weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
3,416 Commits 45 Branches 0 Tags 96 MiB
f3a58ed991
Commit Graph

125 Commits

Author SHA1 Message Date
jetstack-bot
1793e7b573
Merge pull request #2236 from munnerz/covered-images 
Add Bazel image targets with coverage enabled
 2019-11-14 10:54:09 +00:00
James Munnelly
4266e11747 Remove calls to os.Exit and panic 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-11-13 17:38:33 +00:00
jetstack-bot
66d32a204f
Merge pull request #2242 from munnerz/cm-manifestlist-acmesolver 
No longer use arch-specific acmesolver image
 2019-10-17 14:16:14 +01:00
chenjun.cj
fe6e446f43 enable cert-manager using --kubeconfig to connect API Server with kubeconfig file 
Signed-off-by: chenjun.cj <chenjun.cj@alibaba-inc.com>
 2019-10-17 12:14:28 +08:00
James Munnelly
7eb2e5efa0 No longer use arch-specific acmesolver image 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 16:24:34 +01:00
James Munnelly
5057da1b89 Add Bazel image targets with coverage enabled 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-10-16 08:59:24 +01:00
JoshVanL
4eb6335c76 Support out of tree issuers in ingress-shim 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-09-27 13:54:39 +01:00
James Munnelly
fad13bfce1 Move image macro into hack/build 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-27 12:07:08 +01:00
James Munnelly
973f4aa424 Update codebase for external dependencies 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-26 12:52:43 +01:00
James Munnelly
58754abf37 Refactor codebase for v1alpha2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-20 16:22:43 +01:00
James Munnelly
6a167cc9e6 Enable all CertificateRequest controllers by default 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-19 13:07:59 +01:00
James Munnelly
bc61194709 Remove deprecated code from ingress-shim controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-09-19 13:07:59 +01:00
James Munnelly
6052e0558e Refactor base controller and allow Running additional informers 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-21 13:22:57 +01:00
JoshVanL
d96c7d2e1c Adds venafi internal package with venafi CR controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-19 16:04:12 +01:00
jetstack-bot
8ab4dc1301
Merge pull request #1943 from JoshVanL/cr-acme 
Adds acme CertificateRequest controller
 2019-08-17 00:34:00 +01:00
JoshVanL
e2b9b21766 Adds acme CertificateRequest controller with unit tests 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-15 17:18:11 +01:00
James Munnelly
5c17c2e37f Add webhookbootstrap controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-08-14 21:27:36 +01:00
JoshVanL
60b349e162 Adds initial vault CR controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-13 23:34:17 +01:00
JoshVanL
46fd159f81 Register self signed CR controller 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-08-01 16:39:01 +01:00
James Munnelly
99bbc31386 Promote 'Clock' to be a field on controller context 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-26 12:30:23 +01:00
James Munnelly
32bc10710e Update use of featuregate package 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-20 01:57:24 +01:00
James Munnelly
088e196d82 Add experimental certificate request based controller 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-17 10:07:36 +01:00
jetstack-bot
c6cd522a6a
Merge pull request #1836 from JoshVanL/ca-issuer-cr-controller 
Add alpha CertificateRequest controller for CA Issuer type
 2019-07-08 14:11:34 +01:00
JoshVanL
ec28f8dc6e Adds certificate request controller feature flag 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-03 15:43:14 +01:00
JoshVanL
6b1ff0148b Adds certificate request base controller and CA issuer controller 
instance

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2019-07-03 15:42:03 +01:00
James Munnelly
5f5811b81e Respect --namespace flag in rfc2136 provider 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-03 13:52:43 +01:00
James Munnelly
5a096b0b07 Fix lint failures and remove image target manual tag 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 18:26:12 +01:00
James Munnelly
de34f0410d Use binary image targets to avoid building multiple architectures all the time 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 17:29:32 +01:00
James Munnelly
fd2dd16f75 Change bazel build to only build for current --platform 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-07-02 16:10:05 +01:00
Michael Tsang
2cc1c4df07 Add MaxConcurrentChallenges flag and associated structs to options 
Signed-off-by: Michael Tsang <michael.tsang@jetstack.io>
 2019-05-13 16:55:38 +01:00
James Munnelly
500d8fbeb7 Create image bundles in multiarch_image target 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-05-03 11:16:25 +01:00
James Munnelly
9906c0d946 Add feature gate for ValidateCAA functionality and default it to off 
To help avoid issues with the ValidateCAA functionality, this disables
the CAA check by default and adds a new --feature-gates=ValidateCAA=true
option to cert-manager-controller to allow enabling the previous
behaviour in v0.7.0 and v0.7.1.

Once issues with CNAMEd DNS names pointing to internal nameservers
are resolved, this option will be defaulted to on.

Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-25 15:10:05 +01:00
James Munnelly
942d6491d6 Pass StopCh and RESTClient to controller context 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:08 +01:00
James Munnelly
871ed4283b Allow controller constructors to return errors 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-04-18 14:22:04 +01:00
Lennart Jern
cd576dd8db Set default acmesolver image based on arch 
Signed-off-by: Lennart Jern <lennart.jern@gmail.com>
 2019-03-22 17:32:34 +01:00
Louis Taylor
c640c2f070 Expose metrics server on non-leader instances 
This makes sure all cert-manager instances have a metrics endpoint.

Fixes #1352.

Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-03-18 12:41:39 +00:00
James Munnelly
420ebfebe2 Use goflag instead of pflag for logs 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:51 +00:00
James Munnelly
5d73076db9 Update logs package for go-logr 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-12 14:24:50 +00:00
James Munnelly
41934a2b57 Enable Venafi issuer in controller binary 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-03-01 13:16:03 +00:00
James Munnelly
2f30258f0e Switch to klog 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 12:34:02 +00:00
James Munnelly
a9d8f7de8a Fixup for Kubernetes 1.13.2 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-22 11:53:19 +00:00
James Munnelly
149cbb30a7 Add arm32 and arm64 bazel image targets 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-08 15:10:45 +00:00
James Munnelly
0bb864871e Increase acmesolver default cpu resource limit to 100m 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-07 17:16:01 +00:00
James Munnelly
094ae3e50c Fix CLI flag not being respected 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-02-06 16:11:37 +00:00
jetstack-bot
5f96b378e6
Merge pull request #1184 from tlmiller/feature/authnss 
Control authoritative dns01 server check.
 2019-01-12 15:25:07 +00:00
Thomas Miller
dacd0b45cb Control authoritative dns01 server check. 
Adds cmd flag for controlling if authoritative dns servers are used to
check RR propagation or just normal resolvers.

This change is added so that constrained enviornments can control more
aspects of DNS queries performed.

- Applying PR feedback

Signed-off-by: Thomas Miller <thomas@tlm.id.au>
 2019-01-12 20:17:28 +10:00
Louis Taylor
3d0e06a0b9 Add note to help text about clusterissuers 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
Louis Taylor
bbda87b3c8 Add --namespace flag 
Signed-off-by: Louis Taylor <louis@kragniz.eu>
 2019-01-10 13:52:52 +00:00
James Munnelly
0fcc0c666c Update copyright header year 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2019-01-07 15:07:55 +00:00
James Munnelly
bca6ed6e64 Switch ACME challenge scheduler to evaluate all challenges at once 
Signed-off-by: James Munnelly <james@munnelly.eu>
 2018-11-29 22:49:55 +00:00