weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
8,796 Commits 45 Branches 0 Tags 96 MiB
c176aac45a
Commit Graph

182 Commits

Author SHA1 Message Date
Ole Furseth
f5eff1f318 Remove obsolete bazel documentation 
Signed-off-by: Ole Furseth <ole.furseth@bekk.no>
 2023-03-17 11:44:15 +01:00
Ashley Davis
fb231ab641
Remove bazel 🎉 
This removes all .bazel and .bzl files, and a bunch of scripts relating
to bazel, now that it's been entirely replaced.

There are still a few places where traces could be removed, but this
removes the brunt of the bazel stuff that remains.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-07-26 11:38:50 +01:00
Ashley Davis
32d716654a
Add a makefile flow for building artifacts 
Includes targets for:

- all "server" binaries, for all arches
- all containers for all server binaries for all arches
- all client binaries (kubectl plugin / cmctl) for all arches
- the cert-manager helm chart + signature
- the cert-manager static manifests + CRDs
- tools which bazel would download, with checksum verification
- (commented out) a signed SHA256SUM file for client binaries

Upgrades from the bazel flow include that:

- we use OS-specific base images rather than just using amd64 everywhere
- we easily add support for signing artifacts at build time
- we add ".exe" to the end of windows executables
- we add a zip file for windows executables, for easier consumption
- we concatenate YAML files more robustly
- staging a full release should be much faster
- hopefully, it's easier to change things!
- licenses are trimmed down to reduce bloat in images (the license
  bundle was 1.4MB in size alone)

Changes from the bazel flow include:

- containers no longer have a symlink to the binary at an unusual
  path, but instead just have the binary at a more predictable path
  (e.g. /app/cmd/webhook/webhook instead of
  /app/cmd/webhook/webhook.runfiles/com_github_jetstack_cert_manager/cmd/webhook/webhook_/webhook)

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-12-15 09:54:15 +00:00
Inteon
0eabaec743
change startupapicheck to helm post-install hook 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-30 16:04:55 +02:00
Inteon
c7d92681b8
add comments 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-13 17:58:28 +02:00
Inteon
043bbd283e
remove helm-specific labels & add version label 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-11 17:42:32 +02:00
irbekrm
22f6cb18d2 Adds some comments 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-04-03 15:54:52 +01:00
Maartje Eyskens
ba5accae50 Fix release tar content of manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-22 10:47:37 +01:00
Maartje Eyskens
136f332fcb fix location 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 14:38:35 +01:00
Maartje Eyskens
006981e7e5 Format bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 14:13:45 +01:00
Maartje Eyskens
fb1ee4c952 Fix static manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 14:05:22 +01:00
Maartje Eyskens
f33c63e901 Fix a lost variable + format 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-02 11:25:01 +01:00
Maartje Eyskens
eb3c0f8448 Fix syntax error 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-01 16:32:07 +01:00
Maartje Eyskens
887af1bc84 Remove the legacy release 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-01 16:17:07 +01:00
jetstack-bot
ceccf6a047
Merge pull request #3179 from meyskens/no-helm-labels 
Remove managed by Helm labels from static manifests and CRDs
 2020-08-14 18:44:32 +01:00
Maartje Eyskens
1672a01e49 Remove managed by Helm labels from static manifests and CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-13 20:09:35 +02:00
Maartje Eyskens
6e3279e002 Explain helm hack 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 10:14:56 +02:00
Maartje Eyskens
50686d3e26 Support v1 admission webhooks 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-10 16:39:49 +02:00
James Munnelly
a4cbd146c3 Avoid duplicate CRDs in static manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-08 17:45:19 +01:00
James Munnelly
b955abed17 Fix up chart and bazel build rules 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-01 18:22:35 +01:00
James Munnelly
f33beefc32 Add installCRDs option to Helm chart 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-04-01 13:15:15 +01:00
James Munnelly
1700833601 Default webhook to use the dynamic secret source 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-30 14:25:54 +01:00
James Munnelly
d08299c846 Update Helm chart & other docs with new URLs and info 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-24 16:21:48 +00:00
jetstack-bot
35add56ef5
Merge pull request #2625 from srbraun/crl 
adds option to specify CRL Distribution Point. #2612
 2020-03-23 13:33:32 +00:00
jetstack-bot
6a16550698
Merge pull request #2023 from zeeZ/configure-annotations 
Add option to set custom annotations for HTTP01 resolver Ingress resources.
 2020-03-23 12:24:37 +00:00
Sergey Braun
9b76cdd402
adds CDP field and description to CA issuer 
Signed-off-by: Sergey Braun <dev@skra.space>
 2020-03-19 12:52:43 +01:00
zeeZ
1c96ea9c57 Add option to set annotations and labels for HTTP01 resolver Ingress resources. 
Signed-off-by: zeeZ <zeeZinator+github@gmail.com>
 2020-03-12 21:12:11 +01:00
Johan Fleury
08db170a36
feat(rfc2136): add support for IPv6 address in nameserver 
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
 2020-03-09 21:43:56 -04:00
Johan Fleury
51d46e5f76
feat(rfc2136): allow FQDN and hostname in nameserver 
Signed-off-by: Johan Fleury <jfleury@arcaik.net>
 2020-03-09 21:12:23 -04:00
James Munnelly
61cff09573 Automatically prepend license boilerplate header to release manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-11 12:08:43 +00:00
James Munnelly
73c8c6747f Include CRDs as part of release assets published to GitHub 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-06 14:09:46 +00:00
Maartje Eyskens
3307e3a946 Update bazel 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-04 15:07:47 +01:00
Maartje Eyskens
aaae73a45d Replace openshift/no-webhook manifests with legacy 
This releases a new manifest type "legacy" to support Kubernetes <1.15 and OpenShift 3.
This version uses the webhook but disables the conversions as they are not supported.
For this reason only the v1alpha2 API is added in these manifests.
All newer APIs are filtered by the filter-crd tool.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-04 14:26:25 +01:00
jetstack-bot
f2c462d29f
Merge pull request #2642 from meyskens/manifest-phase1 
Put OpenShift specific RBAC in all manifests
 2020-03-04 13:02:58 +00:00
jetstack-bot
00b101de76
Merge pull request #2597 from meyskens/emailsans 
Add Email SANs
 2020-03-03 16:31:56 +00:00
Maartje Eyskens
ce4c33f3b5 Put OpenShift specific RBAC in all manifests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-03-03 14:57:26 +01:00
James Munnelly
5eb3cb6313 Mark filter-crd target as a tool dependency instead of src 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-03 10:29:54 +00:00
srBraun
04bfddefc3 adds support for CDP to selfsigned issuer 
Signed-off-by: srBraun <dev@skra.space>
 2020-03-02 12:40:46 +01:00
Josh Soref
8d801fc100 spelling: certificate 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:51 -05:00
Josh Soref
b93d64c09d spelling: authorizations 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:15:18 -05:00
Josh Soref
ec5da97f2b spelling: account 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-02-24 16:14:20 -05:00
Maartje Eyskens
d3a623314c Add EmailSANs field 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-21 08:49:00 +01:00
Maartje Eyskens
1439ca350c Write CRD filter for OpenShift 
This adds a Go binary that filters certain keys from the CRDs.
This is meant to remove keys that are not compatible with OpenShift 3.11.
This then is ran on creating the deployment manifests.

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-18 10:52:42 +01:00
jetstack-bot
2862c31386
Merge pull request #2593 from JoshVanL/encode-openapi-validation 
Certificate KeySize encode openapi validation
 2020-02-17 11:42:24 +00:00
James Munnelly
71373d1e50 Fix including CRDs as part of static manifests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-13 15:52:01 +00:00
JoshVanL
9b9b66d7b4
Updates CRDs with max/min keysize validation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-02-12 10:18:11 +00:00
jetstack-bot
f9c23dcb8f
Merge pull request #2556 from munnerz/release-tars 
Add release-tars targets to construct cert-manager release artifacts
 2020-02-10 16:10:13 +00:00
James Munnelly
48c56dbe5a Run ./hack/update-crds.sh 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-02-10 12:16:29 +00:00
Maartje Eyskens
3c09a7b80c Document more info on CN behaviour 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-07 09:22:24 +01:00
Maartje Eyskens
7e318dbfbb update CRDs 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-02-07 09:16:49 +01:00