Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/cert-manager/approver-policy

approver-policy is a cert-manager approver that allows users to define policies that restrict what certificates can be requested.
https://github.com/cert-manager/approver-policy

Updates cert-manager to v1.6.1 in modules

Signed-off-by: joshvanl <[email protected]>

a20fd65a75e1bf5c15885770c5ea4aad9b3f2f5a authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #46 from JoshVanL/controller-certificaterequests-rbac

Controller Certificaterequests RBAC

7be85fb13a056da1be6c671299ea951ba9b13763 authored almost 3 years ago by jetstack-bot <[email protected]>
Give approver-policy RBAC permissions to list and watch

[Cluster]Role[Bindings]

Signed-off-by: joshvanl <[email protected]>

eb4dd81999b1d3c95374dfb92d2af783276200e8 authored almost 3 years ago by joshvanl <[email protected]>
Adds tests for checking that the controller will reconcile on changed

rbac resources

Signed-off-by: joshvanl <[email protected]>

5d3da7d12dc529d8544df16f514018c6e798490c authored almost 3 years ago by joshvanl <[email protected]>
Watch for [Cluster]Role[Bindings] to reconcile all non Approved/Denied

CertificateRequests

Signed-off-by: joshvanl <[email protected]>

620d6582a840835f20bc566bc3f6e0fbe1b28a39 authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #44 from JoshVanL/approver-prepare-logr

Adds log as a parameter to the Approver Prepare signature.

d22e2a9a2b88fbecd2cd81d30806ea933d7ee1a1 authored almost 3 years ago by jetstack-bot <[email protected]>
Adds log as a parameter to the Approver Prepare signature. This helps

approvers to use a consistent logger which is a child of the main
approver-policy manager.

Signe...

0089f1f65ba2b68f9730f27fbfc98dc68e924e86 authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #43 from JoshVanL/helm-support-different-release-namespace

Support helm releases in non-"cert-manager" namespaces.

bb4351bbff0e1c6dfd9c1a52795c05845944b275 authored almost 3 years ago by jetstack-bot <[email protected]>
Adds support for releasing approver-policy is a different namespace by

exposing the service name of the webhook, and piping the secret
namespace

Signed-off-by: joshvan...

26b2f582bfdb348c58356fe561d60f37dcb4e2c8 authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #40 from JoshVanL/tag-v0.2.0

Updates tags to v0.2.0 and update helm docs

52418dd50a1af857b4b39e656108b74a7f670ca4 authored almost 3 years ago by jetstack-bot <[email protected]>
Updates tags to v0.2.0 and update docs

Signed-off-by: joshvanl <[email protected]>

38f40d38fc68884f9831a4c04afda7a1d7101348 authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #41 from JoshVanL/multi-arch-images

Adds support for multi-arch images

1ca8dfae61a5a15261cc1f3be00acfdbdddde6f4 authored almost 3 years ago by jetstack-bot <[email protected]>
Adds support for multi-arch images `linux/amd64,linux/arm64,linux/arm/v7,linux/ppc64le`

Signed-off-by: joshvanl <[email protected]>

b45aca70f1c7c4dfca5367eba1051eb1a75a66ac authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #39 from JoshVanL/reconcilers-enqueue-chan

Reconciller - EnqueueChan()

ab5ddfce610d6eeab3176a6f647f9f8d50ca0d17 authored almost 3 years ago by jetstack-bot <[email protected]>
Adds comments to the use of reflect.Select, don't send generic channel

message in needless go routine

Signed-off-by: joshvanl <[email protected]>

75f4c262c878c30e26ea0fe8cbbb50131d3f3598 authored almost 3 years ago by joshvanl <[email protected]>
Send message on generic event channel to not potentially block

reconcilers sending on enqueue channel.

Signed-off-by: joshvanl <[email protected]>

de66f55c68979cbde1890d7f57ee9093052ac732 authored almost 3 years ago by joshvanl <[email protected]>
Adds controller test for EnqueueChan()

Signed-off-by: joshvanl <[email protected]>

37f364be507e579236a13ad28d3d0519198f9593 authored almost 3 years ago by joshvanl <[email protected]>
Change EnqueueChan() to be a string channel, referencing the target

CertificateRequestPolicy name

Signed-off-by: joshvanl <[email protected]>

ce3760c5f2ad89168fff9101f74d2eccb4035715 authored almost 3 years ago by joshvanl <[email protected]>
Adds generic channel watcher to CertificateRequestPolicy controller

which reconciles on incoming enqueue messages

Signed-off-by: joshvanl <[email protected]>

28ee747fb08aa52ee9da8c22b5b5dc0013e5bf29 authored almost 3 years ago by joshvanl <[email protected]>
Updates core approvers to return nil to EnqueueChan()

Signed-off-by: joshvanl <[email protected]>

5a94715218119b5f696c8b5778f615eacb4185d4 authored almost 3 years ago by joshvanl <[email protected]>
Adds `EnqueueChan() <-chan struct{}` to Reconciler interface

Signed-off-by: joshvanl <[email protected]>

44051e3ee6691952340942a98be036133fc39470 authored almost 3 years ago by joshvanl <[email protected]>
Merge pull request #38 from JoshVanL/controller-crp-capture-requeue-after-only

Treat Reconciler response with RequeueAfter>0 also meaning Requeue=true

ce28c2ea7f97d4aebce0ecee87a21a67f0d659d7 authored almost 3 years ago by jetstack-bot <[email protected]>
Merge pull request #37 from JoshVanL/approver-allowed-required

Required field for approver block

808d4d99df32f25338ce242412f248ab25a72d17 authored almost 3 years ago by jetstack-bot <[email protected]>
Treat Reconciler response with RequeueAfter>0 also meaning

Requeue=true

Signed-off-by: joshvanl <[email protected]>

020f0408315166add89e169e89bff49d65c1e0db authored about 3 years ago by joshvanl <[email protected]>
Updates API comments to reflect the differences between allowed values

being nil and non-nil but zero valued

Signed-off-by: joshvanl <[email protected]>

951fd0079e4c54c0dab511a231425a024077f95b authored about 3 years ago by joshvanl <[email protected]>
Adds comments to the deny-all policy, changes the plugin example to be

more generic

Signed-off-by: joshvanl <[email protected]>

cb5fe3093b55b9fdf77eba5d643bd30bab3a1aa0 authored about 3 years ago by joshvanl <[email protected]>
Updates README.md explaining values must be defined with required for

allowed approver field

Signed-off-by: joshvanl <[email protected]>

fb44143d52cc2cb039320d62f3b15cb3fdca8033 authored about 3 years ago by joshvanl <[email protected]>
Updates policy examples to use `required` field

Signed-off-by: joshvanl <[email protected]>

80520101027fdac03e85aba57e23ebbb18cbe65a authored about 3 years ago by joshvanl <[email protected]>
Updates smoke test to use new API layout

Signed-off-by: joshvanl <[email protected]>

5bc0a1dcb7ab41abefdc8aeda1be65b2b9e864d7 authored about 3 years ago by joshvanl <[email protected]>
Updates controller review test for new API layout

Signed-off-by: joshvanl <[email protected]>

ca42c820ee7874f729e12b7cd42212a48524cf34 authored about 3 years ago by joshvanl <[email protected]>
Adds webhook validation to the allowed required fields

Signed-off-by: joshvanl <[email protected]>

299d8b549dc6919b05d864e974c715c2a446e145 authored about 3 years ago by joshvanl <[email protected]>
Adds required boolean field to allowed group to allow marking the

attribute as required

Signed-off-by: joshvanl <[email protected]>

c002717cae91c286996ef46e1c26966c32bd4b8e authored about 3 years ago by joshvanl <[email protected]>
Adds evaluation logic to required allowed approver

Signed-off-by: joshvanl <[email protected]>

be8ec1ac5981d30135cb222dba5eeb79c127b372 authored about 3 years ago by joshvanl <[email protected]>
Adds `required` docs to README.md

Signed-off-by: joshvanl <[email protected]>

14bb9a49bee9b91eae41b06db45e31c8ba675abb authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #36 from JoshVanL/option-leader-election-namespace

Adds CLI option for configuring the leadership election namespace

457d974f585929809f9026d89f495f0d681cb169 authored about 3 years ago by jetstack-bot <[email protected]>
Fix grammar in cluster creation script

Signed-off-by: joshvanl <[email protected]>

d6bf11cb413ea906c7ab35b566fb4e247da6fa2c authored about 3 years ago by joshvanl <[email protected]>
Change default leader election namespace to be empty string, which takes

the in cluster namespace when empty.

Signed-off-by: joshvanl <[email protected]>

4dd037a433717fc0305caab1637fc439ccf34e8b authored about 3 years ago by joshvanl <[email protected]>
Adds docker create network trick to help CI

Signed-off-by: joshvanl <[email protected]>

38d0561b2e0a77f904094b736df012a4ac90bcb8 authored about 3 years ago by joshvanl <[email protected]>
Adds CLI option for configuring the leadership election namespace

Signed-off-by: joshvanl <[email protected]>

6f5373ad0ee163e98e683f96588bbd9484f29276 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #34 from JoshVanL/remove-with-name-controller

Change WithName("controller") to WithName("controller-manager") for controller-runtime manager

019d9f70afbaf10045a2dcc6061d212e5d9550fe authored about 3 years ago by jetstack-bot <[email protected]>
Change WithName("controller") to WithName("controller-runtime") for controller-runtime manager

Signed-off-by: joshvanl <[email protected]>

f1d6d4d78f57caeb14cd7451ea609478b1a29f84 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #33 from JoshVanL/approver-policy-rename

Approver policy rename

d85dc7e81510c3d9caf8247d69639b93c323948d authored about 3 years ago by jetstack-bot <[email protected]>
Renames the project and code from policy-approver -> approver-policy

Signed-off-by: joshvanl <[email protected]>

65f31cf6f11ca0e550dcf3f9a084feb6b61f3731 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #31 from JoshVanL/docs

approver-policy docs

d743a0131b3a7037d48bc5e51c1b8e69bc21f094 authored about 3 years ago by jetstack-bot <[email protected]>
Cleanup Makefile, tests, code

Signed-off-by: joshvanl <[email protected]>

285d408301ad058e80bfd12106cc2accae4c1733 authored about 3 years ago by joshvanl <[email protected]>
Adds policy-approver docs

Signed-off-by: joshvanl <[email protected]>

f345ddcf9ab0d98f2a74d3987198ce426397ec1f authored about 3 years ago by joshvanl <[email protected]>
Adds a smoke test for policy-approver

Signed-off-by: joshvanl <[email protected]>

65424bcdec3d2e50d37cac7b55ed678cca2382ba authored about 3 years ago by joshvanl <[email protected]>
Remove attributes approver. Replaced with the allowed and constraints

approvers.

Signed-off-by: joshvanl <[email protected]>

e133f8d6828fc87f3d680131b137fce624dcd22b authored about 3 years ago by joshvanl <[email protected]>
Adds review comments

Signed-off-by: joshvanl <[email protected]>

ec4cf0c84e5eefdcdae36a88fc4b624fd80cd8ab authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #26 from JoshVanL/policy-allowed-constraints

Policy: Allowed + Constraints + Selector

835358c23f507ba77f08e0a9cc2079c5d5fd8092 authored about 3 years ago by jetstack-bot <[email protected]>
Adds review suggestions.

Signed-off-by: joshvanl <[email protected]>

d8643a3997b98e504ab56bde0ee615d8cc865566 authored about 3 years ago by joshvanl <[email protected]>
Adds a smoke test for policy-approver

Signed-off-by: joshvanl <[email protected]>

936cb48e5bb57712dce456ec7bace23d36de0df7 authored about 3 years ago by joshvanl <[email protected]>
Remove attributes approver. Replaced with the allowed and constraints

approvers.

Signed-off-by: joshvanl <[email protected]>

859efc2b8dc436ea2abb755fb939da8377399cfd authored about 3 years ago by joshvanl <[email protected]>
Updates approver manager to use new approvers. Use new selector object.

Signed-off-by: joshvanl <[email protected]>

a2501086348b408fde7816e4fc396278e5fd3662 authored about 3 years ago by joshvanl <[email protected]>
Updates webhook to include validation checks no longer done by an

approver.

Signed-off-by: joshvanl <[email protected]>

d10482131bb2d6b523b12fbb98e52aca0d249141 authored about 3 years ago by joshvanl <[email protected]>
Adds BDD tests to the controllers for full coverage

Signed-off-by: joshvanl <[email protected]>

35d1074e0d2c77e24d679bc8d164ff4404ee0d12 authored about 3 years ago by joshvanl <[email protected]>
Adds validation checks for `constraints: [min,max]Duration`

Signed-off-by: joshvanl <[email protected]>

f7891fa77775eefe9a4a4b87854e6074b47cb7aa authored about 3 years ago by joshvanl <[email protected]>
Fix the calculation of RSA key sizes

Signed-off-by: joshvanl <[email protected]>

ac34e8ff9673415745318f9103524c14628dedc5 authored about 3 years ago by joshvanl <[email protected]>
Cleanup Makefile, tests, code

Signed-off-by: joshvanl <[email protected]>

2a69e70bf0cb9a8423c629aefc860cf64194be81 authored about 3 years ago by joshvanl <[email protected]>
Allow setting the max key size to 0

Signed-off-by: joshvanl <[email protected]>

90c60c07ed61b35a53581911382d62d9cd228fe1 authored about 3 years ago by joshvanl <[email protected]>
Update policy controller to have prettier message output

Signed-off-by: joshvanl <[email protected]>

af752e3b2e15e5354de775ee8681d062bc74a567 authored about 3 years ago by joshvanl <[email protected]>
Fix Makefile

Signed-off-by: joshvanl <[email protected]>

3ae088c9cf3486547e91f1d59f4b68add29bcee4 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #32 from JoshVanL/update-controller-runtime

Updates controller-runtime to 0.10.0

a4baec5593fa44aa31e9752f8071cc8f5e90bb1b authored about 3 years ago by jetstack-bot <[email protected]>
Updates controller-runtime to 0.10.0

Signed-off-by: joshvanl <[email protected]>

f2ffa9a90b07f5cd76ed3d57ab03086275861cb3 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #25 from JoshVanL/smoke-test

Smoke test

8abdbb4bc9a2514e62c5bd8a1e3ff4112f75389b authored about 3 years ago by jetstack-bot <[email protected]>
Adds delete-cluster.sh script to smoke test which exports the kind

cluster logs

Signed-off-by: joshvanl <[email protected]>

1bebb8d245956023931bb5bb609220ed11e40cfc authored about 3 years ago by joshvanl <[email protected]>
Cleanup Makefile, tests, code

Signed-off-by: joshvanl <[email protected]>

7f94a35667b31608d705cd8f1f095cb3e622423c authored about 3 years ago by joshvanl <[email protected]>
Adds a smoke test for policy-approver

Signed-off-by: joshvanl <[email protected]>

85dd6b2272dd4ae91403dc377fcd8021e4c04c78 authored about 3 years ago by joshvanl <[email protected]>
Update Approver Manager to use predicates. Test out predicates

Signed-off-by: joshvanl <[email protected]>

56aac4e33f519af5d333cbf3635963692e0e09b9 authored about 3 years ago by joshvanl <[email protected]>
Update base approver to use new response struct

Signed-off-by: joshvanl <[email protected]>

83ea38013ff4bef7fc4bcd7422be3e3f62128f37 authored about 3 years ago by joshvanl <[email protected]>
Add validation to attribute approver to only allow configuring plugins

that have been registered

Signed-off-by: joshvanl <[email protected]>

64ff7d1b98a43d96a03de98121c40f2c80a14f57 authored about 3 years ago by joshvanl <[email protected]>
Changes `allowedIssuers` to `issuerRefSelector` to be able to select on

matching Issuers

Signed-off-by: joshvanl <[email protected]>

97c80e354a7a18d3b50f61fc3765696a065e785a authored about 3 years ago by joshvanl <[email protected]>
Move wildcard util under approver/internal. Add webhook to attribute

approver

Signed-off-by: joshvanl <[email protected]>

429593ce9137dc76b10b33a4bad51ba1591e208f authored about 3 years ago by joshvanl <[email protected]>
Updates paths for new package layout

Signed-off-by: joshvanl <[email protected]>

7cc63ce0d8036248a95d331e5b2b213ee3c2ca37 authored about 3 years ago by joshvanl <[email protected]>
Updates go.mod, allowed passing TEST_ARGS to `go test` in Makefile

Signed-off-by: joshvanl <[email protected]>

23e200cea354e35e7069fe231c682ea26e4d3754 authored about 3 years ago by joshvanl <[email protected]>
Update Makefile to use new integration tests

Signed-off-by: joshvanl <[email protected]>

1ef292a3724a48dbd55a559809cea7568057dedb authored about 3 years ago by joshvanl <[email protected]>
Move base approver under /pkg/approver

Signed-off-by: joshvanl <[email protected]>

519859d3ba038110f8978a95cba339de300813be authored about 3 years ago by joshvanl <[email protected]>
Add update-codegen.sh script and depend on binaries

Signed-off-by: joshvanl <[email protected]>

17051bdde7d64c2fd75093bcd4f91b9646a48431 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #24 from JoshVanL/webhook-bootstrapper

Webhook TLS provider

ae72c62bd52d94b0709276555f0ca22a37cd0454 authored about 3 years ago by jetstack-bot <[email protected]>
Update smoke test to just echo

Signed-off-by: joshvanl <[email protected]>

8ce4c6380e1cfaa17258d719b1e7484bf4619961 authored about 3 years ago by joshvanl <[email protected]>
Change the webhook CA secret namespace from hard coded "cert-manager" to

be configurable

Signed-off-by: joshvanl <[email protected]>

dcfba28e15e0453f9ab7b8d32a8f672357de875d authored about 3 years ago by joshvanl <[email protected]>
Adds empty smoke Makefile target

Signed-off-by: joshvanl <[email protected]>

e67880cd7762f5c6e0bd17cd944b5006d34d65be authored about 3 years ago by joshvanl <[email protected]>
Updates the helm chart to use the new tls provider with no cert/key

mounting. Give permissions to update its TLS Secret

Signed-off-by: joshvanl <vleeuwenjoshua@gmai...

6bef3b83045d27af5c8d1e9d3cc0305db10e333d authored about 3 years ago by joshvanl <[email protected]>
Wires up the webhook tls provider inside registering the webhook

Signed-off-by: joshvanl <[email protected]>

f2072ca821bd5288e446d078f79a7b70361cfe5c authored about 3 years ago by joshvanl <[email protected]>
Replace the webhook bootstrap package for tls

Signed-off-by: joshvanl <[email protected]>

466280f67dcc9dd7fd880b0cad6b4f354b27a24f authored about 3 years ago by joshvanl <[email protected]>
Add update-codegen.sh script and depend on binaries

Signed-off-by: joshvanl <[email protected]>

9eaf5180cc79614bf72e280f39f635e6e652cc4d authored about 3 years ago by joshvanl <[email protected]>
Update Approver Manager to use predicates. Test out predicates

Signed-off-by: joshvanl <[email protected]>

fb99168e49af3967264b0431bda84d8a4b50374b authored about 3 years ago by joshvanl <[email protected]>
Updates paths for new package layout

Signed-off-by: joshvanl <[email protected]>

dfa1e8bc8b9b69dc74ce74c1745d2d569dfb5a06 authored about 3 years ago by joshvanl <[email protected]>
Update go module, fix verify boilerplate script to allow new Go build

constraint

Signed-off-by: joshvanl <[email protected]>

2ed7a9b65ff41095a68dec371d82e0b9ceb19b82 authored about 3 years ago by joshvanl <[email protected]>
Updates go.mod, allowed passing TEST_ARGS to `go test` in Makefile

Signed-off-by: joshvanl <[email protected]>

aadd395cd9ffee96d848a57a73350d72236118f8 authored about 3 years ago by joshvanl <[email protected]>
Update Makefile to use new integration tests

Signed-off-by: joshvanl <[email protected]>

c3438e5d99bb21c3ffadab5139f99d5a199a2d06 authored about 3 years ago by joshvanl <[email protected]>
Fix import paths and aliases

Signed-off-by: joshvanl <[email protected]>

b27f823be2f78e105cd6afe96236dd53c0c1d193 authored about 3 years ago by joshvanl <[email protected]>
Adds internal webhook bootsrapper which is responsible for approving

CertificateRequests which are needed by the policy-approver webhook

Signed-off-by: joshvanl <vle...

159691bf4c90fa12ba8b94d902d1f92f9ce74ec9 authored about 3 years ago by joshvanl <[email protected]>
Merge pull request #23 from JoshVanL/helm-chart

Adds a the helm chart for policy-approver

13678b53a93cc9e10c18068a9f4c8d3f74a9c616 authored about 3 years ago by jetstack-bot <[email protected]>
Adds review comments

Signed-off-by: joshvanl <[email protected]>

c4ae690a371fd0d6e1aeeabb8874d04ef02d537e authored about 3 years ago by joshvanl <[email protected]>
Moves crds into Helm chart sub-directory. Makes CRD path a variable

Signed-off-by: joshvanl <[email protected]>

e0e194e4f4b98283b4b82779bd501749935f8827 authored about 3 years ago by joshvanl <[email protected]>
Remove duplicate attribute registry registration

Signed-off-by: joshvanl <[email protected]>

24ea0d91f85c2deed77215c1cca72a109994fb16 authored about 3 years ago by joshvanl <[email protected]>
Enforce that the namespace must be cert-manager

Signed-off-by: joshvanl <[email protected]>

c7fbffec5468258f06b03dcfa83c4d3dd8c424b4 authored about 3 years ago by joshvanl <[email protected]>
Removes /config, adds policy-approver helm chart

Signed-off-by: joshvanl <[email protected]>

377426f62e3ef48767acfac51a67dfdb8c48177d authored about 3 years ago by joshvanl <[email protected]>
Update Approver Manager to use predicates. Test out predicates

Signed-off-by: joshvanl <[email protected]>

6ff06266b42cdde07817e516b3b1f87f8f21b046 authored about 3 years ago by joshvanl <[email protected]>