weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
7,944 Commits 45 Branches 0 Tags 96 MiB
df0d6f22a3
Commit Graph

7944 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tim Ramlot
df0d6f22a3
cleanup go imports 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-08-10 09:48:14 +02:00
jetstack-bot
35522192ff
Merge pull request #6259 from SgtCoDFish/kb-tools 
Fix kubebuilder shas
 2023-08-09 22:26:21 +02:00
jetstack-bot
88af6e24ee
Merge pull request #6261 from cert-manager/2023-annual-review-owners-file 
Annual review of the OWNERS file (2023): remove Joakim
 2023-08-09 15:42:16 +02:00
Maël Valais
d57c310ec2
annual review of the OWNERS file 
Ref: https://github.com/cert-manager/cert-manager/issues/6231

Signed-off-by: Maël Valais <mael@vls.dev>
 2023-08-09 14:02:23 +02:00
Ashley Davis
4dae329c37
fix kubebuilder shas 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2023-08-09 11:12:15 +01:00
jetstack-bot
21cb5c94c0
Merge pull request #6255 from SgtCoDFish/ng 
Update nameserver lookup test to use upstream targets
 2023-08-09 11:51:16 +02:00
Ashley Davis
a53bec25e7
Update nameserver lookup test to use upstream targets 
In the long term I don't think this test should be run as a unit test
because it can randomly break due to changes in DNS config we don't
control, which is a pretty poor user experience for someone trying to
change unrelated code.

If we're going to run this kind of check, we should probably run it as a
periodic rather than a presubmit, perhaps with the test being run on
presubmit when the DNS util code is changed.

But that's all more work than I can really do now. Instead, I'll copy
what the upstream go-lego is doing, which should unblock us for now:

07c4daeff3/challenge/dns01/nameserver_test.go

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2023-08-09 09:27:30 +01:00
jetstack-bot
f8851e4641
Merge pull request #6247 from inteon/ctl_logging_part3 
Use logging library with json support in cmctl (part 3)
 2023-08-01 19:12:29 +02:00
Tim Ramlot
e3d6717387
update comment and explain why we use cmdutil.CheckErr 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-08-01 16:17:06 +02:00
Tim Ramlot
78b78cecca
check api, only log if -v is set 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-08-01 16:15:14 +02:00
Tim Ramlot
b4479e53ed
use logging library in cmctl 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-08-01 16:07:20 +02:00
jetstack-bot
b93ec2f824
Merge pull request #6119 from inteon/ctl_logging_part2 
Use logging library with json support in cmctl (part 2)
 2023-08-01 15:05:28 +02:00
Tim Ramlot
ae287461d0
prepare cmctl improvements 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-08-01 10:32:35 +02:00
jetstack-bot
d233758d31
Merge pull request #5337 from AcidLeroy/controller-configuration-file 
Support loading controller configuration from a versioned file
 2023-07-31 12:09:30 +02:00
Cody W. Eilar
282a6d58a9 Preserve internal types 
- Needed to add custom conversion functions to handle conversions from
  public facing types to internal ones.

Signed-off-by: Cody W. Eilar <ecody@vmware.com>
 2023-07-27 16:44:38 -07:00
Cody W. Eilar
6212b63e51 Address the non-optional values in internal config 
- This  commit changes the internal config to have fewer number of
  optional parameters.  It changes the types to match the ones that are
  already present in https://github.com/kubernetes/apimachinery/blob/master/pkg/apis/meta/v1/conversion.go
  so that custom converters do not have to be written for types "int"
  and "float32".

Signed-off-by: Cody W. Eilar <ecody@vmware.com>
 2023-07-27 16:44:38 -07:00
Cody W. Eilar
1243fe285b Add to ability to start controller with config file 
Signed-off-by: Cody W. Eilar <ecody@vmware.com>
 2023-07-27 16:44:38 -07:00
jetstack-bot
9de9809ac5
Merge pull request #6108 from inteon/ctl_logging 
Use logging library with json support in cmctl (part 1)
 2023-07-27 17:54:51 +02:00
jetstack-bot
cabc05824a
Merge pull request #6156 from kahirokunn/host-network-dns-policy 
chore: When hostNetwork is enabled, dnsPolicy is now set to ClusterFirstWithHostNet.
 2023-07-27 10:20:07 +02:00
jetstack-bot
0b9366c0fb
Merge pull request #6232 from inteon/fix_log_reassignment 
[BUGFIX] Incorrect re-assignment of cross-invocation variable
 2023-07-26 13:35:07 +02:00
jetstack-bot
ab2a8c58d3
Merge pull request #6234 from SgtCoDFish/context 
Use supplied context where possible
 2023-07-26 13:20:07 +02:00
Ashley Davis
7e1ce241ac
use supplied context where possible 
this was discovered as part of the investigation into #6104

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2023-07-26 11:06:31 +01:00
Tim Ramlot
c7d0e0a13e
instead of creating a new local log variable, we were updating the cross-invocation log variable and were adding more Values to the log variable, causing high memory usage and incorrect log messages 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-25 20:31:47 +02:00
jetstack-bot
615422b5bf
Merge pull request #6087 from rouke-broersma/patch-1 
fix: maxUnavailable pdb configuration cannot be used due to default set minAvailable
 2023-07-25 13:48:35 +02:00
jetstack-bot
4de06a19d7
Merge pull request #6152 from inteon/improve_policy_chain_v0 
Improve Trigger, Readiness and PostIssuance Policy chains
 2023-07-24 17:06:42 +02:00
jetstack-bot
339a969478
Merge pull request #6227 from lucacome/bump-k8s.io-deps 
Bump k8s.io dependencies
 2023-07-24 11:15:42 +02:00
Tim Ramlot
106d49f44b
upgrade kind images 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-24 10:14:51 +02:00
Tim Ramlot
82ec7b3ee0
downgrade k8s.io/kube-openapi 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-24 09:53:13 +02:00
Tim Ramlot
36ddf19e2e
improve Trigger, Readiness and PostIssuance Policy chains 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-24 09:42:19 +02:00
Tim Ramlot
19918da4c8
run 'make update-licenses' 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-24 09:38:27 +02:00
Tim Ramlot
f61aacb8c1
run 'make tidy' 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-24 09:34:29 +02:00
Luca Comellini
3ff638b6f3
Bump k8s.io dependencies 
Signed-off-by: Luca Comellini <luca.com@gmail.com>
 2023-07-20 10:35:20 -07:00
jetstack-bot
ed9d525979
Merge pull request #6225 from arukiidou/patch-1 
helm: Update Chart.template.yaml - add apache 2.0 license
 2023-07-20 09:41:09 +02:00
arukiidou
740a4760b1
Update Chart.template.yaml 
add apache 2.0 license

Signed-off-by: arukiidou <arukiidou@yahoo.co.jp>
 2023-07-19 21:54:04 +09:00
jetstack-bot
e9e054b863
Merge pull request #6220 from giantswarm/webhook-netpol-indentation 
Fix indentation of Webhook NetworkPolicy matchLabels
 2023-07-18 09:55:23 +02:00
jetstack-bot
bad235cb7e
Merge pull request #6209 from bgelens/fix-serviceaccountlabels-adding-whitespace 
service account labels introduce a white line issue
 2023-07-18 09:43:24 +02:00
jetstack-bot
3cd1e58d1e
Merge pull request #6218 from SgtCoDFish/bumpgo 
Bump go to latest patch release
 2023-07-17 18:42:43 +02:00
Gerald Pape
418df14dc0
Fix indentation of Webhook NetworkPolicy matchLabels 
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
 2023-07-17 16:24:59 +02:00
Ashley Davis
5ca59ddf2d
bump go to latest patch release 
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
 2023-07-17 12:54:18 +01:00
Tim Ramlot
a819025a4b
the chart will now disallow you to specify both the minAvailable and maxUnavailable values without issues 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-14 16:43:32 +02:00
Rouke Broersma
314163d461
Document that maxUnavailable takes precedence over minAvailable 
Signed-off-by: Rouke Broersma <rouke.broersma@infosupport.com>
 2023-07-14 16:16:32 +02:00
Rouke Broersma
29c270cf79
Fix conditions if maxUnavailable 0 
Signed-off-by: Rouke Broersma <rouke.broersma@infosupport.com>
 2023-07-14 16:16:32 +02:00
Rouke Broersma
5c5b1c6551
Fix pdb conditions 
Signed-off-by: Rouke Broersma <rouke.broersma@infosupport.com>
 2023-07-14 16:16:32 +02:00
Rouke Broersma
773afd3da4
Allow maxUnavailable in certmanager pdb 
Signed-off-by: Rouke Broersma <mobrockers@gmail.com>
 2023-07-14 16:16:32 +02:00
Rouke Broersma
eb2b4d8fbc
Allow maxUnavailable in webhook pdb 
Signed-off-by: Rouke Broersma <mobrockers@gmail.com>
 2023-07-14 16:16:32 +02:00
Rouke Broersma
659c95e202
Allow maxUnavailable in cainjector pdb 
Signed-off-by: Rouke Broersma <mobrockers@gmail.com>
 2023-07-14 16:16:32 +02:00
Ashley Davis
a76003f737
Merge pull request #6056 from inteon/improve_pki_webhook 
Improve CertificateRequest's CSR validation code
 2023-07-11 16:31:37 +01:00
Ben Gelens
4adead4dfd fix the whitespace issue 
Signed-off-by: Ben Gelens <ben@bgelens.nl>
 2023-07-10 14:42:52 +02:00
jetstack-bot
e36a8c3b43
Merge pull request #6206 from inteon/remove_vcert_fork 
Remove VCert fork dependency replace statement
 2023-07-10 13:14:10 +02:00
Tim Ramlot
4d7f6281d0
use pki validation code for CSR validation 
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
 2023-07-10 12:48:12 +02:00