cert-manager/internal/controller/certificates
Christopher Broglie 0f74d7536e Add renewBeforePercentage alternative to renewBefore
Since the actual duration is unknown until a cert has been issued,
providing an absolute duration for renewBefore can result in accidental
renewal loops. The new renewBeforePercentage field computes the
effective renewBefore using the actual duration, allowing users to
better express intent while maintaining backwards compatibility.

Fixes #4423, resolves #5821

Signed-off-by: Christopher Broglie <cbroglie@cloudflare.com>
2024-06-29 21:18:15 -07:00
..
policies Add renewBeforePercentage alternative to renewBefore 2024-06-29 21:18:15 -07:00
apply_test.go Add roundtrip test to Certificate serializing. Add field manager to 2022-03-28 12:40:29 +01:00
apply.go replace k8s.io/utils/pointer with k8s.io/utils/ptr 2023-08-28 09:33:10 +02:00
certificates_test.go fix gci linter 2024-04-29 13:47:25 +02:00
certificates.go improve CertificateOwnsSecret and add tests 2024-01-05 16:24:59 +01:00
OWNERS Remove carrot from OWNERS file match string 2022-02-11 16:18:44 +00:00
secrets_test.go fix a bug that caused the issuer-ref and certificate-name annotations on Secrets to be correct when being updated. 2023-06-13 16:54:32 +02:00
secrets.go add TODO comment that explains that we don't understand the reason for the current behaviour 2023-06-14 14:51:07 +02:00