weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
6,296 Commits 45 Branches 0 Tags 96 MiB
b2e63dbed3
Commit Graph

555 Commits

Author SHA1 Message Date
Haoxiang Zhou
9a1da3ed71 Not creating OrderStatus at all if not ACME Issuer 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-14 09:35:09 +02:00
Haoxiang Zhou
d4877695da Use GenericIssuer to clean up Run function 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-14 09:35:09 +02:00
jetstack-bot
e1791b0b0e
Merge pull request #3154 from hzhou97/add_order_output 
Ctl command `status certificate`: Add order output
 2020-08-12 14:13:59 +01:00
Maartje Eyskens
3259fdfe9b Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens
827ce9c5ad Revert log levels on errors 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens
bdc8b346c6 Log NS as info 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:42 +02:00
Maartje Eyskens
5d4869b20e Fix formatted logs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens
86dee5ed41 Set error log levels 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens
fecd0b3518 Set all log levels for info 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Maartje Eyskens
9dd00905e9 Update klog 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

klog v2

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:59:41 +02:00
Haoxiang Zhou
a1f7a1fcc3 Review implementation 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-06 18:21:48 +01:00
Haoxiang Zhou
8c9eb43102 Clean up 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-06 16:37:07 +01:00
Haoxiang Zhou
196959a05f No output about Orders if non-ACME Issuer 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-06 14:37:54 +01:00
Haoxiang Zhou
3913fa981f Add output about Order of Certificate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-06 12:02:26 +01:00
Haoxiang Zhou
8b6aad2c85 Populate CertificateStatus struct directly 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-04 12:55:33 +01:00
Haoxiang Zhou
f971e49400 Update unit test 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-03 12:07:14 +01:00
Haoxiang Zhou
6afc1d6cfa Change status cert to use structs 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-03 11:19:13 +01:00
Haoxiang Zhou
33bb65c9e1 Add NewTabWriter function 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-03 10:11:57 +01:00
Haoxiang Zhou
d490e52a5e Define builder and String functions for status struct 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-08-03 10:09:36 +01:00
Haoxiang Zhou
95a4f8f477 Define structs containing info for status command 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-31 12:17:29 +01:00
Haoxiang Zhou
25472462a3 Handle unknown values of Ext Key Usage if added in future 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-31 09:45:29 +01:00
Haoxiang Zhou
ef95d15642 Updated tests with output for secret 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-30 17:54:57 +01:00
Haoxiang Zhou
6ddcef818e Added unit test for key usage to string funtions 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-30 17:50:50 +01:00
Haoxiang Zhou
7bdc1eb237 Add output for secrets 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-29 12:24:04 +01:00
Haoxiang Zhou
f3bfc6d6ba Use Fprintf correctly 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-29 12:22:44 +01:00
jetstack-bot
ec6d2bb3e5
Merge pull request #3120 from hzhou97/add_issuer_output 
Ctl status certificate command: Add issuer output and creation time
 2020-07-29 12:13:20 +01:00
jetstack-bot
8434c6a941
Merge pull request #3094 from hzhou97/create_cr_new_test 
Create cr command: change and add integration tests
 2020-07-27 15:56:14 +01:00
Haoxiang Zhou
0c3eeaed96 Handle Issuers from non cert-manager groups 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-27 15:41:13 +01:00
Haoxiang Zhou
0d449ea76d Add tests for non-existing issuer; Review implementation 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-27 14:20:49 +01:00
Haoxiang Zhou
3b6b725c5d Added Certificate creation time to output 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-24 16:03:29 +01:00
Haoxiang Zhou
c4f7e27413 Add Issuer/ClusterIssuer output 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-24 15:32:34 +01:00
Haoxiang Zhou
cc40aad0ad Fix bug of using overwritten pointer when searching for CR 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-24 14:20:29 +01:00
Haoxiang Zhou
e9cdcbd3c4 Remove unnecessary PrefixWriter implementation 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-23 09:47:30 +01:00
Haoxiang Zhou
57ff60e35c Added more unit tests for Run function 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 17:29:47 +01:00
Haoxiang Zhou
d65e95eaeb Refactor TestCtlCreateCRBehaviourBeforeAnythingIsCreated to unit tests 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 16:51:48 +01:00
Haoxiang Zhou
8525a26bd2 Format the Events output with tabwriter 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 12:31:37 +01:00
Haoxiang Zhou
35e1d33ee4 Review implementations 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 09:45:17 +01:00
Haoxiang Zhou
f95251a5da Output Events of CR as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 09:45:17 +01:00
Haoxiang Zhou
a428472be7 Create implementation of PrefixWriter interface in describe package of kubectl 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 09:45:17 +01:00
Haoxiang Zhou
20c5e2696b Output the Events of Certificate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-22 09:45:17 +01:00
Haoxiang Zhou
f061f15e93 Review implementations 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-21 15:57:02 +01:00
Haoxiang Zhou
f5aeb56400 Validate errors if from-certificate-file flag is empty 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-17 17:48:02 +01:00
Haoxiang Zhou
28b9e4ba48 Added unit tests for Validate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-17 17:47:50 +01:00
Haoxiang Zhou
8b89873199 Smaller review implementations 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-17 13:53:39 +01:00
jetstack-bot
48eb68dd79
Merge pull request #3090 from hzhou97/add_cr_output 
Ctl command status certificate: Add CR output
 2020-07-16 10:31:48 +01:00
Haoxiang Zhou
7657b5e042 Add unit tests for string formatting functions 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-14 18:06:09 +01:00
Haoxiang Zhou
d808edaa08 Gather all CR info logic into function 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-14 17:43:06 +01:00
Haoxiang Zhou
69baa14a3e Add example use; cleanup and comments 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 15:49:32 +01:00
Haoxiang Zhou
cbf8da3197 Handle case where revision of cert not set yet 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:54:41 +01:00
Haoxiang Zhou
f5ebea1b27 Basic output for CR owned by Cert 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:54:41 +01:00
Haoxiang Zhou
864bb3ab59 Command output to stderr, check both ready condition and length of status.certificate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
a9e84ded4b Removed output in util function 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
e74d0fd954 Refactor Fetch function to have no API call 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
16a1d927e4 Fixed bug of assigning to new variable instead of correct one 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
2a2c637d3a Error when Ready condition is true but status.certificate is empty 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
76272f8acd Inline polling/waiting for CR to be ready 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
492fd623ec Changed flag to output-certificate-file 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
735be40fdc Improved help output 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
c2c62fe124 Added flag to specify timeout when waiting on certificate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
9583f7c0a3 Use %w to format errors, clean-up 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
6580010a14 Store certificate to file if flags are set 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
a421e5beb5 Added flags to wait for, fetch and store certificate from CR 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
Haoxiang Zhou
55070d32ba Add util package 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-10 13:23:52 +01:00
jetstack-bot
d4a7dfa730
Merge pull request #3026 from hzhou97/status_command 
Basic `status certificate` ctl command
 2020-07-10 11:07:08 +01:00
hzhou97
009b87431c Changed long description for command 
Co-authored-by: James Westby <jw+debian@jameswestby.net>
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-09 15:47:06 +01:00
jetstack-bot
f80d79c268
Merge pull request #2909 from JoshVanL/2952-move-to-cobra 
Move all commands into cobra
 2020-07-07 12:30:04 +01:00
Haoxiang Zhou
e0b4cb176e Small review changes 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-06 11:17:31 +01:00
Haoxiang Zhou
58ec3c0bc7 Output NotBefore and RenewalTime 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 15:45:40 +01:00
Haoxiang Zhou
25a771f985 Clean-up from reviews 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
e43ec083c0 Output multiple lines for dns names and added example usage; clean-up 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
ff71b2976c Handle non-set NotAfter in output 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
2f7fa5e419 Changed output for conditions 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
3e9c78dfc6 Restructure to 'status certificate' instead of 'certificate status' 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
5d09aa814f Output incrementally instead of using one big format 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
8804fd9171 Handling basic outputs for multiple Status.Conditions 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
0369c745b1 Output for ready and up-to-date certificates 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
Haoxiang Zhou
bc53b7b0aa Added scaffold for certificate status command 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 14:27:41 +01:00
James Munnelly
9e2d6a514b Move expcertificates into certificates package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 12:16:25 +01:00
James Munnelly
2280480c02 Remove old certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 11:46:13 +01:00
jetstack-bot
4018712a53
Merge pull request #3036 from hzhou97/create_cr_scheme 
Use ctl.Scheme in create cr ctl command
 2020-06-26 14:50:39 +01:00
JoshVanL
8f924151a3
Change acmesolver parameters and catch stopCh for server shutdown 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:47:37 +01:00
JoshVanL
d45847d302
Reverse webhook cmd run parameters 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:47:24 +01:00
JoshVanL
c3e2aae551
Fix binary names, printing errors, and help messages 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:47:11 +01:00
JoshVanL
7c831c537e
Add missing webhook flags and make options pointer 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:47:07 +01:00
JoshVanL
1107390b23
Fix webhook testing cmd 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:46:55 +01:00
JoshVanL
7c26448442
Fix controller bug for not exiting on option error 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:46:49 +01:00
JoshVanL
964a9b27dc
Move the webhook runtime into cobra 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:46:48 +01:00
JoshVanL
a6ae3418f6
Move the acmesolver runtime into cobra 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-06-26 13:46:45 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 12:25:08 +01:00
Haoxiang Zhou
8db33a0c43 Use ctl.Scheme instead of webhook.Scheme 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-26 12:02:49 +01:00
jetstack-bot
83f391c177
Merge pull request #3018 from hzhou97/fix-convert-cmd 
Fix ctl convert cmd
 2020-06-23 18:14:12 +01:00
jetstack-bot
2f4c57e178
Merge pull request #2957 from hzhou97/create_cr_cmd 
Add Create CertificateRequest ctl command
 2020-06-23 17:21:12 +01:00
Haoxiang Zhou
24404aa1eb Added new scheme to use for ctl commands 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-23 17:18:56 +01:00
Haoxiang Zhou
7e4fa1ab13 Removed unnecessary variables and 'AddToScheme's; Builder doesn't continue on error 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-19 10:29:42 +01:00
Haoxiang Zhou
a98240c6f9 Changed directory set-up for tests, review changes 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-18 16:47:10 +01:00
Haoxiang Zhou
12ef535648 Use webhook's scheme to read in objects in internal api version 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-18 10:22:25 +01:00
Haoxiang Zhou
a628f62f2c Changed flag to from-certificate-file 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-16 12:30:28 +01:00
Haoxiang Zhou
3b7284973c Wrtie key to file before creating CR and changed key file permission 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-16 12:24:18 +01:00
Haoxiang Zhou
1a01120fbd Make name of CR a required argument, changed tests accordingly 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-16 12:19:46 +01:00
Haoxiang Zhou
de787796b7 Review changes 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-15 14:22:55 +01:00
Haoxiang Zhou
5a5c3ce053 Change to only have -f flag 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-11 17:30:59 +01:00
Haoxiang Zhou
023177108c Moved subcommand certificaterequest to its own package 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-11 14:00:29 +01:00
Haoxiang Zhou
60ea8ff78f Review changes, update description and function name 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-11 13:32:46 +01:00
Haoxiang Zhou
4b135540d4 Store private key in file, added flag to specify file name. 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-05 10:26:37 +01:00
Haoxiang Zhou
378521300a Add argument check, example uses; cleanup 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-04 10:12:17 +01:00
Haoxiang Zhou
19e489c59a Move use of factory out of Run func 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-04 09:14:40 +01:00
Haoxiang Zhou
0e3a355873 Use first arg as name of CR if supplied. 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-04 09:14:40 +01:00
Haoxiang Zhou
d14c316f3d Clean-up and comments 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-04 09:14:12 +01:00
James Munnelly
395445e460 Handle multiple versions when decoding objects from file 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-29 15:17:07 +01:00
Haoxiang Zhou
655ca97d71 Create CR from Certificate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-29 13:32:50 +01:00
Haoxiang Zhou
5996cdc650 Read in manifest for Certificate 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-29 09:51:05 +01:00
Haoxiang Zhou
990cb6ab15 Added options and scaffold Run function. 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-28 15:27:17 +01:00
Haoxiang Zhou
19ad36a819 Add boilerplate and fix style issue 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-28 13:02:14 +01:00
Haoxiang Zhou
61c45c73fe Updated bazel dependencies 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-28 12:16:25 +01:00
Haoxiang Zhou
ac89f21cac Add new ctl sub command certificaterequest for create 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-28 11:24:46 +01:00
Haoxiang Zhou
70aaeee2b6 Add new ctl command create 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-28 11:23:32 +01:00
JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-26 23:01:55 +01:00
JoshVanL
5539bf3495
Moves metrics controller into sub-package of ./controller/certificates 
and fix metrics listen address flag description

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:47:52 +01:00
JoshVanL
db24ca052b
Remove the Factory interface from ACME accounts, in favour of using 
package level funcs. This exposes BuildHTTPClient that instruments
metrics, which is passed to NewClient. ACME issuer has reference to
plumbed in metrics

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:44:37 +01:00
JoshVanL
3e7f7eb87e
Expose Prometheus listen address as a controller command line flag 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 18:21:03 +01:00
JoshVanL
8214cb4b70
Initialise new metrics implementation and pass through new instrumented 
ACME client Factory

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-18 17:44:36 +01:00
James Munnelly
b126a0c0e5 Use acme AccountRegistry throughout and tidy up ACME setup code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-13 13:14:46 +01:00
James Munnelly
927a16fe03 Update references to ctl binary name 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-05-05 16:44:27 +01:00
jetstack-bot
a04d2f0935
Merge pull request #2871 from meyskens/tar-everything 
Release a tar.gz for the CLI tool
 2020-05-01 18:22:55 +01:00
jetstack-bot
304f241c8d
Merge pull request #2872 from meyskens/kubectl-cert-manager 
Rename the CLI to kubectl cert-manager
 2020-05-01 17:42:54 +01:00
Maartje Eyskens
f868b48a70 fix cobra failure 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-01 17:13:29 +02:00
Maartje Eyskens
68fc95189f Use doesn't allow a space 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-01 17:04:59 +02:00
Maartje Eyskens
fa3e838f2f Fix the convert example 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-01 17:00:34 +02:00
Maartje Eyskens
d6ff9aa2f2 Rename the CLI to kubectl cert-manager 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-01 16:35:29 +02:00
Maartje Eyskens
801c24b485 Release a tar.gz for the CLI tool 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-05-01 14:47:04 +02:00
James Munnelly
f7c5f1c7fe Ensure version x_defs are set on built ctl binary 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-30 16:53:25 +01:00
JoshVanL
25ab073fbd
Updates renew command test so that it adds kubeconfig flags which it no 
longer inherits

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 13:08:28 +01:00
JoshVanL
5af4fa8e87
Moves ctl kubeconfig flags to top level 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:58:36 +01:00
JoshVanL
28f7e7bc78
Cleans up renew kube flags and adds --namespace validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:57:42 +01:00
JoshVanL
9056534024
Removes --wait from ctl renew command 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:44 +01:00
JoshVanL
3d8a1110d8
Adds ctl renew validation unit tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:38 +01:00
JoshVanL
1d238e5cc0
Removes ability to use password auth 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:36 +01:00
JoshVanL
27d5ecd8a9
Updates help, better validation and pipes through context 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:34 +01:00
JoshVanL
57bde90d8d
Adds all kubectl client auth methods 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:32 +01:00
JoshVanL
4f0076615c
All ctl renew -A and -l options together 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:07 +01:00
JoshVanL
2a09b8ba55
Adds --wait, --all-namespaces, and --all to cert-manager-ctl renew 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:55:05 +01:00
James Munnelly
d3b6d70bc3
Fix-up renew subcommand 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-30 12:55:02 +01:00
JoshVanL
fa8c9753ac
Adds cert-manager-ctl renew sub-command 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:54:17 +01:00
JoshVanL
0657e34396
Moves cobra commands from cmd -> app 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:14:51 +01:00
JoshVanL
dcccdd39c5
Adds doc generation for cobra controlled ctl comands 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-30 12:14:48 +01:00
JoshVanL
2465bf8bd0
Uses own schema and fixes some text 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-28 10:23:53 +01:00
JoshVanL
23ce8fc0a8
Adds convert examples 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-28 09:28:18 +01:00
JoshVanL
4260eca10f
Expands some comments and adds some better error handling 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-28 09:28:16 +01:00
JoshVanL
2ec35382cd
Adds ctl covert command 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-28 09:28:14 +01:00
James Munnelly
67a93b4f22 Remove unused vars 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 17:58:18 +01:00
James Munnelly
ba33c823a3 Add 'keystores' stanza to CertificateSpec to allow dynamic keystore configuration 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-21 17:58:18 +01:00
James Munnelly
8aaca4a2ad expcertificates: add readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
cde13aa6fd Add requestmanager controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-20 15:08:31 +01:00
James Munnelly
a53288b4c1 Enable keymanager and issuing controller with feature gate 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-16 19:10:41 +01:00
James Munnelly
dee93c4fb9 Add ExperimentalCertificateControllers feature gate 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-15 12:26:53 +01:00
James Munnelly
22344352c8 Add experimental 'trigger' controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-15 12:26:21 +01:00
jetstack-bot
fba7b09ac8
Merge pull request #2725 from JoshVanL/ctl-version 
cert-manager-ctl CLI with version
 2020-04-08 12:45:15 +01:00
JoshVanL
49d3bde7eb
Move cmd signal handler into shared util 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-02 11:02:33 +01:00
James Munnelly
e36c1acf1c Add '-ubi' suffix to AppVersion in UBI artifacts 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-01 19:34:34 +01:00
JoshVanL
fb3fe2488d
Updates BUILD.bazel for ./cmd/ctl 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-01 18:54:32 +01:00
JoshVanL
215d15ebdc
Adds some code comments and cleans up 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-01 18:54:30 +01:00
JoshVanL
c7910ce3db
Cleans up some code 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-01 18:54:29 +01:00
JoshVanL
991040238f
Adds ctl Makefile target 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-01 18:54:27 +01:00
JoshVanL
19bc4734b6
Adds cert-manager-ctl with version command 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-04-01 18:54:19 +01:00
James Munnelly
793f9677ae Use default Golang ciphersuites if none are specified 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-31 09:32:21 +01:00
James Munnelly
822b9e17a0 Remove AdditionalRunFuncs from base controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 20:43:00 +01:00
James Munnelly
e0db0296d2 Run webhook on random port during integration tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:26:05 +01:00
James Munnelly
20ee4833dd Remove webhookbootstrap controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:26:05 +01:00
James Munnelly
5036693fcf Add support for dynamic secret source to webhook binary 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly
577e53b9bb webhook: create 'tls' package containing certificates sources + tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly
acff2b12bb Fix JKS keystore functionality and add additional tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-23 10:02:42 +00:00
jetstack-bot
e328cfd5aa
Merge pull request #2708 from munnerz/fix-image-uid 
Fix issue causing docker images to use UID 0 (root)
 2020-03-17 09:51:25 +00:00
James Munnelly
0935277f3d Remove old 'image' targets and update to consistently use //build targets 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-17 09:47:01 +00:00
James Munnelly
053e3fc74c Refactor webhook cmd to be reused 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-13 15:30:57 +01:00
James Munnelly
98bc0d52f9 Add --experimental-issue-jks flag to enable JKS bundle generation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-04 15:33:22 +00:00
James Munnelly
e9374730c9 Add --experimental-issue-pkcs12 flag to enable PKCS12 bundle generation 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-04 10:02:21 +00:00
Josh Soref
d98d4f898e spelling: separated 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 17:20:44 -05:00
jetstack-bot
f9c23dcb8f
Merge pull request #2556 from munnerz/release-tars 
Add release-tars targets to construct cert-manager release artifacts
 2020-02-10 16:10:13 +00:00
Will Thames
e1bf54d0e3 Add cipher suites configuration and defaults 
Add a --tls-cipher-suites command line flag and set to sensible
defaults.

Signed-off-by: Will Thames <will@thames.id.au>
 2020-02-03 22:57:59 +10:00
James Munnelly
22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-30 21:02:58 +00:00
James Munnelly
c27ccd78d7 Update webhook validation handler for validation registry 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-20 10:05:54 +00:00
jetstack-bot
b365021dc8
Merge pull request #2428 from haines/remove-nameserver-ip-address-validation 
Remove IP address validation on dns01-recursive-nameservers to allow domain names
 2019-12-12 16:31:14 +00:00
James Munnelly
f3a58ed991 webhook: register pprof http handlers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-10 16:54:15 +00:00
Andrew Haines
3edb4c3c6c
Remove IP address validation on dns01-recursive-nameservers to allow domain names 
Signed-off-by: Andrew Haines <andrew@haines.org.nz>
 2019-12-05 13:34:55 +00:00
jetstack-bot
1793e7b573
Merge pull request #2236 from munnerz/covered-images 
Add Bazel image targets with coverage enabled
 2019-11-14 10:54:09 +00:00
James Munnelly
4266e11747 Remove calls to os.Exit and panic 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-11-13 17:38:33 +00:00
James Munnelly
dbd92f88ef Add conversion webhook handler 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-24 19:41:55 +01:00
jetstack-bot
7a40669fcc
Merge pull request #2219 from munnerz/webhook-validate-order-updates 
Make Order resource status & Challenge spec fields immutable
 2019-10-17 17:45:48 +01:00
jetstack-bot
66d32a204f
Merge pull request #2242 from munnerz/cm-manifestlist-acmesolver 
No longer use arch-specific acmesolver image
 2019-10-17 14:16:14 +01:00
James Munnelly
ed284084b3 Refactor validation handler to support updates 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 13:27:08 +01:00
James Munnelly
ca9e8f33b2 Clean up webhook handler interface 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 12:56:13 +01:00
jetstack-bot
ee9cbf25af
Merge pull request #2245 from munnerz/webhook-golang-httpserver 
Use standard golang http server for webhook
 2019-10-17 12:54:23 +01:00
James Munnelly
da8bf264fd Use standard golang http server for webhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-17 12:29:34 +01:00
chenjun.cj
fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file 
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
 2019-10-17 12:14:28 +08:00
James Munnelly
7eb2e5efa0 No longer use arch-specific acmesolver image 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 16:24:34 +01:00
James Munnelly
5057da1b89 Add Bazel image targets with coverage enabled 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 08:59:24 +01:00
JoshVanL
4eb6335c76 Support out of tree issuers in ingress-shim 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-27 13:54:39 +01:00
James Munnelly
f466aeea88 Fix govet warnings 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-27 12:07:08 +01:00
James Munnelly
fad13bfce1 Move image macro into hack/build 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-27 12:07:08 +01:00
James Munnelly
973f4aa424 Update codebase for external dependencies 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-26 12:52:43 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 16:22:43 +01:00
James Munnelly
6a167cc9e6 Enable all CertificateRequest controllers by default 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-19 13:07:59 +01:00
James Munnelly
bc61194709 Remove deprecated code from ingress-shim controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-19 13:07:59 +01:00
jetstack-bot
dcba8ebd06
Merge pull request #2002 from munnerz/internal-apiversion 
Add internal API version, enable defaulter & conversion-gen and implement mutating webhook
 2019-08-21 21:53:36 +01:00
James Munnelly
6052e0558e Refactor base controller and allow Running additional informers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:22:57 +01:00
James Munnelly
00410e3831 Switch to use new webhook handlers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:10:31 +01:00
JoshVanL
d96c7d2e1c Adds venafi internal package with venafi CR controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-19 16:04:12 +01:00
jetstack-bot
8ab4dc1301
Merge pull request #1943 from JoshVanL/cr-acme 
Adds acme CertificateRequest controller
 2019-08-17 00:34:00 +01:00
JoshVanL
e2b9b21766 Adds acme CertificateRequest controller with unit tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-15 17:18:11 +01:00
James Munnelly
5c17c2e37f Add webhookbootstrap controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-14 21:27:36 +01:00
James Munnelly
dd66c11115 Extend cainjector to support injecting from secrets 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-14 12:57:01 +01:00
jetstack-bot
4f622c7479
Merge pull request #1986 from munnerz/rearrange-webhook 
Move API webhook validation package
 2019-08-14 12:19:55 +01:00
JoshVanL
60b349e162 Adds initial vault CR controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-13 23:34:17 +01:00
James Munnelly
d56b6be948 Move API webhook validation package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-13 20:41:53 +01:00
JoshVanL
46fd159f81 Register self signed CR controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-01 16:39:01 +01:00
James Munnelly
99bbc31386 Promote 'Clock' to be a field on controller context 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-26 12:30:23 +01:00
James Munnelly
32bc10710e Update use of featuregate package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-20 01:57:24 +01:00
James Munnelly
088e196d82 Add experimental certificate request based controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-17 10:07:36 +01:00
jetstack-bot
c6cd522a6a
Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller 
Add alpha CertificateRequest controller for CA Issuer type
 2019-07-08 14:11:34 +01:00
JoshVanL
ec28f8dc6e Adds certificate request controller feature flag 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-03 15:43:14 +01:00
JoshVanL
6b1ff0148b Adds certificate request base controller and CA issuer controller 
instance

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-03 15:42:03 +01:00
James Munnelly
5f5811b81e Respect --namespace flag in rfc2136 provider 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-03 13:52:43 +01:00
James Munnelly
5a096b0b07 Fix lint failures and remove image target manual tag 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 18:26:12 +01:00
James Munnelly
de34f0410d Use binary image targets to avoid building multiple architectures all the time 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 17:29:32 +01:00
James Munnelly
fd2dd16f75 Change bazel build to only build for current --platform 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 16:10:05 +01:00
Michael Tsang
2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-13 16:55:38 +01:00
James Munnelly
500d8fbeb7 Create image bundles in multiarch_image target 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-03 11:16:25 +01:00
James Munnelly
9906c0d946 Add feature gate for ValidateCAA functionality and default it to off 
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-25 15:10:05 +01:00
James Munnelly
942d6491d6 Pass StopCh and RESTClient to controller context 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:08 +01:00
James Munnelly
871ed4283b Allow controller constructors to return errors 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:04 +01:00
Lennart Jern
cd576dd8db Set default acmesolver image based on arch 
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
 2019-03-22 17:32:34 +01:00
Louis Taylor
c640c2f070 Expose metrics server on non-leader instances 
This makes sure all cert-manager instances have a metrics endpoint.

Fixes #1352.

Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-03-18 12:41:39 +00:00
James Munnelly
d282c5f2aa Run update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
420ebfebe2 Use goflag instead of pflag for logs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
f4c0de2627 Define pkg/api.Scheme with all used types registered 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
46faba06b6 Update acmesolver to use logr 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
6b24e9c966 Update cainjector 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
5d73076db9 Update logs package for go-logr 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
41934a2b57 Enable Venafi issuer in controller binary 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:16:03 +00:00
James Munnelly
9e914d6457 Update generated files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-27 15:43:17 +00:00
James Munnelly
f90d145688 Rename to cainjector 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-27 15:26:23 +00:00
James Munnelly
22edcc9071 Update flag descriptions 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-27 15:26:23 +00:00
Solly Ross
42248a91d7 CA Injector Controller 
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-02-26 21:47:34 -08:00
James Munnelly
2f30258f0e Switch to klog 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:02 +00:00
James Munnelly
a9d8f7de8a Fixup for Kubernetes 1.13.2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 11:53:19 +00:00
Daniel Morsing
af019ad1e8 add log line when restarting 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-18 16:41:22 +00:00
Daniel Morsing
175f13e136 watch TLS cert file 
The admissions server middleware we use doesn't want to do
hot-reloading, so instead, watch the file and if it changes, have
the k8s server restart the webhook

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-18 15:56:48 +00:00
James Munnelly
149cbb30a7 Add arm32 and arm64 bazel image targets 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-08 15:10:45 +00:00
James Munnelly
0bb864871e Increase acmesolver default cpu resource limit to 100m 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-07 17:16:01 +00:00
James Munnelly
094ae3e50c Fix CLI flag not being respected 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 16:11:37 +00:00