cert-manager/internal/apis/certmanager
Ashley Davis c5924f54a1
add + use CABundle field for ACME servers in issuers
Previously it wasn't possible to set a custom CA bundle for an ACME
server, leading users to either patch the cert-manager system CA bundle
manually or else use SkipTLSVerify which is a security issue.

This adds CABundle for ACME, similar to what we have for Vault and
Venafi TPP issuers.

Longer term we'd like to have a more fully featured approach. It would
for example make sense to support loading CA bundles from ConfigMaps or
Secrets (similar to what we do for Vault issuers today), but for now this
change is the simplest change.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2022-12-15 16:21:07 +00:00
..
fuzzer Remove bazel 🎉 2022-07-26 11:38:50 +01:00
install Remove bazel 🎉 2022-07-26 11:38:50 +01:00
v1 fixup! Add option to load Vault CA bundle from Kubernetes Secret 2022-08-16 02:57:43 +03:00
v1alpha2 change wording on descriptions for Vault and TPP 'CABundle' fields 2022-12-15 16:21:02 +00:00
v1alpha3 change wording on descriptions for Vault and TPP 'CABundle' fields 2022-12-15 16:21:02 +00:00
v1beta1 change wording on descriptions for Vault and TPP 'CABundle' fields 2022-12-15 16:21:02 +00:00
validation add + use CABundle field for ACME servers in issuers 2022-12-15 16:21:07 +00:00
doc.go
generic_issuer.go rename all uses of github.com/jetstack/cert-manager 2022-02-02 09:08:31 +00:00
register.go rename all uses of github.com/jetstack/cert-manager 2022-02-02 09:08:31 +00:00
types_certificate.go Feature gated support for using literal subjects in Certificates 2022-06-08 20:50:00 +02:00
types_certificaterequest.go rename all uses of github.com/jetstack/cert-manager 2022-02-02 09:08:31 +00:00
types_issuer.go change wording on descriptions for Vault and TPP 'CABundle' fields 2022-12-15 16:21:02 +00:00
types.go apply go fmt for go1.19 2022-08-04 09:51:57 +00:00
zz_generated.deepcopy.go fixup! Add option to load Vault CA bundle from Kubernetes Secret 2022-08-16 02:57:43 +03:00