Commit Graph

7010 Commits

Author SHA1 Message Date
Ashley Davis
eccde015ac
add CRD generation to makefile, replacing bazel
- includes a run of make update-crds which causes some trivial changes
- updates version of YQ to latest
- makes hack/update-crds.sh just call make
- makes hack/verify-crds.sh just call make
- moves functionality of hack/verify-crds.sh to hack/check-crds.sh,
  using the makefile for generating alternative CRDs for comparison
- removes the bazel test associated with CRDs

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-27 13:25:18 +01:00
Ashley Davis
22c0f45e22
add a make variant for codegen tools
- runs "make update-codegen"
- adds codegen verification to make tests
- changes hack/(update|verify)-codegen.sh to just call make
- removes bazel codegen test so it's not automatically run in CI

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-24 09:58:01 +01:00
Ashley Davis
7230ff85a5
add extra info on how to fix when tools are missing
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-24 09:54:57 +01:00
Ashley Davis
52b94bb5a3
bump version of k8s-codegen assets
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-24 09:54:52 +01:00
jetstack-bot
f5be6e4cc9
Merge pull request #5226 from SgtCoDFish/issuer-timeout
ACME Timeout Increases
2022-06-23 10:40:39 +01:00
Ashley Davis
d5ca2585d6
Increase ACME client HTTP timeout to 90s
This is the final part of implementing
https://github.com/cert-manager/cert-manager/pull/5214

This timeout is shorter than the 2 minute timeout we increased
controllers to - that's because we'd generally expect that controller
sync loops would need to do additional actions before and after making
HTTP requests.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-22 11:35:05 +01:00
Ashley Davis
5ee43c115a
Remove timeouts in ACME logging middleware
Logging middleware probably isn't the place for this in any case, but
more broadly there's little need to add additional timeouts here since
we have a context timeout configured during issuance and ACME timeouts
configured at the level of the HTTP client we use.

This is the second part of implementing the timeouts proposal from
https://github.com/cert-manager/cert-manager/pull/5214

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-22 11:35:04 +01:00
Ashley Davis
a40fdd64b5
Incease issuer and clusterissuer controller timeouts
This follows ideas presented in
https://github.com/cert-manager/cert-manager/pull/5214

It might be nice to add these big timeouts globally to all controllers
but we're intentionally keeping these changes small and targeted for now
in order to minimise the risk when backporting these changes.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-22 11:35:00 +01:00
Joost Buskermolen
40bda26e8b
Set static (Cluster)Issuers timeout to 90 seconds
Signed-off-by: Joost Buskermolen <joost@buskervezel.nl>
2022-06-22 11:16:37 +01:00
jetstack-bot
1efd063848
Merge pull request #5130 from SgtCoDFish/bindir
Change name of `bin` dir to `_bin` and make it configurable
2022-06-22 11:14:54 +01:00
jetstack-bot
2569d0feb9
Merge pull request #5214 from SgtCoDFish/design-timeouts
Timeouts proposal
2022-06-22 10:40:54 +01:00
jetstack-bot
7f85a74af3
Merge pull request #5224 from rodrigorfk/issue-5216
Fix secrets informer race condition on CertificateRequests controllers
2022-06-22 08:00:54 +01:00
Rodrigo Fior Kuntzer
afeb543c3c CertificateRequests controllers must wait for the core secrets informer to be synced
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
2022-06-22 07:21:32 +02:00
Ashley Davis
ab09488c22
timeouts proposal
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
Co-authored-by: Maël Valais <mael@vls.dev>
2022-06-21 18:57:29 +01:00
Ashley Davis
c97914a40c
Don't include new bindir when generating bazel files
This could pick up files from vendored go and include them in bazel

We can't (easily) ignore "bin" also since we have other dirs called
"bin" which we don't want to ignore.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-21 16:34:31 +01:00
Ashley Davis
a90f215b06
add todo warning about using FULL images
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-21 16:34:31 +01:00
Ashley Davis
6a5c158c81
move commented out SHASUM generation to bottom of file
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-21 16:34:30 +01:00
Ashley Davis
e456c95fc2
move FORCE target to Makefile
it looked out of place in git.mk

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-21 16:34:30 +01:00
Ashley Davis
35f2206404
change name of bin dir to _bin by default and make it a variable
This is needed because go and other tools will ignore directories
starting with "_" or "." but would treat a dir called "bin" as a regular
directory.

This in turn meant that when we vendored Go in bin, these tools would by
default scan the whole stdlib included with the bundled vendored go.

See https://pkg.go.dev/cmd/go#hdr-Package_lists_and_patterns for details

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-21 16:34:26 +01:00
Ashley Davis
8a5b2b4c62
change default shell to use /usr/bin/env
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-21 16:26:47 +01:00
jetstack-bot
bbf2b58a5e
Merge pull request #5187 from irbekrm/cleanup_kind_config
Clean up kind config
2022-06-21 16:22:48 +01:00
jetstack-bot
da044f38a8
Merge pull request #5221 from oGi4i/issue-5188
Add revision history limit Ingress annotation to set field on the Cer…
2022-06-21 14:53:47 +01:00
jetstack-bot
75dcdf6f0b
Merge pull request #5222 from irbekrm/bump_base_images
Bumps base images
2022-06-21 13:50:48 +01:00
oGi4i
3148b17fa5
Add revision history limit Ingress annotation to set field on the Certificate
Signed-off-by: oGi4i <das.ogi4i@gmail.com>
2022-06-21 15:12:09 +03:00
irbekrm
ce55ddde2a Code review feedback
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-21 12:37:13 +01:00
irbekrm
42f82c529b Bumps base images
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-21 08:49:39 +01:00
jetstack-bot
9ad5832150
Merge pull request #5219 from EnsoFinance/beejiujitsu/cmctl-x-install-help-typo
fix(cmctl): typo in 'x install --help' text
2022-06-17 10:21:20 +01:00
Mark Shields
c2f585657a fix(cmctl): typo
Signed-off-by: Mark Shields <4237425+beejiujitsu@users.noreply.github.com>
2022-06-16 22:14:36 -04:00
jetstack-bot
c16b3cca7b
Merge pull request #5212 from jahrlin/venafi-issuer
add VerifyCredentials to Venafi issuers setup
2022-06-14 16:11:50 +01:00
Joakim Ahrlin
9f43ca2cce update boilerplate headers
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
2022-06-14 12:55:33 +02:00
Joakim Ahrlin
de08109be0 add VerifyCredentials to Venafi issuers setup
Signed-off-by: Joakim Ahrlin <joakim.ahrlin@gmail.com>
2022-06-14 12:26:38 +02:00
jetstack-bot
a8497a7126
Merge pull request #5205 from SgtCoDFish/publish-release
Add target for publishing a release to GCS using rclone
2022-06-13 15:51:48 +01:00
Ashley Davis
abebcacf42
add target for publishing a release to GCS using rclone
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-13 14:59:53 +01:00
jetstack-bot
8af1d8dac4
Merge pull request #5202 from irbekrm/revert_servicemonitor_check
Reverts additional check for whether Prometheus APIs exist before creating ServiceMonitor
2022-06-10 13:31:19 +01:00
irbekrm
6fcb3aacb2 Reverts additional check for ServiceMonitor.
Reverts a check for whether Prometheus monitoring api resources have been
deployed before creating a ServiceMonitor as enforces dependency order
which does not fit installation model using GitOps tools as discussed in
https://github.com/cert-manager/cert-manager/pull/4844

This reverts commit f2f771fc93.

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-10 11:51:47 +01:00
jetstack-bot
448a0832bf
Merge pull request #5190 from irbekrm/kind_1_24
Bump kind, use upstream 1.24 image
2022-06-09 19:34:33 +01:00
jetstack-bot
d8be140f77
Merge pull request #5200 from SgtCoDFish/rcloneinstall
Goimports improvement / rclone tool install
2022-06-09 18:56:33 +01:00
irbekrm
36984671dd Adds a couple comments and TODOs
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-09 16:54:38 +01:00
irbekrm
accb40b4f9 Default kube version for test kind cluster to 1.24
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-09 16:54:14 +01:00
irbekrm
cdc8c1ce36 Bumps kind to 0.14, use upstream kube 1.24 image
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-09 16:53:20 +01:00
Ashley Davis
9e51a14be1
add install for rclone
this will be used in place of gsutil to upload staged releases to GCS

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-09 15:49:11 +01:00
Ashley Davis
9b9e8015b8
prefix failed goimports files to make errors clearer
also uses tabs everywhere in the file rather than a mix

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-06-09 15:49:10 +01:00
jetstack-bot
d0255b9314
Merge pull request #5002 from spockz/add-literal-subject-field-to-certificate
Add ability to provide literal subject to Certificate
2022-06-09 09:53:33 +01:00
Alessandro Vermeulen
1da01211ee Feature gated support for using literal subjects in Certificates
Signed-off-by: Alessandro Vermeulen <alessandro.vermeulen@ing.com>
2022-06-08 20:50:00 +02:00
irbekrm
e203619334 Removes check for Kubernetes 1.18 and 1.19
As we are no longer creating 1.18 and 1.19 kind clusters

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-08 18:30:26 +01:00
irbekrm
a76d85eab3 Allows kind to choose API version for kubeadm Cluster config
To be able to use single kind config for different Kubernetes versions

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-08 18:29:40 +01:00
irbekrm
3720950975 Remove kind config for kube 1.18 and 1.19
As we no longer need to create 1.18 and 1.19 clusters

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-08 18:02:31 +01:00
irbekrm
bd842caabe Removes unused kind config
Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-08 17:40:09 +01:00
irbekrm
a0d3d8eb0a Predefine what service IP range kind should use
Instead of trying to retrieve it after creating the cluster

Signed-off-by: irbekrm <irbekrm@gmail.com>
2022-06-08 17:40:08 +01:00
jetstack-bot
7dd918b475
Merge pull request #5191 from irbekrm/cleanup
Cleanup (removes unused addons and code for kube 1.18 and 1.19 )
2022-06-08 16:28:08 +01:00