weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
4,025 Commits 45 Branches 0 Tags 96 MiB
abd13992c8
Commit Graph

4025 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jetstack-bot
abd13992c8
Merge pull request #2839 from meyskens/update-miekg-dns 
Update to the latest miekg/dns
 2020-06-11 15:26:23 +01:00
jetstack-bot
89c8fc3c8d
Merge pull request #2898 from diversario/2159-remove-custom-retryer 
Remove custom retry logic from route53 package
 2020-06-11 13:58:23 +01:00
jetstack-bot
46eaf3d1a4
Merge pull request #2923 from JoshVanL/new-metrics 
Updates the metrics package + new metrics controller
 2020-06-04 12:59:38 +01:00
jetstack-bot
0071338801
Merge pull request #2976 from meyskens/chart-nl 
Add new line to clairify podLabels <-> podDNS
 2020-06-04 12:27:38 +01:00
Maartje Eyskens
b9be71c6a3 Add new line to clairify podLabels <-> podDNS 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-06-03 10:26:03 +02:00
jetstack-bot
485e2e59a4
Merge pull request #2947 from hzhou97/no_empty_cacrt 
Do not add empty ca.crt
 2020-05-29 09:13:01 +01:00
Maartje Eyskens
c867bc7d36 Implement MessageAcceptFunc 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-27 17:42:34 +02:00
Maartje Eyskens
c9fbbdbde8 Update to the latest miekg/dns 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-27 17:42:34 +02:00
jetstack-bot
78ee463a98 Merge pull request #2946 from meyskens/fix-venafi-dn 
Add default DN back in Venafi issuer
 2020-05-27 10:35:22 +01:00
JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-26 23:01:55 +01:00
Haoxiang Zhou
7229741505 Changed tests for issuing controller to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 15:30:43 +01:00
Maartje Eyskens
3fa7f038b3 Check for empty Organizations instead 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-26 16:03:42 +02:00
Haoxiang Zhou
609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 14:37:40 +01:00
jetstack-bot
af03686a50
Merge pull request #2940 from qqshfox/upgrade-aws-sdk 
Update AWS Go SDK to 1.31.3
 2020-05-26 14:14:16 +01:00
Haoxiang Zhou
3591de614d Changed unit tests to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:55 +01:00
Haoxiang Zhou
dceae33364 Do not add ca.crt key to TLS secret if empty 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 12:16:20 +01:00
Maartje Eyskens
96cf8c717e Add default DN back in Venafi issuer 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-25 11:30:35 +02:00
Hanfei Shen
a160e00a8b Update AWS Go SDK to v1.31.3 
Signed-off-by: Hanfei Shen <qqshfox@gmail.com>
 2020-05-24 00:30:11 +08:00
jetstack-bot
bd5cd5169b
Merge pull request #2858 from FairwindsOps/sudermanjr/helm-chart-container-security-context 
Fix #2849 Add container security context to helm chart deployments
 2020-05-23 10:09:54 +01:00
jetstack-bot
f2cb162551
Merge pull request #2910 from yann-soubeyrand/master 
Remove x-kubernetes-preserve-unknown-fields from Issuer and ClusterIssuer CRDs
 2020-05-22 09:12:57 +01:00
JoshVanL
9c9fe56f0b
Update new files to use 2020 copyright 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:52:56 +01:00
JoshVanL
fac8c30211
Ensures that integration tests use a free/or random port to start the 
metrics server. Tests that do not depend on metrics, do not actually
start the server. Creates a shared test "FreePort" func. Fixes context
placement.

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:48:55 +01:00
JoshVanL
5539bf3495
Moves metrics controller into sub-package of ./controller/certificates 
and fix metrics listen address flag description

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:47:52 +01:00
JoshVanL
63c5e5f5c6
Cleans up metrics pkg to not require locks, and split out resources into 
different files

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:47:00 +01:00
JoshVanL
db24ca052b
Remove the Factory interface from ACME accounts, in favour of using 
package level funcs. This exposes BuildHTTPClient that instruments
metrics, which is passed to NewClient. ACME issuer has reference to
plumbed in metrics

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:44:37 +01:00
JoshVanL
3e7f7eb87e
Expose Prometheus listen address as a controller command line flag 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 18:21:03 +01:00
JoshVanL
e936d2242c
Adds integration test for new metrics controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:45:12 +01:00
JoshVanL
8214cb4b70
Initialise new metrics implementation and pass through new instrumented 
ACME client Factory

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:44:36 +01:00
JoshVanL
92eb8d0957
Refactor controllers to use new instrumented metrics that's baked into 
all controllers

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:43:56 +01:00
JoshVanL
4dd70a6fe7
Adds new metrics controller to reconcile over Certificates and its 
Status (Ready and Expiry)

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:43:18 +01:00
JoshVanL
54eb9da7af
Adds 'Factory' interface to consume the instrumented acme client 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:42:47 +01:00
JoshVanL
fd7aa8f41c
Refactor acme client to metrics and adds a 'Factory' interface 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:42:19 +01:00
JoshVanL
9e98d7b948
Updates metrics package to be better consumable 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:41:14 +01:00
Yann Soubeyrand
51cd05999f Remove x-kubernetes-preserve-unknown-fields from Issuer and ClusterIssuer CRDs 
Signed-off-by: Yann Soubeyrand <yann.soubeyrand@camptocamp.com>
 2020-05-13 17:43:30 +02:00
jetstack-bot
6a6f3dbf7a
Merge pull request #2907 from munnerz/refactor-acme-client-cache 
Refactor ACME account cache to use a dedicated 'account registry'
 2020-05-13 15:06:06 +01:00
James Munnelly
38aa959f95 accounts: Use RWMutex instead of regular Mutex 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 14:33:49 +01:00
James Munnelly
b126a0c0e5 Use acme AccountRegistry throughout and tidy up ACME setup code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 13:14:46 +01:00
James Munnelly
81b6c74e63 Add ACME account registry structure 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 10:08:06 +01:00
jetstack-bot
ba7871d5f6
Merge pull request #2896 from munnerz/fix-make-images 
Fix 'make images'
 2020-05-07 15:37:01 +01:00
Ilya Shaisultanov
280aa2654d
Remove unused retryer 
Signed-off-by: Ilya Shaisultanov <ilya.shaisultanov@gmail.com>
 2020-05-07 11:41:13 +02:00
Ilya Shaisultanov
bebd82c1f8
Remove custom retry logic from route53 package 
ACME challenges controller already handles retry logic. This
avoid an issue where cert-manager can spam Route53 under certain
conditions, leading to throttling.

Fixes #2159.

Signed-off-by: Ilya Shaisultanov <ilya.shaisultanov@gmail.com>
 2020-05-07 00:14:05 +02:00
James Munnelly
75219aefcf Fix 'make images' 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-06 14:21:33 +01:00
jetstack-bot
1d6ecc9cf8
Merge pull request #2890 from munnerz/rename-ctl 
Update references to ctl binary name
 2020-05-06 08:29:01 +01:00
Andrew Suderman
21105897d7
Apply review suggestions 
Signed-off-by: Andrew Suderman <andrew@sudermanjr.com>
 2020-05-05 09:57:26 -06:00
Andrew Suderman
2802e4837d
Adding BAZEL file to helmignore so that I can run helm template 
Signed-off-by: Andrew Suderman <andrew@sudermanjr.com>
 2020-05-05 09:49:42 -06:00
James Munnelly
927a16fe03 Update references to ctl binary name 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-05 16:44:27 +01:00
jetstack-bot
b893ee4e77
Merge pull request #2880 from meyskens/go1141 
Bump Go to 1.14.2
 2020-05-04 15:17:48 +01:00
Maartje Eyskens
30aace0d50 Bump Go to 1.14.2 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-04 15:50:33 +02:00
jetstack-bot
c2da21eddc
Merge pull request #2876 from meyskens/hub-readme 
Change link in the Helm Hub readme
 2020-05-04 10:48:49 +01:00
Maartje Eyskens
51a19b9c0e Change link in the Helm Hub readme 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-04 10:51:55 +02:00