weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,476 Commits 45 Branches 0 Tags 96 MiB
5be660ec9e
Commit Graph

83 Commits

Author SHA1 Message Date
Cosmin Cojocar
5be660ec9e Fix typo in filed name 
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
 2018-10-28 20:08:48 +01:00
Cosmin Cojocar
5d36fba075 Add a flag which controls whether the certificate is configured as an owner of the secret where the effective TLS certificate is stored 
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
 2018-10-28 19:55:26 +01:00
Benjamin Staffin
e7e2f28584 webhook: Fix "logging before flag.Parse" errors 
Fixes #932

Signed-off-by: Benjamin Staffin <benley@gmail.com>
 2018-10-22 20:46:44 -04:00
James Munnelly
b6f854f849 Remove pkg/logs package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-18 13:27:05 +01:00
James Munnelly
039a086f58 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:40 +01:00
James Munnelly
967a48e1dc Add ACME Order & Challenge controllers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
Arnold Bechtoldt
845eb7f57c make http01 solver pod resource request/limits configurable, refs #892 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-09-26 14:39:06 +02:00
James Munnelly
64f02f6004 Add docker image building rules 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:24:52 +01:00
James Munnelly
db65d6a170 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:24:48 +01:00
James Munnelly
91bec0909c Add validation webhook 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-20 12:34:05 +01:00
James Munnelly
51195e4c5f Update license header and add header to every file 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-13 15:53:37 +01:00
jetstack-bot
c43e4d75f8
Merge pull request #801 from munnerz/renew-duration 
Add RenewBeforeExpiryDuration option to controller context
 2018-08-08 14:34:56 +01:00
James Munnelly
fa0bc9998e Add RenewBeforeDuration option to controller context 2018-08-08 13:34:30 +01:00
James Munnelly
12ab53b948
Update options.go 2018-08-08 13:28:37 +01:00
James Munnelly
d63ba1257d Change leader election duration defaults to be less chatty 2018-08-08 00:54:26 +01:00
James Munnelly
9dc20d3c35 Remove dedicated issuer context and move issuer registration into controller pkg 2018-08-07 16:13:46 +01:00
Louis Taylor
58d71216c3
Change flag to list of controllers to enable 2018-07-12 10:27:49 +01:00
Louis Taylor
fd48a2e360
Add option for disabling ingress-shim 
This adds a new flag, which can be used to disable running the
ingress-shim controller:

     --enable-ingress-shim=false
 2018-07-12 10:27:05 +01:00
jetstack-bot
bd7f15d5f4
Merge pull request #710 from kragniz/dns-flag 
Add flag for setting nameservers for DNS01 check
 2018-07-11 14:26:33 +01:00
Louis Taylor
3815b36193
Add git tag and commit to startup logs 2018-07-06 17:27:59 +01:00
Louis Taylor
e35a09bd72
Add validation 2018-07-05 14:47:41 +01:00
Louis Taylor
4804086fdf
Add example to usage 2018-07-05 14:37:32 +01:00
Louis Taylor
14873c248a
Use StringSlice 2018-07-05 14:37:08 +01:00
Louis Taylor
ea6a5472e2
dns01-nameservers -> dns01-self-check-nameservers 2018-07-05 14:22:43 +01:00
Louis Taylor
3eaca6a318
Add flag for custom dns01 nameservers 2018-07-05 12:40:53 +01:00
James Munnelly
6cfdc62f6b Add self signed Issuer type 2018-06-08 15:48:30 +01:00
Vincent Desjardins
b35343786e Vault issuer support 
vault remove duration
 2018-05-02 00:45:55 +00:00
James Munnelly
fdb8f2bf40 Link ingress-shim into main controller binary 2018-04-26 12:44:40 +01:00
James Munnelly
464cde00bf Fix case where no ingress class is set. Add test case to verify. 2018-04-19 11:50:34 +01:00
James Munnelly
4b072e2ba3 Update unit tests for edit-in-place annotation. 2018-04-19 10:29:21 +01:00
Ben Bettridge
4260fc1336 Add support for annotation 'certmanager.k8s.io/ingress-class' to toggle the use of ingressClass: <value> 
Add annotation to the ingress-shim documentation

Remove debug output.

Update documentation errors.

Implement suggestions of using edit-in-place annotation to control behaviour.

Fix reference to editInPlaceAnnotation

Remove the presence of editInPlaceAnnotation from returning true to shouldSync() and relevant test.

Update comment reference to correct annotation name.

Remove tests that relied on annotation impacting result from shouldSync()

Only edit in-place when explicitly requested to do so.

Don't return error if unable to determine Ingress class, continue without setting either ingress or ingressClass.

Update annotation to certmanager.k8s.io/acme-http01-edit-in-place in order to make use case more obvious and have consistent naming.

Update docs to reflect possible values more accurately
 2018-04-19 10:26:01 +01:00
James Munnelly
83a4196aff Update event recorder agent name 2018-04-09 21:43:37 +01:00
James Munnelly
676d2f3ea6 Fix e2e test framework and ingress-shim unit tests 2018-04-09 18:33:23 +01:00
Louis Taylor
4dd1d02e90
Remove defaultNamespace 2018-04-06 17:45:20 +01:00
Louis Taylor
0961e24174
Remove namespace from more places 2018-04-06 11:20:24 +01:00
Louis Taylor
1dece103d3
ingress-shim: FilteredSharedInformer -> SharedInformer 2018-04-06 10:25:26 +01:00
Louis Taylor
3733bf2b74
controller: FilteredSharedInformer -> SharedInformer 2018-04-06 10:24:10 +01:00
Louis Taylor
783d8b6a89
Remove ingress-shim --namespace option 2018-04-05 14:44:47 +01:00
Louis Taylor
f43b926570
Remove controller --namespace option 2018-04-05 14:32:29 +01:00
Euan Kemp
0fb787eae7 controller: add ambient issuer flags and feature 
This implements ambient credential support for AWS, gated behind flags
for issuers and cluster issuers.

This adds the pair of flags discussed in
https://github.com/jetstack/cert-manager/issues/308.

It provides an implementation for those flag's effects for the route53
solver.
 2018-03-23 14:30:43 -07:00
Louis Taylor
1690408632
crtEqual -> certNeedsUpdate 2018-03-12 18:40:56 +00:00
Louis Taylor
7bb9048578
Add update testcase 2018-03-12 18:36:39 +00:00
Louis Taylor
d7153ecc1e
Test updates 2018-03-12 18:36:21 +00:00
Louis Taylor
6eb1c6f931
Split Expected into ExpectedCreate and ExpectedUpdate 2018-03-12 17:44:53 +00:00
Louis Taylor
2e5619b1d5
Replace reflect.DeepEqual with crtEqual 2018-03-12 14:00:16 +00:00
Louis Taylor
801888f0f0
Reconfigure certs when ingress config changes 2018-03-08 21:08:22 +00:00
jetstack-ci-bot
721a4042cd
Merge pull request #327 from ocadotechnology/wip-293 
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

fix: Use ConfigMaps for leaderelection

**What this PR does / why we need it**:
Use ConfigMaps for leader election. Improves scalability by not modifying Endpoints, which are watched by kube-proxy.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #293

**Special notes for your reviewer**:

**Release note**:

```release-note
action required: Before upgrading, scale the cert-manager Deployment to 0, to avoid two controllers attempting to operate on the same resources
```
 2018-02-21 18:22:27 +00:00
Mike Bryant
0274964100 fix: Use ConfigMaps for leaderelection 
Fixes #293
 2018-02-21 17:48:13 +00:00
Will Medlar
86ab9a9794 Add test cases for falsey tls-acme annotation values 2018-02-21 11:00:21 -06:00
Will Medlar
a709f0ad42 Check the value of the tls-acme annotation, not just its existence 2018-02-21 10:43:30 -06:00