Commit Graph

894 Commits

Author SHA1 Message Date
JrCs
bafd0f2986 Vault issuer MUST USE the vault 'sign' endpoint 2018-06-06 13:24:15 +02:00
jetstack-bot
3cafdd9401
Merge pull request #598 from euank/log-namespaces
issuer/acme/*: log namespaces for resources
2018-06-06 09:52:53 +01:00
jetstack-bot
c61f392163
Merge pull request #555 from paultiplady/debug/gcloud-errors
Improve logs for CloudDNS service account errors
2018-06-06 01:40:39 +01:00
jetstack-bot
787b8d7084
Merge pull request #623 from jetstack/munnerz-patch-4
Update labels.yaml
2018-06-06 01:18:39 +01:00
James Munnelly
e16c7434d7
Update labels.yaml 2018-06-06 00:55:10 +01:00
jetstack-bot
fe288c18da
Merge pull request #621 from jetstack/munnerz-patch-3
Add note about Google Group to readme
2018-06-06 00:53:40 +01:00
jetstack-bot
ee657637c3
Merge pull request #620 from jetstack/munnerz-patch-2
Fix links in pull request template
2018-06-05 23:45:40 +01:00
James Munnelly
3132fa7622
Add note about Google Group to readme 2018-06-05 23:00:59 +01:00
James Munnelly
87283aa5f6
Fix links in pull request template 2018-06-05 22:55:55 +01:00
jetstack-bot
2f69555a1f
Merge pull request #522 from fgrehm/support-for-custom-dns-settings
Support for custom dns settings
2018-06-05 10:48:39 +01:00
Fabio Rehm
e90fb5a261
Regenerate static deployment manifest files with ./hack/update-deploy-gen.sh 2018-06-04 16:43:41 -03:00
Fabio Rehm
52142d084f
Bump chart version to v0.3.2 2018-06-04 16:36:23 -03:00
Fabio Rehm
a923113e65
Update chart's README 2018-06-04 16:32:08 -03:00
Fabio Rehm
94310f09a2
Add support for custom DNS settings for the cert-manager pod
This allows HTTP / DNS challenges to be self checked in AWS setups in
which both a public and private DNS zone are present for the same
domains. Without this the pod will never see the challenge that is going
to be presented to LE because they'll be added to public ingresses / DNS
zones
2018-06-04 16:32:04 -03:00
jetstack-bot
2439c8e21e
Merge pull request #609 from SaaldjorMike/docs_fixes
Fix references to other documentation sections.
2018-06-02 10:51:14 +01:00
Mike Rostermund
a68b54ec3e Fix references to other documentation sections. 2018-06-02 10:31:51 +02:00
jetstack-bot
137e14e5e0
Merge pull request #585 from klausenbusk/non-root
acmesolver: Run as non-root
2018-05-31 11:52:09 +01:00
Euan Kemp
a09e9037de issuer/acme/http: log namespaces for resources
It's useful to know what namespace is being operated on, so log
namespaces all over the place!
2018-05-30 20:10:17 -07:00
Euan Kemp
09a5846412 issuer/acme/http: remove unused test code
¯\_(ツ)_/¯
2018-05-30 20:03:00 -07:00
Euan Kemp
36b57ba475 issuer/acme/dns: log namespace for secret errors
If we can't find the secret, the user should probably also know what
namespace we looked in.

xref #540 for a case where this might help with debugging
2018-05-30 20:00:21 -07:00
Euan Kemp
910a9e8859 issuer/acme/dns: remove redundant 'Error' calls 2018-05-30 19:57:44 -07:00
jetstack-bot
e51edb398e
Merge pull request #587 from vdesjardins/fix-vault-panic-on-sealed
vault: fix panic when vault is sealed or uninitialized
2018-05-29 12:13:15 +01:00
jetstack-bot
9f5781cc11
Merge pull request #584 from anderspetersson/patch-1
Fixed a typo in error msg.
2018-05-29 10:23:52 +01:00
Vincent Desjardins
37db332b46 vault: fix panic when vault is sealed or uninitialized 2018-05-29 01:36:00 +00:00
Kristian Klausen
4733fb6fcd acmesolver: Run as non-root
acmesolver won't run in a namespace with a restrictive PSP
(Pod Security Policy)[1] without this change.
Note: A numeric user id is required due to [1]

[1] https://kubernetes.io/docs/concepts/policy/pod-security-policy/#users-and-groups
[2] https://github.com/kubernetes/kubernetes/pull/56503
2018-05-28 01:43:28 +02:00
Anders Petersson
6d5b199d74
Fixed a typo in error msg. 2018-05-27 19:52:05 +02:00
jetstack-bot
33210637fd
Merge pull request #577 from munnerz/https-docs
Use https docs URL in chart NOTES.txt
2018-05-24 22:11:09 +01:00
James Munnelly
0aed6a960a Use https docs url 2018-05-24 21:45:07 +01:00
jetstack-bot
1e606b3ead
Merge pull request #575 from munnerz/03
Bump chart and manifests for v0.3.0 release
2018-05-24 13:31:40 +01:00
James Munnelly
a7b4e0208d Bump manifests and chart for v0.3.0 2018-05-24 13:06:26 +01:00
jetstack-bot
bc0a550663
Merge pull request #574 from munnerz/single-static-manifest
Output a single file instead of directories for static manifests
2018-05-24 13:05:40 +01:00
James Munnelly
7a7e6da692 Output a single file instead of directories for static manifests 2018-05-24 12:23:30 +01:00
jetstack-bot
a7b382b974
Merge pull request #563 from khrisrichardson/pod-labels
add pod labels
2018-05-24 12:07:41 +01:00
Khris Richardson
7ba5846051 revert fullname in lieu of #572 2018-05-22 16:56:32 -07:00
Khris Richardson
73037cbd3a add pod labels 2018-05-14 14:28:14 -07:00
Paul Tiplady
1089667ceb Make CloudDNS service account errors debuggable
Improve logging in the case where the Service Account Secret is
loaded, but the Key is not found.

Previous behaviour was to fail without giving much help as to
why.

New behaviour confirms the key name and namespace/secret-name.

FIXES: 539
2018-05-11 08:56:09 -07:00
jetstack-bot
0bf3ff6835
Merge pull request #548 from munnerz/leaderelectns
Add leaderElection.namespace option to helm chart
2018-05-11 13:13:26 +01:00
jetstack-bot
9405027a6f
Merge pull request #549 from munnerz/wc-docs
Update acme dns01 tutorial with reference to wildcard domains
2018-05-11 12:32:26 +01:00
jetstack-bot
32fd3c49f3
Merge pull request #553 from nazarewk/patch-1
IssuerConfig.Vault typo fix
2018-05-11 12:26:26 +01:00
Krzysztof Nazarewski
dfe0a5ebd4
typo fix 2018-05-10 12:49:48 +02:00
James Munnelly
7aa7682d86 Add note about asterisk quoting issues 2018-05-09 17:18:57 +01:00
jetstack-bot
e6a9637d76
Merge pull request #550 from munnerz/update-overview
Update overview diagram
2018-05-09 17:16:19 +01:00
James Munnelly
4f30ed75e8 Update overview diagram 2018-05-09 17:10:41 +01:00
James Munnelly
4e85a9a36a Update acme dns01 tutorial with reference to wildcard domains 2018-05-09 17:06:23 +01:00
James Munnelly
8fc0f0641d Run hack/update-deploy-gen.sh 2018-05-09 16:54:45 +01:00
James Munnelly
e7ed856e20 Add leaderElection.namespace option to helm chart 2018-05-09 16:54:25 +01:00
jetstack-bot
7afd71faf2
Merge pull request #544 from munnerz/upgrade-docs
Add document on upgrading from cert-manager 0.2 to 0.3
2018-05-09 16:33:19 +01:00
James Munnelly
956f44a59e Move docs into admin package 2018-05-09 16:22:22 +01:00
James Munnelly
929df3b293 Add document on upgrading from cert-manager 0.2 to 0.3
Address review feedback

Fix code-blocks
2018-05-09 16:22:18 +01:00
jetstack-bot
0bb19e9453
Merge pull request #546 from munnerz/cloudflare-idempotent
Update Cloudflare provider to be idempotent when calling Present
2018-05-09 16:18:19 +01:00