weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
7,113 Commits 45 Branches 0 Tags 96 MiB
aeae4b35fc
Commit Graph

105 Commits

Author SHA1 Message Date
Ashley Davis
fb231ab641
Remove bazel 🎉 
This removes all .bazel and .bzl files, and a bunch of scripts relating
to bazel, now that it's been entirely replaced.

There are still a few places where traces could be removed, but this
removes the brunt of the bazel stuff that remains.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-07-26 11:38:50 +01:00
Ashley Davis
d5ca2585d6
Increase ACME client HTTP timeout to 90s 
This is the final part of implementing
https://github.com/cert-manager/cert-manager/pull/5214

This timeout is shorter than the 2 minute timeout we increased
controllers to - that's because we'd generally expect that controller
sync loops would need to do additional actions before and after making
HTTP requests.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-06-22 11:35:05 +01:00
Ashley Davis
5ee43c115a
Remove timeouts in ACME logging middleware 
Logging middleware probably isn't the place for this in any case, but
more broadly there's little need to add additional timeouts here since
we have a context timeout configured during issuance and ACME timeouts
configured at the level of the HTTP client we use.

This is the second part of implementing the timeouts proposal from
https://github.com/cert-manager/cert-manager/pull/5214

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-06-22 11:35:04 +01:00
Ashley Davis
3a055cc2f5
rename all uses of github.com/jetstack/cert-manager 
This was done by running the following command twice:

 ```bash
 grep -Ri "github.com/jetstack/cert-manager" . | \
 cut -d":" -f1 | \
 sort | \
 uniq | \
 xargs sed -i
 "s/github.com\/jetstack\/cert-manager/github.com\/cert-manager\/cert-manager/"
 ```

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-02-02 09:08:31 +00:00
joshvanl
a220be5bc5 Adds user agent pipethrough for acme accounts 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-01-27 12:51:49 +00:00
Sunghoon Kang
47d07e85de
Add test for creating ChallengeServer with solvers 
Signed-off-by: Sunghoon Kang <hoon@linecorp.com>
 2022-01-08 22:55:21 +09:00
Sunghoon Kang
bfe3210ccc
Install APIGroup once for multiple DNS providers 
If we register multiple DNS providers while running the webhook server,
it will cause an unexpected exit with 'WebService with duplicate root
path detected' error. This issue happens because the root path of each
DNS provider is equal since they share the group name.

This commit installs APIGroup once for multiple DNS providers by
extracting apiGroupInfo variable and InstallAPIGroup call from solver
(DNS provider) loop in ChallengeServer constructor.

Signed-off-by: Sunghoon Kang <hoon@linecorp.com>
 2022-01-04 00:50:23 +09:00
irbekrm
598ed35e4a Uses go/crypto ListCertAlternates function to fetch alternative certificate chains 
This allows us to use upstream go/crypto again instead of our own fork

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-07 15:21:26 +01:00
irbekrm
cb6a746726 Runs ./hack/update-all.sh 
New format of Go build tags gets added

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:19 +01:00
joshvanl
0c96c54416 Adds the ACME client middleware when create an ACME account 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-09-03 13:47:43 +01:00
joshvanl
a9aa3b3579 Update ACME webhook API to use apiextensions v1beta1 -> v1 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-07-26 17:03:14 +01:00
Inteon
d6cd6f457d
set correct exit codes when exiting 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-22 12:57:08 +02:00
irbekrm
a42771b7e4 Adds a bunch of comments for exported types 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:19:43 +01:00
irbekrm
f5aa3cffd1 Removes an unnecessary newline after package comment 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:17:57 +01:00
Tamal Saha
da86194a9d Update to k8s 1.21.0 tool chain 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
irbekrm
c97b14a216 Fix FakeRegistry.AddClient + ensure that FakeACME implements accounts.Registry 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-10 09:52:34 +01:00
irbekrm
d8367cbac8 Remove direct calls to external deps from Setup function 
Allow the functionality to set up a new ACME client and to retrieve and decode ACME account's key to be stubbed in tests

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-10 09:51:07 +01:00
Jake Sanders
196e42c221
Tidy godoc comments 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-05-05 16:21:24 +01:00
Jake Sanders
f194d9b732
Add godoc comments 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-05-05 15:59:02 +01:00
Josh Soref
e9fe56594c spelling: wrapped 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2021-03-04 13:04:38 -05:00
Josh Soref
cb22798289 spelling: validate 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2021-03-04 13:04:38 -05:00
Josh Soref
6b3cf75fdf spelling: instrumented 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2021-03-04 13:04:38 -05:00
Maartje Eyskens
be205c04e6 Run a codegen update 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2021-01-08 15:05:32 +01:00
Maartje Eyskens
ab0cd57dc5 Use The cert-manager Authors. 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-11 19:04:13 +01:00
Maartje Eyskens
1788a9d758 Update copyright to cert-manager project 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-08 19:04:49 +01:00
Maartje Eyskens
61a7333955 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-11-17 16:27:16 +01:00
Maartje Eyskens
4758efe7da
Apply suggestions from code review 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
 2020-11-17 16:03:58 +01:00
Maartje Eyskens
7c5cedf103 Update Bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-11-10 10:35:11 +01:00
Maartje Eyskens
b847c91054 Add boilerplate 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-11-10 10:32:31 +01:00
Maartje Eyskens
f6e2d48a42 Add tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-11-06 17:16:56 +01:00
Maartje Eyskens
7d90fae6e4 Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-21 19:47:27 +02:00
Maartje Eyskens
229425ad3a Use status code 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-21 17:03:19 +02:00
Maartje Eyskens
66485a6624 Update Bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-16 09:51:33 +02:00
Maartje Eyskens
e748afb9e5 Make an exception for badNonce errors 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-15 16:25:19 +02:00
Maartje Eyskens
45ff40e8ff Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-15 13:16:54 +02:00
Maartje Eyskens
3e0fb2ac61 Disable Go's ACME retry logic 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-10-15 11:00:11 +02:00
Maartje Eyskens
55c4562eaf Add license 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 17:13:19 +02:00
Maartje Eyskens
739ca14e9d Fix place of log 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:51:43 +02:00
Maartje Eyskens
807ed0e85c Improve logic order 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:50:17 +02:00
Maartje Eyskens
a752503e81 Forgot to commit one file 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:47:14 +02:00
Maartje Eyskens
3897cbb0ef Fix import order 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:40:40 +02:00
Maartje Eyskens
9e19b68304 Implement ACME backoff in the correct place + improve logic 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-09-25 16:34:23 +02:00
Maartje Eyskens
e0749ad822 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-27 13:02:18 +02:00
Maartje Eyskens
14ea7c3f65 Update k8s toolchain to 0.19.0-rc.3 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-26 14:15:54 +02:00
jetstack-bot
dcfc5f4210
Merge pull request #3215 from meyskens/acme-backoff-func 
Provide a backoff function to ACME
 2020-08-26 12:29:35 +01:00
Maartje Eyskens
efb5c25928 Make it always error if retry-after is set 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 16:43:18 +02:00
Maartje Eyskens
e477ea015b Provide a backoff function to ACME 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-25 16:37:37 +02:00
Maartje Eyskens
abc4675bae Fix interface 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-24 14:54:03 +02:00
Maartje Eyskens
90d6a54151 Add support for alternate certs with PrefferedChain in ACME 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-21 17:56:26 +02:00
Richard Wall
81eb53f597 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:28:06 +01:00