weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
3,543 Commits 45 Branches 0 Tags 96 MiB
94bc5f60f8
Commit Graph

1422 Commits

Author SHA1 Message Date
Maartje Eyskens
12d77f5ed2 Merge branch 'master' into venafi-cloud-optional-url 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-06 16:18:42 +01:00
James Munnelly
c8cb23a1dc Remove json field tags from internal API structs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-04 16:10:43 +00:00
James Munnelly
5b9cd23d0f Make the Venafi Cloud URL field optional 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-03 18:18:38 +00:00
Will Thames
e1bf54d0e3 Add cipher suites configuration and defaults 
Add a --tls-cipher-suites command line flag and set to sensible
defaults.

Signed-off-by: Will Thames <will@thames.id.au>
 2020-02-03 22:57:59 +10:00
jetstack-bot
33051b0c66
Merge pull request #2531 from munnerz/move-organizations 
v1alpha3: move Organization field into X509Subject as Organizations
 2020-01-29 10:17:54 +00:00
James Munnelly
877e1dd672 Move Organization field into X509Subject as Organizations 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-29 09:06:45 +00:00
James Munnelly
02ae799e31 Fix ownerReference GVK used during HTTP01 challenge solving 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-24 16:11:46 +00:00
James Munnelly
1f7f23895d Ensure fetched certificate is valid for CSRs public key before issuing 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-22 16:42:58 +00:00
jetstack-bot
fbab741817
Merge pull request #2513 from munnerz/add-v1alpha3 
Create v1alpha3 API version
 2020-01-20 16:37:31 +00:00
jetstack-bot
eec3f3633c
Merge pull request #2506 from periklis/use-vault-modules 
Use vault api and sdk modules instead of tagged repo
 2020-01-20 15:55:31 +00:00
jetstack-bot
b7e83b5382
Merge pull request #2508 from JoshVanL/cr-invalid-request 
CertificateRequest InvalidRequest
 2020-01-20 14:17:31 +00:00
Periklis Tsirakidis
a1f63b953d Use vault api and sdk modules instead of tagged repo 
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
 2020-01-20 12:27:09 +01:00
James Munnelly
72ea226b41 Update controllers to use validation registry 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
c27ccd78d7 Update webhook validation handler for validation registry 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
0046036460 Add validation registration functions to API groups 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
a867bc9c7a Update testgroup validation to use internal type 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
ef72b0d866 Add validation registry package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
511bddc953 Update apigroup validation to use internal types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
50da07292a Add GenericIssuer interface to internal API 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
866d89ffb0 Update pkg/webhook to use internal types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
7af9fb0006 Register new apiVersion with schemes 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
b57b1d8407 Run update-codegen.sh 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
James Munnelly
0f1d7cf755 Copy apis directories for v1alpha3 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
JoshVanL
2f3fe4c3d7
Reduce comments by removing invalid data in CR implementations doing 
better InvalidRequest checking

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-17 14:11:25 +00:00
jetstack-bot
0e5af56d7d
Merge pull request #2520 from mathianasj/fix-clusterissuer-secret-missing 
Fix clusterissuer not being able to provision certs
 2020-01-17 14:03:06 +00:00
JoshVanL
b989f4e604
Remove cert-manager core issuers from marking CR as InvalidRequest 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-17 13:35:05 +00:00
Joshua Mathianas
cc802cc16e made code review changes 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-17 07:31:25 -05:00
jetstack-bot
fc00a273a6
Merge pull request #2518 from mathianasj/x509-subject-fields 
X509 Name support
 2020-01-17 09:39:05 +00:00
Joshua Mathianas
eed8f67587 fixed which namespace to find secret in based on if its a clusterissuer for venafi 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 12:19:49 -05:00
Joshua Mathianas
39cc63a205 resolve failing unit tests 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 11:34:44 -05:00
Joshua Mathianas
05ff21250d Updates plural names and destination attribute name to match source 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 10:30:20 -05:00
Joshua Mathianas
9ee6ea7b7d Fixed a typo and ran generators 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 09:49:40 -05:00
Joshua Mathianas
b096e0f0af Made requested changes from review 
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 09:41:16 -05:00
Joshua Mathianas
e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set 
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
 2020-01-16 07:50:26 -05:00
Maartje Eyskens
98ca10b5ba Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-01-16 12:28:15 +01:00
Maartje Eyskens
0e1f64a337 Do not change crt.Name 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-01-16 12:07:45 +01:00
Maartje Eyskens
dbac7cf1fb Use correct regexp package 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-01-16 12:03:58 +01:00
Maartje Eyskens
3212e446e5 Fix issue in ComputeCertificateRequestName when 52nd is a dot 
This strips any symbols at the end of a shortened domain name  in ComputeCertificateRequestName.
It also adds tests for the specific util function

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-01-16 11:49:28 +01:00
jetstack-bot
5ee9e6c7aa
Merge pull request #2452 from munnerz/kubernetes-1.17.0 
Bump Kubernetes dependencies to v0.17.0
 2020-01-14 14:19:57 +00:00
JoshVanL
c38466dc9c
Update certificate request controller sync_test.go 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-10 09:41:55 +00:00
JoshVanL
f9f8fbd311
Add InvalidRequest condition check to Certificate controller: 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-09 15:14:21 +00:00
JoshVanL
1c9557b729
Adds InvalidRequest condition set to CertificateRequest controllers 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-09 15:13:54 +00:00
JoshVanL
0c50cc166a
Adds InvalidRequest condition to CertificateRequest 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-01-09 15:12:55 +00:00
jetstack-bot
9ca34f773f
Merge pull request #2470 from munnerz/remove-misleading-errors 
Don't log misleading error messages
 2020-01-07 14:24:19 +00:00
James Munnelly
d3b785c263 Bump generated files copyright header year 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-07 12:43:44 +00:00
James Munnelly
4aed3a7bbc Set namespace on Challenge resources created during tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-17 17:38:04 +00:00
jetstack-bot
8d6e86468d
Merge pull request #2460 from greywolve/fix-ensure-ingress-for-service-name-changing 
ACME HTTP01 solver: clean up ingresses if the service name changes
 2019-12-17 15:35:09 +00:00
jetstack-bot
8809f7e031
Merge pull request #2469 from munnerz/temp-certs-dont-overwrite 
Don't overwrite existing certificates when issuing a temporary certificate
 2019-12-17 14:30:09 +00:00
James Munnelly
361fdfac3f Don't log misleading error messages 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-16 16:31:18 +00:00
James Munnelly
9daad6dd93 Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-16 15:11:07 +00:00