weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,825 Commits 45 Branches 0 Tags 96 MiB
563a93ab1a
Commit Graph

268 Commits

Author SHA1 Message Date
James Munnelly
4eb48b9c04 run //hack:update-reference-docs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:37 +01:00
James Munnelly
2eb785655c Run //hack:update-codegen 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:37 +01:00
Vincent Desjardins
4e89b611cf missing omitempty for CABundle field in Vault issuer 
Signed-off-by: Vincent Desjardins <vdesjardins@gmail.com>
 2018-10-12 11:14:08 +00:00
Vincent Desjardins
92ac7a7c08 code review updates 
Signed-off-by: Vincent Desjardins <vdesjardins@gmail.com>
 2018-10-11 01:22:05 +00:00
Vincent Desjardins
7c1ff275f0 vault ca bundle support 
Signed-off-by: Vincent Desjardins <vdesjardins@gmail.com>
 2018-10-11 01:22:05 +00:00
jetstack-bot
620395511a
Merge pull request #924 from arnoldbechtoldt/useClusterIPsvc 
Make http01 solver serviceType configurable
 2018-10-10 13:42:11 +01:00
jetstack-bot
6751508b65
Merge pull request #915 from damienwebdev/master 
Cert Issuer Docs Update and additional docs for AzureDNS docs
 2018-10-10 13:13:12 +01:00
Arnold Bechtoldt
ce1dd5e8b5 update API docs 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-10-10 13:31:07 +02:00
Evan Anderson
ec49d971ae Follow suggestions by @munnerz, add docs about the bazel targets to run. 
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
 2018-10-09 06:32:53 -07:00
Arnold Bechtoldt
c533390185 completely rename setting name in generated docs too 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-10-08 15:30:51 +02:00
Arnold Bechtoldt
1587741820 rename setting and update docs regarding solver service type 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-10-08 15:24:17 +02:00
Arnold Bechtoldt
d261e1f3f1 make serviceType configurable, fixes #928 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-10-08 10:55:56 +02:00
Evan Anderson
063dcce978 Update links and add more documentation on needed tools for managing deps. 
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
 2018-10-08 00:09:44 -07:00
Evan Anderson
8ee8f407f8 Document the tools needed to perform a build. 
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
 2018-09-25 22:10:15 -07:00
Evan Anderson
aff8638711 Add instructions on generating documentation. 
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
 2018-09-25 22:10:15 -07:00
Evan Anderson
f67ecf5397 Clean up formatting on release process document. 
Signed-off-by: Evan Anderson <evan.k.anderson@gmail.com>
 2018-09-25 22:10:15 -07:00
James Munnelly
ef5190572c Fix issues with ingress-shim doc rendering and remove warning 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-09-19 15:37:28 +01:00
Damien Retzinger
930103fc94 Cert Issuer Docs Update and additional docs for AzureDNS docs 
Signed-off-by: Damien Retzinger <damienwebdev@gmail.com>
 2018-09-18 16:08:33 -04:00
Jamie Lennox
cb1f47fe25 Specify we want the disable-validation label not annotation 
All other documentation and charts around disable-validation refers to a
lablel that is required, except the upgrade notes which is where people
likely look first.

Signed-off-by: Jamie Lennox <jamie@vibrato.com.au>
 2018-09-14 10:56:46 +10:00
James Munnelly
c48018c1a1 run //hack:update-reference-docs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:25:04 +01:00
James Munnelly
5e16dd47ab Run brodocs using bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:25:03 +01:00
James Munnelly
38078cf5cd Commit openapi_generated.go 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:25:02 +01:00
James Munnelly
e7677f3656 Update update-codegen to run openapi-gen 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:24:53 +01:00
James Munnelly
db65d6a170 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:24:48 +01:00
jetstack-bot
7924346bd8
Merge pull request #887 from munnerz/release-process 
Add release process docs
 2018-09-12 10:24:48 +01:00
jetstack-bot
feb589feb5
Merge pull request #661 from splashx/master 
[ACME] Add RFC2136 DNS Provider (2nd attempt)
 2018-09-12 09:11:48 +01:00
jetstack-bot
b88c4ad72a
Merge pull request #856 from ankyra/master 
Documentation fix for `hostedZoneID` field
 2018-09-12 08:45:48 +01:00
Bart Spaans
6b20e47378 Documentation fix for hostedZoneID field 
Signed-off-by: Bart Spaans <bart.spaans@ankyra.io>
 2018-09-11 11:12:21 +01:00
splashx
51a8a57221
add tests for nameserver, tsigsecret and tsigname 
Signed-off-by: splashx <splash@gmail.com>
 2018-09-10 20:03:32 +02:00
James Munnelly
f218fbb8e3 Add release process docs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-10 18:52:24 +01:00
Max Ehrlich
89a1ca4c75
Update example with new array format for organizations 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-09-08 16:21:14 -04:00
Max Ehrlich
f9b4b04448
Rerun hack script generators 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-09-08 16:21:14 -04:00
Max Ehrlich
858f92d698
Regenerate docs and show setting organization in the CA example 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-09-08 16:21:13 -04:00
jetstack-bot
141f29864e
Merge pull request #876 from munnerz/kind-builds 
Use kind for e2e tests and add e2e testing documentation
 2018-09-07 23:20:47 +01:00
James Munnelly
2c3b70428d Add doc on running end to end tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-07 19:55:52 +01:00
Fulton Byrne
21aa7eed28
doc: add minimal ingress-shim example 
Signed-off-by: Fulton Byrne <fulton.byrne@commercetools.de>
 2018-09-07 09:33:51 -04:00
splashx
41111f7879
patch with rfc2136 
Signed-off-by: splashx <splash@gmail.com>
 2018-09-07 00:56:00 +02:00
James Munnelly
ae122766fb Regenerate reference docs 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-20 12:36:36 +01:00
James Munnelly
e77eacdcec Update upgrading docs 
Update docs

Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-20 12:36:35 +01:00
jetstack-bot
972f86704d
Merge pull request #787 from Queuecumber/master 
Add ACME-DNS as a DNS-01 Provider
 2018-08-17 13:33:57 +01:00
James Munnelly
5ea2c6843e Regenerate reference docs 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-14 10:32:50 +01:00
Max Ehrlich
eb92de2577
More in-depth example going with curl and the API directly 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:32:14 -04:00
Max Ehrlich
b1eadabf42
Change wording from "accounts" to "account" 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:32:14 -04:00
Max Ehrlich
9a0b1d8f56
Docs needed more updating 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:32:14 -04:00
Max Ehrlich
8f05340211
Should be double quotes 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:32:13 -04:00
Max Ehrlich
2da7fa7261
Add documentation for acme-dns 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:31:43 -04:00
Max Ehrlich
f7a42fb9fd
Add acme-dns issuer config to the issuer definition and update docs 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:30:33 -04:00
Max Ehrlich
9902845c82
Add acmedns constructor to dns interface 
Signed-off-by: Max Ehrlich <max.ehr@gmail.com>
 2018-08-13 13:30:33 -04:00
jetstack-bot
24293fddf3
Merge pull request #824 from munnerz/dco 
Add details on DCO sign-off
 2018-08-13 17:04:09 +01:00
James Munnelly
ce21b2a260 Add details on DCO sign-off 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-13 16:09:02 +01:00
James Munnelly
51195e4c5f Update license header and add header to every file 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-13 15:53:37 +01:00
jetstack-bot
494cad1e63
Merge pull request #802 from jetstack/munnerz-patch-3 
Update project statement in DNS01 examples
 2018-08-08 13:24:24 +01:00
jetstack-bot
9205c14bf6
Merge pull request #772 from kragniz/dns01-provider-docs 
Add documentation on creating DNS01 providers
 2018-08-08 13:10:12 +01:00
James Munnelly
07e6ffeb4e
Update project statement in DNS01 examples 2018-08-08 12:51:03 +01:00
James Munnelly
3e95b9410c Update generated files 2018-08-07 14:16:49 +01:00
Louis Taylor
86ce5a7823
Add extra guidelines 2018-07-27 12:53:46 +01:00
Louis Taylor
9b6be1c8db
Add documentation on creating DNS01 providers 2018-07-26 17:05:10 +01:00
James Munnelly
fcf812c654 Add OWNERS files to auto-label PRs. Mark apis directory as requiring a review by @munnerz. 2018-07-26 13:01:58 +01:00
Louis Taylor
99c1d4271f
Add note about http01 and wildcard certificates 
Fixes #757.
 2018-07-25 11:30:53 +01:00
leigh schrandt
39e071aa7a Document project field for Google CloudDNS provider 
👋
 2018-07-24 00:05:35 -07:00
jetstack-bot
840f9de7d9
Merge pull request #734 from timuthy/master 
Improve ACME DNS validation tutorial
 2018-07-19 10:25:41 +01:00
jetstack-bot
6348c6ffca
Merge pull request #722 from autonomic-ai/support-ec-keys 
Add keyAlgorithm and keySize fields to Certificates, and support ECDSA keys
 2018-07-18 10:00:36 +01:00
Afolabi Badmos
445e522432 Add support for EC keys 
- This PR adds two fields to CertificateSpec:
  - `keyAlgorithm`, denotes which algorithm to use when generating
    a private key. Can be either `rsa` or `ecdsa`. When not set, the
    default algorithm used `rsa`.
  - `keySize`, denotes the key size of the private key being generated.
    For `rsa`, minimum key size is 2048 and maximum is 8192.
    For `ecdsa`, sizes 224, 256, 384 & 521 are supported.
    See https://golang.org/pkg/crypto/elliptic

- `keySize` can be set without being explicit about `keyAlgorithm`.
  - If `keySize` is specified and `keyAlgorithm` is not provided, `rsa` will
    be used as the key algorithm.

- `keyAlgorithm` can be set without being explicit about `keySize`.
  - If `keyAlgorithm` is specified and `keySize` is not provided, key size
    key size of `256` will be used for `ecdsa` key algorithm and
    key size of `2048` will be used for `rsa` key algorithm.

- helper functions in `pki` package now return crypto.PrivateKey
 2018-07-17 12:42:07 -04:00
Tim Usner
fa6f1bde12
Fix broken link for SAN 2018-07-17 13:04:23 +02:00
Tim Usner
92cb56746d
Add *.example.com to SAN 
*.example.com is set as Common Name and thus part of SANs.
 2018-07-17 13:02:27 +02:00
James Munnelly
c8ad744392 Add link to selfsigned issuer docs 2018-07-12 18:17:40 +01:00
test@test.com
cb7eaf986f Run hack/update-reference-docs.sh 2018-07-11 16:02:23 +00:00
Vincent Desjardins
7fae0fccf1 code review fixes 2018-07-11 16:00:39 +00:00
Vincent Desjardins
2995cc90a3 Vault: configurable appRole authentication path 2018-07-11 16:00:39 +00:00
jetstack-bot
bd7f15d5f4
Merge pull request #710 from kragniz/dns-flag 
Add flag for setting nameservers for DNS01 check
 2018-07-11 14:26:33 +01:00
Louis Taylor
4653d456ec
docs: fix api version in issuer example resources 2018-07-06 16:07:55 +01:00
jetstack-bot
8c1e0c9fcd
Merge pull request #507 from madmod/patch-1 
Fix AWS DNS policy example
 2018-07-05 21:01:31 +01:00
James Munnelly
95000f1937 Run hack/update-reference-docs-dockerized.sh 2018-07-05 14:47:36 +01:00
James Munnelly
3fc5bf539f Include reference docs in sphinx site 2018-07-05 14:47:35 +01:00
James Munnelly
2014183a57 Add script for generating reference docs 2018-07-05 14:47:32 +01:00
Louis Taylor
ea6a5472e2
dns01-nameservers -> dns01-self-check-nameservers 2018-07-05 14:22:43 +01:00
Louis Taylor
d8f0419851
Add example to docs 2018-07-05 14:18:58 +01:00
Louis Taylor
c1ec835202
Add note to docs 2018-07-05 12:51:59 +01:00
Pieter Lange
04e7857519
Add doc on secret references for cluster issuers 2018-07-02 17:14:07 +02:00
John Wells
7ad604cdc7
Fix IAM policy warnings 2018-06-18 13:53:09 -06:00
James Munnelly
e40f515fd4 Address review feedback 2018-06-15 14:06:21 +01:00
James Munnelly
8b2ffbd2bc Add docs on selfsigned Issuer 2018-06-08 15:48:30 +01:00
JrCs
bafd0f2986 Vault issuer MUST USE the vault 'sign' endpoint 2018-06-06 13:24:15 +02:00
Mike Rostermund
a68b54ec3e Fix references to other documentation sections. 2018-06-02 10:31:51 +02:00
jetstack-bot
9405027a6f
Merge pull request #549 from munnerz/wc-docs 
Update acme dns01 tutorial with reference to wildcard domains
 2018-05-11 12:32:26 +01:00
James Munnelly
7aa7682d86 Add note about asterisk quoting issues 2018-05-09 17:18:57 +01:00
James Munnelly
4f30ed75e8 Update overview diagram 2018-05-09 17:10:41 +01:00
James Munnelly
4e85a9a36a Update acme dns01 tutorial with reference to wildcard domains 2018-05-09 17:06:23 +01:00
James Munnelly
956f44a59e Move docs into admin package 2018-05-09 16:22:22 +01:00
James Munnelly
929df3b293 Add document on upgrading from cert-manager 0.2 to 0.3 
Address review feedback

Fix code-blocks
 2018-05-09 16:22:18 +01:00
Vincent Desjardins
b35343786e Vault issuer support 
vault remove duration
 2018-05-02 00:45:55 +00:00
James Munnelly
e6416aa113 Update docs for new chart 2018-04-26 12:44:41 +01:00
jetstack-bot
b43f294a0a
Merge pull request #493 from munnerz/ingress-shim-class 
Allow ingressClass to be specified using ingress-shim
 2018-04-26 12:41:07 +01:00
Carlos Sanchez
88ae54b7be
Fix typo 2018-04-26 09:31:06 +02:00
John Wells
c4bb8d91b5
Fix AWS DNS policy example 
After testing the suggested policy both with the AWS policy simulator and by using it with cert-manager I have found that the ARN prefix in the resources included in the statement cause the provider to fail with an access denied error. This new policy is equivalent and valid according to the AWS policy simulator.
 2018-04-23 17:43:57 -06:00
Ben Bettridge
4260fc1336 Add support for annotation 'certmanager.k8s.io/ingress-class' to toggle the use of ingressClass: <value> 
Add annotation to the ingress-shim documentation

Remove debug output.

Update documentation errors.

Implement suggestions of using edit-in-place annotation to control behaviour.

Fix reference to editInPlaceAnnotation

Remove the presence of editInPlaceAnnotation from returning true to shouldSync() and relevant test.

Update comment reference to correct annotation name.

Remove tests that relied on annotation impacting result from shouldSync()

Only edit in-place when explicitly requested to do so.

Don't return error if unable to determine Ingress class, continue without setting either ingress or ingressClass.

Update annotation to certmanager.k8s.io/acme-http01-edit-in-place in order to make use case more obvious and have consistent naming.

Update docs to reflect possible values more accurately
 2018-04-19 10:26:01 +01:00
James Munnelly
18409091d1 Fix deployment guide link. Fix inline code block. 2018-04-15 12:11:16 +01:00
James Munnelly
1390cf431a
Fix broken link 2018-04-15 12:00:19 +01:00
James Munnelly
0caf0bff73 Update some docs examples for acmev2 2018-04-13 10:39:54 +01:00
James Munnelly
d5c89aec28 String replace ACMEv1 endpoints with v2 in docs 2018-04-12 19:10:10 +01:00