jetstack-bot
|
46eaf3d1a4
|
Merge pull request #2923 from JoshVanL/new-metrics
Updates the metrics package + new metrics controller
|
2020-06-04 12:59:38 +01:00 |
|
JoshVanL
|
e465329b80
|
Revert vault free port and expose listener port from metrics server
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-05-26 23:01:55 +01:00 |
|
Haoxiang Zhou
|
7229741505
|
Changed tests for issuing controller to expect no ca.crt instead of nil
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
|
2020-05-26 15:30:43 +01:00 |
|
Haoxiang Zhou
|
609eedacec
|
Do not add ca.crt key to TLS secret if empty in expcertificates as well
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
|
2020-05-26 14:37:40 +01:00 |
|
Haoxiang Zhou
|
3591de614d
|
Changed unit tests to expect no ca.crt instead of nil
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
|
2020-05-26 12:16:55 +01:00 |
|
Haoxiang Zhou
|
dceae33364
|
Do not add ca.crt key to TLS secret if empty
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
|
2020-05-26 12:16:20 +01:00 |
|
JoshVanL
|
9c9fe56f0b
|
Update new files to use 2020 copyright
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-05-21 10:52:56 +01:00 |
|
JoshVanL
|
5539bf3495
|
Moves metrics controller into sub-package of ./controller/certificates
and fix metrics listen address flag description
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-05-21 10:47:52 +01:00 |
|
JoshVanL
|
3e7f7eb87e
|
Expose Prometheus listen address as a controller command line flag
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-05-18 18:21:03 +01:00 |
|
JoshVanL
|
92eb8d0957
|
Refactor controllers to use new instrumented metrics that's baked into
all controllers
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-05-18 17:43:56 +01:00 |
|
JoshVanL
|
4dd70a6fe7
|
Adds new metrics controller to reconcile over Certificates and its
Status (Ready and Expiry)
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-05-18 17:43:18 +01:00 |
|
James Munnelly
|
b126a0c0e5
|
Use acme AccountRegistry throughout and tidy up ACME setup code
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-05-13 13:14:46 +01:00 |
|
James Munnelly
|
982b21bb06
|
Fix bug that could lead to validation to fail when attempting to update immutable field
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-05-01 12:33:14 +01:00 |
|
James Munnelly
|
3e8649abc2
|
Handle ACME orders with already valid authorizations upon first fetch through new 'initialState' field
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-05-01 12:33:14 +01:00 |
|
JoshVanL
|
a4cfd41ce7
|
Updates comments to proper working/capitalisation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-30 11:53:42 +01:00 |
|
JoshVanL
|
dc4ba16051
|
Adds comments to clarify issuing_controller_test Certificate current
revision
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-28 11:03:26 +01:00 |
|
JoshVanL
|
d830db4ef7
|
Adds more temp cert tests, don't issue temp cert of different private
key and use shared GenerateLocallySignedCertificate
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-27 16:31:12 +01:00 |
|
JoshVanL
|
c115e6c2bf
|
internal/test.go accepts fixed clock and Shares
generaleLocallySignedCertificate
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-27 16:29:58 +01:00 |
|
JoshVanL
|
7d1d94fedb
|
Adds issuing controller temporary certificate units tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-26 19:39:08 +01:00 |
|
JoshVanL
|
095976548d
|
Adds temporary certificate logic to issuing controller based on
annotation
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-26 19:16:57 +01:00 |
|
JoshVanL
|
92c2d3c7c4
|
Moves secretmanager and testing util into separate package to refactor
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-26 15:45:10 +01:00 |
|
JoshVanL
|
11961b992d
|
Moves Certificate Issuing validation logic and key fetch earlier in sync
loop
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2020-04-26 15:01:32 +01:00 |
|
Maartje Eyskens
|
f2b36483a4
|
Set Issuer kind specific to Issuer if cert-manager.io/issuer is specified.
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
|
2020-04-24 16:16:04 +02:00 |
|
James Munnelly
|
7978fbe081
|
Address review feedback and include truststore.jks with JKS mode enabled
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-22 15:20:49 +01:00 |
|
James Munnelly
|
ba33c823a3
|
Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 17:58:18 +01:00 |
|
jetstack-bot
|
4aff1ce3f0
|
Merge pull request #2814 from munnerz/privatekey-rotation
keymanager: support private key rotationPolicy field
|
2020-04-21 16:02:53 +01:00 |
|
James Munnelly
|
6a827c6b8b
|
Don't use fixed length map
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 14:49:25 +01:00 |
|
James Munnelly
|
019f64e841
|
Fix test failures
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 10:25:56 +01:00 |
|
James Munnelly
|
8a628c3315
|
Update field comments on ChallengeSpec
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 10:07:03 +01:00 |
|
James Munnelly
|
a17d04260e
|
requestmanager: copy labels and annotations onto CertificateRequest resources
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 09:49:32 +01:00 |
|
James Munnelly
|
f04696747c
|
Fix SecretDataAltNamesMatchSpec for loose matching and add tests
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 09:49:32 +01:00 |
|
James Munnelly
|
23892bc6e4
|
keymanager: support private key rotationPolicy field
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-21 09:49:32 +01:00 |
|
James Munnelly
|
e8cc2ba4ac
|
Fix selfsigned issuer unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
a9dd260e95
|
requestmanager: tidy up and add unit tests
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
48958036bf
|
Set NotAfter field in readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
1c26ae412d
|
Move some logic into separate method
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
945dde4175
|
Fix PolicyFunc reference in trigger controller tests
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
8aaca4a2ad
|
expcertificates: add readiness controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
53fa3b70ab
|
Move trigger policies into separate package
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
707b7a486a
|
Fix missing append bug
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
a572f739c2
|
Add trigger policy for private key not matching spec
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
b5c169e35a
|
Fix panic in issuing controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
James Munnelly
|
cde13aa6fd
|
Add requestmanager controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-20 15:08:31 +01:00 |
|
jetstack-bot
|
91d598b1de
|
Merge pull request #2810 from munnerz/keymanager-controller
expcertificates: add keymanager controller
|
2020-04-20 10:17:38 +01:00 |
|
jetstack-bot
|
687d47f832
|
Merge pull request #2027 from pepov/auditsink-injector
Add auditsinks in auditregistration.k8s.io/v1alpha1 to the supported injector targets
|
2020-04-20 08:23:38 +01:00 |
|
Maartje Eyskens
|
db45891705
|
Add missing context
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
|
2020-04-17 16:39:06 +02:00 |
|
James Munnelly
|
d60cb08f13
|
expcertificates: add keymanager controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-16 19:10:41 +01:00 |
|
James Munnelly
|
d0b919a2f7
|
expcertificates: add PrivateKeyMatchesSpec function
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-16 19:10:41 +01:00 |
|
James Munnelly
|
5e00879749
|
Add Secret listing function
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-16 19:10:38 +01:00 |
|
James Munnelly
|
26948ed459
|
Register additional event handlers in issuing controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2020-04-16 17:08:39 +01:00 |
|