weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
7,824 Commits 45 Branches 0 Tags 96 MiB
9ddf2bab90
Commit Graph

7824 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Florian Liebhart
9ddf2bab90 remove HTTPS endpoint for default nameservers; remove DNS-over-TLS 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 16:06:39 +02:00
Tim Ramlot
3a29635c66
add support for DoH and DoT 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-06-19 15:59:40 +02:00
Florian Liebhart
ffcf7ca4db remove merge conflicts 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
df622a5e94 remove merge conflicts 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
8335f8474e remove unneeded whitespace 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
153c0b5fbf remove bazel 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
894e1f99d6 fix error for dns endpoint propagation 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
00fb76f9b7 fix missing argument in test 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
cd821e1948 fix controller options description 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
a934bbf462 Make the DNS-Over-HTTPS Json endpoint configurable 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
6383a08a79 Add missing fixure preparation for tests 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
14c5e7724d delete bazel stuff 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
857d0aef9e Add logging for the DNS over HTTPS selfcheck 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
Florian Liebhart
fa2f063c28 rebase master 
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
 2023-06-19 15:32:01 +02:00
jetstack-bot
b954456289
Merge pull request #6094 from SgtCoDFish/proliferation_3 
Attempt to clarify in short the modules proliferation design
 2023-06-15 10:09:22 +02:00
jetstack-bot
2d01fbecac
Merge pull request #6147 from inteon/fix_wrong_annotations 
BUGFIX: issuer-ref and certificate-name annotations are incorrectly updated on Secrets
 2023-06-14 16:44:21 +02:00
Tim Ramlot
fe4f4e4aa6
re-add TODO comment and make the message more clear 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-06-14 14:51:39 +02:00
Tim Ramlot
9c9e833c5a
add TODO comment that explains that we don't understand the reason for the current behaviour 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-06-14 14:51:07 +02:00
Tim Ramlot
3aa7b82e43
Update internal/controller/certificates/policies/checks.go 
Co-authored-by: EDDIE-DAV <136573637+EDDIE-DAV@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-06-14 10:19:52 +01:00
Tim Ramlot
8ddf016b00
fix a bug that caused the issuer-ref and certificate-name annotations on Secrets to be correct when being updated. 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-06-13 16:54:32 +02:00
jetstack-bot
76a683d1d6
Merge pull request #6144 from schrodit/rm-servicelinks-helm 
Disable service link in helm chart deployments
 2023-06-12 16:04:17 +02:00
schrodit
a3c6261c38 disable service links on status api job 
Signed-off-by: schrodit <mail@timschrodi.tech>
 2023-06-12 14:09:36 +02:00
schrodit
c70be0a28b Disable service links in helm charts 
Signed-off-by: schrodit <mail@timschrodi.tech>
 2023-06-12 13:33:55 +02:00
jetstack-bot
81c8ae8ff5
Merge pull request #6143 from schrodit/remove-servicelinks 
Remove service links from http solver pod
 2023-06-12 10:13:17 +02:00
schrodit
53a5a95d9f Add enableServiceLink to test pod definition 
Signed-off-by: schrodit <mail@timschrodi.tech>
 2023-06-12 09:54:37 +02:00
schrodit
c9559882c4 Remove service links from http solver pod 
Signed-off-by: schrodit <mail@timschrodi.tech>
 2023-06-12 09:26:22 +02:00
jetstack-bot
c035090430
Merge pull request #6135 from cloud-native-team/master 
fix function name in comments
 2023-06-07 15:18:52 +02:00
cui fliter
4723347260 fix function name in comments 
Signed-off-by: cui fliter <imcusg@gmail.com>
 2023-06-07 17:17:07 +08:00
jetstack-bot
f8940ab5c4
Merge pull request #6125 from irbekrm/explain_fao 
Document what fao stands for in the controller.cert-manager.io/fao label
 2023-06-06 14:09:45 +02:00
jetstack-bot
7f519b3244
Merge pull request #6088 from cypres/master 
issuer: acme: clouddns: Fix race condition
 2023-06-02 19:14:58 +02:00
jetstack-bot
89d05fc149
Merge pull request #6126 from SgtCoDFish/basebump 
Bump base images with make update-base-images
 2023-06-02 15:41:58 +02:00
Ashley Davis
f30cd9228c
bump base images with make update-base-images 
see #4033

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-06-02 14:31:38 +01:00
irbekrm
f4dc243b77 Document what fao stands for in the controller.cert-manager.io/fao label 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2023-06-02 13:45:10 +01:00
Hans Arnholm
501581ad06
issuer: acme: clouddns: Only clean up own records 
If running multiple certmanagers they can race against each other

Signed-off-by: Hans Arnholm <hans@arnholm.dk>
 2023-06-01 10:15:54 +02:00
jetstack-bot
2fb9e61c6e
Merge pull request #6109 from inteon/bugfix_api_check_poll_once 
BUGFIX: `cmctl check api --wait 0` should still check the API once
 2023-05-30 14:26:00 +01:00
Tim Ramlot
ced9f2bce0
if wait is set to 0, we still want to check the API once 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-05-30 15:08:02 +02:00
jetstack-bot
c5e6bf39d6
Merge pull request #6054 from inteon/correct_versions 
Use Version 3 for *x509.Certificate
 2023-05-26 13:57:32 +01:00
Ashley Davis
5bfd3078ca
add note about workspaces 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-05-26 12:00:54 +01:00
Ashley Davis
cc89050c02
fix double indented dashes for github markdown 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-05-26 11:55:42 +01:00
jetstack-bot
ba3ed3ebe5
Merge pull request #6098 from lucacome/bump-controller-runtime 
Bump sigs.k8s.io/controller-runtime to v0.15.0
 2023-05-24 12:49:22 +01:00
jetstack-bot
d214c30a39
Merge pull request #6093 from irbekrm/fix_webhook_flags 
Fix webhook feature gate
 2023-05-24 11:29:23 +01:00
Tim Ramlot
55ebaa31b5
fix typo 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-05-24 12:19:22 +02:00
Ashley Davis
07cd2e3782
review suggestion 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-05-24 09:34:30 +01:00
Luca Comellini
8a5704635a
Bump sigs.k8s.io/controller-runtime to v0.15.0 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2023-05-23 17:34:28 -07:00
irbekrm
acf07419f5 Fix a bug in helm chart where webhook had controller feature gates passed 
This will break anyone who relied on featureGates field to pass feature gates to webhook- they will need to use the new webhook.featureGates field

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2023-05-23 12:44:31 +01:00
Ashley Davis
f1b499f578
attempt to clarify in short the modules proliferation design 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2023-05-23 12:11:07 +01:00
irbekrm
8a34cbc0a0 Adds some warnings for folks to not import feature gates into shared code 
Really we should restructure this to remove the possibility of accidentally overwriting other component's feature gates

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2023-05-23 12:02:55 +01:00
irbekrm
b1a59164e0 Don't import controller's feature gate setup into a shared library 
To prevent controller's feature gates from overwriting other component's feature gates

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2023-05-23 12:01:30 +01:00
jetstack-bot
5c0722dccb
Merge pull request #6085 from irbekrm/disable_apf_for_webhook 
Disable APF for webhook extension apiserver
 2023-05-22 13:41:27 +01:00
irbekrm
524998abdf Don't run API Priority and Fairness controller in webhook extension apiserver 
Because it is not needed and can cause issues with older versions of kube

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2023-05-22 12:53:15 +01:00