2024-2611 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-07 13:52:17 +01:00
jetstack-bot
c8e2be5f34
Merge pull request #6823 from inteon/bump_go 
Bump go to 1.21.8
 2024-03-07 13:25:39 +01:00
Tim Ramlot
f011d80ace
bump go to 1.21.8 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-07 13:09:52 +01:00
jetstack-bot
098c07206d
Merge pull request #6816 from inteon/bugfix_cainjector_leaderelection_config 
BUGFIX: cainjector leaderelection defaults are missing
 2024-03-06 11:34:09 +01:00
Tim Ramlot
ad1847cc3c
prevent fuzzer from generating impossible configurations 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-05 19:37:23 +01:00
Tim Ramlot
620d6ff679
BUGFIX: cainjector leaderelection defaults were missing 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-03-05 19:21:35 +01:00
Bill Waldrep
d4911ebfaa
Add optional flag to specify jks keystore alias. 
Previously the JKS keystore alias was hardcoded to "certificate".
This change adds an optional configuration point to allow users
to specify a custom keystore alias. If the flag is omitted we
will default to the previous behavior.

Signed-off-by: Bill Waldrep <bwaldrep@palantir.com>
 2024-03-04 13:23:09 -05:00
jetstack-bot
fd551160b1
Merge pull request #6806 from bwaldrep/bw/truststores 
bugfix: include all CA certificates in encoded pkcs12/jks stores
 2024-03-04 19:09:13 +01:00
Bill Waldrep
bf3d202c72
add new utility method to clarify cert decoding semantics 
Signed-off-by: Bill Waldrep <bwaldrep@palantir.com>
 2024-03-04 12:47:27 -05:00
jetstack-bot
a7c78684ae
Merge pull request #6801 from jkroepke/allow-secret-injection 
Allow `cert-manager.io/allow-direct-injection` in annotations
 2024-03-04 18:30:13 +01:00
Bill Waldrep
251610d951
include full CA chain contents in encoded pkcs12/jks stores 
Signed-off-by: Bill Waldrep <bwaldrep@palantir.com>
 2024-02-28 11:50:19 -05:00
Jan-Otto Kröpke
818df603f5
Allow cert-manager.io/allow-direct-injection in annotations 
Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>
 2024-02-27 12:26:33 +01:00
jetstack-bot
7155520dbc
Merge pull request #6800 from inteon/helm_fix_matchlabels_granularity 
Helm: fix matchLabels selector - select on minimum subset of labels that uniquely identifies the resources
 2024-02-26 15:34:45 +00:00
Tim Ramlot
5af22527ee
fix matchLabels selector - select on minimum subset of labels that uniquely identifies the resources 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-26 10:06:05 +01:00
jetstack-bot
50ab3683d6
Merge pull request #6793 from inteon/remove_errors_direct_dependency 
Remove github.com/pkg/errors as a direct dependency
 2024-02-23 13:29:09 +00:00