weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,724 Commits 45 Branches 0 Tags 96 MiB
c512319bfb
Commit Graph

1724 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jetstack-bot
c512319bfb
Merge pull request #1188 from kragniz/controller-namespace 
Add --namespace flag
 2019-01-11 15:14:11 +00:00
jetstack-bot
1440e9ed57
Merge pull request #1195 from munnerz/increase-acme-backoff 
Increase ACME control loop & order creation back-off
 2019-01-11 10:47:11 +00:00
jetstack-bot
19c3487535
Merge pull request #1194 from munnerz/printer-columns 
Add additionalPrinterColumns fields to CustomResourceDefintions
 2019-01-11 10:30:11 +00:00
James Munnelly
3e84fe9a46 Use Ready condition text in printer columns 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-11 09:45:02 +00:00
James Munnelly
21c7b2e13f Increase ACME control loop max back-off. Increase create order back-off to 1h. Fire Event when Order fails. 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-10 22:07:48 +00:00
James Munnelly
ba832fefc8 Add additionalPrinterColumns fields to CustomResourceDefintions 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-10 21:40:10 +00:00
jetstack-bot
3b9aae318f
Merge pull request #1193 from munnerz/all-in-one-deploy 
Include CRD and Namespace resources in static deployment manifest file
 2019-01-10 17:16:23 +00:00
James Munnelly
97f29b4593 Update installation guide with new all-in-one install method 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-10 16:56:52 +00:00
James Munnelly
c4a794d163 Include CRD and Namespace resources in static deployment manifest file 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-10 16:54:45 +00:00
jetstack-bot
95f63313a9
Merge pull request #1192 from DanielMorsing/add-reason 
Add reason when an order/challenge gets marked invalid
 2019-01-10 15:25:23 +00:00
Daniel Morsing
cc946c0b45 Populate reason field regardless 
If we have an error, then tell people about it.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-10 14:54:43 +00:00
Daniel Morsing
1b921b1583 remove more strict validation 
Turns out the ACME server can respond with different codes than the ones listed

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-10 14:35:30 +00:00
Daniel Morsing
ba240bbe4e Add reason when an order/challenge gets marked invalid 
When an ACME server tells us that a challenge or an order is invalid, it's helpful to get some information on why that's the case. Populate the reason field with the error information so that these issues can be more easily debugged.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-10 14:05:15 +00:00
Louis Taylor
3d0e06a0b9 Add note to help text about clusterissuers 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
Louis Taylor
40b68a3e10 Fix more references to clusterIssuer 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
Louis Taylor
bbda87b3c8 Add --namespace flag 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
jetstack-bot
4da8dabf3e
Merge pull request #1077 from ocadotechnology/wip-1067 
feat: Include entire certificate chain if provided
 2019-01-09 13:57:50 +00:00
jetstack-bot
9051627f11
Merge pull request #1170 from bootc/fix-webhook-cronjob 
Fix CronJob schedule for in webhook chart
 2019-01-09 12:25:50 +00:00
James Munnelly
8840925e3e Fix append in CA issue function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-09 11:39:48 +00:00
James Munnelly
22342b61b3 Fix use of SecretTLSKeyPair in certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-09 11:39:48 +00:00
Mike Bryant
4fa6d9775c feat: Include entire certificate chain if provided 
Allow a user to provide an entire certificate chain to the ca issuer. Include that chain in all generated certificates

Signed-off-by: Mike Bryant <m@ocado.com>
 2019-01-09 11:39:48 +00:00
Mike Bryant
018f3642e9 test: Add tests of second level ca issuer 
This demonstrates that the certificates generated from an issuer 2 levels down do not validate

Signed-off-by: Mike Bryant <m@ocado.com>
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-09 11:39:48 +00:00
Mike Bryant
92d30c60c2 test: Verify certificates issued by the ca issuer 
Use the standard X509 certificate validation to check that
generated certificates can be validated by clients

Signed-off-by: Mike Bryant <m@ocado.com>
 2019-01-09 11:39:48 +00:00
jetstack-bot
70b3470b96
Merge pull request #1185 from DanielMorsing/fix-healthchecks 
remove liveness checks on pebble deployments in e2e tests
 2019-01-09 09:21:50 +00:00
Daniel Morsing
178c3044b2 remove liveness checks on pebble deployments in e2e tests 
liveness checks are a feature in kubernetes meant to restart hung
workloads. Since pebble stores account information in-memory, failing
a liveness check means that any running test will fail.

Because we're using pebble as part of a testsuite, we're protected
against hangs by the test just timing out.

On resource constrained environments (like my laptop), I've seen
the liveness check fail during startup, causing reboot loops and
timeouts. Since rebooting pebble mid-test will cause tests to fail
anyhow, we should probably disable this check.

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-01-09 08:26:31 +00:00
Chris Boot
b66a84c5dd Update static deployment 
Signed-off-by: Chris Boot <bootc@bootc.net>
 2019-01-08 23:40:51 +00:00
Chris Boot
f2a672daeb Bump chart version 
Signed-off-by: Chris Boot <bootc@bootc.net>
 2019-01-08 23:40:34 +00:00
Chris Boot
e1e30f6c18 Fix CronJob schedule for in webhook chart 
The current schedule (* * */24 * *) effectively causes the CronJob to
run on the 24th of every month only, and on the 24th it runs every
single minute (1440 times). The itention was to have it run daily, but I
suspect that running it weekly should be plenty good enough.

This fixes helm/charts#8077.

Signed-off-by: Chris Boot <bootc@bootc.net>
 2019-01-08 22:51:31 +00:00
jetstack-bot
3082bd11e5
Merge pull request #1183 from munnerz/remove-flakey-unit 
Remove flakey unit test in dns utils package
 2019-01-08 22:43:14 +00:00
James Munnelly
3e7509b51f Remove flakey unit test in dns utils package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 20:18:49 +00:00
jetstack-bot
d8b7c734bc
Merge pull request #1110 from munnerz/helm-ginkgo-writer 
Use GinkgoWriter to print Helm install output
 2019-01-08 19:12:30 +00:00
jetstack-bot
94b94beac4
Merge pull request #1179 from jetstack/docker-host 
Add DOCKER_HOST env var to gitlab build
 2019-01-08 18:15:30 +00:00
jetstack-bot
92df3c627e
Merge pull request #1180 from munnerz/0.6.0-bump 
Bump versions for 0.6.0-alpha.0
 2019-01-08 17:41:29 +00:00
James Munnelly
3464f4363a Bump versions for 0.6.0-alpha.0 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 16:45:06 +00:00
jetstack-bot
ac8bd61da2
Merge pull request #1172 from munnerz/e2e-explore 
Save global addon logs as CI artifacts & fixup logging
 2019-01-08 15:38:30 +00:00
James Munnelly
62c11ed571 Add DOCKER_HOST env var to gitlab build 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 15:28:41 +00:00
James Munnelly
8533a5b91c Use log.Logf instead of GinkgoWriter 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 14:55:27 +00:00
jetstack-bot
920b6ffcdb
Merge pull request #1178 from munnerz/fix-scheduler-bug 
Fix bug in challenge scheduler causing invalid results
 2019-01-08 14:25:19 +00:00
James Munnelly
3ac4d19874 Fix bug in challenge scheduler causing invalid results 
Previously, we shared a single backing slice when
performing filter operations on slices, causing issues
when we perform sorting operations on that same
underlying slice.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-08 13:53:58 +00:00
James Munnelly
016ae6077f Print test namespace name at the start of all test specs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 22:16:33 +00:00
James Munnelly
2d55a8fa26 Use framework/log instead of glog 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 22:14:04 +00:00
James Munnelly
e3e5612f95 Place global logs in log/ subdir 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 20:48:11 +00:00
James Munnelly
e46837f64c Replace calls to glog with GinkgoWriter 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 20:47:58 +00:00
James Munnelly
60e6755f3f Move util testing package into e2e/util 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 20:45:45 +00:00
James Munnelly
0237d5a4c2 Write log files to artifacts directory instead of stdout 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 20:45:44 +00:00
James Munnelly
6b76983165 Bump cert-manager verbosity during e2e tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 20:45:44 +00:00
James Munnelly
f4291d5876 Add missing call to GinkgoWriter.Write for global addon logs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 20:45:44 +00:00
James Munnelly
4f894a7d99
Merge pull request #1173 from munnerz/bump-year 
Update copyright header year
 2019-01-07 20:23:38 +00:00
James Munnelly
90ea0d2684 :this_is_unbearable: 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 15:28:14 +00:00
James Munnelly
0f7ceb2a30 :this_is_fine: 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 15:12:45 +00:00