weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
2,302 Commits 45 Branches 0 Tags 96 MiB
d5daff0d6a
Commit Graph

890 Commits

Author SHA1 Message Date
James Munnelly
1268f76690 Make lastTransitionTime a pointer 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-02 14:59:52 +01:00
James Munnelly
6c3a5b3e73 Fix issue when migrating ingress-shim managed certificates from old to new format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 18:45:59 +01:00
jetstack-bot
e0474fb27f
Merge pull request #1450 from munnerz/acme-config-on-issuer 
Add 'solvers' configuration to ACME Issuer
 2019-05-01 17:56:09 +01:00
jetstack-bot
a3921f55ea
Merge pull request #1616 from munnerz/escape-resource-def 
Fix string escaping in CRD additionalPrinterColumns
 2019-05-01 17:17:14 +01:00
James Munnelly
7945a6b6a8 Remove anonymous function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 17:14:34 +01:00
James Munnelly
55c6e6dda4 Update ingress-shim unit tests to handle new API config types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 16:25:21 +01:00
James Munnelly
7e2bedbe17 Update ingress-shim unit tests to use test builder 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 16:25:17 +01:00
James Munnelly
bc52db91b6 Update ingress-shim to handle new format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 15:21:50 +01:00
James Munnelly
c782d27f4d fix panic in acme issuer 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:37 +01:00
James Munnelly
fc6e3e5315 Remove extra check for certificate.spec.acme 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:37 +01:00
James Munnelly
46e904ce58 Add Certificate labels to created Order resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
93c9eae374 Update DNS01 challenge solver tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
b1bc214be8 Update DNS01 challenge solver to support both formats 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
220d39c17d Update acmeorders controller to support both formats 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
680ddc23a1 Update HTTP01 challenge solver tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
723682afcb Update HTTP01 challenge solver to support both formats 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
b7dcd7db88 Update API types for new Solver format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
jetstack-bot
331df1b381
Merge pull request #1602 from munnerz/fix-update-loop 
Fix update loop due to changing notAfter struct
 2019-05-01 12:44:25 +01:00
James Munnelly
064b710f02 Fix update loop due to changing notAfter struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 19:10:29 +01:00
James Munnelly
bbf4012e12 Handle expired challenge responses in acmechallenges controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 18:57:26 +01:00
jetstack-bot
570751236d
Merge pull request #1585 from munnerz/validate-caa-feature-gate 
Add feature gate for ValidateCAA functionality and default it to off
 2019-04-30 14:17:48 +01:00
jetstack-bot
6147e89132
Merge pull request #1600 from munnerz/fixup-webhook 
Fix webhook DNS provider bugs
 2019-04-30 13:57:48 +01:00
James Munnelly
285b864978 Fix API validation for webhook DNS solver 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:38:16 +01:00
James Munnelly
235697d2d4 Fix call to Body() 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:34:15 +01:00
James Munnelly
fe01847182 Register webhook group with cert-manager scheme 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:34:06 +01:00
James Munnelly
49f587c844 Set Reason field on ACME challenges during Present/CleanUp 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 10:25:33 +01:00
James Munnelly
8d6358b46c Fix runtime errors with webhook apiserver library 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-29 18:10:47 +01:00
James Munnelly
004b35a872 Update webhook apiserver Scheme to add webhook API types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-29 16:46:19 +01:00
James Munnelly
10092c97ee Refactor test DNS server into separate package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-29 15:09:52 +01:00
jetstack-bot
bf50c5d044
Merge pull request #1575 from christianhuening/feature1529-add-static-label 
Added static label for solver identification. Solves #1529
 2019-04-26 15:25:13 +01:00
Christian Hüning
149f830fc5
Rename label as requested 
Signed-off-by: Christian Hüning <christian.huening@figo.io>
 2019-04-25 16:56:37 +02:00
James Munnelly
9906c0d946 Add feature gate for ValidateCAA functionality and default it to off 
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-25 15:10:05 +01:00
jetstack-bot
f3910e0dd2
Merge pull request #1572 from munnerz/rfc2136-dns01-suite 
Use webhook interface for rfc2136 solver & run test suite
 2019-04-25 14:14:33 +01:00
snobu
ca725be382 Fix escape in resource def 
Signed-off-by: snobu <foo@snobu.org>

Fixes https://github.com/jetstack/cert-manager/issues/1473
 2019-04-24 16:16:34 +03:00
jetstack-bot
076ecb4e7c
Merge pull request #1579 from munnerz/apireg-v1beta1 
Use v1beta1 API version in cainjector controller
 2019-04-24 12:31:26 +01:00
James Munnelly
25af59a0d5 Use v1beta1 API version in cainjector controller 
This resolves issues when running the cainjector on Kubernetes 1.9,
as the 1.9 apiserver is not aware of the 'v1' API version.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-24 11:19:24 +01:00
James Munnelly
b5200a8121 Add omitempty to fields on conditions 
This is the standard in upstream k8s, and prevents errors
when malformed 'condition' stanzas are included in resources.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-24 10:44:36 +01:00
Christian Hüning
1e73962561
added static label for solver identification. Solves #1529 
Signed-off-by: Christian Hüning <christian.huening@figo.io>
 2019-04-24 10:13:09 +02:00
James Munnelly
01993f5afe Fixup tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-23 16:46:54 +01:00
James Munnelly
8d6b9b4011 Use webhook interface for rfc2136 solver 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-23 16:25:53 +01:00
jetstack-bot
ff19e63ea4
Merge pull request #1563 from munnerz/webhook-dns-provider 
Add webhook dns provider implementation
 2019-04-18 18:59:04 +01:00
James Munnelly
2e2699a7a6 Improve RFC2136 test DNS server 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 17:20:19 +01:00
James Munnelly
af9bce7221 Add 'webhook' DNS01 provider type 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 17:19:32 +01:00
James Munnelly
c127716ac5 Add DNS01 webhook provider API fields 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 17:18:25 +01:00
jetstack-bot
e1571326e5
Merge pull request #1561 from munnerz/refactor-dns-utils 
Export dnsQuery function & refactor DNS01Record function
 2019-04-18 15:02:05 +01:00
James Munnelly
14dd0b1ffe Rename DNS01Record to DNS01LookupFQDN 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:34:15 +01:00
James Munnelly
3e58213894 Export dnsQuery function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:34:15 +01:00
James Munnelly
942d6491d6 Pass StopCh and RESTClient to controller context 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:08 +01:00
James Munnelly
871ed4283b Allow controller constructors to return errors 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:04 +01:00
James Munnelly
193a45dab9 Add comments to API types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:04:55 +01:00