weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
2,979 Commits 45 Branches 0 Tags 96 MiB
bc61194709
Commit Graph

44 Commits

Author SHA1 Message Date
James Munnelly
bc61194709 Remove deprecated code from ingress-shim controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-19 13:07:59 +01:00
James Munnelly
5c17c2e37f Add webhookbootstrap controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-14 21:27:36 +01:00
Michael Tsang
2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-13 16:55:38 +01:00
Lennart Jern
cd576dd8db Set default acmesolver image based on arch 
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
 2019-03-22 17:32:34 +01:00
James Munnelly
0bb864871e Increase acmesolver default cpu resource limit to 100m 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-07 17:16:01 +00:00
James Munnelly
094ae3e50c Fix CLI flag not being respected 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 16:11:37 +00:00
jetstack-bot
5f96b378e6
Merge pull request #1184 from tlmiller/feature/authnss 
Control authoritative dns01 server check.
 2019-01-12 15:25:07 +00:00
Thomas Miller
dacd0b45cb Control authoritative dns01 server check. 
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
 2019-01-12 20:17:28 +10:00
Louis Taylor
3d0e06a0b9 Add note to help text about clusterissuers 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
Louis Taylor
bbda87b3c8 Add --namespace flag 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
James Munnelly
0fcc0c666c Update copyright header year 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 15:07:55 +00:00
James Munnelly
bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 22:49:55 +00:00
jetstack-bot
2c74eabb1c
Merge pull request #819 from ccojocar/cert_secret_ref 
Set the certificate as an owner of the secret
 2018-11-26 15:06:33 +00:00
Cosmin Cojocar
3766edcd12 Set the default value of enable-certificate-owner-ref to false 
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
 2018-11-26 09:48:02 +01:00
jetstack-bot
ace5c2b2f2
Merge pull request #738 from gambol99/acme_options 
Configurable ACME Annotation
 2018-11-06 16:00:02 +00:00
James Munnelly
b6f89ae9dd Regenerate files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-06 12:31:16 +00:00
James Munnelly
85d433cff9 Add ACME challenge scheduler and process challenges for matching domains/types in serial 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-06 12:31:16 +00:00
Rohith
e2f13f5f9c Requested Changes 
- changing the name of the command line option to --auto-certificate-annotations
- making the option an array to allow for multiple annotations settings

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
 2018-11-06 12:09:47 +00:00
Rohith
712a7a85ee Configurable ACME Annotation 
- adds a option command line (default to the current behavour) which allows the user to control the acme annotation used by the shim controller
- a current mitgration requires use to run multiple providers at the same

Signed-off-by: Rohith Jayawardene <gambol99@gmail.com>
 2018-11-06 12:09:18 +00:00
Cosmin Cojocar
5d36fba075 Add a flag which controls whether the certificate is configured as an owner of the secret where the effective TLS certificate is stored 
Signed-off-by: Cosmin Cojocar <cosmin.cojocar@gmx.ch>
 2018-10-28 19:55:26 +01:00
James Munnelly
039a086f58 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:40 +01:00
James Munnelly
967a48e1dc Add ACME Order & Challenge controllers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-10-12 12:40:38 +01:00
Arnold Bechtoldt
845eb7f57c make http01 solver pod resource request/limits configurable, refs #892 
Signed-off-by: Arnold Bechtoldt <arnold.bechtoldt@inovex.de>
 2018-09-26 14:39:06 +02:00
James Munnelly
db65d6a170 run //hack:update-bazel 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-09-13 11:24:48 +01:00
James Munnelly
51195e4c5f Update license header and add header to every file 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2018-08-13 15:53:37 +01:00
jetstack-bot
c43e4d75f8
Merge pull request #801 from munnerz/renew-duration 
Add RenewBeforeExpiryDuration option to controller context
 2018-08-08 14:34:56 +01:00
James Munnelly
fa0bc9998e Add RenewBeforeDuration option to controller context 2018-08-08 13:34:30 +01:00
James Munnelly
12ab53b948
Update options.go 2018-08-08 13:28:37 +01:00
James Munnelly
d63ba1257d Change leader election duration defaults to be less chatty 2018-08-08 00:54:26 +01:00
Louis Taylor
58d71216c3
Change flag to list of controllers to enable 2018-07-12 10:27:49 +01:00
Louis Taylor
fd48a2e360
Add option for disabling ingress-shim 
This adds a new flag, which can be used to disable running the
ingress-shim controller:

     --enable-ingress-shim=false
 2018-07-12 10:27:05 +01:00
Louis Taylor
e35a09bd72
Add validation 2018-07-05 14:47:41 +01:00
Louis Taylor
4804086fdf
Add example to usage 2018-07-05 14:37:32 +01:00
Louis Taylor
14873c248a
Use StringSlice 2018-07-05 14:37:08 +01:00
Louis Taylor
ea6a5472e2
dns01-nameservers -> dns01-self-check-nameservers 2018-07-05 14:22:43 +01:00
Louis Taylor
3eaca6a318
Add flag for custom dns01 nameservers 2018-07-05 12:40:53 +01:00
James Munnelly
fdb8f2bf40 Link ingress-shim into main controller binary 2018-04-26 12:44:40 +01:00
Louis Taylor
f43b926570
Remove controller --namespace option 2018-04-05 14:32:29 +01:00
Euan Kemp
0fb787eae7 controller: add ambient issuer flags and feature 
This implements ambient credential support for AWS, gated behind flags
for issuers and cluster issuers.

This adds the pair of flags discussed in
https://github.com/jetstack/cert-manager/issues/308.

It provides an implementation for those flag's effects for the route53
solver.
 2018-03-23 14:30:43 -07:00
James Munnelly
fa7e052ac1 Move to github.com/jetstack/cert-manager repo 2017-11-03 16:41:39 +00:00
James Munnelly
01e5833825 Make acmesolver image configurable through CLI. Use tagged version as default. 2017-10-13 16:39:06 +01:00
James Munnelly
852e250a69 Add clusterissuer controller 2017-09-22 00:10:42 +01:00
James Munnelly
ec5e916085 Typos 2017-09-09 01:47:25 +01:00
James Munnelly
960d46e302 Add leader election. Fix gracefully exiting. 2017-09-09 01:47:21 +01:00