weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
4,364 Commits 45 Branches 0 Tags 96 MiB
d2f86c410a
Commit Graph

728 Commits

Author SHA1 Message Date
Maartje Eyskens
d2f86c410a Add intermediate cert to P12 chain if ca.crt is empty 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-08-12 12:39:27 +01:00
Richard Wall
5acb052194 A test for certificate chains 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-12 12:39:27 +01:00
Richard Wall
46d4ea768b Update test for pkcs12 encoded CA data 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-07 17:26:59 +01:00
jetstack-bot
497e64de4b
Merge pull request #3151 from JoshVanL/fix-external-issuer 
Adds Issuer Group to Secret annotation
 2020-08-06 13:58:32 +01:00
JoshVanL
016b566689
Adds Issuer Group to Secret annotation 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-08-06 09:24:37 +01:00
jetstack-bot
914508a625
Merge pull request #3085 from meyskens/ingress-cn 
Set a CN on ingress-shim + allow common-name annotation on ingress
 2020-07-31 10:21:57 +01:00
Maartje Eyskens
4be07ade31 Also update labels 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-31 10:07:26 +02:00
Maartje Eyskens
3c7573ac12 Use crt variable to update certificate 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-29 19:20:00 +02:00
Maartje Eyskens
6e0d27234d Remove unused argument 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-28 17:40:17 +02:00
Maartje Eyskens
5be15c870f Remoce unused test 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-28 11:21:09 +02:00
Maartje Eyskens
9844658e73 Remove defaulting behaviour 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-28 11:18:04 +02:00
jetstack-bot
a67afed4ec
Merge pull request #3076 from munnerz/trigger-retry-after-failure 
Schedule a 'resync' of Certificates that have been marked as failed and are to be retried later
 2020-07-20 09:44:23 +01:00
James Munnelly
fdc0960d27 Schedule a 'resync' of Certificates that have been marked as failed and are to be retried later 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-20 09:19:11 +01:00
jetstack-bot
d4bab3f369
Merge pull request #2979 from meyskens/venafi-async 
Make Venafi issuer async
 2020-07-15 15:27:34 +01:00
Maartje Eyskens
657a410178 Fix tests 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-10 16:20:50 +02:00
Maartje Eyskens
7c01c74b90 Move annotation update logic 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-10 11:05:07 +02:00
Maartje Eyskens
33b59460d1 Set a CN on ingress-shim + allow common-name annotation on ingress 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-09 10:59:48 +02:00
James Munnelly
ec44d8992c Include Order failure reason as part of CertificateRequest failure message 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-07 16:11:58 +01:00
Maartje Eyskens
e952560810 implement review feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-07 14:16:29 +02:00
jetstack-bot
d4a743f91a
Merge pull request #3038 from munnerz/v1beta1 
add v1beta1 API version
 2020-07-07 09:52:37 +01:00
James Munnelly
8b9ab18849 Add test for unknown challenge types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-06 16:39:31 +01:00
James Munnelly
09d5121713 Update acmeorders controller for new field type 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-06 16:25:46 +01:00
Haoxiang Zhou
fe80b7d760 Moved predicate package to pkg/util 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-07-02 12:23:15 +01:00
James Munnelly
1a2c676c61 Rename certificaterequest.spec.csr to 'request' 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-02 12:02:47 +01:00
Maartje Eyskens
35365b79c9 Use venafi.cert-manager.io/pickup-id 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-02 10:04:21 +01:00
Maartje Eyskens
00d37aa21d Make wait timeout error less alarming 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-02 10:04:21 +01:00
Maartje Eyskens
b81a0af6f8 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-02 10:04:21 +01:00
Maartje Eyskens
63c66ee415 Implement feedback 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-02 10:04:21 +01:00
Maartje Eyskens
ca5361d79d Make unit tests work 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-02 10:04:21 +01:00
Maartje Eyskens
ac9895d91b Make Venafi issuer async 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-07-02 10:04:21 +01:00
James Munnelly
8a1d7c6831 Remove AuditSink support from cainjector 
The AuditSink resource type (previously in alpha) has been removed
as per https://groups.google.com/g/kubernetes-sig-auth/c/aV_nXpa5uWU.

Remove all support for it from our cainjector so we are able to
continue to upgrade dependencies, and to avoid more users coming
to rely on this functionality ahead of it being removed from
Kubernetes.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 19:35:20 +01:00
James Munnelly
9e2d6a514b Move expcertificates into certificates package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 12:16:25 +01:00
James Munnelly
2280480c02 Remove old certificates controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-07-01 11:46:13 +01:00
James Munnelly
6caa4c451d Rename CRPrivateKeyAnnotationKey -> CertificateRequestPrivateKeyAnnotationKey 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 14:47:27 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-26 12:25:08 +01:00
jetstack-bot
63b7ca26b8
Merge pull request #3027 from munnerz/expcerts-renewal 
expcertificates: fix bug renewing certificates automatically near expiry
 2020-06-26 09:21:39 +01:00
James Munnelly
86b8cab328 expand out 'clearCertificateFields' function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-25 10:44:08 +01:00
James Munnelly
ba26d65c68 schedule resyncs once renewalTime has passed to handle certificate renewals in the future 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:48:33 +01:00
James Munnelly
b3300b8673 update trigger policies unit tests for status.renewalTime field 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:48:33 +01:00
James Munnelly
fe51a02227 use status.renewalTime in trigger policies and correctly plumb through clock 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:37:50 +01:00
James Munnelly
8bb4bb389a use correct PolicyChain in readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:37:50 +01:00
James Munnelly
7cf74ec442 set notBefore and renewalTime status fields in certificate readiness controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
James Munnelly
1d6424b8f2 Use 'clock' package in pkg/scheduler 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
James Munnelly
281b9ffcbd add RenewBeforeExpiryDuration function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-06-23 16:23:42 +01:00
Haoxiang Zhou
6c72193678 Handle keyEncoding for temporary Certificates 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-23 10:17:41 +01:00
Haoxiang Zhou
5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-06-18 15:26:14 +01:00
jetstack-bot
46eaf3d1a4
Merge pull request #2923 from JoshVanL/new-metrics 
Updates the metrics package + new metrics controller
 2020-06-04 12:59:38 +01:00
JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-26 23:01:55 +01:00
Haoxiang Zhou
7229741505 Changed tests for issuing controller to expect no ca.crt instead of nil 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 15:30:43 +01:00
Haoxiang Zhou
609eedacec Do not add ca.crt key to TLS secret if empty in expcertificates as well 
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
 2020-05-26 14:37:40 +01:00