Commit Graph

373 Commits

Author SHA1 Message Date
James Munnelly
c3be0f204e Add ingress-shim controller to create Certificates based on annotations on ingress resources 2017-11-30 22:53:54 +00:00
jetstack-ci-bot
2accacb219
Merge pull request #200 from euank/go-1.9
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Update to go 1.9

1.10 isn't too far off, at which point 1.8 will no longer receive security updates. It seems simple enough to bump sooner rather than wait until the last second.

**Release note**:
```release-note
NONE
```
2017-11-22 14:26:41 +00:00
Euan Kemp
82c4119539 Update to go 1.9 2017-11-21 18:00:08 -08:00
jetstack-ci-bot
e56d051b72
Merge pull request #202 from munnerz/refactor-makefile
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Clean up Makefile and place Dockerfiles in subdirectory

**What this PR does / why we need it**:

Cleans up the Makefile to have more consistent targets and more readable/usable

**Release note**:
```release-note
NONE
```

/assign
2017-11-22 01:49:02 +00:00
James Munnelly
8c7eaa1db8 Clean up Makefile and place Dockerfiles in subdirectory 2017-11-22 01:19:46 +00:00
jetstack-bot
e6cdbce52a
Merge pull request #196 from euank/]]]
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix doc link typo

```release-note
NONE
```
2017-11-13 16:24:06 +00:00
Euan Kemp
0dbee6df5b Fix doc link typo 2017-11-12 22:27:18 -08:00
jetstack-bot
ea3a6310f7
Merge pull request #193 from aaron-trout/no-drupal
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

s/Drupal/cert-manager/

Replace the word 'Drupal' with 'cert-manager'. Do I detect copypasta? :D
2017-11-07 17:41:51 +00:00
Aaron Trout
8c0919381c s/Drupal/cert-manager/ 2017-11-07 17:27:15 +00:00
James Munnelly
31cc4f8123 Update for 0.2.1 release 2017-11-04 13:50:05 +00:00
jetstack-bot
e32147b695
Merge pull request #183 from munnerz/fix-issue-loop
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Improve validation of certificates. Fix bug in checking certificate validity

**What this PR does / why we need it**:

Improves the validation of dnsNames and commonNames on certificate resources.
Fixes a bug in checking certificate validity.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fixes #176, fixes #175

**Release note**:
```release-note
Fix a bug in checking certificate validity and improve validation of dnsNames and commonName
```
2017-11-04 01:00:30 +00:00
James Munnelly
ffbfe2da3d Use ordered RemoveDuplicates. Add additional test cases. 2017-11-04 00:44:08 +00:00
jetstack-bot
de32d7d8d7
Merge pull request #186 from munnerz/skip-generated-packages
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Don't test pkg/client/ and third_party/ packages

Don't run tests for generated files

**Release note**:
```release-note
NONE
```
2017-11-04 00:34:57 +00:00
jetstack-bot
04a6705ce5
Merge pull request #184 from munnerz/acme-validation
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add basic validation to ACME issuer

**What this PR does / why we need it**:

Improves validation of existing certificate resources

**Release note**:
```release-note
Fix bugs when checking validity of certificate resources
```
2017-11-04 00:29:24 +00:00
James Munnelly
a5b954658c Fix panic in certificates controller 2017-11-04 00:27:22 +00:00
James Munnelly
4cf492e729 Don't test pkg/client/ and third_party/ packages 2017-11-04 00:21:50 +00:00
jetstack-bot
91c543c208
Merge pull request #185 from munnerz/dns-unit-tests
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add solverFor and wait.go unit tests for acme dns solver

**What this PR does / why we need it**:

Adds some unit tests for ACME dns solver

**Release note**:
```release-note
NONE
```
2017-11-04 00:14:20 +00:00
James Munnelly
7f656f9ed4 Update CA issuer 2017-11-04 00:12:33 +00:00
James Munnelly
74d711ceef Add unit tests for cert->dnsName and cert->CN functions 2017-11-04 00:10:42 +00:00
James Munnelly
f3db0df7b6 Add RemoveDuplicates unit test 2017-11-03 23:58:25 +00:00
James Munnelly
6ac437699d Improve validation of certificates. Fix bug in checking certificate validity 2017-11-03 23:48:18 +00:00
James Munnelly
422f8fc4be Add basic validation to ACME issuer 2017-11-03 23:35:58 +00:00
James Munnelly
01fa76e00a Add solverFor and wait.go unit tests for acme dns solver 2017-11-03 23:34:37 +00:00
James Munnelly
d6fcee3b8f Prepare v0.2.0 release 2017-11-03 18:23:46 +00:00
jetstack-bot
2f159a0f00
Merge pull request #145 from jetstack-experimental/move-org
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Move to github.com/jetstack/cert-manager repo

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Closes #134 

**Release note**:

```release-note
Move to 'jetstack' organisation.

Action required: this will require updating your existing deployments to point to the new image repository, as new tags will not be pushed to the old 'jetstackexperimental/cert-manager-controller` repository.
```

/area admin
/assign
/release-note-action-required
2017-11-03 17:03:43 +00:00
James Munnelly
fa7e052ac1 Move to github.com/jetstack/cert-manager repo 2017-11-03 16:41:39 +00:00
jetstack-bot
16e0770d06
Merge pull request #179 from munnerz/tidy-up-informers
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Tidy up informers

**What this PR does / why we need it**:

Refactors the controllers and issuers to use the new vendored and filtered informers

**Special notes for your reviewer**:

Do not merge until #178 has merged

**Release note**:
```release-note
No longer support ClusterIssuer resources when cert-manager is running with `--namespace` flag set
```

/assign
2017-11-03 16:11:06 +00:00
James Munnelly
6bd606a7ce Fix ClusterIssuers. Update test name. Add comments. 2017-11-03 15:51:34 +00:00
James Munnelly
eb4be6859e Update controllers and issuers for new SharedInformerFactory 2017-11-03 15:26:19 +00:00
James Munnelly
c77ee5e5b2 Run update-client-gen.sh 2017-11-03 15:26:19 +00:00
James Munnelly
3552a21a71 Generate informers for Kubernetes types 2017-11-03 15:26:19 +00:00
James Munnelly
a4468c76c5 Use munnerz/code-generator 2017-11-03 15:26:19 +00:00
jetstack-bot
568079ee97
Merge pull request #178 from munnerz/codegen-script
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Switch to using generate-group script in code-generator

**Release note**:
```release-note
NONE
```
2017-11-03 15:25:01 +00:00
James Munnelly
103cafc77b Fix e2e test imports 2017-11-03 15:09:07 +00:00
James Munnelly
f35ab04670 Fix imports in tests 2017-11-03 14:56:30 +00:00
James Munnelly
7875268247 Fix imports 2017-11-03 14:48:41 +00:00
James Munnelly
2a2ad4160c Regenerate files 2017-11-03 14:48:40 +00:00
James Munnelly
ed79785ac4 Update Makefile & update-client-gen script 2017-11-03 14:48:37 +00:00
James Munnelly
bb72eb3a99 Depend upon code-generator packages 2017-11-03 13:24:53 +00:00
jetstack-bot
5ca6605fe4
Merge pull request #177 from munnerz/pinned-deps
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Pin dependencies to release-1.8

**What this PR does / why we need it**:

Pins us to use versioned Kubernetes dependencies

**Release note**:
```release-note
NONE
```
2017-11-03 12:24:23 +00:00
James Munnelly
026d107e3a Remove old ImportPrefix field 2017-11-03 12:08:03 +00:00
James Munnelly
c6b34a3ed6 Pin dependencies to release-1.8 2017-11-03 11:59:50 +00:00
jetstack-bot
6739ea17fc
Merge pull request #172 from munnerz/set-secret-type
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Set TLS certificate secret type to TLS type

**What this PR does / why we need it**:

Set the Kubernetes secret type to TLS

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fixes #133 

**Release note**:
```release-note
Set the Kubernetes secret type to TLS.
Action required: this will cause renewals of existing certificates to fail. You **must** delete certificates that have been previously produced by cert-manager else cert-manager may enter a renewal loop when saving the new certificates. Alternatively, you may specify a new secret to store your certificate in and manually update your ingress resource/applications reference the secret.
```
2017-11-03 11:44:18 +00:00
jetstack-bot
97b84201eb
Merge pull request #173 from munnerz/only-create-service
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Only ever create http01 solver service instead of also updating

**What this PR does / why we need it**:

Previously the ensureService function was written to update a service if it already exists. There should never be a case where the http01 solver needs to update an existing *service*, so this PR simplifies this functionality into a simple `createService` function.

**Release note**:
```release-note
NONE
```
2017-10-27 19:03:37 +01:00
jetstack-bot
2b97398525
Merge pull request #171 from munnerz/account-rediscov
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Allow rediscovering lost/not set ACME account URIs

**What this PR does / why we need it**:

Overcome 'registration already exists for provider key' errors in ACME provider by auto-detecting lost ACME registration URIs

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

fixed #151, fixes #162 

**Special notes for your reviewer**:

This change causes us to *always* attempt to register an account, and upon failure will read the account ID from the `Location` header of the registration response and then verify *that* account.

**Release note**:
```release-note
Overcome 'registration already exists for provider key' errors in ACME provider by auto-detecting lost ACME registration URIs
```
2017-10-27 19:02:03 +01:00
James Munnelly
753db1ebbb Add e2e test for recovering account URI 2017-10-27 18:09:11 +01:00
James Munnelly
85800ba81b Only ever create http01 solver service instead of also updating 2017-10-27 16:44:39 +01:00
James Munnelly
b3a2fb9419 Set TLS certificate secret type to type 2017-10-27 16:20:45 +01:00
James Munnelly
df47b56a52 Allow rediscovering lost/not set ACME account URIs 2017-10-27 16:09:30 +01:00
jetstack-bot
d4c9d3b185 Merge pull request #170 from munnerz/fix-invalid-data
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix checking for invalid data in issuer secrets

Fixes #169 

**Release note**:
```release-note
Fix checking for invalid data in issuer secrets
```

/assign
2017-10-26 23:00:44 +01:00