weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
2,372 Commits 45 Branches 0 Tags 96 MiB
f2e57a1c95
Commit Graph

899 Commits

Author SHA1 Message Date
Michael Tsang
f2e57a1c95 Add ControllerSyncCallCount metric 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-17 14:22:16 +01:00
James Munnelly
bce27c24a4 Fix handling of RFC2136 provider config 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-14 13:36:57 -04:00
James Munnelly
da2c8aff74 Fix up webhook DNS01 provider config handling 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-14 13:36:41 -04:00
Johannes Aubart
0b8c9bb05a fix ChallengeRequest resource creation 
- field 'DNSName' now contains the correct value (was empty before)
- field 'Config' now only contains the config and not the whole ACMEIssuerDNS01ProviderWebhook object

Signed-off-by: Johannes Aubart <johannes.aubart@sap.com>
 2019-05-14 12:52:08 +02:00
jetstack-bot
8d10723721
Merge pull request #1671 from cheukwing/issue-1540 
Make MaxConcurrentChallenges a configurable parameter
 2019-05-14 10:47:25 +01:00
Michael Tsang
a628b8f5a7 Use MaxConcurrentChallenges flag in scheduler 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-13 17:03:35 +01:00
Michael Tsang
2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-13 16:55:38 +01:00
Michael Tsang
a33370b118 Prepend when adding paths to ingress 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-10 18:02:58 +01:00
Daniel Morsing
71c87c92d1 make email address an optional field in ACME issuers 
Signed-off-by: Daniel Morsing <dmo@jetstack.io>
 2019-05-07 11:04:23 +01:00
James Munnelly
1268f76690 Make lastTransitionTime a pointer 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-02 14:59:52 +01:00
James Munnelly
6c3a5b3e73 Fix issue when migrating ingress-shim managed certificates from old to new format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 18:45:59 +01:00
jetstack-bot
e0474fb27f
Merge pull request #1450 from munnerz/acme-config-on-issuer 
Add 'solvers' configuration to ACME Issuer
 2019-05-01 17:56:09 +01:00
jetstack-bot
a3921f55ea
Merge pull request #1616 from munnerz/escape-resource-def 
Fix string escaping in CRD additionalPrinterColumns
 2019-05-01 17:17:14 +01:00
James Munnelly
7945a6b6a8 Remove anonymous function 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 17:14:34 +01:00
James Munnelly
55c6e6dda4 Update ingress-shim unit tests to handle new API config types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 16:25:21 +01:00
James Munnelly
7e2bedbe17 Update ingress-shim unit tests to use test builder 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 16:25:17 +01:00
James Munnelly
bc52db91b6 Update ingress-shim to handle new format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 15:21:50 +01:00
James Munnelly
c782d27f4d fix panic in acme issuer 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:37 +01:00
James Munnelly
fc6e3e5315 Remove extra check for certificate.spec.acme 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:37 +01:00
James Munnelly
46e904ce58 Add Certificate labels to created Order resources 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
93c9eae374 Update DNS01 challenge solver tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
b1bc214be8 Update DNS01 challenge solver to support both formats 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
220d39c17d Update acmeorders controller to support both formats 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
680ddc23a1 Update HTTP01 challenge solver tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
723682afcb Update HTTP01 challenge solver to support both formats 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
James Munnelly
b7dcd7db88 Update API types for new Solver format 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-01 14:24:00 +01:00
jetstack-bot
331df1b381
Merge pull request #1602 from munnerz/fix-update-loop 
Fix update loop due to changing notAfter struct
 2019-05-01 12:44:25 +01:00
James Munnelly
064b710f02 Fix update loop due to changing notAfter struct 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 19:10:29 +01:00
James Munnelly
bbf4012e12 Handle expired challenge responses in acmechallenges controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 18:57:26 +01:00
jetstack-bot
570751236d
Merge pull request #1585 from munnerz/validate-caa-feature-gate 
Add feature gate for ValidateCAA functionality and default it to off
 2019-04-30 14:17:48 +01:00
jetstack-bot
6147e89132
Merge pull request #1600 from munnerz/fixup-webhook 
Fix webhook DNS provider bugs
 2019-04-30 13:57:48 +01:00
James Munnelly
285b864978 Fix API validation for webhook DNS solver 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:38:16 +01:00
James Munnelly
235697d2d4 Fix call to Body() 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:34:15 +01:00
James Munnelly
fe01847182 Register webhook group with cert-manager scheme 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 12:34:06 +01:00
James Munnelly
49f587c844 Set Reason field on ACME challenges during Present/CleanUp 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-30 10:25:33 +01:00
James Munnelly
8d6358b46c Fix runtime errors with webhook apiserver library 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-29 18:10:47 +01:00
James Munnelly
004b35a872 Update webhook apiserver Scheme to add webhook API types 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-29 16:46:19 +01:00
James Munnelly
10092c97ee Refactor test DNS server into separate package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-29 15:09:52 +01:00
jetstack-bot
bf50c5d044
Merge pull request #1575 from christianhuening/feature1529-add-static-label 
Added static label for solver identification. Solves #1529
 2019-04-26 15:25:13 +01:00
Christian Hüning
149f830fc5
Rename label as requested 
Signed-off-by: Christian Hüning <christian.huening@figo.io>
 2019-04-25 16:56:37 +02:00
James Munnelly
9906c0d946 Add feature gate for ValidateCAA functionality and default it to off 
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-25 15:10:05 +01:00
jetstack-bot
f3910e0dd2
Merge pull request #1572 from munnerz/rfc2136-dns01-suite 
Use webhook interface for rfc2136 solver & run test suite
 2019-04-25 14:14:33 +01:00
snobu
ca725be382 Fix escape in resource def 
Signed-off-by: snobu <foo@snobu.org>

Fixes https://github.com/jetstack/cert-manager/issues/1473
 2019-04-24 16:16:34 +03:00
jetstack-bot
076ecb4e7c
Merge pull request #1579 from munnerz/apireg-v1beta1 
Use v1beta1 API version in cainjector controller
 2019-04-24 12:31:26 +01:00
James Munnelly
25af59a0d5 Use v1beta1 API version in cainjector controller 
This resolves issues when running the cainjector on Kubernetes 1.9,
as the 1.9 apiserver is not aware of the 'v1' API version.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-24 11:19:24 +01:00
James Munnelly
b5200a8121 Add omitempty to fields on conditions 
This is the standard in upstream k8s, and prevents errors
when malformed 'condition' stanzas are included in resources.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-24 10:44:36 +01:00
Christian Hüning
1e73962561
added static label for solver identification. Solves #1529 
Signed-off-by: Christian Hüning <christian.huening@figo.io>
 2019-04-24 10:13:09 +02:00
James Munnelly
01993f5afe Fixup tests 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-23 16:46:54 +01:00
James Munnelly
8d6b9b4011 Use webhook interface for rfc2136 solver 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-23 16:25:53 +01:00
jetstack-bot
ff19e63ea4
Merge pull request #1563 from munnerz/webhook-dns-provider 
Add webhook dns provider implementation
 2019-04-18 18:59:04 +01:00