weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
7,450 Commits 45 Branches 0 Tags 96 MiB
78018402fe
Commit Graph

239 Commits

Author SHA1 Message Date
Ashley Davis
78018402fe
bump base images to latest 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-01-27 15:15:09 +00:00
jetstack-bot
a6e00a8623
Merge pull request #5711 from lucacome/bump-deps 
Bump dependencies
 2023-01-17 11:51:00 +00:00
Jan-Otto Kröpke
b952058775
[helm] expose enable-certificate-owner-ref and -dns01-recursive-nameservers as helm value 
Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
 2023-01-14 15:16:16 +01:00
Luca Comellini
98ce5936ec
Update Helm and Kubebuilder 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2023-01-13 09:55:41 -08:00
Luca Comellini
85ca8e0444
Bump dependencies 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2023-01-13 09:55:27 -08:00
Ashley Davis
5f910ceba1
bump base images to latest 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-01-13 10:39:18 +00:00
yanggang
44e8f9cb69
Bump go to 1.19.5 
Signed-off-by: yanggang <gang.yang@daocloud.io>
 2023-01-11 13:59:37 +08:00
jetstack-bot
a5d67d3a21
Merge pull request #5688 from SgtCoDFish/bumpbase 
bump base images to latest
 2023-01-04 16:09:01 +00:00
Ashley Davis
6d1a65c771
bump base images to latest 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-01-04 15:34:15 +00:00
jetstack-bot
094b4c763e
Merge pull request #5662 from lucacome/bump-controller-tools 
Bump sigs.k8s.io deps
 2023-01-04 14:02:00 +00:00
jetstack-bot
ffcd374e14
Merge pull request #5685 from wallrj/make-ko-deploy-certmanager-with-helm-values 
Allow custom helm values files to be supplied to make ko-deploy-certmanager
 2023-01-04 10:54:00 +00:00
jetstack-bot
e473c89490
Merge pull request #5684 from wallrj/remove-duplicate-ko-make-targets 
Remove duplicate ko-deploy-cert-manager make target
 2023-01-04 09:31:11 +00:00
Richard Wall
33ba0f3ae7 Allow custom helm values files to be supplied to make ko-deploy-certmanager 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2023-01-03 17:23:58 +00:00
Richard Wall
67297a1b80 Remove trailing escape slash 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2023-01-03 16:51:31 +00:00
Ashley Davis
f8bee19c04
various ginkgo tweaks 
1. Remove deprecated args (progress, slow spec threshold)
2. Disable colors in CI

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-01-03 16:47:56 +00:00
Richard Wall
5f1a4ac91c Remove duplicate ko-deploy-cert-manager make target 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2023-01-03 16:44:42 +00:00
jetstack-bot
2a7fabd5ca
Merge pull request #5554 from camptocamp/helm-add-acme-http01-solver-image-override-option 
helm: add option to override ACME HTTP-01 solver image
 2022-12-22 10:10:13 +00:00
Yann Soubeyrand
ea0bea9db0 helm: add option to override ACME HTTP-01 solver image 
Signed-off-by: Yann Soubeyrand <yann.soubeyrand@camptocamp.com>
 2022-12-21 19:48:11 +01:00
Luca Comellini
dbd6dc9b16
Bump sigs.k8s.io deps 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-12-21 09:47:41 -08:00
jetstack-bot
9a68a86ac6
Merge pull request #5655 from wallrj/images-push 
Experimental make targets for pushing images to a Docker registry and redeploying cert-manager
 2022-12-21 13:12:56 +00:00
Richard Wall
755fec1170 Add some experimental ko based build and deploy tools 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2022-12-21 12:12:09 +00:00
jetstack-bot
a7671cf205
Merge pull request #5659 from SgtCoDFish/bumpbase 
Update base images to latest
 2022-12-21 10:25:36 +00:00
Ashley Davis
a08cf19aa7
update base images to latest 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-20 17:21:01 +00:00
Ashley Davis
31a3edf031
Bump version of contour helm chart + images 
Also adds a note about how to update the helm chart version, in the
future

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-20 16:05:40 +00:00
Richard Wall
2eef0dad06 Add ko tool 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2022-12-20 15:38:19 +00:00
jetstack-bot
501f4928ea
Merge pull request #5646 from SgtCoDFish/k8s1.26 
Enable + use k8s 1.26 for e2e tests by default
 2022-12-16 17:57:00 +00:00
Ashley Davis
1e419a468f
Enable + use k8s 1.26 for e2e tests by default 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-16 17:06:18 +00:00
jetstack-bot
6806035cb7
Merge pull request #5637 from RomanenkoDenys/fix-kubebuilder-sha 
fix kubebuilder tools arm64 sha256sum
 2022-12-15 11:46:21 +00:00
Tim Ramlot
8baaffc02b
kubebuilder did not yet create a 1.26 release 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-12-14 21:53:42 -08:00
Luca Comellini
c99c147059
Bump k8s.io deps to v0.26.0 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2022-12-14 21:53:42 -08:00
jetstack-bot
a1391d6995
Merge pull request #5604 from maelvls/upgrade-vault-in-e2e 
End-to-end tests: use Vault 1.12.1 instead of the outdated Vault 1.2.3
 2022-12-13 14:50:30 +00:00
Denis Romanenko
d62bf032f5 fix kubebuilder tools arm64 sha256sum 
Signed-off-by: Denis Romanenko <denis.romanenko@flant.com>
 2022-12-13 09:41:29 +03:00
jetstack-bot
2f24231383
Merge pull request #5618 from SgtCoDFish/no-licenses-ci-presubmit 
Remove verify-licenses from ci-presubmit
 2022-12-07 11:25:20 +00:00
Ashley Davis
22f3a6152d
bump go to 1.19.4 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-07 10:10:35 +00:00
Ashley Davis
79bd127d3b
remove verify-licenses from ci-presubmit 
see https://github.com/cert-manager/release/pull/111

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-12-06 16:40:20 +00:00
irbekrm
c60a181baf Gateway and GatewayClass for tests are created against beta Gateway API 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:05:47 +00:00
irbekrm
9709833bb6 Removes unused check 
current cert-manager version no longer supports Kubernetes 1.19

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
irbekrm
75e2d1145a Updates Gateway API test dependency 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
irbekrm
608c3a1df0 Bumps Contour Helm chart version 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
irbekrm
bc70233256 Tests download Gateway installation bundle 
Rather than whole gateway git repo

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-12-05 15:04:18 +00:00
Maël Valais
f4f72c16e6 e2e: use Vault 1.12.1 instead of the outdated 1.2.3 
The main reason for bumping Vault's version is because 1.2.3 is not
compatible with the config parameter `disable_iss_validation`, which is
needed for accommodating the future tests [1] that rely on bound tokens
and static tokens.

For context, Vault 1.2.3 was released on Sep 9, 2019 [2] but
`disable_iss_validation` was only added on July 21st, 2020 in Vault
1.5.0.

Due to a breaking change that happened in Vault 1.5.0 [3] in which Vault
started loading the pod's token instead of using the same token (to be
reviewed) for authenticating. An alternative solution could have been to
prevent the service account from being mounted to the pod, but I figured
that having the two service accounts separated is a better practice.

[1]: https://github.com/cert-manager/cert-manager/pull/5502
[2]: https://github.com/hashicorp/vault/commit/c14bd9a2
[3]: https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#150

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-12-02 16:36:16 +01:00
Ashley Davis
4d12251fa7
Use distinct manifest dirs for signed / unsigned manifests 
This avoids a race condition with the `release-manifests` and
`release-manifests-signed` targets.

When running in parallel, one could execute `rm -rf
$(BINDIR)/scratch/manifests` while the other was running.

This could also conceivably have led to incorrectly packaged
manifests when both were run in parallel.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-29 16:14:59 +00:00
Houssem El Fekih
c7952fd054 e2e test confirming LDAP rdn literalsubject in generated certificate 
* Enabled feature flag for literalsubject in e2e test runner
* Added "happy path" test

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2022-11-28 21:56:00 +00:00
Ashley Davis
d2aab5f0d3
enable basicConstraints feature in e2e environments by default 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-10 13:47:30 +00:00
Ashley Davis
96e500f189
bump to latest go minor version to fix vulns 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-07 11:11:11 +00:00
Ashley Davis
cdcfd552ff
add make target for updating base images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-04 16:31:20 +00:00
Ashley Davis
40b4bd8b68
bump base / kind images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-11-04 16:28:51 +00:00
Ashley Davis
13c3507d1a
remove devel folder 
In #5473 we saw a user being confused by devel's continued existance.
No bazel stuff will work any more and there's value in having just one
place where our e2e setup scripts are located, and that's now in `make`.

It was considered that we might keep some of these scripts but
converting them to call make commands, but that might be a lot of work
for minimal reward.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-10-22 18:47:33 -04:00
Ashley Davis
21b9b65dd6
update base and kind images 
involves running:

- `./hack/latest-kind-images.sh` and
- `./hack/latest-base-images.sh`

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-10-21 13:10:42 +01:00
irbekrm
d01dd96b47 Updates base images 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-10-07 14:42:57 +01:00