weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
6,231 Commits 45 Branches 0 Tags 96 MiB
cfbd574e75
Commit Graph

6231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
James Munnelly
cfbd574e75 Remove deprecation notice on webhook.securePort 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-10 12:53:00 +00:00
James Munnelly
838a8dc153 Allow specifying minTLSVersion and cipherSuites without explicit tlsConfig 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-03 13:03:57 +00:00
James Munnelly
17d6a19ba2 Fix apiVersion of example config 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-03 12:56:34 +00:00
James Munnelly
d4beef13b8 Support configuring securePort in webhook service 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-03 12:56:26 +00:00
James Munnelly
ce3f3fc1f2 Regenerate files 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-01 12:57:08 +00:00
James Munnelly
1a96d9f32d config.cert-manager.io -> webhook.config.cert-manager.io 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-12-01 12:57:08 +00:00
James Munnelly
9fce2ba5b0 Move files to create config.webhook.cert-manager.io 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 15:15:44 +00:00
James Munnelly
553e1e0536 Add ability to configure WebhookConfiguration via the Helm chart 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:17:34 +00:00
James Munnelly
d5133a1668 Run update-codegen.sh 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
71a69cc488 Add unit tests for configfile loading 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
48a5efea5d Fix copyright headers 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
e21c6e6272 Add test for flag precedence 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
415ca56933 config API: fix up fuzz tests 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
0e1d603c93 Add support for reading config from WebhookConfiguration object 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
2e3eb29327 Register logger flags 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
97863d245f Regenerate files 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
afa8e5a304 Refactoring webhook initialisation to support early config handling 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
James Munnelly
fb81666e56 Add config.cert-manager.io API group 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2021-11-26 14:12:54 +00:00
jetstack-bot
a5d9c9705c
Merge pull request #4617 from jakexks/dependabot 
Update helm, opencontainers, containerd.
 2021-11-23 18:23:02 +00:00
jetstack-bot
c6cdc97365
Merge pull request #4616 from irbekrm/errored_orders 
Don't make extra ACME calls for Order CRs that have failed
 2021-11-23 17:09:03 +00:00
Jake Sanders
43583e13b3
Update bazel repos 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-11-23 16:58:59 +00:00
Jake Sanders
53b4a0e491
Update helm, opencontainers, containerd. 
This includes a minor update to the OCI spec to address
https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m
and https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh

Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-11-23 16:49:56 +00:00
irbekrm
7739497f22 Don't process Order CRs that have failed 
Ensure that cert-manager does not attempt to create new ACME Orders for cert-manager Order CRs that are in failed (errored, invalid or expired) state. If the CertificateRequest was created from a Certificate, the issuance will be retried after 1 hour

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-23 15:34:35 +00:00
jetstack-bot
5ad5ef4fb9
Merge pull request #4611 from irbekrm/k_1_23 
Add an option to create a kube 1.23 cluster
 2021-11-22 17:45:04 +00:00
irbekrm
0ee31f2542 Add an option to create a kube 1.23 cluster 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-22 16:03:06 +00:00
jetstack-bot
dbaeff4148
Merge pull request #4607 from SgtCoDFish/supportupdate 
Update supported k8s versions in chart README
 2021-11-19 14:43:49 +00:00
Ashley Davis
115b70cfef
update link to k8s security context spec 
the old link was for 1.16 and actually led to a site with a certificate error

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-19 13:55:02 +00:00
Ashley Davis
0e9c9e3481
bump supported k8s version in helm chart readme 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-19 13:54:22 +00:00
jetstack-bot
0236f0836e
Merge pull request #4556 from inteon/helm_template_cleanup 
Cleanup helm templates & fix empty 'resources' in deployment
 2021-11-15 14:27:06 +00:00
jetstack-bot
00cecf7e6a
Merge pull request #4593 from SgtCoDFish/bumpkind 
Bump kind versions + add comments about a footgun
 2021-11-11 14:12:35 +00:00
Ashley Davis
8b0b639496
add additional warnings when setting up a CI cluster 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-11 12:59:35 +00:00
Ashley Davis
0955aa4531
bump version of haproxy ingress to latest and limit connections 
this works around a limit on file descriptors which we encounter in kind
in CI. newer kind images impose a limit of 1024 file descriptors which
isn't trivial to change; haproxy seems to try to request just over 2*n
file descriptors where n is the max number of connections; as such, if
we limit max-connections to 250 we should be comfortably within the
limit

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-10 17:38:49 +00:00
Ashley Davis
5c7bbb068d
bump version of kind node images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-09 17:21:56 +00:00
Ashley Davis
845dd26ef7
add comments detailing kind network footgun 
also adds a variable for the network name, potentially making it easier
to change in the future if kind improves its support for this kind of
thing

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-09 17:21:47 +00:00
jetstack-bot
9162c80978
Merge pull request #4574 from SgtCoDFish/kindcleanup 
Add a script + flow for getting latest kind images
 2021-11-09 06:23:28 +00:00
Ashley Davis
6f8ef26c07
add a script + flow for getting latest kind images 
the script will need to be manually updated if we want to add a new
k8s version, but it should be trivial to do that

the actual kind image SHAsums aren't updated, so that the addition of
the script can be separate from the act of updating the images

also adds a make target for creating a kind cluster with CI deps

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-08 16:58:16 +00:00
jetstack-bot
419ca624a6
Merge pull request #4592 from SgtCoDFish/fixpre 
Fix kyverno images for CI
 2021-11-08 15:18:27 +00:00
Richard Wall
050c360204
Fix the kyvernopre image name 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-11-08 14:23:23 +00:00
Richard Wall
9e4d9bbf57
Update sha256 sum for Kyvernopre image 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2021-11-08 14:23:23 +00:00
jetstack-bot
a43061c938
Merge pull request #4586 from SgtCoDFish/nodraftrelnotes 
Remove old draft release notes
 2021-11-05 13:45:28 +00:00
jetstack-bot
4291d207b7
Merge pull request #3883 from james-callahan/omit-servicemonitor-namespaceSelector 
No need to specify namespaceSelector when in same namespace
 2021-11-05 13:02:28 +00:00
jetstack-bot
5f0128332d
Merge pull request #4588 from SgtCoDFish/bumpbase 
Bump base images to latest versions
 2021-11-05 12:02:28 +00:00
Ashley Davis
68cd5c61b8
bump base images to latest versions 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-05 11:15:59 +00:00
jetstack-bot
373245f4ce
Merge pull request #4582 from ibihim/linter_clenaup 
add comments to satisfy linter
 2021-11-05 05:45:28 +00:00
Krzysztof Ostrowski
e35cb361c8
add comments to satisfy linter 
Signed-off-by: Krzysztof Ostrowski <kostrows@redhat.com>
Co-authored-by: Irbe Krumina <irbekrm@gmail.com>
 2021-11-04 18:15:46 +01:00
Ashley Davis
4bc906ee8d
remove old draft release notes 
this repo isn't the source of truth for release notes, and if these are
drafts anyway they don't need to be kept around

(and they will still be available in git history anyway!)

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-04 16:42:47 +00:00
jetstack-bot
922a0a09ff
Merge pull request #4579 from hypnoglow/4457-fix-lint-issues 
Fix some lint issues regarding comments
 2021-11-02 11:43:59 +00:00
Igor Zibarev
f9ceb8a73e Fix some lint issues regarding comments 
References issue #4457

Signed-off-by: Igor Zibarev <zibarev.i@gmail.com>
 2021-11-02 13:57:20 +03:00
jetstack-bot
7d5f80817b
Merge pull request #4581 from irbekrm/bump_timeout 
Bumps timeout to wait for cm api in upgrade test
 2021-11-02 10:01:59 +00:00
irbekrm
edd7304c6c Bumps timeout to wait for cm api in upgrade test 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-02 11:19:05 +02:00