weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
8,470 Commits 45 Branches 0 Tags 96 MiB
75d1449903
Commit Graph

920 Commits

Author SHA1 Message Date
cloudwiz
75d1449903
move audiences under the SA ref 
Signed-off-by: cloudwiz <andrey.dubnik@maersk.com>
 2024-02-08 14:07:03 +00:00
Tim Ramlot
04220447bc
remove deprecated files and functions 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-08 10:45:06 +01:00
Tim Ramlot
2d15bb55ce
add comments that explain the empty value trick 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-07 18:12:27 +01:00
Tim Ramlot
2b14b3234d
fix the Helm trick that we use to differentiate between 0 and an empty value 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-07 12:54:41 +01:00
cloudwiz
624f874d69
updated spelling and generated CRDs 
Signed-off-by: cloudwiz <andrey.dubnik@maersk.com>
 2024-02-06 15:06:31 +00:00
cloudwiz
9cf9cb7ea5
Vault extra audiences (#3) 
---------

Signed-off-by: cloudwiz <andrey.dubnik@maersk.com>
 2024-02-06 10:06:17 +00:00
Ashley Davis
494c4320d5
bump helm-tool to latest version and regenerate docs 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-02-01 15:51:05 +00:00
Ashley Davis
8c1369726a
add CI check for updated helm docs 
also updates helm docs!

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-02-01 15:37:19 +00:00
Tim Ramlot
0a79f2eb0d
Update deploy/charts/cert-manager/values.yaml 
Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-01 14:11:21 +01:00
Tim Ramlot
4659b33b00
fix backwards incompatible change: include a prometheus service by default 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-01 13:10:29 +01:00
Ashley Davis
86b1282e9b
run update-helm-docs to fix Helm README 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-02-01 09:57:59 +00:00
Tim Ramlot
cdba8a7025
clearify prometheus options and fix error in Helm chart 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-01 10:16:53 +01:00
Ashley Davis
a9ba9d8912
Fix mistakenly changed cainjector image value 
See https://github.com/cert-manager/cert-manager/pull/6639

This was discovered during the release of cert-manager v1.14.0. See the
summary on Slack:

https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1706723744656039?thread_ts=1706713005.073879&cid=CDEQJ0Q8M

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-01-31 17:56:55 +00:00
Tim Ramlot
2bef9d35b6
remove remaining references to cmctl, which was moved to https://github.com/cert-manager/cmctl 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-30 14:56:05 +01:00
Adam Talbot
2be04a82a5 docs: fix mistakes and typos in values.yaml 
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-22 13:54:28 +00:00
Adam Talbot
cdd785255c docs: update chart values.yaml and README file 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
Co-authored-by: Michael McLoughlin <michael.mcloughlin@venafi.com>
 2024-01-22 13:00:08 +00:00
Adam Talbot
a362c742c5 docs: dont wrap reference urls in code blocks 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-16 08:38:15 +00:00
Adam Talbot
e8987bc6b8 fix: remove trailing spaces from values.yaml to fix yamllint 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-15 10:30:28 +00:00
Adam Talbot
af4685c595 feat: update chart README using autogenerated docs 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-15 10:25:23 +00:00
Adam Talbot
486bfa15b2 feat: update values.yaml to have doc-comments above all values 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-15 09:41:26 +00:00
Jan-Otto Kröpke
7fdea152eb
[helm] Move cert-manager.io/disable-validation to values 
Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
 2024-01-13 16:21:49 +01:00
Jan-Otto Kröpke
64909f5688
[helm] Support custom spec.namespaceSelector for webhooks 
Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
 2024-01-13 10:41:13 +01:00
Tim Ramlot
67f8a03cae
update AzureDNS auth API comments 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-12 12:07:02 +01:00
jetstack-bot
44daf2ea8b
Merge pull request #6248 from tberreis/master 
feat: allow changing the default Deployment revisionHistoryLimit
 2024-01-10 15:48:17 +00:00
jetstack-bot
a1c134e78c
Merge pull request #6574 from ThatsMrTalbot/tls-metrics-endpoint 
feat: add tls to metrics endpoint
 2024-01-10 14:48:17 +00:00
Tim Ramlot
9bb4c3e075
move revisionHistoryLimit to globals & supprot revisionHistoryLimit=0 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-04 09:45:29 +01:00
Thomas Berreis
e1fe377dcb
feat: allow changing the default revisionHistoryLimit 
Signed-off-by: Thomas Berreis <thomas@berreis.de>
 2024-01-04 09:45:29 +01:00
Tim Ramlot
9e2c6ae08a
run 'make update-crds' 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-03 16:18:35 +01:00
Tim Ramlot
41404a7fd7
rename UseCertificateRequestNameConstraints to NameConstraints 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-03 15:49:18 +01:00
jetstack-bot
cc8925ae9f
Merge pull request #6404 from SpectralHiss/hef/otherNameSANs 
Other name sans support in Certificates
 2024-01-03 14:16:23 +00:00
jetstack-bot
4af78fe98a
Merge pull request #6548 from snorwin/modern-pkcs12 
New option to specify encryption and MAC algorithms for PKCS#12 keystores.
 2024-01-03 12:54:22 +00:00
Tim Ramlot
8223df9e91
rename Algorithms to Profile 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-03 13:45:02 +01:00
jetstack-bot
9b90f50be8
Merge pull request #6549 from SgtCoDFish/standalone-apicheck 
Add separate startupapicheck binary
 2024-01-03 11:12:22 +00:00
Tim Ramlot
646a0698b6
undo docs change 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-03 10:56:18 +01:00
Tim Ramlot
2882d4a0c7
make fix more general (eg. support levels > 5) 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-03 10:52:59 +01:00
ChrisDevo
449fb81595
Fix comment about allowed logLevel values (see: pkg/logs/logs.go#L44-49) 
Signed-off-by: ChrisDevo <chris.devine@berkeley.edu>
 2024-01-03 10:39:02 +01:00
ChrisDevo
519197b511
Improve parsing of helm global.logLevel (only accept integers 0-5, inclusive) 
Signed-off-by: ChrisDevo <chris.devine@berkeley.edu>
 2024-01-03 10:39:02 +01:00
Ashley Davis
b3b14fda41
add separate startupapicheck binary 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-01-02 17:17:50 +00:00
Adam Talbot
2897f787cb feat: add example for setting up TLS on metrics endpoint via the helm chart 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-02 13:38:09 +00:00
dylanhitt
751ca52626 docs: declare updated kube version in artifact hub doc 
Signed-off-by: Dylan Hitt <dylan.hitt1@gmail.com>
 2023-12-28 22:44:46 -05:00
Tim Ramlot
24794feac0
update API comments 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-12-20 11:26:52 +01:00
SpectralHiss
e7f29f8bb3 UTF8Value -> utf8Value in CRD JSON schema 
* Still following Go standard with UTF8Value for struct field name

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2023-12-20 08:30:54 +00:00
SpectralHiss
c87a2f6691 Add early feedback validation for otherName syntax and tests 
* Fixed warning

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2023-12-19 20:02:02 +00:00
Adam Talbot
247a034116 feat: update gateway api to v1 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2023-12-18 21:00:42 +00:00
Norwin Schnyder
ebf58b9967 apply PR feedback 
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
 2023-12-15 10:52:57 +01:00
SpectralHiss
4bdee5f010 Rename otherNameSANs to otherNames 
* Improve the CRD godoc comments

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2023-12-13 16:21:56 +00:00
Norwin Schnyder
b8ad8a3704 apply PR feedback 
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
 2023-12-13 12:00:39 +00:00
Tim Ramlot
721f71ed60 Refactor the solution 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-12-13 09:37:21 +00:00
Tim Ramlot
bfd9a65160 Add OtherNameSANs field to Certificates 
* Added an otherName SAN extension mechanism
* Can take any otherName OID with String (UTF-8) like value
* cf [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) p 37 for
  more info
* otherName is only a subset of GeneralName, our specific need for for
  UserPrincipalName used in Microsoft AD/ LDAP
* We treat UPN special but we might remove this in a later commit

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2023-12-13 09:12:23 +00:00
Norwin Schnyder
b79e73f484 fix controller-gen errors 
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
 2023-12-12 18:25:15 +01:00