weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
8,485 Commits 45 Branches 0 Tags 96 MiB
c376bc495c
Commit Graph

394 Commits

Author SHA1 Message Date
Tim Ramlot
b8759139a2
rename BINDIR to bin_dir in preparation for makefile modules 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-08 15:57:34 +01:00
jetstack-bot
63bd488bfa
Merge pull request #6730 from inteon/remove_legacy 
Remove deprecated files and functions
 2024-02-08 13:21:31 +00:00
jetstack-bot
b656118bee
Merge pull request #6734 from SgtCoDFish/bumpbase 
Bump base images
 2024-02-08 11:14:25 +00:00
jetstack-bot
24899e3813
Merge pull request #6728 from wallrj/upgrade-kind-0.21.0 
Upgrade to kind 0.21.0
 2024-02-08 11:14:18 +00:00
Ashley Davis
b564d5eabe
bump base images 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-02-08 10:42:53 +00:00
Tim Ramlot
d17c8d6ea0
bump golang 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-08 11:20:01 +01:00
Tim Ramlot
04220447bc
remove deprecated files and functions 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-02-08 10:45:06 +01:00
Richard Wall
1c4f3950ea make update-kind-images 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-02-07 18:16:33 +00:00
Richard Wall
a72c77ec6f make learn-sha-tools 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-02-07 18:06:09 +00:00
Richard Wall
4aa47d16d9 Bump Kind to v0.21.0 
https://github.com/kubernetes-sigs/kind/releases/tag/v0.21.0

Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-02-07 17:38:48 +00:00
Ashley Davis
494c4320d5
bump helm-tool to latest version and regenerate docs 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-02-01 15:51:05 +00:00
Ashley Davis
8c1369726a
add CI check for updated helm docs 
also updates helm docs!

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-02-01 15:37:19 +00:00
Tim Ramlot
3d406a087b
add Make target for trivy startupapicheck image scan 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-31 11:25:02 +01:00
Tim Ramlot
2bef9d35b6
remove remaining references to cmctl, which was moved to https://github.com/cert-manager/cmctl 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-30 14:56:05 +01:00
Tim Ramlot
1ac2c17361
remove all versionchecker makefile logic 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-29 11:50:09 +01:00
Richard Wall
fb31ee925b make update-kind-images 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-26 17:18:41 +00:00
Richard Wall
329124a47c Parse the kind release notes for compatible kindest/node images 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-26 17:18:24 +00:00
Richard Wall
b620953688 ./hack/latest-kind-images.sh 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-26 11:08:29 +00:00
Richard Wall
de8e9b07b3 Remove KIND_IMAGE_FULL_ variables and use KIND_IMAGE_K8S_ instead 
Simplifies the latest-kind-images.sh script and the kind-images.sh variables.

Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-26 11:08:29 +00:00
Tim Ramlot
7b94868513
remove cmctl from this repo 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-24 16:15:34 +01:00
Ashley Davis
bd7e4f00a0
no-op: add GOEXPERIMENT var 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-01-19 10:20:38 +00:00
Richard Wall
b72010e98f Add 1.29 to the cluster.sh script 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-16 15:09:46 +00:00
Richard Wall
6d70b75ade ./hack/latest-kind-images.sh 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-16 13:20:29 +00:00
Richard Wall
0f30a69e48 ./hack/latest-kind-images.sh 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-16 13:16:17 +00:00
Adam Talbot
a362c742c5 docs: dont wrap reference urls in code blocks 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-16 08:38:15 +00:00
Adam Talbot
af4685c595 feat: update chart README using autogenerated docs 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2024-01-15 10:25:23 +00:00
Ashley Davis
dbf80f6aff
bump go to latest version 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-01-11 16:17:51 +00:00
jetstack-bot
18f4440a3c
Merge pull request #6609 from wallrj/6597-publish-startupapicheck 
Add startupapicheck image to the server bundle of `make release`
 2024-01-09 11:01:29 +00:00
Richard Wall
5f719ec7d9 Add startupapicheck image to the server bundle of make release 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2024-01-05 11:36:49 +00:00
Tim Ramlot
1750ff06ba
don't extract vendored go in downloaded folder 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-04 16:40:56 +01:00
Tim Ramlot
41404a7fd7
rename UseCertificateRequestNameConstraints to NameConstraints 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-03 15:49:18 +01:00
jetstack-bot
cc8925ae9f
Merge pull request #6404 from SpectralHiss/hef/otherNameSANs 
Other name sans support in Certificates
 2024-01-03 14:16:23 +00:00
SpectralHiss
7350863d8a Add order agnostic matcher for SANs 
* This is to ensure Vault conformance passes since it outputs SANs in
  different order to other issuers
* Matcher was tested manually only we will add tests to it in future

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2024-01-03 09:13:11 +00:00
Ashley Davis
b3b14fda41
add separate startupapicheck binary 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2024-01-02 17:17:50 +00:00
Tim Ramlot
4f848bf2ee
upgrade base image from debian11 to debian12 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2024-01-02 13:26:21 +01:00
Adam Talbot
247a034116 feat: update gateway api to v1 
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
 2023-12-18 21:00:42 +00:00
Ashley Davis
dd61635f3b
add target + installation for golangci-lint 
This lets users locally run the same commands that are run in CI

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2023-12-13 19:58:01 +00:00
SpectralHiss
4bdee5f010 Rename otherNameSANs to otherNames 
* Improve the CRD godoc comments

Signed-off-by: SpectralHiss <houssem.elfekih@jetstack.io>
 2023-12-13 16:21:56 +00:00
Tim Ramlot
7b7912022a Add feature gate 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-12-13 09:16:06 +00:00
jetstack-bot
8da699a735
Merge pull request #6542 from tanujd11/fix/name-constraints-csr-structure 
fix: structure of nameconstraint in CSR
 2023-12-12 16:07:16 +00:00
Richard Wall
f3a91ac8aa Bump Go to 1.21.5 
- go1.21.4 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and runtime/cgo packages.
- go1.21.5 (released 2023-12-05) includes security fixes to the go command, and the net/http and path/filepath packages, as well as bug fixes to the compiler, the go command, the runtime, and the crypto/rand, net, os, and syscall packages.

Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2023-12-11 17:27:09 +00:00
tanujd11
bc75f8488d fix: structure of nameconstraint in CSR 
Signed-off-by: tanujd11 <dwiveditanuj41@gmail.com>
 2023-12-11 18:00:15 +05:30
tanujd11
8d362439a8 fix UTs 
Signed-off-by: tanujd11 <dwiveditanuj41@gmail.com>
 2023-12-07 22:30:31 +05:30
tanujd11
50d84c1bbc nits: added new line at EOF and comment fix 
Signed-off-by: tanujd11 <dwiveditanuj41@gmail.com>
 2023-12-07 22:27:42 +05:30
Ashley Davis
f7937c7372
Use explicit debian version for base images 
Fixes #6478

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2023-11-14 14:30:45 +00:00
Richard Wall
80896bce36 Update documentation of the Kyverno policies Kustomization file 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2023-10-31 15:44:10 +00:00
Richard Wall
c8640908e7 Apply Kyverno policies to E2E test namespaces too 
By using ClusterPolicy with exlusion rules for the namespaces of non-compliant E2E test tools.

Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2023-10-31 14:11:41 +00:00
jetstack-bot
dd3fe1fe02
Merge pull request #6453 from wallrj/read-only-root-filesystem 
Enable readOnlyRootFilesystem by default
 2023-10-31 11:27:20 +01:00
Richard Wall
9dfb7c3ecf Enable readOnlyRootFilesystem policy in Kyverno 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2023-10-27 16:03:17 +01:00
Richard Wall
c3a8144da8 Update the Kyverno policy file 
Signed-off-by: Richard Wall <richard.wall@venafi.com>
 2023-10-27 15:58:11 +01:00