Commit Graph

700 Commits

Author SHA1 Message Date
Ashley Davis
a76003f737
Merge pull request #6056 from inteon/improve_pki_webhook
Improve CertificateRequest's CSR validation code
2023-07-11 16:31:37 +01:00
Tim Ramlot
4d7f6281d0
use pki validation code for CSR validation
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-10 12:48:12 +02:00
Tim Ramlot
90f84b9c40
remove VCert fork dependency replace statement
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-10 11:26:16 +02:00
Tim Ramlot
7098c25a55
move e2e framework back to e2e module
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-07 19:26:10 +02:00
Tim Ramlot
5ba29272c0
add validation to pki CertificateTemplate function
and add support for add DontAllowInsecureCSRUsageDefinition featuregate
to use old behavior in controller

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-05 13:04:21 +02:00
jetstack-bot
14f81d4270
Merge pull request #6171 from maelvls/update-cmd/ctl/v1.13.0-alpha.0
[Release v1.13.0-alpha.0] Update cmd/cmctl's go.mod to v1.13.0-alpha.0
2023-06-23 17:24:39 +02:00
jetstack-bot
3159ea59e7
Merge pull request #6162 from inteon/remove_replace
Remove old miekg/dns replace statement
2023-06-21 13:32:19 +02:00
Maël Valais
06b2ea6d48 Update cmd/cmctl's go.mod to v1.13.0-alpha.0
Signed-off-by: Maël Valais <mael@vls.dev>
2023-06-20 20:09:35 +02:00
Florian Liebhart
b6dbee68d4 update code comment on the recursive nameserver flag
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 17:25:48 +02:00
Florian Liebhart
601c06c9c9 add newline
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 16:39:49 +02:00
Florian Liebhart
876c39b4c9 reorganize import
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 16:38:23 +02:00
Florian Liebhart
9ef3edcd95 update doku on flags
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 15:42:28 +02:00
Florian Liebhart
8c5181c667 remove trailing comma
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 10:25:03 +02:00
Florian Liebhart
91df28e4f5 update flag documentation
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 10:18:24 +02:00
Florian Liebhart
717cccb586 add tests for DoH; include some flag documentation
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-20 10:16:51 +02:00
Florian Liebhart
9ddf2bab90 remove HTTPS endpoint for default nameservers; remove DNS-over-TLS
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 16:06:39 +02:00
Tim Ramlot
3a29635c66
add support for DoH and DoT
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-06-19 15:59:40 +02:00
Florian Liebhart
8335f8474e remove unneeded whitespace
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Florian Liebhart
153c0b5fbf remove bazel
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Florian Liebhart
894e1f99d6 fix error for dns endpoint propagation
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Florian Liebhart
cd821e1948 fix controller options description
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Florian Liebhart
a934bbf462 Make the DNS-Over-HTTPS Json endpoint configurable
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Florian Liebhart
14c5e7724d delete bazel stuff
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Florian Liebhart
fa2f063c28 rebase master
Signed-off-by: Florian Liebhart <flo.liebhart@gmail.com>
2023-06-19 15:32:01 +02:00
Tim Ramlot
a6bd44e944
remove old miekg replace statement
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-06-19 10:37:30 +02:00
Tim Ramlot
ced9f2bce0
if wait is set to 0, we still want to check the API once
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-30 15:08:02 +02:00
Luca Comellini
8a5704635a
Bump sigs.k8s.io/controller-runtime to v0.15.0
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-23 17:34:28 -07:00
irbekrm
132ab27cec Updates cmctl to point at latest cert-manager
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-19 14:31:18 +01:00
Luca Comellini
bf6bbb19de
Bump k8s.io dependencies
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-18 21:55:47 -07:00
Tim Ramlot
0284d20a74
upgrade all our docker deps
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-12 15:32:09 +02:00
Tim Ramlot
d14ffca049
replace go.mod replace statements with require statements
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-12 14:38:32 +02:00
Tim Ramlot
2ba39e9ebc
allow importing the ctl cmd package
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-12 14:13:04 +02:00
irbekrm
16bfe33937 make update-licenses
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-11 13:04:03 +01:00
irbekrm
b67c68859d Bumps Helm to latest release
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-11 12:55:58 +01:00
irbekrm
5ee7b50ca8 Bumps c/r to latest commit
To ensure that there is as little diff as possible with c/r 0.15

Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-11 12:13:19 +01:00
jetstack-bot
308c1472aa
Merge pull request #6031 from inteon/remove_deprecated_3
Replace deprecated wait.PollUntil and wait.Poll
2023-05-10 17:52:54 +01:00
Ashley Davis
9f1c1cf247
use a concrete cert-manager version for cmctl
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2023-05-10 15:45:45 +01:00
irbekrm
97a3eb8697 Makes test framework accessible externally
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-10 12:09:35 +01:00
Ashley Davis
209c252005
Move webhook testing package to core module
This package was used by at least one external importer [1] and so the
change to make the webhook live in a separate package caused an issue
which @irbekrm reported on slack. [2]

This PR moves the webhook testing code into the core cert-manager module
so it'll be importable anywhere (albeit under a new name). This change
also requires moving the webhook options into the core cert-manager
module since they're required by the webhook testing logic.

[1] 268cd2fdba/test/env/env.go (L25)

[2] https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1683650224483169

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2023-05-09 18:40:03 +01:00
Tim Ramlot
e08a13496d
replace deprecated wait.PollUntil() and wait.Poll()
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-09 17:47:53 +02:00
Tim Ramlot
f16a3f56d1
replace usage of wait.PollImmediate
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-09 15:20:45 +02:00
jetstack-bot
50ac858898
Merge pull request #6036 from irbekrm/fix_trivy_vulns
Fix trivy vulns
2023-05-09 11:09:48 +01:00
irbekrm
b8029dc758 Fix trivy vulnerabilities
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-09 09:51:09 +01:00
Tim Ramlot
d656b2d9da
replace deprecated PollImmediateUntil with PollUntilContextCancel
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-07 10:15:46 +02:00
Tim Ramlot
2687b02e3f
update dependencies and LICENSE files
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-05 18:08:42 +02:00
Tim Ramlot
8747adf629
fix feedback
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-05 18:08:29 +02:00
Tim Ramlot
c113a3eadc
remove logging flags from acmesolver
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-05 18:08:29 +02:00
Tim Ramlot
f0871eb6b8
further standardise logging across components
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-05 18:08:29 +02:00
Tim Ramlot
5091a3bff4
use same logging flags for every cli and simplify flag logic
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-05 18:08:29 +02:00
Michael Malov
99e23d5e93
Add support for json logging format
Signed-off-by: Michael Malov <14035243+malovme@users.noreply.github.com>
2023-05-05 18:01:16 +02:00