Commit Graph

1059 Commits

Author SHA1 Message Date
James Munnelly
ad686fbe58 Fix format errors
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 09:52:24 +01:00
James Munnelly
406e6ad291 Don't depend on pkg/issuer in pkg/util/pki
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-25 15:12:41 +01:00
James Munnelly
f4140e2df0 Remove validation dependence on rfc2136 package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-25 14:57:51 +01:00
James Munnelly
6cd42305ec Fix kubebuilder annotations in pkg/apis
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-25 14:57:50 +01:00
jetstack-bot
4dc46d68cd
Merge pull request #1910 from JoshVanL/ca-issuer-sign-migration
Move CA signer into ./pkg/controller/certificaterequests/ca
2019-07-25 14:48:28 +01:00
JoshVanL
a0d5793d9b Adds Recorder event tests to CA CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-23 18:18:44 +01:00
JoshVanL
425dbd993c Revert CR unit tests to SelfSigned
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-23 14:21:56 +01:00
JoshVanL
f8c511a705 Address ca sign returning error
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-23 12:06:30 +01:00
JoshVanL
294d8ae93d Move IssuerKind to ./pkg/util
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-23 09:27:22 +01:00
JoshVanL
ab838197fc Move CA signer into ./pkg/controller/certificaterequests/ca
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-23 09:27:22 +01:00
James Munnelly
32bc10710e Update use of featuregate package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-20 01:57:24 +01:00
James Munnelly
74c9c41e78 Regenerate client
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-19 23:16:36 +01:00
jetstack-bot
a67c23eded
Merge pull request #1879 from munnerz/new-certificate-controller
Implement new Certificate controller that manages CertificateRequest resources
2019-07-17 12:25:30 +01:00
James Munnelly
2cee01af1d Factor update secret sections out of processCertificate
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 11:05:50 +01:00
James Munnelly
088e196d82 Add experimental certificate request based controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:07:36 +01:00
James Munnelly
b99b492827 Remove unused var from GenerateCSR
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:04:40 +01:00
James Munnelly
7edbd829c4 Refactor certificates controller to make methods shareable
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:04:40 +01:00
JoshVanL
6faa657483 Prefixes error->reason and correctly bubbles issuer kind to logs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-17 09:42:59 +01:00
JoshVanL
8bbcf345c9 Changes CertificateRequest conditions to only Pending/Failed/Issued
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-16 15:31:12 +01:00
jetstack-bot
65138f5e8c
Merge pull request #1811 from cheukwing/issue-1679
Add Prometheus metrics for Certificate ready status
2019-07-15 17:52:04 +01:00
jetstack-bot
0b5f963bf9
Merge pull request #1884 from munnerz/order-csr-pem
Encode CSR on Order into PEM format and properly handle decoding
2019-07-12 17:00:38 +01:00
James Munnelly
c6ceea4e81 Encode CSR on Order into PEM format and properly handle decoding
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-12 14:00:46 +01:00
Michael Tsang
b717292090 Rewrite if/else for nil selector
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-10 17:09:26 +01:00
Michael Tsang
adfb8703c8 Fix bug where solver with no selector causes nil pointer
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-10 15:34:24 +01:00
Michael Tsang
c2fd63a7a6 Add comments to refactored metric clean up
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-10 08:54:06 +01:00
Michael Tsang
1317b8df62 Add cleanup function slice
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-10 08:54:06 +01:00
Michael Tsang
f3baab085e Add UpdateCertificateStatus call, comment implementation
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-10 08:54:06 +01:00
Michael Tsang
19eeb210c7 Add tests for updating certificate status
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
Co-authored-by: Aleksandr Seleznev <alex@slznv.net>
2019-07-10 08:52:24 +01:00
Michael Tsang
6fa8e3dbeb Add prometheus metric for certificate ready condition
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
Co-authored-by: Aleksandr Seleznev <alex@slznv.net>
2019-07-10 08:52:24 +01:00
jetstack-bot
13ebd873d9
Merge pull request #1860 from JoshVanL/cr-group-ref
Include Group name in IssuerRef for CertificateRequest controller ownership distinction
2019-07-09 14:10:04 +01:00
JoshVanL
e41a8f1892 Adds not certmanager group ref bailout for certificates controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-09 13:14:58 +01:00
jetstack-bot
a14cd35942
Merge pull request #1852 from munnerz/fixup-update-email
Fix issues with updating ACME account email
2019-07-08 14:42:34 +01:00
JoshVanL
c949b01aac Adds Group to CertificateRequest IssuerRef to distinguish controller
ownership

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-08 14:33:11 +01:00
jetstack-bot
1b9b83a4b8
Merge pull request #1803 from cheukwing/issue-1770
Add support for nodeSelector, tolerations & affinity in podTemplate
2019-07-08 14:27:34 +01:00
jetstack-bot
c6cd522a6a
Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller
Add alpha CertificateRequest controller for CA Issuer type
2019-07-08 14:11:34 +01:00
James Munnelly
096fa22d07 Set ExtKeyUsageServerAuth in GenerateTemplateFromCertificateRequest
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 17:27:43 +01:00
jetstack-bot
be9b48281e
Merge pull request #1856 from munnerz/event-on-no-matching-selectors
Fire an Event when no acme solver matches an identifier being validated
2019-07-05 16:12:13 +01:00
jetstack-bot
9d418eae25
Merge pull request #1818 from cheukwing/issue-1812
Add validation for CommonName and DNSNames length
2019-07-05 16:11:57 +01:00
James Munnelly
aa3e2fa4aa Fix typos and tidy up imports
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 15:30:32 +01:00
James Munnelly
46a3144c33 Mark fields optional
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 15:27:43 +01:00
James Munnelly
361ee83102 Update to use custom PodSpec struct and support Affinity too
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 15:21:40 +01:00
Michael Tsang
d34effece0 Add nodeselector and tolerations to pod building
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-05 14:57:48 +01:00
Michael Tsang
38045e6c16 Add podspec and checks to podtemplate
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-05 14:57:48 +01:00
James Munnelly
8f9f962b58 Add unit tests for matchCAA function
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-05 14:56:02 +01:00
JoshVanL
a60a6d755f Share key type func
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-05 10:14:25 +01:00
James Munnelly
ed3efdebe0 orders: fire an Event when no acme solver matches an identifier being validated
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-04 22:14:35 +01:00
James Munnelly
34e4214ac2 Set max commonName length to 64 characters
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-04 21:53:52 +01:00
James Munnelly
edbe6e20ad Refactor validation to make it clearer
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-04 18:10:38 +01:00
Michael Tsang
d010731838 Fix long domain tests
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-04 18:10:38 +01:00
Michael Tsang
44cee04c17 Add validation for commonname and dnsnames length
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-07-04 18:10:38 +01:00