weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
6,667 Commits 45 Branches 0 Tags 96 MiB
e1e416aa6f
Commit Graph

6667 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
irbekrm
e1e416aa6f Remvoes the creation of an unused HTTPRoute in tests 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-03-12 16:22:33 +00:00
irbekrm
cdaeb0599a Removes the creation of the unused test istio GatewayClass 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-03-12 16:13:06 +00:00
irbekrm
47cb2ac09b Removes the unused traefik and haproxy addons 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-03-12 16:12:13 +00:00
irbekrm
1e4c2e378b Explicitly specify group name in test gateway cert ref 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2022-03-12 16:09:29 +00:00
jetstack-bot
14578120ed
Merge pull request #4789 from UKHomeOffice/whitelist-annotation-override 
Allow whitelist-source-range ingress annotation to be overridden
 2022-03-11 14:44:35 +00:00
jetstack-bot
8ebd63c7e9
Merge pull request #4913 from jahrlin/validate-privatekey-rotationpolicy 
add validation for certificate.spec.privateKey.rotationPolicy
 2022-03-11 13:28:35 +00:00
jetstack-bot
8ed917edc5
Merge pull request #4934 from maelvls/update-readme 
Readme: link to the contributing guide instead of giving the information straight in the README
 2022-03-11 10:47:39 +00:00
jetstack-bot
db2865c42a
Merge pull request #4935 from davidsbond/lease-types 
Switch leader election to use Lease objects
 2022-03-10 17:24:39 +00:00
Joakim Ahrlin
ead4ab54ea add regression tests for certificate validation 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2022-03-10 15:41:42 +01:00
David Bond
4a4dd03245
Switch leader election to use Lease objects 
Previously, cert-manager supported both ConfigMap & Lease objects for leader election. This commit modifies
the leader-election code to now solely use Lease objects in both the controller & ca-injector. The related
RBAC for ConfigMap resources has also been removed.

This change means that you cannot upgrade to the version containing this commit from cert-manager 1.3.

Related to #3766

Signed-off-by: David Bond <davidsbond93@gmail.com>
 2022-03-10 12:38:50 +00:00
jetstack-bot
dd0d56ac3b
Merge pull request #4933 from wallrj/simple-contributing-guide 
Simplify the CONTRIBUTING.md document
 2022-03-10 12:29:39 +00:00
Maël Valais
7a382eef09 readme: link to the contributing guide directly 
Signed-off-by: Maël Valais <mael@vls.dev>
 2022-03-10 11:44:22 +00:00
Richard Wall
9f3579b292 Simplify the CONTRIBUTING.md document 
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2022-03-10 10:57:59 +00:00
jetstack-bot
4437ac8d7b
Merge pull request #4911 from 4molybdenum2/e2e-cluster-issuer 
e2e for issuers and cluster issuers ready state
 2022-03-09 09:18:01 +00:00
Tathagata Paul
3fb21d156c add more e2e tests for issuer ready state in conformance tests 
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
 2022-03-08 19:14:31 +05:30
jetstack-bot
22419602c0
Merge pull request #4897 from jahrlin/uninstall 
cmctl x uninstall
 2022-03-08 13:33:00 +00:00
jetstack-bot
1525026c99
Merge pull request #4923 from SgtCoDFish/testtargets-ci 
Various small tweaks for makefile CI
 2022-03-07 17:37:26 +00:00
Ashley Davis
216f95f563
add install for controller-gen and other "gen" tools 
k8s codegen tools are a bit of a special case; this is explained in a
comment.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-03-05 17:18:50 +00:00
Ashley Davis
ccd03ccdd9
Remove outdated, duplicated comment in Makefile 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-03-05 17:05:31 +00:00
Ashley Davis
bc070dfff0
add checks for required binaries in environment 
this helps with better error messages for end users

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-03-05 17:05:22 +00:00
Ashley Davis
a30540806e
minor verify-goimports tweak + document future improvements 
checks args for a better error message, and writes informational
messages to stderr

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-03-05 16:37:26 +00:00
Ashley Davis
e22f30420b
add target for boilerplate verification in CI presubmits 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-03-05 16:37:26 +00:00
Ashley Davis
89d7742c56
add verify-errexit target to ci presubmits 
Also modifies the script to run without bazel, and tweaks it so that
it'll detect errors in itself too.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2022-03-05 16:37:26 +00:00
Joakim Ahrlin
f5275cf1cc add enum for rotationPolicy 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2022-03-03 16:31:23 +01:00
Tathagata Paul
6503f4f83c e2e for issuers and cluster issuers ready state 
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
 2022-03-03 19:15:36 +05:30
jetstack-bot
14904306de
Merge pull request #4791 from jakexks/gateway-api-update 
Update the sig-network Gateway API support to v1alpha2
 2022-03-02 12:33:16 +00:00
Joakim Ahrlin
4f72d061c5 update uninstall description 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2022-03-02 10:21:26 +01:00
Jake Sanders
74ddda40cb
goimports 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:27:33 +00:00
Jake Sanders
10979e1e27
Tidy imports and copyright preamble 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:25 +00:00
Jake Sanders
cfb1406742
Update RBAC for the new gateway API's apiGroup 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:24 +00:00
Jake Sanders
e1f56ed0ca
remove conflicting contour example gateway 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:23 +00:00
Jake Sanders
72efaad2b2
Protocol type must be TCP, Listeners must have a name 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:22 +00:00
Jake Sanders
09bbd541ef
update gateway-shim controller unit tests 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:21 +00:00
Jake Sanders
457fa3ca2c
Fix unit tests for Gateways 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:20 +00:00
Jake Sanders
6e58dc1f4e
Add contour to e2e addons 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:19 +00:00
Jake Sanders
c08f46711a
Add contour, weed out some more references to v1alpha1 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:19 +00:00
Joakim Ahrlin
eb64e6494c
update deps and BUILD files 
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
 2022-03-01 15:05:18 +00:00
Jake Sanders
c96d91d586
Update the sig-network Gateway API support to v1alpha2 
Co-authored-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 15:05:17 +00:00
jetstack-bot
6e875d885f
Merge pull request #4905 from jakexks/fix-hardcoded-ctl-cert-inspect 
Remove hardcoded cert from cmctl inspect secret unit tests
 2022-03-01 14:13:35 +00:00
Jake Sanders
03748831a9
Remove hardcoded cert from cmctl inspect secret unit tests 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2022-03-01 13:11:31 +00:00
jetstack-bot
46a2ab5e4d
Merge pull request #4882 from maelvls/faster-build-containers 
Make: faster "make all-containers" and rebuild on commit change
 2022-02-25 17:06:00 +00:00
Maël Valais
b150828a5b make: bin/release-version needs to be rebuilt every time 
We use FORCE instead of .PHONY because this is a real file that can be
used as a prerequisite. If we were to use .PHONY, then the file's
timestamp would not be used to check whether targets should be rebuilt,
and they would get constantly rebuilt.

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 17:30:48 +01:00
Maël Valais
a85b1abd37 make: work around the multiple copies of each binaries with hard links 
Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 17:07:44 +01:00
Maël Valais
6e6667acac make: make sure bin/scratch/build-context/* are intermediate 
That should make so 'make' removes these intermediate files.

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 17:06:55 +01:00
Maël Valais
2b252b30ad make: explain why we have the "build-context" dir 
Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 16:38:53 +01:00
Maël Valais
b33c50342c make: fix "release-version" description 
Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 16:38:53 +01:00
Maël Valais
6e5bf073c2 make: explain why the target "bin/release-version" exists 
Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 16:38:53 +01:00
Maël Valais
ac16285f2e make: asthetic, fix the spacing between targets 
Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 16:38:53 +01:00
Maël Valais
c09dbb07e4 make: speed up 'docker build' with separate dir contexts 
Previously, we had one .dockerignore that would do its best to only have
the binaries and licenses copied into the Docker (or nerdctl, or
buildah). Unfortunately, that meant it had to copy all of bin/server and
bin/cmctl, which could become quite large (I measured 1.6 GB).

Instead of relying on a single .dockerignore file, we copy the licenses
and binaries into a "scratch context" directory. The downside is that
all the binaries are in two different places (bin/server and
bin/scratch/containers). Note that we can't use symlinks because Docker
won't dereference them.

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 16:38:53 +01:00
Maël Valais
3f7bac6ad3 make: rebuild images when a different commit is checked out 
When switching branches, the Go files may not change. But since the
images contain the commit hash, e.g.:

  cert-manager-controller-amd64:v1.7.0-beta.0-142-gfc0819af6

It is surprising when trying to deploy to Kind: the git commit that is
checked out does not match the commit hash of the image.

To avoid confusion, I added bin/release-version that gets updated only
when the currently checked out commit changes.

Signed-off-by: Maël Valais <mael@vls.dev>
 2022-02-25 16:38:53 +01:00