Commit Graph

174 Commits

Author SHA1 Message Date
jetstack-bot
b365021dc8
Merge pull request #2428 from haines/remove-nameserver-ip-address-validation
Remove IP address validation on dns01-recursive-nameservers to allow domain names
2019-12-12 16:31:14 +00:00
James Munnelly
f3a58ed991 webhook: register pprof http handlers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-10 16:54:15 +00:00
Andrew Haines
3edb4c3c6c
Remove IP address validation on dns01-recursive-nameservers to allow domain names
Signed-off-by: Andrew Haines <andrew@haines.org.nz>
2019-12-05 13:34:55 +00:00
jetstack-bot
1793e7b573
Merge pull request #2236 from munnerz/covered-images
Add Bazel image targets with coverage enabled
2019-11-14 10:54:09 +00:00
James Munnelly
4266e11747 Remove calls to os.Exit and panic
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-11-13 17:38:33 +00:00
James Munnelly
dbd92f88ef Add conversion webhook handler
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-24 19:41:55 +01:00
jetstack-bot
7a40669fcc
Merge pull request #2219 from munnerz/webhook-validate-order-updates
Make Order resource status & Challenge spec fields immutable
2019-10-17 17:45:48 +01:00
jetstack-bot
66d32a204f
Merge pull request #2242 from munnerz/cm-manifestlist-acmesolver
No longer use arch-specific acmesolver image
2019-10-17 14:16:14 +01:00
James Munnelly
ed284084b3 Refactor validation handler to support updates
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-17 13:27:08 +01:00
James Munnelly
ca9e8f33b2 Clean up webhook handler interface
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-17 12:56:13 +01:00
jetstack-bot
ee9cbf25af
Merge pull request #2245 from munnerz/webhook-golang-httpserver
Use standard golang http server for webhook
2019-10-17 12:54:23 +01:00
James Munnelly
da8bf264fd Use standard golang http server for webhook
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-17 12:29:34 +01:00
chenjun.cj
fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
2019-10-17 12:14:28 +08:00
James Munnelly
7eb2e5efa0 No longer use arch-specific acmesolver image
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 16:24:34 +01:00
James Munnelly
5057da1b89 Add Bazel image targets with coverage enabled
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-10-16 08:59:24 +01:00
JoshVanL
4eb6335c76 Support out of tree issuers in ingress-shim
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-09-27 13:54:39 +01:00
James Munnelly
f466aeea88 Fix govet warnings
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-27 12:07:08 +01:00
James Munnelly
fad13bfce1 Move image macro into hack/build
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-27 12:07:08 +01:00
James Munnelly
973f4aa424 Update codebase for external dependencies
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-26 12:52:43 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-20 16:22:43 +01:00
James Munnelly
6a167cc9e6 Enable all CertificateRequest controllers by default
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
James Munnelly
bc61194709 Remove deprecated code from ingress-shim controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-09-19 13:07:59 +01:00
jetstack-bot
dcba8ebd06
Merge pull request #2002 from munnerz/internal-apiversion
Add internal API version, enable defaulter & conversion-gen and implement mutating webhook
2019-08-21 21:53:36 +01:00
James Munnelly
6052e0558e Refactor base controller and allow Running additional informers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:22:57 +01:00
James Munnelly
00410e3831 Switch to use new webhook handlers
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-21 13:10:31 +01:00
JoshVanL
d96c7d2e1c Adds venafi internal package with venafi CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-19 16:04:12 +01:00
jetstack-bot
8ab4dc1301
Merge pull request #1943 from JoshVanL/cr-acme
Adds acme CertificateRequest controller
2019-08-17 00:34:00 +01:00
JoshVanL
e2b9b21766 Adds acme CertificateRequest controller with unit tests
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-15 17:18:11 +01:00
James Munnelly
5c17c2e37f Add webhookbootstrap controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 21:27:36 +01:00
James Munnelly
dd66c11115 Extend cainjector to support injecting from secrets
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-14 12:57:01 +01:00
jetstack-bot
4f622c7479
Merge pull request #1986 from munnerz/rearrange-webhook
Move API webhook validation package
2019-08-14 12:19:55 +01:00
JoshVanL
60b349e162 Adds initial vault CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-13 23:34:17 +01:00
James Munnelly
d56b6be948 Move API webhook validation package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-08-13 20:41:53 +01:00
JoshVanL
46fd159f81 Register self signed CR controller
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-08-01 16:39:01 +01:00
James Munnelly
99bbc31386 Promote 'Clock' to be a field on controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-26 12:30:23 +01:00
James Munnelly
32bc10710e Update use of featuregate package
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-20 01:57:24 +01:00
James Munnelly
088e196d82 Add experimental certificate request based controller
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-17 10:07:36 +01:00
jetstack-bot
c6cd522a6a
Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller
Add alpha CertificateRequest controller for CA Issuer type
2019-07-08 14:11:34 +01:00
JoshVanL
ec28f8dc6e Adds certificate request controller feature flag
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-03 15:43:14 +01:00
JoshVanL
6b1ff0148b Adds certificate request base controller and CA issuer controller
instance

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2019-07-03 15:42:03 +01:00
James Munnelly
5f5811b81e Respect --namespace flag in rfc2136 provider
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-03 13:52:43 +01:00
James Munnelly
5a096b0b07 Fix lint failures and remove image target manual tag
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-02 18:26:12 +01:00
James Munnelly
de34f0410d Use binary image targets to avoid building multiple architectures all the time
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-02 17:29:32 +01:00
James Munnelly
fd2dd16f75 Change bazel build to only build for current --platform
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-07-02 16:10:05 +01:00
Michael Tsang
2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
2019-05-13 16:55:38 +01:00
James Munnelly
500d8fbeb7 Create image bundles in multiarch_image target
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-05-03 11:16:25 +01:00
James Munnelly
9906c0d946 Add feature gate for ValidateCAA functionality and default it to off
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-25 15:10:05 +01:00
James Munnelly
942d6491d6 Pass StopCh and RESTClient to controller context
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:08 +01:00
James Munnelly
871ed4283b Allow controller constructors to return errors
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-18 14:22:04 +01:00
Lennart Jern
cd576dd8db Set default acmesolver image based on arch
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
2019-03-22 17:32:34 +01:00