weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
5,436 Commits 45 Branches 0 Tags 96 MiB
f2933be499
Commit Graph

74 Commits

Author SHA1 Message Date
irbekrm
f2933be499 ECDSA instead of RSA keys generated for test Vault CA's root and intermediate 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 21:48:09 +01:00
irbekrm
0ebce264f1 Allow to optionally configure Vault intermediate PKI with root CA 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 13:05:26 +01:00
irbekrm
ef627a13b6 Adds a few comments 
Signed-off-by: irbekrm <irbekrm@gmail.com>
 2021-05-20 11:31:01 +01:00
Maartje Eyskens
ab0cd57dc5 Use The cert-manager Authors. 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-11 19:04:13 +01:00
Maartje Eyskens
1788a9d758 Update copyright to cert-manager project 
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
 2020-12-08 19:04:49 +01:00
Richard Wall
a70298180a Run a script to update v1alpha2 usage to v1 
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
 2020-08-20 14:26:51 +01:00
JoshVanL
e465329b80
Revert vault free port and expose listener port from metrics server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-26 23:01:55 +01:00
JoshVanL
fac8c30211
Ensures that integration tests use a free/or random port to start the 
metrics server. Tests that do not depend on metrics, do not actually
start the server. Creates a shared test "FreePort" func. Fixes context
placement.

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-05-21 10:48:55 +01:00
James Munnelly
881b886049 Update Kubernetes API client call-sites 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-03-26 12:58:50 +00:00
James Munnelly
8b43813072 Update test/e2e to no longer deploy using addons 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2020-01-22 22:08:27 +00:00
Periklis Tsirakidis
a1f63b953d Use vault api and sdk modules instead of tagged repo 
Signed-off-by: Periklis Tsirakidis <periklis@nefeli.eu>
 2020-01-20 12:27:09 +01:00
James Munnelly
b50f0a983a Fix issue using new apiserver lib with older Kubernetes 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-12-17 17:14:42 +00:00
JoshVanL
f03cf45a9e Generate Name on e2e secret names and clean up 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-13 11:03:12 +00:00
JoshVanL
b4e62d0fce Increase vault health timeout try 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 17:59:38 +00:00
JoshVanL
b2337cdf9e Creates a proper wrapper for vault port-forwarding to keep it alive and 
healthy

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-11-05 14:23:23 +00:00
James Munnelly
2138dde7c3 Run a single instance of Pebble during the e2e suite 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 21:48:58 +01:00
James Munnelly
0472ac4f09 Print 'kubectl apply' output during e2e tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-11 11:05:26 +01:00
James Munnelly
6138f0c3c4 Fix e2e jobs on Kubernetes 1.14 and below 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-10 18:36:19 +01:00
JoshVanL
e64d0a26be Add allowed URI names to e2e test vault server 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
JoshVanL
15fccf9ebb Adds describe CertificateRequest in tests when waiting for valid 
certificate fails and enable no CommonName for vault server

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-10-02 17:48:37 +01:00
James Munnelly
655b432e32 Bump ingress-nginx to a version compatible with k8s 1.16 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-02 15:21:17 +01:00
JoshVanL
0f55a21e32 Set vault e2e to key_type=any 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:34:42 +01:00
JoshVanL
ced21c287f Conformance: Ensure if a certificate is deleted then a new certificate is signed with 
same key

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-26 17:34:42 +01:00
James Munnelly
973f4aa424 Update codebase for external dependencies 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-26 12:52:43 +01:00
JoshVanL
9ffaae5bfd Adds review comments 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 14:01:19 +01:00
JoshVanL
5f25ffadd8 Increase scope of vault addon tokenreview permissions to cluster 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL
f6e1964b93 Set role name correctly for vault addon with Kube Auth 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
JoshVanL
f2f5fccb85 Addresses comments and makes vault auth pointers 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-23 13:54:48 +01:00
Adam Kunicki
7058dfc687 Added Kubernetes authentication type for Vault Issuer 
Signed-off-by: Adam Kunicki <adam@streamsets.com>
 2019-09-23 13:33:29 +01:00
James Munnelly
f2f3aee50d Update codebase for new API group 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-23 12:06:13 +01:00
James Munnelly
bf9fbea23f Update codebase for new meta apigroup 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 19:25:04 +01:00
James Munnelly
eda613e6f0 Revert API version change in samplewebhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 17:26:55 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 16:22:43 +01:00
JoshVanL
6a362c67b0 Move e2e output logs with suffixes 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-12 15:59:54 +01:00
JoshVanL
3455747723 Include previous logs and use all containers from pods 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-11 22:02:10 +01:00
James Munnelly
5bd0a37686 Update Deployment manifests to use apps/v1 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-22 13:40:13 +01:00
James Munnelly
20e6a08a87 Fix fetching logs in e2e test framework 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-08 12:52:07 +01:00
James Munnelly
de34f0410d Use binary image targets to avoid building multiple architectures all the time 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 17:29:32 +01:00
jetstack-bot
fe00f40a34
Merge pull request #1648 from munnerz/post-as-get 
Add support for ACMEv2 POST-as-GET
 2019-06-05 19:48:39 +01:00
jetstack-bot
1c10f34089
Merge pull request #1663 from munnerz/distroless 
Switch to gcr.io/distroless/static base image
 2019-06-05 11:48:39 +01:00
Michael Tsang
21eae84ce4 Add chart version to helm install when running tests 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-22 14:40:12 +01:00
James Munnelly
fbf788d41f Switch to gcr.io/distroless/static base image 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-10 12:01:53 +01:00
James Munnelly
f672720ce4 Add Pebble 'strict' mode support in e2e test suite 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-07 15:26:29 +01:00
James Munnelly
d4e89431ad Add missing license header 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
d46fbf72ce Fix issues with samplewebhook addon 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
75904ecd7a Fix typo in e2e test helm chart webhook 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
James Munnelly
ac61e7a9e4 Add example-webhook test DNS webhook solver addon 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 15:39:12 +01:00
Daniel Morsing
f4b132c8c6 enabled https redirect test 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-28 12:25:03 +00:00
Daniel Morsing
e1cee57b32 update dependencies for test 
We use the latest pebble release without the strict mode flag enabled

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-28 12:24:24 +00:00
Daniel Morsing
2d21983486 Implement test for HTTP->HTTPS redirects during ACME HTTP01 challenges (#1303) 
* Add test for http->https redirects

This makes sure that when we're handling http->https redirects like
letsencrypt/boulder would for acme HTTP-01 validations

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* add initial TLS cert in hopes that this will make the TLS redirect work

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* make nginx-ingress not cheat on redirects

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* skip test until nginx-ingress is fixed

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* run bazel update

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* gofmt

Signed-off-by: Daniel Morsing <dmo@jetstack.io>

* reenable no-tls-redirects

Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-02-25 15:01:19 +00:00