Tim Ramlot
8111b43b10
stop relying on context.DeadlineExceeded error in tests
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 16:18:35 +01:00
Tim Ramlot
a0f2849425
run 'make update-codegen'
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 16:18:35 +01:00
Tim Ramlot
6458aaf518
stop using deprecated klog functions
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 16:18:35 +01:00
Tim Ramlot
9e2c6ae08a
run 'make update-crds'
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 16:18:35 +01:00
Tim Ramlot
790a824a49
bump dependencies
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 16:18:35 +01:00
jetstack-bot
e9a4793ba4
Merge pull request #6589 from inteon/rename_feature_gates
...
Rename UseCertificateRequestNameConstraints to NameConstraints
2024-01-03 15:04:22 +00:00
Tim Ramlot
41404a7fd7
rename UseCertificateRequestNameConstraints to NameConstraints
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 15:49:18 +01:00
jetstack-bot
9d5ed5752f
Merge pull request #6120 from inteon/cleanup_test_context_builder
...
add comments explaining the Sync function & small test bugfix
2024-01-03 14:33:22 +00:00
jetstack-bot
cc8925ae9f
Merge pull request #6404 from SpectralHiss/hef/otherNameSANs
...
Other name sans support in Certificates
2024-01-03 14:16:23 +00:00
Houssem El Fekih
ddc1dffe87
Update pkg/util/pki/asn1_util.go
...
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: Houssem El Fekih <hassoum92@hotmail.com>
2024-01-03 13:30:42 +00:00
Houssem El Fekih
c90fd33fb8
Update internal/apis/certmanager/types_certificate.go
...
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
2024-01-03 13:29:03 +00:00
jetstack-bot
4af78fe98a
Merge pull request #6548 from snorwin/modern-pkcs12
...
New option to specify encryption and MAC algorithms for PKCS#12 keystores.
2024-01-03 12:54:22 +00:00
Tim Ramlot
8223df9e91
rename Algorithms to Profile
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 13:45:02 +01:00
Houssem El Fekih
5cc5c8169f
Update internal/apis/certmanager/types_certificate.go
...
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
2024-01-03 11:57:39 +00:00
jetstack-bot
9b90f50be8
Merge pull request #6549 from SgtCoDFish/standalone-apicheck
...
Add separate startupapicheck binary
2024-01-03 11:12:22 +00:00
jetstack-bot
d5b1c075f9
Merge pull request #5860 from ChrisDevo/fix-helm-loglevel-parsing
...
Fix helm loglevel parsing
2024-01-03 10:39:22 +00:00
Tim Ramlot
914c2dd169
add comments explaining the Sync function & small bugfixes
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 11:15:27 +01:00
Tim Ramlot
646a0698b6
undo docs change
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 10:56:18 +01:00
Tim Ramlot
2882d4a0c7
make fix more general (eg. support levels > 5)
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 10:52:59 +01:00
ChrisDevo
449fb81595
Fix comment about allowed logLevel values (see: pkg/logs/logs.go#L44-49)
...
Signed-off-by: ChrisDevo <chris.devine@berkeley.edu>
2024-01-03 10:39:02 +01:00
ChrisDevo
519197b511
Improve parsing of helm global.logLevel (only accept integers 0-5, inclusive)
...
Signed-off-by: ChrisDevo <chris.devine@berkeley.edu>
2024-01-03 10:39:02 +01:00
SpectralHiss
7350863d8a
Add order agnostic matcher for SANs
...
* This is to ensure Vault conformance passes since it outputs SANs in
different order to other issuers
* Matcher was tested manually only we will add tests to it in future
Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
2024-01-03 09:13:11 +00:00
jetstack-bot
65e78f3cef
Merge pull request #6586 from wallrj/check-deprecated
...
Replace calls to deprecated sets.String functions
2024-01-02 18:02:40 +00:00
Richard Wall
036e3a8e74
Replace all uses of sets.String with the generic sets.Set
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 17:24:38 +00:00
Ashley Davis
b3b14fda41
add separate startupapicheck binary
...
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
2024-01-02 17:17:50 +00:00
Richard Wall
4f402df61e
Show only the sets.String deprecation warnings
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 17:11:17 +00:00
jetstack-bot
f133a026c8
Merge pull request #6585 from wallrj/remove-randstringrunes
...
Deprecate RandStringBytes and RandStringRunes
2024-01-02 16:43:40 +00:00
Richard Wall
75e8c0fe50
Check for use of deprecated functions
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 16:33:03 +00:00
Richard Wall
19ade4b79e
Replace all calls to RandStringBytes and RandStringRunes
...
With k8s.io/apimachinery/pkg/util/rand#String instead
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 15:41:07 +00:00
Richard Wall
4aa373b733
Deprecate RandStringBytes and RandStringRunes
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 15:02:14 +00:00
jetstack-bot
7f8e569ae8
Merge pull request #6582 from wallrj/gosec-404
...
Enable gosec 404: Use of weak random number generator
2024-01-02 15:01:40 +00:00
jetstack-bot
079338bfd6
Merge pull request #6583 from inteon/upgrade
...
Upgrade base images from debian11 to debian12
2024-01-02 12:37:40 +00:00
Richard Wall
d468830b23
Fix gosec G404
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 12:33:46 +00:00
Tim Ramlot
4f848bf2ee
upgrade base image from debian11 to debian12
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-02 13:26:21 +01:00
Richard Wall
65e722ead4
Enable gosec 404: Use of weak random number generator
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 11:38:01 +00:00
jetstack-bot
47d720be39
Merge pull request #6581 from wallrj/gosec-501
...
Enable gosec G501: Blocklisted import crypto/md5
2024-01-02 11:34:40 +00:00
Richard Wall
865063594d
Fix gosec 501
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 11:20:16 +00:00
jetstack-bot
7e971e0fe6
Merge pull request #6579 from wallrj/gosec-505
...
Enable gosec G505
2024-01-02 10:53:40 +00:00
Richard Wall
5a1a4af3de
Enable gosec G501
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 10:46:46 +00:00
Richard Wall
0ea258327d
Fix gosec G505
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 10:10:11 +00:00
jetstack-bot
d5f1771b18
Merge pull request #6575 from dylanhitt/docs/kube-version-req
...
docs: declare updated kube version in artifact hub doc
2024-01-02 10:03:40 +00:00
jetstack-bot
833311d278
Merge pull request #6578 from inteon/upgrade
...
CVE: upgrade golang.org/x/crypto
2024-01-02 09:32:40 +00:00
SpectralHiss
7f349eff69
Allow other SANS in Vault e2e framework
...
* This is to enable conformance testing of the otherName alpha feature
Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
2024-01-02 09:28:10 +00:00
Richard Wall
fffb70c25f
Enable gosec G505
...
Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-01-02 09:26:53 +00:00
Tim Ramlot
a24b2466d3
upgrade golang.org/x/crypto
...
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-02 10:03:19 +01:00
SpectralHiss
7b9670120c
The sample issuer won't work with OtherName CSR
...
* The sample code leverages standard library only
* It does not leverage util/pki from cert-manager nor issuer-lib
Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
2024-01-02 08:47:32 +00:00
dylanhitt
751ca52626
docs: declare updated kube version in artifact hub doc
...
Signed-off-by: Dylan Hitt <dylan.hitt1@gmail.com>
2023-12-28 22:44:46 -05:00
jetstack-bot
5615de61ee
Merge pull request #6563 from inteon/hide_deprecated_flags
...
Hide deprecated CLI flags
2023-12-27 09:59:59 +00:00
jetstack-bot
5e09dd3059
Merge pull request #6561 from inteon/parse_certificate_chain
...
Certificate chain parsing
2023-12-27 09:59:53 +00:00
jetstack-bot
9449565640
Merge pull request #6571 from pevidex/fix-validation-webhook-error-message
...
Fix validation webhook error message
2023-12-25 10:04:17 +00:00
