weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
6,276 Commits 45 Branches 0 Tags 96 MiB
9efd933c40
Commit Graph

154 Commits

Author SHA1 Message Date
irbekrm
06696befdb Installs v1 ingress-nginx for e2e tests against kube 1.23 
Also bumps the versions of ingress dependency used in tests

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-29 10:14:58 +00:00
irbekrm
0ee31f2542 Add an option to create a kube 1.23 cluster 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-22 16:03:06 +00:00
jetstack-bot
0236f0836e
Merge pull request #4556 from inteon/helm_template_cleanup 
Cleanup helm templates & fix empty 'resources' in deployment
 2021-11-15 14:27:06 +00:00
Ashley Davis
8b0b639496
add additional warnings when setting up a CI cluster 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-11 12:59:35 +00:00
Ashley Davis
0955aa4531
bump version of haproxy ingress to latest and limit connections 
this works around a limit on file descriptors which we encounter in kind
in CI. newer kind images impose a limit of 1024 file descriptors which
isn't trivial to change; haproxy seems to try to request just over 2*n
file descriptors where n is the max number of connections; as such, if
we limit max-connections to 250 we should be comfortably within the
limit

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-10 17:38:49 +00:00
Ashley Davis
5c7bbb068d
bump version of kind node images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-09 17:21:56 +00:00
Ashley Davis
845dd26ef7
add comments detailing kind network footgun 
also adds a variable for the network name, potentially making it easier
to change in the future if kind improves its support for this kind of
thing

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-09 17:21:47 +00:00
Ashley Davis
6f8ef26c07
add a script + flow for getting latest kind images 
the script will need to be manually updated if we want to add a new
k8s version, but it should be trivial to do that

the actual kind image SHAsums aren't updated, so that the addition of
the script can be separate from the act of updating the images

also adds a make target for creating a kind cluster with CI deps

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-08 16:58:16 +00:00
Richard Wall
050c360204
Fix the kyvernopre image name 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-11-08 14:23:23 +00:00
Inteon
b1445d687e
cleanup helm templates & better support for empty 'resources' in values.yaml 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-11-01 11:37:50 +01:00
Richard Wall
f436f0e025 Test kubectl cert-manager version by running it after install 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-09 10:05:32 +01:00
jetstack-bot
546c77f438
Merge pull request #4486 from munnerz/bump-kind-images 
Upgrade kind docker images to be correct for version
 2021-10-01 14:58:35 +01:00
James Munnelly
4a4118f366 Upgrade kind docker images to be correct for version 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-10-01 12:40:43 +01:00
irbekrm
81bdabf67a Code review feedback 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 17:23:42 +01:00
irbekrm
3fa237cd5b Allows for Ingresses without class field set to be watched by Ingress controller 
Because we need to support different versions and configurations

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:14:39 +01:00
irbekrm
7319d3392a Load kyverno image with Bazel 
So that we don't pull the same image for each test run.

Also run helm install with --debug so that it outputs more information.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:14:26 +01:00
irbekrm
485629e729 e2e tests by default create a k8s 1.22 cluster 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:14:14 +01:00
irbekrm
8370b08bd3 Bumps Bazel deps and ingress-nginx test image version 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:14:05 +01:00
jetstack-bot
cd1f5a3d94
Merge pull request #4400 from irbekrm/arm 
Update and verify scripts can be run from darwin-arm64
 2021-09-03 19:14:22 +01:00
jetstack-bot
aae24ba82d
Merge pull request #4338 from irbekrm/ginkgo_skip_focus 
Ginkgo skip/focus can be optionally passed in from CI
 2021-09-01 17:26:11 +01:00
irbekrm
66d8b85be8 Ginkgo skip/focus values can be optionally passed in from CI 
Signed-off-by: irbekrm <irbekrm@gmail.com>

Re-instate Venafi Cloud tests

They are now passing - we can see that for CertificateSigningRequest tests

Signed-off-by: irbekrm <irbekrm@gmail.com>

Don't skip Ginkgo tests marked as feature

We can instead define which tests to skip using GINKGO_FOCUS/GINKGO_SKIP to make skipping/focusing more obvious

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-01 13:29:28 +01:00
irbekrm
25303b79c9 Use yq instead of jq 
Because yq releases builds for darwin/arm

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-23 07:08:51 +01:00
irbekrm
5f1d5df792 Use the official kind image for testing against Kubernetes v1.22 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-11 15:06:53 +01:00
Inteon
3cad738b1e
escape commas 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-06 22:21:08 +02:00
Inteon
347cd6c25d
add better logging 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-06 19:16:33 +02:00
Jake Sanders
b4af1aff1a
Never send an empty argument to the test script 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-06 11:44:10 +01:00
Jake Sanders
d4c8aea472
Helm --set requires commas to be escaped, so double escape in bash 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-05 15:12:41 +01:00
Jake Sanders
36aa9e2501
The gateway-api support is now gated behind --feature-gate=ExperimentalGatewayAPISupport=true 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-05 14:37:54 +01:00
irbekrm
06ea65ca18 Bump k8s v1.22 test image sha 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-05 10:05:35 +01:00
jetstack-bot
d647e543e3
Merge pull request #4276 from jakexks/gateway-http01 
Experimental Gateway API support for ACME HTTP-01 Solving
 2021-08-03 18:51:49 +01:00
jetstack-bot
b5f80c428e
Merge pull request #4234 from inteon/add_startupapicheck 
Add startup api check Job
 2021-08-03 17:41:49 +01:00
Jake Sanders
e92659e347
Attempt to skip e2e tests on K8s <1.19 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-03 16:58:40 +01:00
Jake Sanders
097b3db61e
Skip Gateway API tests on K8s < 1.19 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-03 15:06:00 +01:00
Maël Valais
f96f91029d addons: Traefik requires --gateway-httproute-labels=acme=solver-traefik 
To run the end-to-end test in question:

go test ./test/e2e/ -ginkgo.focus 'Certificates with issuer type ACME HTTP01 Issuer \(Gateway\)' -test.v \
  --repo-root $PWD/devel/lib/../.. \
  --report-dir $PWD/devel/lib/../../_artifacts \
  --gateway-domain=traefik.http01.example.com \
  --gateway-httproute-labels=acme=solver-traefik

Signed-off-by: Maël Valais <mael@vls.dev>
 2021-08-02 19:30:56 +02:00
Maël Valais
345ace666f addons: add Traefik to be used for HTTP-01 HTTPRoute solving 
Signed-off-by: Maël Valais <mael@vls.dev>
 2021-08-02 17:17:44 +02:00
Jake Sanders
90e4324c7a
e2e tests for Gateway HTTP01 Solver 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-02 14:12:30 +01:00
Jake Sanders
ff41812471
Add HAProxy to addons 
HAProxy is the most minimal implementation of the Gateway API - can be used in e2e tests

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-02 14:06:18 +01:00
jetstack-bot
b04e42c437
Merge pull request #4253 from JoshVanL/apiextensions-v1beta1-v1 
Conversion: Apiextensions v1beta1 -> v1
 2021-07-30 15:49:49 +01:00
Inteon
0eabaec743
change startupapicheck to helm post-install hook 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-30 16:04:55 +02:00
joshvanl
d3f3f458ed Updates the kind cluster for v1.22 to v1.22.0-rc.0 
https://console.cloud.google.com/gcr/images/jetstack-build-infra-images/EU/kind@sha256:fa600aa4b8234235e141fab085126e2a72c3d8f05eed44d38bf343091c51d192/details?tab=info

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-30 12:06:22 +01:00
Inteon
7f19db0faa
update scripts with new image 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-27 18:38:33 +02:00
Inteon
9092bf8bb6
use correct component name in comments & add --wait-for-jobs flag 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-27 15:54:00 +02:00
joshvanl
78e77f99db Use correct import for apiextensions in same webhook 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-26 17:46:36 +01:00
joshvanl
be2ad9ed15 Update sample ACME webhook to use apiextensions v1beta1 -> v1 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-26 17:04:35 +01:00
irbekrm
5edad74e8a Ensure jq is available 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-22 20:53:39 +01:00
Maël Valais
62bc854467 e2e: sample-external-issuer v0.1.0 -> v0.1.1 (1.22 compatibility) 
Signed-off-by: Maël Valais <mael@vls.dev>
 2021-07-22 21:13:39 +02:00
irbekrm
63873ab8a9 Bump e2e test NGINX ingress Helm chart version 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-22 20:08:05 +01:00
irbekrm
5e83e35b7c Allow for ./setup-e2e-deps.sh script to be run locally against k8s v1.22 
Without specifying Kubernetes version

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-22 20:07:37 +01:00
irbekrm
84f653f01f e2e test setup installs a different version of Ingress depending on k8s version 
This is needed because there are no NGINX ingress release that would support work both on k8s v1.16-v1.18 as well as v1.22

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-22 19:35:57 +01:00
irbekrm
00542dd7f6 Bump apiregistration API version to v1 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-22 17:19:27 +01:00