weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
2,201 Commits 45 Branches 0 Tags 96 MiB
ca725be382
Commit Graph

273 Commits

Author SHA1 Message Date
James Munnelly
af9bce7221 Add 'webhook' DNS01 provider type 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 17:19:32 +01:00
James Munnelly
942d6491d6 Pass StopCh and RESTClient to controller context 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:08 +01:00
James Munnelly
871ed4283b Allow controller constructors to return errors 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:04 +01:00
Lennart Jern
dfb3954dba Update cert if issuer doesn't match 
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
 2019-03-29 20:32:59 +01:00
James Munnelly
aeaa3412ed Fix controller test pkg 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
eaeefdf5b2 Update acmechallenges controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
c6c498338a Update clusterissuers controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
6b24e9c966 Update cainjector 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
a13543013d Use logr in pkg/util/kube 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
d7c9d39e3c Update issuers controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
92713156ed Update certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
708313ac4b Update acmeorders controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
5d73076db9 Update logs package for go-logr 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
jetstack-bot
5e3c1a813b
Merge pull request #1250 from munnerz/venafi 
add Venafi Cloud & TPP issuer type
 2019-03-01 19:42:38 +00:00
jetstack-bot
687dcd0db7
Merge pull request #1420 from munnerz/cainjector-apiserverca 
cainjector: support injecting apiserver ca
 2019-03-01 15:19:05 +00:00
James Munnelly
2f67c78f62 Address review feedback 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 14:37:11 +00:00
James Munnelly
c3f696fa1a Add support for Venafi API types to certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:00:55 +00:00
James Munnelly
1618ebde43 Fix loading apiserver caBundle 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-28 19:34:40 +00:00
jetstack-bot
334477ec73
Merge pull request #1392 from munnerz/gen-tmp-selfsigned 
Generate temporary certificate to appease ingress-gce
 2019-02-28 19:20:03 +00:00
James Munnelly
b34adf88ff cainjector: support injecting apiserver ca 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-28 16:45:26 +00:00
Solly Ross
42248a91d7 CA Injector Controller 
This implements a CA injector controller using controller-runtime.
It looks at admission webhooks and APIServices with a particular
annotation, and injects the CA data from certificates.

Signed-off-by: Solly Ross <sollyross@google.com>
 2019-02-26 21:47:34 -08:00
James Munnelly
dfabece6eb Use a one-use CA to sign temporary certificates 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-25 20:48:13 +00:00
James Munnelly
cf2f9eac74 Generate a temporary certificate whilst waiting for Issuer to issue 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-25 17:48:22 +00:00
jetstack-bot
01903f06ba
Merge pull request #1384 from munnerz/unit-compare-reading 
Print unit test failures in action matchers as part of failure message
 2019-02-22 18:16:38 +00:00
James Munnelly
439499561c Remove dependence on k8s.io/ingress 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:52 +00:00
James Munnelly
2f30258f0e Switch to klog 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:02 +00:00
James Munnelly
381bed1fd8 Print unit test failures in action matchers as part of failure message 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-20 17:27:31 +00:00
James Munnelly
fe2fcd4e83 go fmt 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 15:00:39 +00:00
James Munnelly
14a1b5373f Update bazel files 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:36:07 +00:00
James Munnelly
1f48f3d1d4 gofmt 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:56 +00:00
James Munnelly
bbd73477cd Fixes after rebasing 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:56 +00:00
James Munnelly
324e8319b6 Add basic Certificate unit tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:55 +00:00
James Munnelly
cee0e28a05 Add initial unit test for certificate controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:55 +00:00
James Munnelly
0bde3dacba Create pkg/api/util and re-arrange controller instantiation code 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:25:54 +00:00
James Munnelly
3a19501e26 Add initial unit test framework for Certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:22:36 +00:00
James Munnelly
804240da9d Switch Certificate controller to use Helper struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-19 11:22:36 +00:00
jetstack-bot
eafda2a31a
Merge pull request #1307 from munnerz/helper-everywhere 
Use Helper structure to call GetGenericIssuer everywhere
 2019-02-13 13:48:37 +00:00
jetstack-bot
1476aed737
Merge pull request #1293 from munnerz/test-builder-logger 
Plumb testing.T through to test Builder
 2019-02-13 13:48:26 +00:00
jetstack-bot
cb532cc3b8
Merge pull request #1325 from DanielMorsing/caaCheck 
Extend ACME self check to check CAA records
 2019-02-12 16:53:11 +00:00
Daniel Morsing
a01514ad63 use configured nameservers for CAA validation 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-11 12:05:18 +00:00
James Munnelly
1c4f160169 Use Helper structure to call GetGenericIssuer everywhere 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-07 22:35:17 +00:00
jetstack-bot
fd9567f1e4
Merge pull request #1318 from munnerz/crt-ctrl-use-lister 
Use secretLister in updateSecret
 2019-02-06 16:39:55 +00:00
James Munnelly
094ae3e50c Fix CLI flag not being respected 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 16:11:37 +00:00
James Munnelly
fac0a32c7e Fix bug causing certficates to be re-issued with misconfigured renewBefore/duration 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 15:43:59 +00:00
James Munnelly
e53312463d Use secretLister in updateSecret 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-05 17:56:16 +00:00
Daniel Morsing
bb853e5e79 first draft CAA checking 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-05 14:25:10 +00:00
jetstack-bot
22b0863801
Merge pull request #1128 from lrolaz/certificate-ip-sans 
Add IP Address in CSR
 2019-01-31 23:05:25 +00:00
James Munnelly
d055d370bb Plumb testing.T through to test Builder 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-31 20:20:20 +00:00
Laurent ROLAZ
ed82465df5 Refactoring 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-30 13:04:28 +01:00
Laurent Rolaz
18daea16ae Remove duplicate IPAddressesToString 
Signed-off-by: Laurent Rolaz <laurent.rolaz@gmail.com>
 2019-01-25 18:50:16 +01:00