weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
6,154 Commits 45 Branches 0 Tags 96 MiB
c58b73edeb
Commit Graph

445 Commits

Author SHA1 Message Date
irbekrm
264c45c276 Identifies the version to upgrade to by commit 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-18 13:54:22 +03:00
irbekrm
c9f1a5dbdf Fix the script that finds last published release 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-18 08:55:57 +03:00
irbekrm
598ed35e4a Uses go/crypto ListCertAlternates function to fetch alternative certificate chains 
This allows us to use upstream go/crypto again instead of our own fork

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-10-07 15:21:26 +01:00
Richard Wall
cf3092f8c5 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-07 09:16:16 +01:00
jetstack-bot
f41310a82d
Merge pull request #4485 from munnerz/m1-support 
Add support for building all Bazel targets on M1 macs
 2021-10-01 14:03:35 +01:00
Richard Wall
38fbd6cf4f ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-01 12:41:15 +01:00
James Munnelly
093313390b Add support for building all Bazel targets on M1 macs 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-10-01 11:48:22 +01:00
Richard Wall
00e0090ce7 ./hack/update-all.sh 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-10-01 10:22:35 +01:00
irbekrm
81bdabf67a Code review feedback 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 17:23:42 +01:00
irbekrm
7319d3392a Load kyverno image with Bazel 
So that we don't pull the same image for each test run.

Also run helm install with --debug so that it outputs more information.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:14:26 +01:00
irbekrm
577757f282 Adds the new format of Go build tags to verify_boilerplate 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:30 +01:00
irbekrm
cb6a746726 Runs ./hack/update-all.sh 
New format of Go build tags gets added

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:19 +01:00
irbekrm
0889570722 Ensures conversion code temp workaround works for Go 1.17 
Also refactor

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:08:09 +01:00
irbekrm
0679c33c3f Update kube libraries, regenerate go.mod/go.sum 
Updates go.mod for Go 1.17

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-09-30 10:07:59 +01:00
jetstack-bot
fcf379d6e9
Merge pull request #4428 from mol-george/issue-4189-keystore-upgrade 
Issue 4189 keystore upgrade
 2021-09-13 10:45:56 +01:00
jetstack-bot
cd1f5a3d94
Merge pull request #4400 from irbekrm/arm 
Update and verify scripts can be run from darwin-arm64
 2021-09-03 19:14:22 +01:00
George Moldoveanu
0463681244
updates go deps and bazel files 
Signed-off-by: George Moldoveanu <mol.george@gmail.com>
 2021-09-02 23:45:11 +01:00
Nicolas Degory
d2209df85a Apply suggestions from code review 
Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:24:59 -07:00
Nicolas Degory
37b03ab5db bump chart testing version 
Signed-off-by: Nicolas Degory <nicolas.degory@gmail.com>
 2021-08-29 09:21:47 -07:00
irbekrm
7a7d853d9f Add a comment about staticcheck script 
Also shift the correct number of params
and remove and unused def.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-23 08:58:20 +01:00
irbekrm
25303b79c9 Use yq instead of jq 
Because yq releases builds for darwin/arm

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-23 07:08:51 +01:00
irbekrm
ba3864e3c9 Removes the unused buildozer tool 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-22 08:58:35 +01:00
irbekrm
f7ee62e701 Pull dependencies for darwin/arm 
Also bumps a few dependency versions

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-21 09:21:06 +01:00
jetstack-bot
c24c0889bf
Merge pull request #4390 from irbekrm/verify_crd_status 
Verify crd status
 2021-08-19 10:22:08 +01:00
Irbe Krumina
e43db8a426 Code review feedback. 
Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-19 09:43:45 +01:00
irbekrm
04b584e698 verify-crds script now verifies that the CRDs don't contain status field 
This is necessary because some CD tools don't accept resource configs with predefined status fields, but controllergen currently adds this field when a CRD yaml is generated

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-19 06:19:37 +01:00
irbekrm
b8e2846901 Adds a Bazel rule to install yq 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-18 18:36:01 +01:00
Jake Sanders
682b3f108e
Fix sed command on Darwin 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-08-18 16:09:14 +01:00
Inteon
b13eb0483b
upgrade deps to latest version (kube v0.22.0) 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-13 23:38:59 +02:00
irbekrm
97a730f7fd Ensure the upgrade tests always install vanilla cert-manager 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-08-11 08:02:57 +01:00
Inteon
1e89e9a55b
upgrade go.mod 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-08-04 00:49:07 +02:00
jetstack-bot
b5f80c428e
Merge pull request #4234 from inteon/add_startupapicheck 
Add startup api check Job
 2021-08-03 17:41:49 +01:00
Inteon
7f19db0faa
update scripts with new image 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-27 18:38:33 +02:00
jetstack-bot
05cfd7bb72
Merge pull request #4218 from inteon/verify_upgrade_use_check_api 
Use 'kubectl cert-manager check api' in verify-upgrade.sh
 2021-07-21 20:37:20 +01:00
jetstack-bot
f489c7df02
Merge pull request #4236 from irbekrm/fix_version_finding 
Fix how last published release version is calculated for upgrade tests
 2021-07-21 15:15:20 +01:00
irbekrm
48d4f955ea Fix how last published release is calculated 
It should always be the last published non-alpha/beta release

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-21 13:58:44 +01:00
Ashley Davis
c86f20f4b5
add crd make target & don't change GOPROXY in update-codegen.sh 
there seems to be justification for setting GOSUMDB to a universal value
here, but setting GOPROXY doesn't seem to provide value here

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-07-19 17:19:13 +01:00
Inteon
629924c123
use 'kubectl cert-manager check api' in verify-upgrade.sh 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-16 16:38:47 +02:00
Maël Valais
30f9c123d3 gateway-shim: add the gateway-shim controller 
Note that the gateway-shim is only half the work for supporting the
Gateway API in cert-manager. The other half is the HTTP01 solver
support, which is still worked on.

The Gateway API in cert-manager is releases as an experimental feature
and needs to be enabled manually with the following flag:

  --controllers=*,gateway-shim

All the annotations supported by ingress-shim are also supported by
gateway-shim, with some exceptions:

  "acme.cert-manager.io/http01-ingress-class"

This annotation is not supported on the Gateway resource. Although the
Gateway resource also has a "gatewayClass" field, we will need to add
another field instead of "ingress-class" to avoid confusion with the
ingress-shim.

  "acme.cert-manager.io/http01-edit-in-place"

This annotation is not supported because it is specific to some ingress
controllers like ingress-gce.

  "kubernetes.io/tls-acme"

This annotation is not supported because it is a behavior inherited from
kube-lego and we chose not to keep this behavior with the Gateway API.

Unlike the ingress-shim, you can reuse the same Secret name in multiple
TLS configurations on the same Gateway resource.

The ingress-shim now shows the exact location of the duplicate
secretName when the user gives the same secretName in two separate TLS
blocks.

Signed-off-by: Maël Valais <mael@vls.dev>
Co-authored-by: Jake Sanders <i@am.so-aweso.me>
 2021-07-15 20:34:55 +02:00
jetstack-bot
c546f5bbd9
Merge pull request #4190 from inteon/helm_labels 
Remove Helm-specific labels & add version label
 2021-07-13 18:27:03 +01:00
Inteon
043bbd283e
remove helm-specific labels & add version label 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-11 17:42:32 +02:00
jetstack-bot
4dfb5add86
Merge pull request #4182 from irbekrm/upgrade_test 
Upgrade test
 2021-07-11 13:45:01 +01:00
Inteon
b852735a95
upgrade ginkgo & gomega 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-10 20:52:09 +02:00
Inteon
cb6030f1d9
add -prune=true & go mod tidy to update-deps.sh 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-10 20:35:41 +02:00
irbekrm
f03b8daf1d Adds feedback from code review 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-08 10:17:37 +01:00
irbekrm
1095e7f4c0 Adds an upgrade test 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-06 17:21:58 +01:00
irbekrm
62620f2c86 Adds ytt yaml interpolator to deps 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-06 17:20:21 +01:00
irbekrm
ca748f4288 Adds latest release tag to version vars 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-07-06 17:18:12 +01:00
Inteon
fa07da9302
upgrade all tools to the latest version 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-06 14:51:36 +02:00
Inteon
3177be515a
improve default flag values & other requested changes 
Signed-off-by: Inteon <42113979+inteon@users.noreply.github.com>
 2021-07-02 12:58:30 +02:00