Ecosyste.ms: OpenCollective
An open API service for software projects hosted on Open Collective.
github.com/cert-manager/trust-manager
trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.
https://github.com/cert-manager/trust-manager
Signed-off-by: Ashley Davis <[email protected]>
27b4d59e1dad2740053545b5b3b6655b3769a8ae authored over 1 year agoUse boilersuite for boilerplate verification
41e54ed6a7356971dcf40e096c9b9471609a1c8c authored over 1 year ago
Removes the need for Python in development environments for
trust-manager!
This also requires s...
86bb755fd69a13fa48595cfe416f36493119e07a authored over 1 year agoExplicitly define resource namespaces in Helm chart
1945dd8e148d3c1c95165a1a554b8dd2c6ecee7c authored over 1 year agoFormatting improvements, tests for dummy certs
fcec41c76e13562958a69c24e1158d560b1b80d9 authored over 1 year ago
this helps with using these certs in certain types of test, and allows
us to be sure that other ...
Signed-off-by: Ashley Davis <[email protected]>
31b50180f812db21d7e890e4d3d2fca44010889d authored over 1 year agoAdd descriptions for some helm chart fields
f213e1823d99f74971b52bc4733434c9627a15bc authored over 1 year agoUse ordered aliases when creating JKS files
fc7a3e6c3cd978a9f2deb563f51916a0e6254789 authored over 1 year agothis should hopefully make these files more deterministic!
also changes comment for default JKS...
7ec0bcdcb25cd675db04891c446712beb7e57942 authored over 1 year agoSigned-off-by: Ashley Davis <[email protected]>
e2ee0b903ab42dfe2221a61e1f8db4fb6739eac3 authored over 1 year agohelm: make installation of default trust package optional
9ac074a1c6e91cb9c21084c20d5759fa9018cf6a authored over 1 year agofixes #13 - Allow node selection based on nodeSelector, tolerations, affinities and topologySpre...
c10337a92d65cb9ee33c6385b1136c0a1a0cba96 authored over 1 year agoSigned-off-by: Si Mon <[email protected]>
f0663d1b91f994b488f11cdb31d8ef4dfe56460f authored over 1 year agoSigned-off-by: Spyros Tzovairis <[email protected]>
5e76f76c28f5ea10d2ad82db14d9236353c6d70b authored over 1 year agoSigned-off-by: Spyros Tzovairis <[email protected]>
a02dc1742544409c4ab745dcc9ca6f62108f0064 authored over 1 year agoSigned-off-by: Spyros Tzovairis <[email protected]>
dcf2366942a10734b8e31f9b3415900d082966e3 authored over 1 year agoBump to v0.5.0-beta.0 for release
0eb583a579e5662569fefa65dfd5a07cab840b48 authored over 1 year agoMinor restructure for ko compatibility
4565dcacf9024badb6ed1e88e5dc4266136b8838 authored over 1 year agoSigned-off-by: Ashley Davis <[email protected]>
8c980daf60998b765bf3db4855f991b576ae7f4f authored over 1 year ago
Move cmd/main.go to cmd/trust-manager/main.go so that `ko` correctly
builds as a `trust-manager`...
Add support for JKS truststores
9a9234dec35af985464c0e569c55b21254732c1d authored over 1 year agoThis reverts commit 5ba0485d656c8e01a64ad5a968bf237555c97320.
Signed-off-by: Adrian Lai <adrian...
225e987bab2e471a46325ddf899848d2f4522a0b authored over 1 year ago
As we can now also specify writing to the target in JKS format, ensure
at the validating webhook...
Signed-off-by: Adrian Lai <[email protected]>
5ba0485d656c8e01a64ad5a968bf237555c97320 authored over 1 year agoSigned-off-by: Adrian Lai <[email protected]>
a926c83d613d8e122b94bc66e3e731de25d7b82e authored over 1 year agoSigned-off-by: Adrian Lai <[email protected]>
81394abc840509e889c7207c4e198aadf831ecf0 authored over 1 year ago
Co-authored-by: Ashley Davis <[email protected]>
Signed-off-by: Adrian Lai <ai...
Co-authored-by: Ashley Davis <[email protected]>
Signed-off-by: Adrian Lai <ai...
Co-authored-by: Ashley Davis <[email protected]>
Signed-off-by: Adrian Lai <ai...
Signed-off-by: Tim Ramlot <[email protected]>
092d8a59cebbbd021cdac3f31ceabf4565a42b4c authored almost 2 years agoSigned-off-by: Adrian Lai <[email protected]>
e334623a16bd59ecb96974d489592b8b678a1160 authored almost 2 years agoSigned-off-by: Adrian Lai <[email protected]>
ed4ba9344c60b6bb0c03961fdc3e6903e2bbb7e8 authored almost 2 years ago
* Adds an AdditionalFormats option to target
* Writes jks encoded truststore as binaryData in ...
Add a design for public trust bundles
2f407bdc9e26f6b6c40ba0893f9e0363feecb201 authored almost 2 years agoSigned-off-by: Spyros Tzovairis <[email protected]>
d3f7e52561b44285ddd4472cb828f5ecfb514b8b authored almost 2 years agoBump values in helm chart
60150c86bd873c5fa02752b63723920e4bf70b72 authored almost 2 years agoalso update path (which presumably was ingored) in update script
Signed-off-by: Ashley Davis <a...
9695f88bb4dc96a7a4edff4a6c80bbc91f23e85c authored almost 2 years agoReview suggestion for README
cce6aa9f83f44af2952946204a51ecf20e67b765 authored almost 2 years agoSigned-off-by: Ashley Davis <[email protected]>
1ff16502d94d392ea77141b65b94147e83887863 authored almost 2 years agoBumps + doc updates for 0.4.0
65689870f3d50ba3d08454c15f0808ac9086e732 authored almost 2 years agoSigned-off-by: Ashley Davis <[email protected]>
5e935f36c58e1c541ee4a5f2541f326a8b9903ce authored almost 2 years agoAdd missing permission to update bundle finalizers
927d97c2acf4df34839b6d0a18509cf1ef9d87dd authored almost 2 years ago
this should enable trust-manager to work in OpenShift or generally in
clusters which set the Own...
Signed-off-by: Ashley Davis <[email protected]>
ed5644baf157705fe44e50c6816f1c1f05712379 authored almost 2 years agoMake CRD installation optional
50434f1b041b93fd38d47ee905f50c7400c069aa authored almost 2 years agoSigned-off-by: Max Sargent <[email protected]>
074b19d0d7cc44c86f9fa222499b5cfb0405831c authored almost 2 years agoSigned-off-by: Max Sargent <[email protected]>
c15cb3e49cf30fbab928284e48fd9010fe6bf311 authored almost 2 years agoUse a source and a target cache instead of a MultiScopedCache
a6996b90b3649e8e51e03dbfbf538f672fd3c012 authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
74f09cb6c8cfdab06e7b96d64219cb884c7dc55b authored almost 2 years agoSigned-off-by: Max Sargent <[email protected]>
dc274d7fee01dd242dc5d74b12efec17d2c33bab authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
8e60cfc6082c04033ee6d82a5b841487677bdcab authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
3330c3c501f6f019f19fb7a6f09c21285c7577ef authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
807873caf1100307237b5ea7554de29489f1b645 authored almost 2 years agoSigned-off-by: Max Sargent <[email protected]>
67848bb70f21818ef4a7daa5fc09a2418792f98d authored almost 2 years agoSigned-off-by: Max Sargent <[email protected]>
1a1711eadf60f8126c6657e4b28525aa3763bcc2 authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
50cf83ecc867754efa8962b269328448dcb8f9d7 authored almost 2 years agoUpgrade go dependencies
698875cce5f694c6153c2afe3256a7e2d1f1ac96 authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
1a1322737b4000a4ce6a239fe43d0d1088d9ff8e authored almost 2 years agoRemove deprecated v1beta1 admission review version
ac89810d71f1c20d77ab184dc1947a1978e09406 authored almost 2 years agoas discussed in cert-manager biweekly meeting on 2023-01-25
Signed-off-by: Ashley Davis <ashley...
5ef5e5d91ce2065ce4b34cb3382052787cee446e authored almost 2 years agoRename '_test.go' suffix to test file
e65a28b6ed76c5bf3d9abd0adb60a200e801bcad authored almost 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
f842b86a22cc64f8882e1e5d3fb197bda446d6c8 authored almost 2 years agoReadme tweak taken from website#1160
7927ec63c3b3a817c7dbfd3f11e1e7686df16a58 authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
157f3dfcfb96507962f82deefa08abae00343bdf authored about 2 years agoHelm tweaks + better makefile "ensure"
54443a2149b5483845a5be093d30fc40a47cea35 authored about 2 years agoalso adds some basic colors in output when not in CI
Signed-off-by: Ashley Davis <ashley.davis@...
a7c644096e4fbb808279ebbb8937b49d76680910 authored about 2 years ago
this allows us to write the kubeconfig at cluster creation, which is
slightly cleaner than havin...
This never worked previously because it was set up wrong.
This is documented on the ginkgo site...
b4ecb9605dcefaab99b9b51327d75d42a907ab4f authored about 2 years agoalso add CI var default, use kubeconfig flags everywhere
Signed-off-by: Ashley Davis <ashley.da...
6e1fd51a71435c9eef74b88da8c247f1393673d6 authored about 2 years ago
also ensure that permissions are set correctly and use the 'latest' tag
for the debian trust pac...
Signed-off-by: Ashley Davis <[email protected]>
c5b4602b5fc5c8c57376ac6de51e91cdaa392626 authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
57f6cdfc5974865bddd3eb3536a38cdaaed6f225 authored about 2 years agofix typo
b6a20e3850031370668299f2d237832eb6a209dc authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
3b575f34dbccf031ca0f5d583b8950381a2ed8bf authored about 2 years agoIntegration test tweaks
ff6d65a586e5c3c499dd90386508bf1d200d1cd1 authored about 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
5fa30472bc015e5746614c0cb7be92f4cd3c0f0e authored about 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
34c420a62f168de09411fd3153cb67e848af22f7 authored about 2 years agoFix non-cached client
b0a0001e2b81af6662a0720bd5c4c3a8a7f47f2b authored about 2 years agoValidate CA package during build
0b258a172004fe5b401443fc5a8f8bb42b416f56 authored about 2 years ago
Probably it would be ideal to use a tagged version of the validator
rather than `main` in the fu...
Signed-off-by: Ashley Davis <[email protected]>
a2844044c82ce8789b921fea2bd548ee7a02ec02 authored about 2 years agoRemove type from trust packages + add validation on package build
4252a923d6d8ed72a1e230d1e90e0915d03325e4 authored about 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
d4eee9e883ce4f14ff5b79f88913db5c9692e40c authored about 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
65355f24743781317941e99408c566689fceae35 authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
16ec9f875c3c81c4a7be3f3c50c075fba238b587 authored about 2 years ago
this should ensure that the manager has fully stopped before the test
environment moves onto the...
Signed-off-by: Ashley Davis <[email protected]>
21471ff8f7953e1c5cee0e63a2fe6ad10bbca5f2 authored about 2 years agoFix the MultiScopedCache
f2da89271eb887093f434a4e79b80d1fee02a212 authored about 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
16d321237955447398fcee47a1c0899b1174b3e2 authored about 2 years agoSigned-off-by: Tim Ramlot <[email protected]>
1a8bba6e655a53c986ede5fcd6caaf797b760d79 authored about 2 years ago
this will be used as part of the release process for new trust packages
to ensure that we don't ...
Signed-off-by: Ashley Davis <[email protected]>
ba0ff58ba81af268498880b4be73c44caf9676d6 authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
6029bd53c2caec84eb5169ec0df236899afd4183 authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
17d9f20605508b104f50cb01b547348a5068d010 authored about 2 years agoBundles with a sidecar container
6df5af301511fa0f8c1bd1fb87ed71f8fa135c6b authored about 2 years agoSigned-off-by: Ashley Davis <[email protected]>
06f331b2e70f533e8e991641c4125f2461d8e4f6 authored about 2 years ago
When default CAs is requested, a version identifier for it is
added to the Bundle's status so th...
Upgrade to ginkgo v2 + refactor several aspects of integration tests
0cae3ccdd9d58425f167dcce96d9f4ae2910455f authored about 2 years ago
- Context is not valid inside If, so remove its use
We can use code comments or a descriptive ...