weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
3,065 Commits 45 Branches 0 Tags 96 MiB
625f4dfd24
Commit Graph

118 Commits

Author SHA1 Message Date
JoshVanL
9ffaae5bfd Adds review comments 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 14:01:19 +01:00
JoshVanL
5f25ffadd8 Increase scope of vault addon tokenreview permissions to cluster 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL
f6e1964b93 Set role name correctly for vault addon with Kube Auth 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL
f2f5fccb85 Addresses comments and makes vault auth pointers 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
Adam Kunicki
7058dfc687 Added Kubernetes authentication type for Vault Issuer 
Signed-off-by: Adam Kunicki <adam@streamsets.com>
 2019-09-23 13:33:29 +01:00
James Munnelly
f2f3aee50d Update codebase for new API group 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-23 12:06:13 +01:00
James Munnelly
bf9fbea23f Update codebase for new meta apigroup 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 19:25:04 +01:00
James Munnelly
eda613e6f0 Revert API version change in samplewebhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 17:26:55 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 16:22:43 +01:00
JoshVanL
6a362c67b0 Move e2e output logs with suffixes 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-12 15:59:54 +01:00
JoshVanL
3455747723 Include previous logs and use all containers from pods 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-11 22:02:10 +01:00
James Munnelly
c4e00311ba Set certificate name annotation in certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-03 11:20:51 +01:00
stuart.warren
7eb1e34e48 feat: enable certificate keyusages 
Enable users to request x509 key usages and extended key usages when
defining a certificate or certificate signing request

fixes: #301

Signed-off-by: stuart.warren <stuart.warren@ocado.com>
 2019-08-31 01:00:00 +01:00
JoshVanL
277dc7ab17 Adds CertificateRequest to condition matcher in e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-15 17:18:11 +01:00
James Munnelly
5bd0a37686 Update Deployment manifests to use apps/v1 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-22 13:40:13 +01:00
jetstack-bot
458c7193d4
Merge pull request #1861 from munnerz/e2e-logging 
Fix fetching logs in e2e test framework
 2019-07-08 14:11:46 +01:00
James Munnelly
20e6a08a87 Fix fetching logs in e2e test framework 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-08 12:52:07 +01:00
JoshVanL
f9417da5c5 Fixes and adds tests to utils/Equal.. funcs 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-04 15:21:00 +01:00
JoshVanL
22ba831acb Fixed some e2e test condition logic 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-04 13:19:14 +01:00
JoshVanL
98d5725eea WIP, add CertificateRequest e2e tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-03 15:59:05 +01:00
jetstack-bot
be95598d20
Merge pull request #1505 from DirectXMan12/feature/certs-in-conv-webhook 
Add support for CRDs to the CA injector
 2019-07-03 12:27:31 +01:00
James Munnelly
de34f0410d Use binary image targets to avoid building multiple architectures all the time 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 17:29:32 +01:00
Solly Ross
8155ed71b5 Expand/generalize CA injector tests 
This expands/generalizes the CA injector tests to all object types that
the CA injector supports.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-06-19 16:09:31 -07:00
James Munnelly
bfcac2b257 Fix loggableAddon interface in test framework 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-18 13:48:10 +01:00
jetstack-bot
fe00f40a34
Merge pull request #1648 from munnerz/post-as-get 
Add support for ACMEv2 POST-as-GET
 2019-06-05 19:48:39 +01:00
jetstack-bot
1c10f34089
Merge pull request #1663 from munnerz/distroless 
Switch to gcr.io/distroless/static base image
 2019-06-05 11:48:39 +01:00
jetstack-bot
57e52689d5
Merge pull request #1683 from unicell/fix-license 
Correct test/e2e/framework/cleanup.go license header
 2019-05-24 02:22:32 +01:00
Michael Tsang
21eae84ce4 Add chart version to helm install when running tests 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-22 14:40:12 +01:00
Qiu Yu
f75bbd309a Correct test/e2e/framework/cleanup.go license header 
The license header got overwritten as part of this commit 51195e4c

This change rolls it back with additional directive to skip license
check in favor of hack/verify_boilerplate.py

Signed-off-by: Qiu Yu <unicell@gmail.com>
 2019-05-15 15:47:03 -07:00
James Munnelly
fbf788d41f Switch to gcr.io/distroless/static base image 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-10 12:01:53 +01:00
James Munnelly
f672720ce4 Add Pebble 'strict' mode support in e2e test suite 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-07 15:26:29 +01:00
James Munnelly
d4e89431ad Add missing license header 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
d46fbf72ce Fix issues with samplewebhook addon 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
75904ecd7a Fix typo in e2e test helm chart webhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
ac61e7a9e4 Add example-webhook test DNS webhook solver addon 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
43966db52e Improve describe output when WaitCertificateIssuedValidTLS fails 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:36:18 +01:00
James Munnelly
3948175427 Fix e2e test addon deprovisioning order 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:36:18 +01:00
James Munnelly
41970407c6 Expose ginkgo.focus and skip-globals flags in e2e_test 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:36:18 +01:00
James Munnelly
d282c5f2aa Run update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
420ebfebe2 Use goflag instead of pflag for logs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
5d73076db9 Update logs package for go-logr 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
7a20d32ebd Add Venafi e2e suite 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:16:03 +00:00
jetstack-bot
c07bfd7181
Merge pull request #1419 from DanielMorsing/enable_httpstest 
Enable https redirect test
 2019-02-28 15:05:11 +00:00
Daniel Morsing
f4b132c8c6 enabled https redirect test 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-28 12:25:03 +00:00
Daniel Morsing
e1cee57b32 update dependencies for test 
We use the latest pebble release without the strict mode flag enabled

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-28 12:24:24 +00:00
jetstack-bot
ccd2dd8533
Merge pull request #1398 from DirectXMan12/feature/ca-controllers 
Add a CA Injector Controller
 2019-02-27 14:59:44 +00:00
Solly Ross
42248a91d7 CA Injector Controller 
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-02-26 21:47:34 -08:00
Daniel Morsing
2d21983486 Implement test for HTTP->HTTPS redirects during ACME HTTP01 challenges (#1303) 
* Add test for http->https redirects

This makes sure that when we're handling http->https redirects like
letsencrypt/boulder would for acme HTTP-01 validations

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* add initial TLS cert in hopes that this will make the TLS redirect work

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* make nginx-ingress not cheat on redirects

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* skip test until nginx-ingress is fixed

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* run bazel update

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* gofmt

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* reenable no-tls-redirects

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-25 15:01:19 +00:00
James Munnelly
b9a0c51933 Don't return errors if retrieving pod logs fails 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 17:11:10 +00:00
James Munnelly
1f48f3d1d4 gofmt 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:56 +00:00