weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
7,144 Commits 45 Branches 0 Tags 96 MiB
dfd1e512d8
Commit Graph

197 Commits

Author SHA1 Message Date
Ashley Davis
fb231ab641
Remove bazel 🎉 
This removes all .bazel and .bzl files, and a bunch of scripts relating
to bazel, now that it's been entirely replaced.

There are still a few places where traces could be removed, but this
removes the brunt of the bazel stuff that remains.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-07-26 11:38:50 +01:00
Joe Bowbeer
1dc252e27e update kyverno version and policy 
Signed-off-by: Joe Bowbeer <joe.bowbeer@gmail.com>
 2022-07-06 10:11:37 -07:00
jetstack-bot
bbf2b58a5e
Merge pull request #5187 from irbekrm/cleanup_kind_config 
Clean up kind config
 2022-06-21 16:22:48 +01:00
jetstack-bot
448a0832bf
Merge pull request #5190 from irbekrm/kind_1_24 
Bump kind, use upstream 1.24 image
 2022-06-09 19:34:33 +01:00
irbekrm
accb40b4f9 Default kube version for test kind cluster to 1.24 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-09 16:54:14 +01:00
irbekrm
cdc8c1ce36 Bumps kind to 0.14, use upstream kube 1.24 image 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-09 16:53:20 +01:00
Alessandro Vermeulen
1da01211ee Feature gated support for using literal subjects in Certificates 
Signed-off-by: Alessandro Vermeulen <alessandro.vermeulen@ing.com>
 2022-06-08 20:50:00 +02:00
irbekrm
a76d85eab3 Allows kind to choose API version for kubeadm Cluster config 
To be able to use single kind config for different Kubernetes versions

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-08 18:29:40 +01:00
irbekrm
a0d3d8eb0a Predefine what service IP range kind should use 
Instead of trying to retrieve it after creating the cluster

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-08 17:40:08 +01:00
irbekrm
10e117c59d Removes 1.18 and 1.19 kind images 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-08 13:32:48 +01:00
irbekrm
d9b7b89b32 Removes Gateway Kubernetes version check 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-08 13:29:49 +01:00
irbekrm
3ff5dc26ef Removes installation of pre-kubernetes 1.19 compat ingress 
As we no longer need to support Kubernetes 1.19

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-08 13:25:42 +01:00
irbekrm
289d082fbd Removes the unused traefik and haproxy addons config 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-06-08 13:08:08 +01:00
jetstack-bot
e426568633
Merge pull request #5116 from irbekrm/bump_contour 
Bump contour
 2022-05-13 12:02:55 +01:00
Ashley Davis
a691a0807b
maintain a single source of truth for updating kind images 
this removes the update functionality from make/cluster.sh in favour of
the simpler logic in hack/latest-kind-images.sh

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-05-11 16:35:25 +01:00
irbekrm
5f1dfa8c2b Bumps Contour v1.20.0 -> v1.20.1 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-05-11 11:30:20 +01:00
irbekrm
8dbd9a619f Removes duplicated Gateway CRDs 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-05-11 11:29:47 +01:00
irbekrm
689ddcafa2 Cleanup + a couple TODOs 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-05-10 12:05:02 +01:00
irbekrm
6cb826833e Ensures Envoy ClusterIP is parameterized consistently 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-05-10 12:02:16 +01:00
irbekrm
66aef8d582 Bumps kind v0.11.1 -> v0.12.0 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-05-09 17:45:11 +01:00
jetstack-bot
af47ae4e5b
Merge pull request #4914 from maelvls/install.mk 
Make: move the end-to-end tests from Bazel to Make with the new commands "make e2e-setup" and "make e2e"
 2022-03-17 09:00:35 +00:00
Maël Valais
2d29f74ffd e2e: rename Vault's image from vault:bazel to local/vault:local 
I could have done this renaming after the Bazel removal, but I figured I
would rename this image right now.

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-03-13 12:11:35 +01:00
irbekrm
47cb2ac09b Removes the unused traefik and haproxy addons 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-03-12 16:12:13 +00:00
Jake Sanders
10979e1e27
Tidy imports and copyright preamble 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:25 +00:00
Jake Sanders
e1f56ed0ca
remove conflicting contour example gateway 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:23 +00:00
Jake Sanders
6e58dc1f4e
Add contour to e2e addons 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:19 +00:00
Jake Sanders
c08f46711a
Add contour, weed out some more references to v1alpha1 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:19 +00:00
joshvanl
fd747b42b9 Adds log output for what feature gates are enabled when installing from 
devel

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-02-11 17:31:10 +00:00
joshvanl
413993f33a Adds ServerSideApply as a feature gate for the controller 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-02-11 17:12:32 +00:00
joshvanl
36955b773f Adds ServerSideApply feature gate to enabled to devel install 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-02-11 16:14:31 +00:00
jetstack-bot
4f11cc27dd
Merge pull request #4822 from JoshVanL/devel-feature-gates-parse 
Parse and distribute feature gates in devel script
 2022-02-11 13:19:01 +00:00
joshvanl
079f2b0fd9 Add AdditionalCertificateOutputFormats=true to FEATURE_GATES default 
value in /devel/run-e2e.sh

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-02-07 14:43:25 +00:00
joshvanl
c314fa5980 Adds comment for registered_feature_gates_for function 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-02-07 14:39:47 +00:00
joshvanl
0bba16e0f9 Adds empty feature set for cainjector. Parses feature gates in devel 
script, and passes them on to each component

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-02-07 14:39:46 +00:00
Ashley Davis
3a055cc2f5
rename all uses of github.com/jetstack/cert-manager 
This was done by running the following command twice:

 ```bash
 grep -Ri "github.com/jetstack/cert-manager" . | \
 cut -d":" -f1 | \
 sort | \
 uniq | \
 xargs sed -i
 "s/github.com\/jetstack\/cert-manager/github.com\/cert-manager\/cert-manager/"
 ```

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-02-02 09:08:31 +00:00
irbekrm
754193de41 Passes --dry-run=client option when applying coredns config to test kind cluster 
As --dry-run without an explicitly specified option is invalid since kubectl 1.23

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-01-24 15:36:02 +00:00
Thierry
81f308221b Add certifcate additionalOutputFormats parameter 
DER Format to create key.der binary format of the private key.

CombinedPEM Format to create tls-combined.pem containing tls.key + tls.crt.

Added Unit and e2e tests for secret with Additional output format.

Feature flag AdditionalCertificateOutputFormats to enable feature.

Signed-off-by: Thierry Sallé <seuf76@gmail.com>
 2022-01-14 11:10:32 +01:00
James Munnelly
ea2d04e2c0 Add webhook-specific 'feature' package and wire it up through config 
Signed-off-by: James Munnelly <jmunnelly@apple.com>
 2022-01-07 12:17:38 +00:00
jetstack-bot
9f7f889312
Merge pull request #4690 from jetstack/cert-manager-addon-arm 
build cert-manager images for arm on arm
 2022-01-05 15:51:45 +00:00
joshvanl
c600ba07a0 Pipes in the feature gates from environment to e2e binary. Test for 
shared feature gate existence within CertificateSigningRequest suite
test

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2022-01-04 13:17:06 +00:00
Joakim Ahrlin
6205cd3702 build images with host architecture 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2021-12-23 09:54:08 +01:00
irbekrm
81a4df9118 Defaults test cluster to kube 1.23 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-12-22 15:39:17 +00:00
irbekrm
e58ca97245 Uses upstream kind image with kube 1.23 
Also bumps kind image for kube 1.22

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-12-22 15:38:45 +00:00
irbekrm
06696befdb Installs v1 ingress-nginx for e2e tests against kube 1.23 
Also bumps the versions of ingress dependency used in tests

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-29 10:14:58 +00:00
irbekrm
0ee31f2542 Add an option to create a kube 1.23 cluster 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-11-22 16:03:06 +00:00
jetstack-bot
0236f0836e
Merge pull request #4556 from inteon/helm_template_cleanup 
Cleanup helm templates & fix empty 'resources' in deployment
 2021-11-15 14:27:06 +00:00
Ashley Davis
8b0b639496
add additional warnings when setting up a CI cluster 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-11 12:59:35 +00:00
Ashley Davis
0955aa4531
bump version of haproxy ingress to latest and limit connections 
this works around a limit on file descriptors which we encounter in kind
in CI. newer kind images impose a limit of 1024 file descriptors which
isn't trivial to change; haproxy seems to try to request just over 2*n
file descriptors where n is the max number of connections; as such, if
we limit max-connections to 250 we should be comfortably within the
limit

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-10 17:38:49 +00:00
Ashley Davis
5c7bbb068d
bump version of kind node images 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-09 17:21:56 +00:00
Ashley Davis
845dd26ef7
add comments detailing kind network footgun 
also adds a variable for the network name, potentially making it easier
to change in the future if kind improves its support for this kind of
thing

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-11-09 17:21:47 +00:00