Joshua Mathianas
|
9ee6ea7b7d
|
Fixed a typo and ran generators
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
|
2020-01-16 09:49:40 -05:00 |
|
Joshua Mathianas
|
b096e0f0af
|
Made requested changes from review
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
|
2020-01-16 09:41:16 -05:00 |
|
Joshua Mathianas
|
e33e28c4fd
|
add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
|
2020-01-16 07:50:26 -05:00 |
|
jetstack-bot
|
5ee9e6c7aa
|
Merge pull request #2452 from munnerz/kubernetes-1.17.0
Bump Kubernetes dependencies to v0.17.0
|
2020-01-14 14:19:57 +00:00 |
|
jetstack-bot
|
9ca34f773f
|
Merge pull request #2470 from munnerz/remove-misleading-errors
Don't log misleading error messages
|
2020-01-07 14:24:19 +00:00 |
|
James Munnelly
|
d3b785c263
|
Bump generated files copyright header year
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-01-07 12:43:44 +00:00 |
|
James Munnelly
|
4aed3a7bbc
|
Set namespace on Challenge resources created during tests
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-17 17:38:04 +00:00 |
|
jetstack-bot
|
8d6e86468d
|
Merge pull request #2460 from greywolve/fix-ensure-ingress-for-service-name-changing
ACME HTTP01 solver: clean up ingresses if the service name changes
|
2019-12-17 15:35:09 +00:00 |
|
jetstack-bot
|
8809f7e031
|
Merge pull request #2469 from munnerz/temp-certs-dont-overwrite
Don't overwrite existing certificates when issuing a temporary certificate
|
2019-12-17 14:30:09 +00:00 |
|
James Munnelly
|
361fdfac3f
|
Don't log misleading error messages
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-16 16:31:18 +00:00 |
|
James Munnelly
|
9daad6dd93
|
Update tests to ensure temporary certificates are not re-issued when dnsNames mismatch
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-16 15:11:07 +00:00 |
|
James Munnelly
|
7076041de6
|
Don't overwrite existing certificates when issuing a temporary certificate
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-16 13:53:38 +00:00 |
|
James Munnelly
|
df27fff9ce
|
Don't use time.Tick to prevent leaks
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-16 12:45:49 +00:00 |
|
Oliver Powell
|
7611f78793
|
ACME HTTP01 solver: clean up ingresses if the service name changes
Signed-off-by: Oliver Powell <oliver@opowell.com>
|
2019-12-14 10:05:51 +02:00 |
|
jetstack-bot
|
90bf960c1e
|
Merge pull request #2450 from munnerz/webhook-pprof
webhook: register http handlers for pprof debug endpoints
|
2019-12-11 15:59:33 +00:00 |
|
James Munnelly
|
ae5c13c1b2
|
Update codegen
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-11 15:42:12 +00:00 |
|
James Munnelly
|
ff8c68348a
|
Update checks.go for external account bindings
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-11 12:37:36 +00:00 |
|
James Munnelly
|
5c4e27830f
|
Use enum for HMAC algorithm field
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-11 12:28:49 +00:00 |
|
James Munnelly
|
3f212844a7
|
Fix apiext.JSON fuzzer
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-11 12:28:49 +00:00 |
|
James Munnelly
|
fd306c538c
|
acme: Add support for external account binding
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-11 12:28:49 +00:00 |
|
James Munnelly
|
80bc253d74
|
acme: Add API fields for ExternalAccountBinding
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-11 10:37:16 +00:00 |
|
jetstack-bot
|
4073080089
|
Merge pull request #2416 from munnerz/fixup-expiry-metrics
Fix certificate controller expiry metrics
|
2019-12-10 17:25:15 +00:00 |
|
James Munnelly
|
f3a58ed991
|
webhook: register pprof http handlers
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-10 16:54:15 +00:00 |
|
James Munnelly
|
1f3b883cfd
|
Don't overwrite order.status.url if return Order's URI is empty
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-03 16:49:31 +00:00 |
|
James Munnelly
|
9d28261da5
|
Properly handle ErrNoAccount
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-03 16:49:31 +00:00 |
|
James Munnelly
|
641fe0da7c
|
Switch to using upstream golang.org/x/crypto
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-12-03 16:49:31 +00:00 |
|
James Munnelly
|
698e7a522a
|
Fix certificate controller expiry metrics
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-29 18:29:23 +00:00 |
|
jetstack-bot
|
1581bf2796
|
Merge pull request #2400 from JoshVanL/secret-annotation-fallback
Allow secrets with legacy annotations for issuer name and kind to match
|
2019-11-27 15:39:22 +00:00 |
|
JoshVanL
|
232b1133fd
|
Adds more tests for deprecated secret annotations and update secret
annotations if deprecated ones exist
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-27 15:12:25 +00:00 |
|
jetstack-bot
|
df265ddbfd
|
Merge pull request #2170 from matevzmihalic/cloudflare-apitoken
Add API token authentication option to Cloudflare issuer
|
2019-11-27 13:22:21 +00:00 |
|
James Munnelly
|
bb117875d3
|
Validate that both APIKey and APIToken are not both specified
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-27 12:54:17 +00:00 |
|
JoshVanL
|
0d9d0eeb22
|
Allow secrets with legacy annotations for issuer name and kind to match
existing certificates
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-26 12:13:58 +00:00 |
|
jetstack-bot
|
5ec141c107
|
Merge pull request #2382 from JoshVanL/cr-controller-issuer-ready
Check for Issuer readiness in CR controllers
|
2019-11-26 09:40:30 +00:00 |
|
JoshVanL
|
de7aaa84d3
|
Update CertificateRequest controller unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-19 22:09:01 +00:00 |
|
JoshVanL
|
3bcc038c09
|
Check for Issuer readiness in CR controllers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-19 20:31:44 +00:00 |
|
Matevz Mihalic
|
0abf945945
|
Remove ambient credentials
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
|
2019-11-18 17:51:50 +01:00 |
|
Matevz Mihalic
|
b5972a379f
|
Add API token auth option to Cloudflare issuer
Signed-off-by: Matevz Mihalic <matevz.mihalic@gmail.com>
|
2019-11-18 17:51:43 +01:00 |
|
James Munnelly
|
4353ef142f
|
Fix up whitespace around doc.go in apis package
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-15 14:43:07 +00:00 |
|
jetstack-bot
|
cb4dbe0d94
|
Merge pull request #2372 from munnerz/add-gencrd-force-meta
Add '// +gencrdrefdocs:force' to meta/v1 package
|
2019-11-15 14:18:15 +00:00 |
|
James Munnelly
|
039acd1f09
|
Add '// +gencrdrefdocs:force' to meta/v1 package
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-15 13:50:36 +00:00 |
|
James Munnelly
|
1527c06e0f
|
Remove reference to metav1.ObjectMeta
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-15 12:26:11 +00:00 |
|
James Munnelly
|
c45aa852d0
|
Run fuzz tests for API schema generation
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-15 12:26:11 +00:00 |
|
jetstack-bot
|
1556add6eb
|
Merge pull request #2290 from munnerz/kube-1162
Bump Kubernetes dependencies to 1.16.3
|
2019-11-15 12:22:24 +00:00 |
|
James Munnelly
|
e8fbd37634
|
Mark 'csr' field as required in CertificateRequest
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-15 01:01:43 +00:00 |
|
James Munnelly
|
fdce8c6406
|
Fix Sync() method to allow time for testing informers to sync
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-11-14 19:43:02 +00:00 |
|
JoshVanL
|
1c5a5caaf8
|
Adds all key usage possible values to key usage comment
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-14 13:51:28 +00:00 |
|
jetstack-bot
|
1793e7b573
|
Merge pull request #2236 from munnerz/covered-images
Add Bazel image targets with coverage enabled
|
2019-11-14 10:54:09 +00:00 |
|
JoshVanL
|
d6248d20bd
|
Make vault issuer to point to resource namespace over certificaterequest
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-13 11:02:43 +00:00 |
|
jetstack-bot
|
1bfec37482
|
Merge pull request #2349 from JoshVanL/2205-kubernetes-auth-path
Changes the vault issuer Kubernetes auth path to require the full *mount* path
|
2019-11-13 09:58:26 +00:00 |
|
JoshVanL
|
0e739bdde9
|
Mount path now hard codes /login endpoint in code
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-11-12 18:37:54 +00:00 |
|