weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
756 Commits 45 Branches 0 Tags 96 MiB
fcca12903e
Commit Graph

756 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
James Munnelly
fcca12903e Cherrypick 91a49db82a88618983a78a06c1cbd4e00ab749ab from golang.org/x/crypto/acme 2018-04-12 19:16:09 +01:00
jetstack-bot
9cebaa604f
Merge pull request #309 from munnerz/acmev2 
Rewrite ACME issuer for v2, and make validation process asynchronous
 2018-04-12 18:17:59 +01:00
James Munnelly
93bf718d42
Merge pull request #455 from hemslo/patch-1 
Fix rst syntax error in ingress-shim.rst
 2018-04-12 17:43:45 +01:00
Hemslo
dd22b3adec
Fix rst syntax error in ingress-shim.rst 2018-04-13 00:24:17 +08:00
James Munnelly
acd927dd41 Use rate limiter when queueing (Cluster)Issuers 2018-04-12 16:51:02 +01:00
James Munnelly
0a960d46b2 Fix bug in issue method preventing cert issuance 2018-04-12 16:50:03 +01:00
James Munnelly
1975c524b9 Call AddRateLimited in QueuingEventHandler 2018-04-12 15:23:27 +01:00
James Munnelly
70dde521a1 Set status conditions on validation success. Call WaitOrder instead of GetOrder in issue. 2018-04-11 23:30:54 +01:00
James Munnelly
336d01ac4a Update dns util tests 2018-04-11 19:39:36 +01:00
jetstack-bot
4f1c8bfdb5
Merge pull request #451 from munnerz/timeout-helm 
Set 5s timeout on helm version command
 2018-04-11 19:18:06 +01:00
James Munnelly
ffdea011dd Set 5s timeout on helm version command 2018-04-11 18:50:45 +01:00
jetstack-bot
c26d937085
Merge pull request #428 from munnerz/rst-docs 
readthedocs documentation rewrite
 2018-04-11 18:22:05 +01:00
James Munnelly
4b0d28e4fe Run hack/update-deploy-gen.sh 2018-04-11 17:35:44 +01:00
James Munnelly
b6920f4b87 Update Helm chart with new docs links 2018-04-11 17:32:50 +01:00
James Munnelly
605ce181d2 Fix links and toctree 2018-04-11 17:26:55 +01:00
James Munnelly
0d8c872691 Update README.md 2018-04-11 17:13:13 +01:00
James Munnelly
eb45d46c7e 1:1 copy the dns & http validation docs 2018-04-11 16:44:14 +01:00
James Munnelly
14dc0a2e0c Update ClusterIssuers doc 2018-04-11 16:42:58 +01:00
James Munnelly
bb67c6f8b1 Add notes to issuer specific config doc 2018-04-11 16:42:24 +01:00
James Munnelly
37812059b5 Add notes and todos, rephrase and tidy up 2018-04-11 15:48:33 +01:00
James Munnelly
ef51483cbc
Merge pull request #5 from redbaron/acmev2-upstream 
Fixes for ACME client http transport
 2018-04-11 14:30:28 +01:00
Louis Taylor
d7f636e239 Add clusterissuers content 2018-04-11 14:10:28 +01:00
James Munnelly
c06c5912ef Use add_stylesheet to add custom stylesheet 2018-04-11 14:10:28 +01:00
James Munnelly
c7e84d8a28 Add requirements.txt 2018-04-11 14:10:28 +01:00
James Munnelly
d8ba342121 Add Sphinx rst based documentation for readthedocs 2018-04-11 14:10:28 +01:00
James Munnelly
4a79203633 Run gofmt 2018-04-11 13:22:10 +01:00
James Munnelly
967499331e
Merge pull request #6 from redbaron/errors-format-fix 
Fix error formatting
 2018-04-11 13:18:45 +01:00
James Munnelly
316b076622
Merge pull request #7 from redbaron/challenge-recheck 
Check challenge before presenting it
 2018-04-11 13:18:21 +01:00
Maxim Ivanov
c44a7552ea Check challenge before presenting it 
With async challenge Check, it is often happens,
that solver.Check() fails on first run after solver.Present()

Cert-manager then tries again, but starts with solver.Present(),
which not being idempotent right now fails on certain DNS providers.

This change swaps order of solver.Check() and solver.Present().
Check is not returning error if propagation not happened, it then
allows Present() to run.

In the current form, Present() will be spamming with errors,
but this doesn't stop Check from happening on every attempt,
so eventually Challenge can be verified and accepted. In the future,
Present() should be made idempotent.
 2018-04-11 11:27:23 +01:00
Maxim Ivanov
8cbb75f9ba Fix error formatting 2018-04-10 15:46:43 +01:00
James Munnelly
43373cd766 Adjust exponential backoff base value 2018-04-10 01:50:44 +01:00
James Munnelly
b9813b13db Requeue Certificate if target secret is deleted 2018-04-10 01:31:09 +01:00
James Munnelly
add2c76923 Don't trigger resync if ingresses or secrets change 2018-04-10 01:27:18 +01:00
James Munnelly
c05d255675 Use AddRateLimited for the scheduled work queue 2018-04-10 01:05:37 +01:00
James Munnelly
ffabe93b6c Use random subdomain for DNS01 provider tests 2018-04-10 00:50:58 +01:00
James Munnelly
600dc0f018 Let bash expand api-key variables 2018-04-10 00:45:30 +01:00
James Munnelly
09e055b453 Set SkipTLSVerify bool during DNS01 tests 2018-04-10 00:39:17 +01:00
James Munnelly
ca154bf1fe Set tail to 10000 on failed e2e tests 2018-04-10 00:27:57 +01:00
James Munnelly
ce441d604f Enable DNS01 provider tests using cloudflare 2018-04-10 00:27:52 +01:00
James Munnelly
02c4d7b3a7 Print all logs with kubectl tail 2018-04-09 23:30:53 +01:00
James Munnelly
857420fbd3 Use adler32 hash for acme http01 resource labels 2018-04-09 23:27:16 +01:00
James Munnelly
1154403cfc Set 5s timeout on helm version command 2018-04-09 23:11:44 +01:00
James Munnelly
de57941fbf Save cert-manager logs to artifacts dir instead of stdout 2018-04-09 22:59:19 +01:00
James Munnelly
d4da017ab8 Turn down e2e test log verbosity 2018-04-09 22:08:20 +01:00
James Munnelly
83a4196aff Update event recorder agent name 2018-04-09 21:43:37 +01:00
James Munnelly
c83b479b2f Remove extra CreateOrder event 2018-04-09 21:29:31 +01:00
James Munnelly
1d52cbeec7 Remove unused strings and standardise event reasons 2018-04-09 21:26:38 +01:00
James Munnelly
d197817fa7 Improve error reporting and use of status conditions 2018-04-09 21:17:51 +01:00
James Munnelly
e8e6785e9a Immediately create a new order if old one has expired 2018-04-09 20:08:18 +01:00
James Munnelly
1485546ed5 Clear ACME order URL if FinalizeOrder fails with 4xx error 2018-04-09 20:02:26 +01:00