Commit Graph

443 Commits

Author SHA1 Message Date
Reinhard Nägele
8e9bf46cb6 Enhance Helm chart and apply best practices
* Update Chart.yaml
* Make templates namespaced
* Update config table in README.md
* Apply best practices for RBAC
  (see
https://github.com/kubernetes/helm/blob/master/docs/chart_best_practices/rbac.md)
* Add extra args for cert-manager container
* Make list indentation consistent
* Apply standard labels on all resources
* Add some content to NOTES.txt
2018-01-15 23:26:32 +00:00
James Munnelly
21b4d2821c
Merge pull request #251 from munnerz/fix-gitlab
Fix GitLab CI config
2018-01-15 20:31:58 +00:00
James Munnelly
5ec9252204 Update Makefile targets 2018-01-15 20:28:36 +00:00
James Munnelly
90d42cecaa Update .gitlab-ci.yml for debian base 2018-01-15 20:25:06 +00:00
jetstack-ci-bot
e8166d54c8
Merge pull request #249 from munnerz/version-bump
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Update version for 0.2.3

**Release note**:
```release-note
NONE
```
2018-01-15 20:17:11 +00:00
James Munnelly
82893831b0
Support race detector in GitLab builds 2018-01-15 20:07:39 +00:00
James Munnelly
8fe40046b2 Update version for 0.2.3 2018-01-15 19:57:41 +00:00
jetstack-ci-bot
0c031b60d8
Merge pull request #216 from munnerz/e2e-helm
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Use cert-manager & boulder installed via helm in e2e tests. Run tests with Prow.

**What this PR does / why we need it**:

This switches our e2e tests to use cert-manager installed via helm instead of created as static pods.

This will allow us to test RBAC policies specified in the chart, as well as give a more realistic test environment for a normal use case.

**Release note**:
```release-note
End-to-end testing now covers the helm chart for cert-manager on Kubernetes 1.7-1.9
```
2018-01-15 18:20:38 +00:00
James Munnelly
78e28defff Bump boulder image tag 2018-01-15 17:43:17 +00:00
James Munnelly
e5138eaf6e Bump boulder image value 2018-01-15 17:02:46 +00:00
James Munnelly
ac4ddc9ba8 Wait for tiller to be ready before starting tests 2018-01-15 16:27:33 +00:00
James Munnelly
3020ae1f52 Switch to old boulder IPs 2018-01-15 12:38:48 +00:00
James Munnelly
8639224829 Update bham version 2018-01-15 11:32:22 +00:00
James Munnelly
860d504179 Update boulder services to have a cluster IP 2018-01-14 13:55:15 +00:00
James Munnelly
fc4cc8d587 Increase test timeouts 2018-01-13 21:26:58 +00:00
James Munnelly
e2b73e8cf5 Update boulder FAKE_DNS var 2018-01-13 19:57:47 +00:00
James Munnelly
50506a3dce Set a 10 minute timeout when installing boulder 2018-01-13 19:53:30 +00:00
James Munnelly
707fa724d9 Update nginx service cluster IP 2018-01-13 19:33:34 +00:00
James Munnelly
df37668943 Fix boulder by setting static hostname 2018-01-13 17:39:34 +00:00
James Munnelly
643e285965 Fix testing ACME URL 2018-01-13 16:37:13 +00:00
James Munnelly
c3a4943d85 Add 'set' to start of ci.sh 2018-01-13 16:10:05 +00:00
James Munnelly
228e45e2bb Properly set ACMEURL in e2e tests 2018-01-13 16:07:59 +00:00
James Munnelly
d5dd212cab Setup minikube on travis, don't install docker-compose 2018-01-13 15:43:59 +00:00
James Munnelly
3318585efe Update .travis.yml 2018-01-13 15:41:11 +00:00
James Munnelly
9360fc1ed5 Use quay.io boulder image 2018-01-13 15:39:45 +00:00
James Munnelly
ffbf17cecd Fix passing boulder image args 2018-01-13 15:28:21 +00:00
James Munnelly
1125528aef Remove hostNetwork from cert-manager in e2e tests 2018-01-13 15:28:09 +00:00
James Munnelly
df279f3e63 Add boulder helm chart. Install boulder during e2e tests. 2018-01-13 15:19:48 +00:00
James Munnelly
e1c49d141d Install docker-compose 2018-01-13 02:58:52 +00:00
James Munnelly
b278e2b6b0 Add hack/ci.sh stop-gap script 2018-01-13 02:54:01 +00:00
James Munnelly
1d1190e50a Increase controllers to 5 workers to mitigate test failures 2018-01-13 02:21:41 +00:00
James Munnelly
b61fbdb446 Remove CA ClusterIssuer certificate e2e test 2018-01-13 01:43:01 +00:00
jetstack-ci-bot
96b8b11818
Merge pull request #237 from jetstack/fix-acme-reg-panic
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix panic when ACME server returns a genuine error

**What this PR does / why we need it**:

Fixes a panic when an error other than HTTP Conflict is returned from the ACME server during registration.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fixes #236 

**Release note**:
```release-note
Fix panic when ACME server returns an error other than HTTP Status Conflict during registration
```

/assign
2018-01-10 12:01:46 +00:00
James Munnelly
ea1dc8f58f Fix panic when ACME server returns a genuine error 2018-01-10 11:46:23 +00:00
jetstack-ci-bot
db2bc98821
Merge pull request #240 from dgageot/patch-1
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix typo in acme-http-validation.md

s/Certficate/Certificate



**What this PR does / why we need it**:

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
```
2018-01-10 11:45:13 +00:00
David Gageot
454f875697
Fix typo in acme-http-validation.md
s/Certficate/Certificate
2018-01-09 10:44:46 +01:00
jetstack-ci-bot
7dcc3165f9
Merge pull request #239 from munnerz/update-dates
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Update dates in generated license headers

**What this PR does / why we need it**:
Fixes the dates for 2018 in our generated files

**Release note**:
```release-note
NONE
```

/assign
2018-01-08 21:06:50 +00:00
James Munnelly
0ed9e8341f Update dates in generated license headers 2018-01-08 20:50:32 +00:00
jetstack-ci-bot
b978faa28c
Merge pull request #224 from clstb/master
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

provider names in issuer.yml and certificate.yml must match

**What this PR does / why we need it**:

Documentation fix. For further information see #209.

**Which issue this PR fixes** 

fixes #209

```release-note
NONE
```
2017-12-08 15:13:10 +00:00
jetstack-ci-bot
ebec81896b
Merge pull request #221 from munnerz/update-secret
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Update Secrets instead of replacing to preserve additional metadata

**What this PR does / why we need it**:

Previously we always overwrite the existing certificate if it already existed. Some users have requested a way to automatically create the target secrets using a helm chart, so that all artifacts can be cleaned up cleanly upon `helm delete`.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fixes #192

**Release note**:
```release-note
Update existing secrets instead of replacing in order to preserve annotations/labels
```
2017-12-02 00:30:34 +00:00
jetstack-ci-bot
21202bac98
Merge pull request #219 from munnerz/fix-panic
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix panic in acme authorize function

**What this PR does / why we need it**:

Fixes a panic in the authorize() method of the acme issuer

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fixes #206 

**Release note**:
```release-note
Fix a bug in the ACME authorizer that would cause cert-manager to panic when certificate.spec.acme was not specified
```
2017-12-01 23:52:31 +00:00
James Munnelly
76559f737f Update Secrets instead of replacing to preserve additional metadata 2017-12-01 23:48:05 +00:00
James Munnelly
5f196cbe31 Fix panic in acme authorize function 2017-12-01 23:24:09 +00:00
jetstack-ci-bot
28fc543db6
Merge pull request #218 from munnerz/test-race
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Enable go race detector and fix race in scheduler

**What this PR does / why we need it**:

Fixes a race condition in the scheduler package and enables the race detector in tests

**Release note**:
```release-note
Fix a race condition in the package responsible for scheduling renewals
```
2017-12-01 23:22:58 +00:00
James Munnelly
cee4610dd6 Enable go race detector and fix race 2017-12-01 22:54:12 +00:00
James Munnelly
1caf4d67ef Fix cluster issuer tests. Add hostNetwork option. Turn up log level. 2017-12-01 19:56:03 +00:00
jetstack-ci-bot
583cc89019
Merge pull request #214 from munnerz/0.2.2
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Update for v0.2.2

**What this PR does / why we need it**:

Version bump for 0.2.2

**Release note**:
```release-note
NONE
```
2017-12-01 19:24:46 +00:00
James Munnelly
2d1d0fec2e Update minikube and enable RBAC 2017-12-01 19:04:26 +00:00
James Munnelly
0706fb8847 Use cert-manager installed via helm in e2e tests
Print pod logs on test failure

Remove old flags from e2e_test makefile target
2017-12-01 18:53:42 +00:00
jetstack-ci-bot
bc35be34dd
Merge pull request #215 from munnerz/fix-renewal
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

 Fix checking for expired ACME authorizations 

**What this PR does / why we need it**:

Fixes a bug that caused ACME certificates to not be renewed

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fixes #205 

**Special notes for your reviewer**:

I've also added unit tests to verify that this patch works.

I'd like to create some e2e tests for renewal in future, but it'll involve some hacking at boulder to do so.

**Release note**:
```release-note
Fix a bug that caused ACME certificates to not be automatically renewed
```
2017-12-01 18:07:42 +00:00