weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
2,546 Commits 45 Branches 0 Tags 96 MiB
7cead3d9e6
Commit Graph

342 Commits

Author SHA1 Message Date
jetstack-bot
7cead3d9e6
Merge pull request #1806 from munnerz/acme-selector-unit-tests 
Add support for dnsZones in ACME solver selectors & rewrite selection logic
 2019-07-04 11:08:37 +01:00
jetstack-bot
30d6664dc6
Merge pull request #1849 from munnerz/namespaced-factories 
Respect --namespace flag in rfc2136 provider
 2019-07-04 10:10:38 +01:00
James Munnelly
5f5811b81e Respect --namespace flag in rfc2136 provider 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-03 13:52:43 +01:00
jetstack-bot
1a014dde5e
Merge pull request #1764 from dreamteam-gg/allow-disabling-tmp-crt 
Allow disabling issuing temporary certificates
 2019-07-03 12:27:39 +01:00
jetstack-bot
be95598d20
Merge pull request #1505 from DirectXMan12/feature/certs-in-conv-webhook 
Add support for CRDs to the CA injector
 2019-07-03 12:27:31 +01:00
Artem Yarmoluk
9197acfefe
Allow disabling issuing temporary certificates 
Signed-off-by: Artem Yarmoluk <koolgen@gmail.com>
 2019-06-30 21:57:57 +03:00
James Munnelly
c9bcfc2b62 Refactor label selector checker 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-25 16:52:15 +02:00
James Munnelly
cf8c12c5ea Add unit tests for dnsZone selectors 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-25 15:18:30 +02:00
James Munnelly
e8c64e46cc Add support for dnsZones in solver selector 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-25 15:18:30 +02:00
James Munnelly
77d9891650 Rewrite challengeSpecForAuthorization function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-25 15:18:30 +02:00
James Munnelly
fc24b9afc9 Add unit tests for challengeSpecForAuthorization function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-25 15:17:17 +02:00
James Munnelly
20b1343c88 Remove use of klog from more places 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-25 14:30:41 +02:00
James Munnelly
f8a798bd2b update bazel files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-19 15:33:57 +01:00
James Munnelly
442789113a Refactor controllers to not reference BaseController 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-06-19 15:11:06 +01:00
jetstack-bot
8fa533c30c
Merge pull request #1681 from cheukwing/issue-1332 
Clean up Prometheus metrics for deleted Certificates
 2019-06-18 14:38:04 +01:00
jetstack-bot
f3bc4fad79
Merge pull request #1705 from cheukwing/issue-912 
Add the removal of unrequired certificates
 2019-06-18 12:01:04 +01:00
jetstack-bot
043a88cdd8
Merge pull request #1689 from cheukwing/issue-1558 
Validate that only one Certificate is using a secretName per namespace
 2019-06-17 20:21:57 +01:00
jetstack-bot
48cd58b23f
Merge pull request #1722 from cheukwing/issue-1003 
Add BaseController as a refactoring of common controller code
 2019-06-17 19:27:57 +01:00
Michael Tsang
9934593714 Add test and documentation regarding clockskew on notBefore 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-17 12:53:48 +01:00
Solly Ross
dc613f5dc3 [CA Injector] Don't requeue on deletes 
We need to silently ignore non-found on the initial get, otherwise we'll
requeue on deletes.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-06-13 13:31:42 -07:00
Solly Ross
95ac5a498c Add support for CRDs to the CA injector 
This adds support for the CRD conversion webhook configuration to the CA
injector controller.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-06-13 13:31:42 -07:00
Michael Tsang
202d72c8c6 Add todo on certificate selector 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-07 10:01:06 +01:00
Michael Tsang
9b8e72aa6e Add test for deletion of unrequired certificates 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-07 10:01:06 +01:00
Michael Tsang
82f658e078 Implement removal of unrequired certificates 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-07 09:29:15 +01:00
jetstack-bot
0a7a181808
Merge pull request #1670 from cheukwing/issue-1520 
Ensure only the sole owner of a certificate can modify it
 2019-06-06 21:09:03 +01:00
Michael Tsang
ed024dd0d1 Use metanamespace for key, remove exports, use reference to activecertificates 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-06 17:59:51 +01:00
Michael Tsang
7ab250af4f Add mutex to RegisteredCertificates, call cleanup every minute 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-06 17:59:51 +01:00
Michael Tsang
1efd8c0261 Add CleanUp function to refresh certificate metrics 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-06 17:59:51 +01:00
jetstack-bot
4c199c90ca
Merge pull request #1717 from dobesv/patch-2 
Fix solver selection logic to return the selected solver rather than always returning the last one
 2019-06-06 13:29:03 +01:00
jetstack-bot
edd2225002
Merge pull request #1692 from cheukwing/issue-1001 
Add metric to count number of sync calls
 2019-06-05 11:20:39 +01:00
Michael Tsang
a2da614fd5 Remove old workerWg field from controller structs 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-06-05 10:35:38 +01:00
Dobes Vandermeer
bd8cd5441a Fix address to reference array element 
The address of a for loop created variable does not change between loops - the variable is over-written with each new variable.  This fixes the code so that `d` references the array element instead of the local variable, which means that when `d` is assigned to `matchAll` or `specificMatch` it will work as intended.

Signed-off-by: Dobes Vandermeer <dobesv@gmail.com>
 2019-05-28 09:00:04 +01:00
Michael Tsang
04139d587e Add comments to base controller 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-24 15:02:43 +01:00
Michael Tsang
089ff067ce Add more detailed logging 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-24 13:55:33 +01:00
Dobes Vandermeer
6d28bee388 Update matchAllDomainsNumLabels and numLabelsSpecificMatch 
These variables seem like they should be updated when updating the thing they are supposed to be derived from.

Signed-off-by: Dobes Vandermeer <dobesv@gmail.com>
 2019-05-24 09:57:53 +01:00
Michael Tsang
0add074b7f Add basecontroller to other controllers 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-23 17:32:33 +01:00
Michael Tsang
9d8070d9af Add base controller 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-23 13:45:08 +01:00
Michael Tsang
35a4837b90 rebase 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-21 12:22:06 +01:00
Michael Tsang
b49912cdab Use IsControlledBy, clarify info message, fix tests 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-21 12:20:08 +01:00
Michael Tsang
606fed7bbb Add additional tests to test new strategy 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-21 12:20:08 +01:00
Michael Tsang
e0db53dc04 Fix tests to use ownerreference in certificates 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-21 12:20:08 +01:00
Michael Tsang
6aea622955 Ensure only the sole owner of a certificate can modify it 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-21 12:19:03 +01:00
Michael Tsang
0e677ee900 Break out of unnecessary checks for duplicates 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-20 15:44:52 +01:00
jetstack-bot
5a213cc5f0
Merge pull request #1698 from munnerz/ing-shim-copy-labels 
Copy labels from Ingress to Certificate resource in ingress-shim
 2019-05-20 13:30:58 +01:00
Michael Tsang
7d67ae466e Remove metrics field from controllers 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-20 11:06:11 +01:00
James Munnelly
1d319f3cd4 Copy labels from Ingress to Certificate resource in ingress-shim 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-19 11:00:10 +02:00
James Munnelly
f77e5c1c89 Log warning Event if edit-in-place is enabled with new solver format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-19 10:56:19 +02:00
Michael Tsang
455f6ebab4 Use ControllerName as label value 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-17 16:49:39 +01:00
Michael Tsang
840cba375b Bazel update scripts 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-17 14:39:39 +01:00
Michael Tsang
f2e57a1c95 Add ControllerSyncCallCount metric 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-17 14:22:16 +01:00