Commit Graph

7113 Commits

Author SHA1 Message Date
joshvanl
f1d7c43276 Updates wording for aws rout53 dns CRD field comments
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2022-07-04 17:06:40 +01:00
jetstack-bot
32e294a916
Merge pull request #5264 from SgtCoDFish/kubebuilder-arm64
Kubebuilder Assets darwin/arm64
2022-07-04 16:01:46 +01:00
jetstack-bot
61b26bbe71
Merge pull request #5266 from JoshVanL/scripts-bin-bash-to-usr-bin-env-bin-bash
Change all scripts #!/bin/bash -> #!/usr/bin/env bash
2022-07-04 15:22:45 +01:00
Ashley Davis
cdfcc63951
check gatewayapi SHA256SUM
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-07-04 15:02:36 +01:00
Ashley Davis
59c7f881ff
use new darwin-arm64 versions of kubebuilder tools
previously we'd relied on rosetta because these tools hadn't been built
for darwin-arm64, but now they've started to be built and we can use
arm64 versions directly

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-07-04 15:02:36 +01:00
joshvanl
328ea2b632 Change all scripts #!/bin/bash -> #!/usr/bin/env bash. Also changes same
for Makefile SHELL

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
2022-07-04 14:49:34 +01:00
jetstack-bot
5a4e7654d4
Merge pull request #5097 from lucacome/bump-k8s-deps
Bump k8s.io dependencies
2022-07-04 14:44:45 +01:00
irbekrm
5903c34cda Updates LICENSES
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-07-04 09:10:10 +01:00
irbekrm
bcc691db08 Bump informerResyncPeriod
As minimum resync period in client-go is 1s. Also makes sure that the tests don't sleep for 'too long'.

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-07-04 08:52:02 +01:00
irbekrm
a93e028a75 Downgrade kube-openapi
As the later version has a breaking change (bumps github.com/emicklei/go-restful -> github.com/emicklei/go-restful/v3)

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-07-01 19:16:43 +01:00
irbekrm
1c48a7351d Bump versions of kubebuilder assets and kubectl
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-07-01 19:16:31 +01:00
irbekrm
cb86bdfce7 Bump Helm dependency
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-07-01 19:16:16 +01:00
jetstack-bot
ad50d45487
Merge pull request #5252 from SgtCoDFish/upgrade-test-make
Port upgrade test to make
2022-07-01 17:20:38 +01:00
jetstack-bot
5c6bc8fb4e
Merge pull request #5250 from irbekrm/remove_networking_beta
Removes support for networking/v1beta1 Ingress
2022-07-01 16:52:38 +01:00
jetstack-bot
0e3b9143c7
Merge pull request #5256 from SgtCoDFish/basebump
Bump base images to latest available
2022-07-01 16:15:38 +01:00
Ashley Davis
a0ad47f117
bump base images to latest available
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-07-01 12:50:21 +01:00
Luca Comellini
aaa513de00
Bump k8s.io dependencies
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2022-06-30 15:16:14 -07:00
Ashley Davis
18e98ce3da
move legacy targets to legacy.mk
we don't _need_ to remove these and we can keep them around for
longer, but we don't need them to be in files we actually use and edit.

putting the targets in a separate file feels cleaner!

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-30 22:35:45 +01:00
Ashley Davis
ca35696244
add make-based upgrade test
This uses cmctl instead of kubectl_cert-manager, uses make instead of
bazel and fixes an incorrect container name in
test/fixtures/upgrade/overlay/cainjector-ops.yaml

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-30 22:35:39 +01:00
Ashley Davis
27e1a770b3
add warning about vendor-go gotcha
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-30 22:33:56 +01:00
jetstack-bot
eb9eedd2eb
Merge pull request #5251 from SgtCoDFish/update-deps
Make update-all & ensure bazel-only targets are runnable
2022-06-30 17:09:04 +01:00
jetstack-bot
d15d2d51ec
Merge pull request #5199 from irbekrm/fix_keyrotation_warning
Fix keyrotation warning
2022-06-30 14:14:03 +01:00
jetstack-bot
5d2542ab2e
Merge pull request #5196 from irbekrm/fix_retry_flag_help
Corrects the --dns01-check-retry-period flag description
2022-06-30 13:25:03 +01:00
Ashley Davis
642161a963
make update-all & ensure bazel-only targets are runnable
this allows us to maintain the bazel build files until they're removed,
but tries to avoid accidentally encouraging their use

`make update-all` implementes a non-bazel version of
`hack/update-all.sh`, with `hack/update-all.sh` now calling make but
also doing the bazel stuff it used to.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-30 12:47:30 +01:00
irbekrm
1d326af871 Runs ./hack/update-bazel.sh
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-30 10:20:40 +01:00
irbekrm
05a3133b34 Removes support for networking/v1beta1 Ingress
As the lowest version of Kubernetes that we support now is v1.20 that serves v1 networking

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-30 09:24:59 +01:00
jetstack-bot
2efc0d37da
Merge pull request #5247 from hawksight/pf/venafi-timeouts
Increase Venafi issuer timeout on retrieving certificate
2022-06-29 13:20:58 +01:00
Peter Fiddes
30847edaad
Increase Venafi issuer timeout on retrieving certificate
Signed-off-by: Peter Fiddes <peter.fiddes@gmail.com>
2022-06-29 09:51:14 +01:00
jetstack-bot
3ecf7ae5bb
Merge pull request #5239 from oGi4i/issue-4997
Add private key Ingress annotations to set private key properties for Certificate
2022-06-28 21:21:23 +01:00
jetstack-bot
4ed78c7e0d
Merge pull request #5245 from SgtCoDFish/noglobalpython
Don't require python to be installed for everything
2022-06-28 17:32:23 +01:00
Ashley Davis
80bbe953bb
fix name of command in example comment
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-28 16:24:28 +01:00
Ashley Davis
2c9344e316
Don't require python to be installed for everything
We only use python in one place and probably won't start using it more
without some kind of policy change. We don't need to require that everyone
has it installed, and can instead only require it for people who're running
the boilerplate check

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-28 15:57:39 +01:00
jetstack-bot
c9ef9ae926
Merge pull request #5243 from SgtCoDFish/last-targets
Implement license verification in make
2022-06-28 15:50:24 +01:00
oGi4i
cb2cabb06f
Add private key Ingress annotations to set private key properties for Certificate
Signed-off-by: oGi4i <das.ogi4i@gmail.com>
2022-06-28 17:45:08 +03:00
Ashley Davis
6eb1be3636
make verify_deps is now a no-op
this will allow tests to pass until we remove the pull-cert-manager-deps test

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-28 09:28:01 +01:00
Ashley Davis
358785fb3d
remove now-replaced tests from hack/BUILD.bazel
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-28 09:28:01 +01:00
Ashley Davis
a6b2955747
update LICENSES file to new format
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-28 09:28:00 +01:00
Ashley Davis
f8c1ebe2d8
add make verifier / updater for LICENSES
Uses go-licenses to create a CSV file which replaces LICENSES.

The replacement is much smaller and easier to parse for both humans
and for machines.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-28 09:27:54 +01:00
Ashley Davis
b3a3f61fbf
add install for go-licenses
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-27 18:15:08 +01:00
Ashley Davis
c6745ea7a9
move VENDORED_GO_VERSION up with other versions
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-27 18:15:07 +01:00
jetstack-bot
888f424553
Merge pull request #5242 from SgtCoDFish/make-it-work
Add CRD + Codegen
2022-06-27 15:02:48 +01:00
Ashley Davis
3c33140c11
remove bazel tests which are run in make
There's no need to run these twice in our presubmit tests

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-27 13:25:25 +01:00
Ashley Davis
eccde015ac
add CRD generation to makefile, replacing bazel
- includes a run of make update-crds which causes some trivial changes
- updates version of YQ to latest
- makes hack/update-crds.sh just call make
- makes hack/verify-crds.sh just call make
- moves functionality of hack/verify-crds.sh to hack/check-crds.sh,
  using the makefile for generating alternative CRDs for comparison
- removes the bazel test associated with CRDs

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-27 13:25:18 +01:00
Ashley Davis
22c0f45e22
add a make variant for codegen tools
- runs "make update-codegen"
- adds codegen verification to make tests
- changes hack/(update|verify)-codegen.sh to just call make
- removes bazel codegen test so it's not automatically run in CI

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-24 09:58:01 +01:00
Ashley Davis
7230ff85a5
add extra info on how to fix when tools are missing
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-24 09:54:57 +01:00
Ashley Davis
52b94bb5a3
bump version of k8s-codegen assets
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-24 09:54:52 +01:00
jetstack-bot
f5be6e4cc9
Merge pull request #5226 from SgtCoDFish/issuer-timeout
ACME Timeout Increases
2022-06-23 10:40:39 +01:00
Ashley Davis
d5ca2585d6
Increase ACME client HTTP timeout to 90s
This is the final part of implementing
https://github.com/cert-manager/cert-manager/pull/5214

This timeout is shorter than the 2 minute timeout we increased
controllers to - that's because we'd generally expect that controller
sync loops would need to do additional actions before and after making
HTTP requests.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-22 11:35:05 +01:00
Ashley Davis
5ee43c115a
Remove timeouts in ACME logging middleware
Logging middleware probably isn't the place for this in any case, but
more broadly there's little need to add additional timeouts here since
we have a context timeout configured during issuance and ACME timeouts
configured at the level of the HTTP client we use.

This is the second part of implementing the timeouts proposal from
https://github.com/cert-manager/cert-manager/pull/5214

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-22 11:35:04 +01:00
Ashley Davis
a40fdd64b5
Incease issuer and clusterissuer controller timeouts
This follows ideas presented in
https://github.com/cert-manager/cert-manager/pull/5214

It might be nice to add these big timeouts globally to all controllers
but we're intentionally keeping these changes small and targeted for now
in order to minimise the risk when backporting these changes.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-22 11:35:00 +01:00