weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
5,436 Commits 45 Branches 0 Tags 96 MiB
f2933be499
Commit Graph

5436 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
irbekrm
f2933be499 ECDSA instead of RSA keys generated for test Vault CA's root and intermediate 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 21:48:09 +01:00
irbekrm
63342c1d5e Check that Vault certs' CA contains root cert if expected 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 13:05:38 +01:00
irbekrm
0ebce264f1 Allow to optionally configure Vault intermediate PKI with root CA 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 13:05:26 +01:00
irbekrm
ef627a13b6 Adds a few comments 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 11:31:01 +01:00
jetstack-bot
e30dae687a
Merge pull request #3860 from jsoref/spelling-commitment 
Deprecate UsageContentCommittment and improve public comments
 2021-05-20 11:09:52 +01:00
jetstack-bot
85c943ffc2
Merge pull request #4018 from kmodules/jp 
Use gomodules.xyz/jsonpatch instead of mattbaird/jsonpatch
 2021-05-19 18:57:51 +01:00
Josh Soref
64fb1ebc91 Deprecate UsageContentCommittment 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2021-05-19 12:40:10 -04:00
Tamal Saha
6789053681 Use gomodules.xyz/jsonpatch/v2 v2.2.0 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-19 09:24:58 -07:00
jetstack-bot
9f5daa79c3
Merge pull request #3805 from irbekrm/2686_stuck_orders 
2686 fixes stuck Orders issue
 2021-05-19 14:31:15 +01:00
jetstack-bot
1bc3e45672
Merge pull request #4029 from jakexks/kind-0.11.0-k8s-1.21 
Update to kind 0.11.0/K8s 1.21
 2021-05-19 14:00:15 +01:00
Jake Sanders
d4623b91aa
Update to kind 0.11.0 to e2e test on k8s 1.21 
Signed-off-by: Jake Sanders <i@am.so-aweso.me>
 2021-05-19 13:38:28 +01:00
irbekrm
06f6b46f30 Implements feedback from code review 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 13:20:05 +01:00
irbekrm
bbfd2294f9 Integration test for ACME Orders controller 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 13:11:48 +01:00
irbekrm
d8c941da8e Refactors creation of ACME Orders controller 
So that it easier used with the existing test framework and also is more similar to how most other controllers are created

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 13:11:18 +01:00
irbekrm
8d55b69796 Unit test pending ACME order with valid challenges 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 13:06:12 +01:00
irbekrm
8d5023a72d Add a fake scheduler 
To allow for testing whether an item gets re-queued in unit tests

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 13:05:59 +01:00
irbekrm
1e235c79f2 Re-queue Order with finalized Challenges, but pending state 
To avoid stuck Orders in case of a misbehaving ACME server

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 13:05:44 +01:00
jetstack-bot
8aeb724f84
Merge pull request #3965 from irbekrm/fix_static_analysis_errors 
Fix static analysis errors
 2021-05-19 12:53:15 +01:00
irbekrm
a42771b7e4 Adds a bunch of comments for exported types 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:19:43 +01:00
irbekrm
f5aa3cffd1 Removes an unnecessary newline after package comment 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:17:57 +01:00
irbekrm
2bb707a1ce Remove a redundant return statement 
Part of work towards fixing errors shown by static analysis tools

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:17:38 +01:00
irbekrm
2cce594de1 Don't compare two booleans 
Part of work towards fixing errors shown by static analysis tools

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:17:18 +01:00
irbekrm
881fb2ddea Make tests fail if controller registration fail 
Part of work towards fixing errors discovered by static analysis tools

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-19 10:16:59 +01:00
Tamal Saha
2609aa51e1 Use gomodules.xyz/jsonpatch instead of mattbaird/jsonpatch 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 13:05:19 -07:00
jetstack-bot
7e51eec2b0
Merge pull request #4016 from irbekrm/multilock_le_for_controller 
Use ConfigmapsLeases Multilock for controller's leader election
 2021-05-17 18:42:30 +01:00
irbekrm
b539cbea89 Use ConfigmapsLeases Multilock for controller's leader election 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-17 18:19:38 +01:00
jetstack-bot
389d26dba8
Merge pull request #3926 from kmodules/k-1.21.0 
Update to k8s 1.21.0 tool chain
 2021-05-17 17:39:30 +01:00
jetstack-bot
19c27e1fc9
Merge pull request #4015 from SgtCoDFish/bump_default_k8s_version 
Change default devel K8S_VERSION to 1.20
 2021-05-17 17:01:30 +01:00
Tamal Saha
6bfe640533 Update fakeSecretClient 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:52:59 -07:00
Ashley Davis
a75b9e828e
change default devel K8S_VERSION to 1.20 
1.17 is no longer supported by upstream, and 1.21 didn't work with just
a trivial version change, suggesting more work may need to be done

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
 2021-05-17 16:15:16 +01:00
Tamal Saha
1f0e9d4f17 Add seperate rules for leases and configmaps 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:20 -07:00
Tamal Saha
a744db675d Add comments for replace statements 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
Tamal Saha
1b552a400d Use gopkg.in/yaml.v3 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
Tamal Saha
01757dfaf2 Update dependencies 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
Tamal Saha
6eb8ca3d07 Add RBAC for leases used by updated controller-runtime 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
Tamal Saha
7b63788f52 Cleanup codegen script 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
Tamal Saha
b1cb6422e4 Use controller-runtime v0.9.0-beta.0 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
Tamal Saha
da86194a9d Update to k8s 1.21.0 tool chain 
Signed-off-by: Tamal Saha <tamal@appscode.com>
 2021-05-17 08:11:19 -07:00
jetstack-bot
e941307bdc
Merge pull request #3938 from irbekrm/3879_test_acme_issuer_setup 
3879 test acme issuer setup
 2021-05-14 13:35:50 +01:00
irbekrm
9ecf896130 Implement feedback from code review 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-14 12:40:30 +01:00
jetstack-bot
0ff2b8778c
Merge pull request #3983 from JoshVanL/parse-certificate-chain-venafi 
Parse certificate chain venafi
 2021-05-13 14:21:14 +01:00
jetstack-bot
22ff380f39
Merge pull request #3984 from JoshVanL/parse-certificate-chain-acme 
Parse certificate chain acme
 2021-05-13 13:50:14 +01:00
jetstack-bot
96ea5e51d4
Merge pull request #3985 from JoshVanL/parse-certificate-chain-ca 
Parse certificate chain CA Issuer
 2021-05-13 13:23:14 +01:00
jetstack-bot
12c891e9b0
Merge pull request #4000 from irbekrm/re_enable_venafi_tpp_tests 
Re-enable e2e tests that connect to Venafi TPP.
 2021-05-13 12:28:14 +01:00
irbekrm
3ef1643cd7 Re-enable e2e tests that connect to Venafi TPP. 
This reverts commit 9d059a2425.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-13 11:50:29 +01:00
jetstack-bot
595d753339
Merge pull request #3982 from JoshVanL/parse-certificate-chain 
Change Vault Issuer to construct the certificate chain to populate the CertificateRequest CA with the root most cert.
 2021-05-12 17:34:13 +01:00
jetstack-bot
11bd87b58d
Merge pull request #3997 from irbekrm/temp_disable_tpp_tests 
Temporarily revert "Re-enable the Venafi TPP E2E tests"
 2021-05-12 16:32:52 +01:00
irbekrm
9d059a2425 Temporarily revert "Re-enable the Venafi TPP E2E tests" 
These tests are currently failing- we should investigate and re-enable
them.

This reverts commit c769432db5.

Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-12 16:11:07 +01:00
joshvanl
58a25314f7 Changes CR CA controller to use ECDSA keys 
Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-05-12 15:07:25 +01:00
joshvanl
ea2cfdc3c9 Updates CA issuer to updates SignCSRTemplate and propagate CA 
certificate down

Signed-off-by: joshvanl <vleeuwenjoshua@gmail.com>
 2021-05-12 14:22:59 +01:00