github.com/cert-manager/trust-manager commits

Merge pull request #268 from SgtCoDFish/makecomments

Improve makefile comments around image building

6a9f141d1838025a5805e7d65066e2dc330281e9 authored about 1 year ago

improve makefile comments around image building

Signed-off-by: Ashley Davis <[email protected]>

e320a2808a8afd5c18436dc39f66e7e98f88a684 authored about 1 year ago

Merge pull request #262 from inteon/upgrade

Upgrade dependencies

3c174149d07edb2ff7f1ec3c8668c454c6071758 authored about 1 year ago

upgrade dependencies

Signed-off-by: Tim Ramlot <[email protected]>

91884a9c37bc9b766f8fd7154a435025fc7670f2 authored about 1 year ago

Merge pull request #260 from erikgb/fix-reconcile-consistency

fix: should reconcile targets consistently

3484e545bb143567e52e29570522e380cb298014 authored about 1 year ago

Merge pull request #261 from cert-manager/dependabot/go_modules/all-fc3bcaaf1b

Bump the all group with 4 updates

2899f688c46236f3f4b30d6c89ba85c8f6500520 authored about 1 year ago

tidy stuff

Signed-off-by: Olivier Campeau <[email protected]>

improve readability

Signed-off-by: Oliv...

ac2641bfd2d3f23b427b2327c665d7c9c4c54742 authored about 1 year ago

add label selector to existing sources

Signed-off-by: Olivier Campeau <[email protected]>

1647b3b50cf6f621c9d42ca73425a5673e14dac1 authored about 1 year ago

Bump the all group with 4 updates

Bumps the all group with 4 updates: [github.com/go-logr/logr](https://github.com/go-logr/logr), ...

d8d751ed981df9148736efeeb4fc434867512a09 authored about 1 year ago

fix: should reconcile targets consistently

Signed-off-by: Erik Godding Boye <[email protected]>

11288fa133db4108f825fcf9de2f98734335eeee authored about 1 year ago

feat(bundle): add label selector for configmap and secret sources

Signed-off-by: Olivier Campeau <[email protected]>

chore(apis): add comments to new types

...

6b2c091dd0741edaa4f226e7f49b15e61d62e1a2 authored about 1 year ago

fix: apply-configuration gen for Bundle (cluster-scoped)

Signed-off-by: Erik Godding Boye <[email protected]>

78a3cd771ccf6c2b10314f3ca9ab1b9a7851088f authored about 1 year ago

Merge pull request #253 from arsenalzp/addPKCS12Passwd

add dedicated structures for PKCS12 and JKS stores

54e8b096c2faf5e2f11454739d2abd4f5a691f75 authored about 1 year ago

add dedicated structures for PKCS12 and JKS stores

Signed-off-by: Oleksandr Krutko <[email protected]>

remove invalid comments in validat...

7c9d78fcf06af6676f37754150228ae3da872605 authored about 1 year ago

Merge pull request #254 from cert-manager/dependabot/go_modules/all-15a4b9dd4e

Bump the all group with 1 update

01bd331abb8ee071025e2b8989930a2eb3b1d8e9 authored about 1 year ago

Merge pull request #249 from erikgb/improve-conditions

BREAKING: chore: align BundleCondition with upstream metav1.Condition

25f303a3a5b4b4c7c1f7a86afa757542eb8bfb04 authored about 1 year ago

chore: align BundleCondition with upstream metav1.Condition

Signed-off-by: Erik Godding Boye <[email protected]>

d603faf4d116381e114cb290e1c74869d4b02f87 authored about 1 year ago

Bump the all group with 1 update

Bumps the all group with 1 update: [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo).
...

4fb2075e844c6c9712225945b001afa5271a7b70 authored about 1 year ago

Merge pull request #252 from erikgb/fix-flaky-tests

test: fix flaky tests by introducing komega

131a37c301f3682ac27774cd4af435140dbbab38 authored about 1 year ago

test: fix flaky tests by introducing komega

Signed-off-by: Erik Godding Boye <[email protected]>

2800155a7c27caa87da9dda6edcb6e4ae2f9bc11 authored about 1 year ago

Merge pull request #250 from SgtCoDFish/localarch

Better handling of local arch differences

443fc94f8429e51acf0a1f5f0ddc681a74b0401d authored about 1 year ago

improve build target comment to make clear we'll use the local arch

Signed-off-by: Ashley Davis <[email protected]>

181305003676b35baebcc705dc884d34ff8aab74 authored about 1 year ago

use local arch for load target rather than hardcoded amd64

this improves the experience on, say, arm64

Signed-off-by: Ashley Davis <[email protected]>

0e851ad1fb798029de068a4e77515399a25ac45f authored about 1 year ago

Merge pull request #248 from SgtCoDFish/fix-api-dirs-macos

Fix apply configuration generation on macOS

5b960b29c688560bc09dd097c67d97cd86000df6 authored about 1 year ago

use existing GO_MODULE var rather than separate shell

This avoids us spinning up a separate shell when we can use the existing
identical value

This c...

e95678f50ce8eb28943b16e9511fb497d969819d authored about 1 year ago

fix API_DIRS var on macOS

On at least macos 14.1 (sonoma) the paste utility seems to require a
filename to be specified; b...

deccfc53bf0b1aabc6d231783349a72ed0ffafbe authored about 1 year ago

Merge pull request #241 from erikgb/refactor-additional-formats

fix: should encode additional target format just once per bundle reconcile

6bb7d305a8ab9f92fc893b6da59b809008a89070 authored about 1 year ago

Merge pull request #247 from SgtCoDFish/fixpackageci

Improve package CI error handling

f1c6ca41b6b76d84f7ab3b4d44842136e3b6d5d1 authored about 1 year ago

fix: should encode additional target format just once per bundle reconcile

Signed-off-by: Erik Godding Boye <[email protected]>

efc3c6ad1ca52db01dad500ec5a0c495ae11129d authored about 1 year ago

Improve package CI error handling

fixes #246

Signed-off-by: Ashley Davis <[email protected]>

55642da6e128fe218513cb3859439e14578b92f3 authored about 1 year ago

Merge pull request #238 from cert-manager/dependabot/go_modules/all-0f90ae75e2

Bump the all group with 3 updates

620be4f7184d2f5cea8fcae604a4c1e1edceff06 authored about 1 year ago

Bump the all group with 3 updates

Bumps the all group with 3 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/cli...

c0d52d08440082443edc1f5d65314155f87e12b3 authored about 1 year ago

Merge pull request #230 from erikgb/ac-preparations

chore!: remove .status.target field from Bundle API

511ef1dd9e6d41be0d1427e5ecf4637b63a5d674 authored about 1 year ago

Merge pull request #231 from cert-manager/dependabot/go_modules/all-0861fc13de

Bump the all group with 3 updates

2976fe4048e5a47580456e8dbe5c52f77d8bfbbe authored about 1 year ago

Bump the all group with 3 updates

Bumps the all group with 3 updates: [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo),...

9ccca27e6f21dd9fc6e6cc3ca5e66a3f025bd9e3 authored about 1 year ago

chore!: remove .status.target field from Bundle API

Signed-off-by: Erik Godding Boye <[email protected]>

e11a272df6f17698c6a51bdab6608eb5f692ea25 authored about 1 year ago

Merge pull request #217 from erikgb/generate-ac

chore: generate applyconfigurations for custom resources

92e290b520fbd3ce0490e4dabed84711068231a1 authored about 1 year ago

Merge pull request #228 from SgtCoDFish/readmetweak

Tweak readme to encourage use

56f8223131fd99ec5e6af242177b132f3e532a8d authored about 1 year ago

tweak readme to encourage use

Signed-off-by: Ashley Davis <[email protected]>

028605182748a1e7bff1baa323288096844c4c16 authored about 1 year ago

Merge pull request #225 from tspearconquest/separate_lease_privileges

Allow permissions to put the leases in the trust-manager namespace, not the trust namespace

4717a7f6c9189c3431a1a1e971a508530e9837f4 authored about 1 year ago

Update deploy/charts/trust-manager/templates/role.yaml

Co-authored-by: Erik Godding Boye <[email protected]>
Signed-off-by: tspearconquest <81998567+tsp...

f4e3ff2cade8682e05b2042fab7d35e30bc2d570 authored about 1 year ago

Don't use the trust namespace for leases

Signed-off-by: Thomas Spear <[email protected]>

48c8568ba7305e6e5320ef94213b223acb65e0b0 authored about 1 year ago

Give the new role a name consistent with the other cert-manager components

Signed-off-by: Thomas Spear <[email protected]>

5c25d06ca7dd7e1a31737095324f5d434710c5bf authored about 1 year ago

Allow permissions to put the leases in the trust-manager namespace, not the trust namespace

Signed-off-by: Thomas Spear <[email protected]>

a70d6ad326f35802a120bc62933b4b6537d8e2e5 authored about 1 year ago

chore: generate applyconfigurations for custom resources

Signed-off-by: Erik Godding Boye <[email protected]>

594e5e2da528b4eacac91bf20927bc1394b7d290 authored about 1 year ago

Merge pull request #223 from cert-manager/dependabot/go_modules/all-6006f8ced7

Bump the all group with 3 updates

cb1bef1552a8d175e61c11793832661869e3c5fe authored about 1 year ago

Bump the all group with 3 updates

Bumps the all group with 3 updates: [github.com/spf13/cobra](https://github.com/spf13/cobra), [k...

ffce71bc64cce73bd8e7c8c0b2ac82917f11eebf authored about 1 year ago

Merge pull request #220 from cert-manager/dependabot/go_modules/all-a0b24b559f

Bump the all group with 3 updates

ad150e553b943a507949d183a3e71e869a2c5d83 authored about 1 year ago

Merge pull request #116 from jaygridley/feat/pod-labels-annotations

feat: add support for additional pod annotations/labels

e7603e5ec98dceb02590bb3579cd6cc9683427fc authored about 1 year ago

Bump the all group with 3 updates

Bumps the all group with 3 updates: [github.com/go-logr/logr](https://github.com/go-logr/logr), ...

4615359cde55ebd613f032d4ae45d725be42f186 authored about 1 year ago

feat: add support for additional pod annotations/labels

Signed-off-by: Martin Odstrcilik <[email protected]>

ff251c11fe4bfc31e36aa887653be9859a6d60f7 authored about 1 year ago

Merge pull request #219 from inteon/release_v0.7.0

Prepare release v0.7.0

d21e83609c16eb22df75efdd28c0e36966eff939 authored about 1 year ago

prepare release v0.7.0

Signed-off-by: Tim Ramlot <[email protected]>

4478fff39e5bd2a2d793b4b1937e600f74d584e6 authored about 1 year ago

Merge pull request #218 from inteon/fix_ssa_migration_rbac

FIX: For CSA to SSA migration, we need UPDATE permission on the resource (not the sub-resource)

2b7cec266144f0726e681e637247cd135068ba76 authored about 1 year ago

for CSA to SSA migration, we need UPDATE permission on the resource (not the sub-resource)

Signed-off-by: Tim Ramlot <[email protected]>

582f543dfbae55c13833f511bdea8e341489a314 authored about 1 year ago

Merge pull request #215 from joemccall86/patch-1

Use proper namespace for webhook

0418012f3617d222d0a5ae337e9168534f6f2005 authored about 1 year ago

Merge pull request #216 from erikgb/add-erikgb-to-approvers

Add erikgb to project approvers

d3add2fa5fe52b1b8a4df188675829f8f05cd5a8 authored about 1 year ago

Add erikgb to project approvers

Signed-off-by: Erik Godding Boye <[email protected]>

b521ad5a60cd6b16c914eb1e25bfe919705769a8 authored about 1 year ago

Use proper namespace for webhook

Use the namespace configured in the helper for the webhook so it is called correctly.

Signed-of...

18b9a55d25a2f4f4ffc90048035a2ca9ee6a6cb5 authored about 1 year ago

Merge pull request #213 from inteon/release_v0.7.0-alpha.3

Bump release version to v0.7.0-alpha.3

66d0aca1721f449e658591d80bbb0903afc95844 authored about 1 year ago

bump release version to v0.7.0-alpha.3

Signed-off-by: Tim Ramlot <[email protected]>

da32968bf53eed34660172d1d8c7a7bb3c2c67ba authored about 1 year ago

Merge pull request #207 from erikgb/fix-secrets-rbac

fix: should not have have read access to all secrets when secret targets disabled

c8c6e73c46aa0e0300e5eab1efa8ed114ef1fc94 authored about 1 year ago

Update deploy/charts/trust-manager/templates/clusterrole.yaml

Co-authored-by: Erik Godding Boye <[email protected]>
Signed-off-by: Tim Ramlot <42113979+inteon@...

c774970e3b4731b81f9ce34ed18ceea10a48051b authored about 1 year ago

move 'get' verb to list of non-resource specific verbs

Signed-off-by: Tim Ramlot <[email protected]>

2a11a1e35b240e33a34db53a2c4c9364636c9aec authored about 1 year ago

fix: should not have have read access to all secrets when secret targets disabled

Signed-off-by: Erik Godding Boye <[email protected]>

f7715575c088f4ae1bab915110ef52031e2bd605 authored over 1 year ago

Merge pull request #211 from inteon/fix_switch_targets

BUGFIX: support switching between target types

b1ebb435cd0350e1c2cff291ebbf37edd81bf64c authored over 1 year ago

fix bugs in bundle secret target logic (switching between target types was not handled correctly)

Signed-off-by: Tim Ramlot <[email protected]>

53deb39f67b980858586450b5b69d25482c442aa authored over 1 year ago

Merge pull request #212 from inteon/fix_secret_validation

BUGFIX: fix bugs in validation logic for secret target & add tests

1e7cad5c9ce7478a4396439fa638b48fba0bd75b authored over 1 year ago

Merge pull request #210 from inteon/cleanup_secret_target

Cleanup patch functions Secret and ConfigMap targets

58df5a6a258bce5297d8e34cfbbdf0e21a8b03c1 authored over 1 year ago

Update pkg/bundle/sync.go

Co-authored-by: Erik Godding Boye <[email protected]>
Signed-off-by: Tim Ramlot <42113979+inteon@...

0f1a2a3bd9ca9c0404f61fa3e456b769646c24fc authored over 1 year ago

fix bugs in validation logic for secret target & add tests

Signed-off-by: Tim Ramlot <[email protected]>

cabf8e1e4a595bb76f4d800bb047664fd24689b0 authored over 1 year ago

cleanup patch functions Secret and ConfigMap targets

Signed-off-by: Tim Ramlot <[email protected]>

6dcf5e0db5d63b514af255325c2a307e3fd52c24 authored over 1 year ago

Merge pull request #209 from SgtCoDFish/removepatch

Remove patch versions from go directives

b52cb7052bded82b799d1c84054bf0e7e8e5e7e7 authored over 1 year ago

Remove patch versions from go directives

This helps older versions of go parse these directives

Specifically, our build process for the ...

dcb272444d464147c18bb4882c811195c068f017 authored over 1 year ago

Merge pull request #206 from cert-manager/dependabot/go_modules/all-c12498a31b

Bump the all group with 1 update

94e8d110291e85cfeaded4d0d109d326b718d5cb authored over 1 year ago

Bump the all group with 1 update

Bumps the all group with 1 update: [github.com/onsi/gomega](https://github.com/onsi/gomega).

- ...

c95ab46a3c21bd150955d92d694c4a25f67d2260 authored over 1 year ago

Merge pull request #176 from WatcherWhale/priorityClasses

Allow configuring of the priorityClass

1a76505d82c7bfec331e180d0ab779932bf4f6cc authored over 1 year ago

Merge pull request #204 from inteon/upgrade

Upgrade go to 1.21

c48304d4a1a40437da670534d55c00f09a1f53e0 authored over 1 year ago

upgrade go to 1.21

Signed-off-by: Tim Ramlot <[email protected]>

c86ef6e81805fc965d297c08f23a4463e97187a9 authored over 1 year ago

Merge pull request #203 from inteon/release_v0.7.0-alpha.2

Preparing release v0.7.0-alpha.2

8c3c262d7c30e8c19630c7e7285f64d507644d2e authored over 1 year ago

preparing release v0.7.0-alpha.2

Signed-off-by: Tim Ramlot <[email protected]>

7f6274409231956c23c4d28fe9cba610bb87868b authored over 1 year ago

Merge pull request #201 from SgtCoDFish/certcn

add a CN for the trust-manager certificate

b055aa2e08c0a1561e170a29a144d18dcd568135 authored over 1 year ago

Merge pull request #202 from cert-manager/dependabot/go_modules/all-86f00f375c

Bump the all group with 7 updates

ae5c11a30370fceece2318956ad8e729f5651a3f authored over 1 year ago

Bump the all group with 7 updates

Bumps the all group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/o...

c441400f711f2899b692ea79a275d0107523ddc9 authored over 1 year ago

Merge pull request #197 from inteon/enable_dependabot

Enable dependabot updates

742c487026ee9fc9de2e568b5228dcf7b47ba079 authored over 1 year ago

add a CN for the trust-manager certificate

since this cert is self-signed, its subject will match its issuer

it's valid to have an empty s...

56da7beb36585db40c744824614dde3840dfea33 authored over 1 year ago

Merge pull request #118 from aelbarkani/patch-1

Make seccompProfile optional in initContainer

32235683a95dbc0331ebf82c42bf05c7213f79b7 authored over 1 year ago

Make seccompProfile optional in initContainer

Signed-off-by: Anas EL BARKANI <[email protected]>

9e0ec861ed9b1ba8a0b4bbaa5dbf134d5bc2646a authored over 1 year ago

Merge pull request #200 from SgtCoDFish/tweaks

Fix build on macOS / values.yaml wording tweaks

007b44ce18070511ab6c88eef1b4402fe734069a authored over 1 year ago

fix provision-buildx on macOS

Signed-off-by: Ashley Davis <[email protected]>

510bc903587dec118784cec04bdcc648e6c5da38 authored over 1 year ago

tweak wording on new secret target values

these are nitpicks that weren't worth blocking the original PR for

Signed-off-by: Ashley Davis ...

1054f72400d92119e7b7fd0faccb40b92816ff39 authored over 1 year ago

Merge pull request #193 from Jiawei0227/secrets

feat: support secret as a target

f5fadf2cc794b47ba337f4926c2ad7de3468d3dd authored over 1 year ago

feat: support secret as a target

Inspired by https://github.com/cert-manager/trust-manager/pull/108

Signed-off-by: Jiawei Wang <...

0bd29a29bb5b2c41169b20520af6e8b1177255eb authored over 1 year ago

Merge pull request #198 from vinny-sabatini/issue-145

allow setting namespace for helm chart

a9458243d6a839965fe8f21d6557a9c53fb61319 authored over 1 year ago

allow setting namespace for helm chart

Signed-off-by: Vincent Sabatini <[email protected]>

98cdbd37f2317f15e6de93dafcd9bd68752d5ce3 authored over 1 year ago

enable dependabot updates

Signed-off-by: Tim Ramlot <[email protected]>

1254e3d2af306e8eb43a263824ae3d40c7e6ed0e authored over 1 year ago

Merge pull request #156 from cablespaghetti/main

Allow enabling hostNetwork mode in Helm chart

bf93d2b5e5bdb1cb8b7d424850f58578ceffa285 authored over 1 year ago

Add another newline

Signed-off-by: Sam Weston <[email protected]>

f26595ba4f81792da0d781f533f02c70b5b071e3 authored over 1 year ago

Adjust newlines

Signed-off-by: Sam Weston <[email protected]>

e7e0920aa2b4c9cb2cee63dbdf6f712f8b5e20a7 authored over 1 year ago

Address review comments

Signed-off-by: Sam Weston <[email protected]>

c9db6fd173715f39a97761d0d6b20f8286bce45b authored over 1 year ago

Ecosyste.ms: OpenCollective

github.com/cert-manager/trust-manager