James Munnelly
|
ad686fbe58
|
Fix format errors
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-26 09:52:24 +01:00 |
|
James Munnelly
|
406e6ad291
|
Don't depend on pkg/issuer in pkg/util/pki
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-25 15:12:41 +01:00 |
|
James Munnelly
|
f4140e2df0
|
Remove validation dependence on rfc2136 package
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-25 14:57:51 +01:00 |
|
James Munnelly
|
6cd42305ec
|
Fix kubebuilder annotations in pkg/apis
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-25 14:57:50 +01:00 |
|
jetstack-bot
|
4dc46d68cd
|
Merge pull request #1910 from JoshVanL/ca-issuer-sign-migration
Move CA signer into ./pkg/controller/certificaterequests/ca
|
2019-07-25 14:48:28 +01:00 |
|
JoshVanL
|
a0d5793d9b
|
Adds Recorder event tests to CA CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-23 18:18:44 +01:00 |
|
JoshVanL
|
425dbd993c
|
Revert CR unit tests to SelfSigned
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-23 14:21:56 +01:00 |
|
JoshVanL
|
f8c511a705
|
Address ca sign returning error
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-23 12:06:30 +01:00 |
|
JoshVanL
|
294d8ae93d
|
Move IssuerKind to ./pkg/util
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-23 09:27:22 +01:00 |
|
JoshVanL
|
ab838197fc
|
Move CA signer into ./pkg/controller/certificaterequests/ca
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-23 09:27:22 +01:00 |
|
James Munnelly
|
32bc10710e
|
Update use of featuregate package
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-20 01:57:24 +01:00 |
|
James Munnelly
|
74c9c41e78
|
Regenerate client
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-19 23:16:36 +01:00 |
|
jetstack-bot
|
a67c23eded
|
Merge pull request #1879 from munnerz/new-certificate-controller
Implement new Certificate controller that manages CertificateRequest resources
|
2019-07-17 12:25:30 +01:00 |
|
James Munnelly
|
2cee01af1d
|
Factor update secret sections out of processCertificate
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-17 11:05:50 +01:00 |
|
James Munnelly
|
088e196d82
|
Add experimental certificate request based controller
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-17 10:07:36 +01:00 |
|
James Munnelly
|
b99b492827
|
Remove unused var from GenerateCSR
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-17 10:04:40 +01:00 |
|
James Munnelly
|
7edbd829c4
|
Refactor certificates controller to make methods shareable
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-17 10:04:40 +01:00 |
|
JoshVanL
|
6faa657483
|
Prefixes error->reason and correctly bubbles issuer kind to logs
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-17 09:42:59 +01:00 |
|
JoshVanL
|
8bbcf345c9
|
Changes CertificateRequest conditions to only Pending/Failed/Issued
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-16 15:31:12 +01:00 |
|
jetstack-bot
|
65138f5e8c
|
Merge pull request #1811 from cheukwing/issue-1679
Add Prometheus metrics for Certificate ready status
|
2019-07-15 17:52:04 +01:00 |
|
jetstack-bot
|
0b5f963bf9
|
Merge pull request #1884 from munnerz/order-csr-pem
Encode CSR on Order into PEM format and properly handle decoding
|
2019-07-12 17:00:38 +01:00 |
|
James Munnelly
|
c6ceea4e81
|
Encode CSR on Order into PEM format and properly handle decoding
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-12 14:00:46 +01:00 |
|
Michael Tsang
|
b717292090
|
Rewrite if/else for nil selector
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-10 17:09:26 +01:00 |
|
Michael Tsang
|
adfb8703c8
|
Fix bug where solver with no selector causes nil pointer
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-10 15:34:24 +01:00 |
|
Michael Tsang
|
c2fd63a7a6
|
Add comments to refactored metric clean up
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-10 08:54:06 +01:00 |
|
Michael Tsang
|
1317b8df62
|
Add cleanup function slice
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-10 08:54:06 +01:00 |
|
Michael Tsang
|
f3baab085e
|
Add UpdateCertificateStatus call, comment implementation
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-10 08:54:06 +01:00 |
|
Michael Tsang
|
19eeb210c7
|
Add tests for updating certificate status
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
Co-authored-by: Aleksandr Seleznev <alex@slznv.net>
|
2019-07-10 08:52:24 +01:00 |
|
Michael Tsang
|
6fa8e3dbeb
|
Add prometheus metric for certificate ready condition
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
Co-authored-by: Aleksandr Seleznev <alex@slznv.net>
|
2019-07-10 08:52:24 +01:00 |
|
jetstack-bot
|
13ebd873d9
|
Merge pull request #1860 from JoshVanL/cr-group-ref
Include Group name in IssuerRef for CertificateRequest controller ownership distinction
|
2019-07-09 14:10:04 +01:00 |
|
JoshVanL
|
e41a8f1892
|
Adds not certmanager group ref bailout for certificates controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-09 13:14:58 +01:00 |
|
jetstack-bot
|
a14cd35942
|
Merge pull request #1852 from munnerz/fixup-update-email
Fix issues with updating ACME account email
|
2019-07-08 14:42:34 +01:00 |
|
JoshVanL
|
c949b01aac
|
Adds Group to CertificateRequest IssuerRef to distinguish controller
ownership
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-08 14:33:11 +01:00 |
|
jetstack-bot
|
1b9b83a4b8
|
Merge pull request #1803 from cheukwing/issue-1770
Add support for nodeSelector, tolerations & affinity in podTemplate
|
2019-07-08 14:27:34 +01:00 |
|
jetstack-bot
|
c6cd522a6a
|
Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller
Add alpha CertificateRequest controller for CA Issuer type
|
2019-07-08 14:11:34 +01:00 |
|
James Munnelly
|
096fa22d07
|
Set ExtKeyUsageServerAuth in GenerateTemplateFromCertificateRequest
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-05 17:27:43 +01:00 |
|
jetstack-bot
|
be9b48281e
|
Merge pull request #1856 from munnerz/event-on-no-matching-selectors
Fire an Event when no acme solver matches an identifier being validated
|
2019-07-05 16:12:13 +01:00 |
|
jetstack-bot
|
9d418eae25
|
Merge pull request #1818 from cheukwing/issue-1812
Add validation for CommonName and DNSNames length
|
2019-07-05 16:11:57 +01:00 |
|
James Munnelly
|
aa3e2fa4aa
|
Fix typos and tidy up imports
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-05 15:30:32 +01:00 |
|
James Munnelly
|
46a3144c33
|
Mark fields optional
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-05 15:27:43 +01:00 |
|
James Munnelly
|
361ee83102
|
Update to use custom PodSpec struct and support Affinity too
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-05 15:21:40 +01:00 |
|
Michael Tsang
|
d34effece0
|
Add nodeselector and tolerations to pod building
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-05 14:57:48 +01:00 |
|
Michael Tsang
|
38045e6c16
|
Add podspec and checks to podtemplate
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-05 14:57:48 +01:00 |
|
James Munnelly
|
8f9f962b58
|
Add unit tests for matchCAA function
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-05 14:56:02 +01:00 |
|
JoshVanL
|
a60a6d755f
|
Share key type func
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
|
2019-07-05 10:14:25 +01:00 |
|
James Munnelly
|
ed3efdebe0
|
orders: fire an Event when no acme solver matches an identifier being validated
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-04 22:14:35 +01:00 |
|
James Munnelly
|
34e4214ac2
|
Set max commonName length to 64 characters
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-04 21:53:52 +01:00 |
|
James Munnelly
|
edbe6e20ad
|
Refactor validation to make it clearer
Signed-off-by: James Munnelly <james@munnelly.eu>
|
2019-07-04 18:10:38 +01:00 |
|
Michael Tsang
|
d010731838
|
Fix long domain tests
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-04 18:10:38 +01:00 |
|
Michael Tsang
|
44cee04c17
|
Add validation for commonname and dnsnames length
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
|
2019-07-04 18:10:38 +01:00 |
|