github.com/cert-manager/cert-manager commits | Ecosyste.ms: OpenCollective

Merge pull request #6771 from inteon/fix_loggers_and_contexts

Initialize logger and create root context in main.go

b9bbbf5a830a919f03a338e7abf7dbaf903a3eb3 authored 11 months ago

correctly initialize loggers, create contexts and pass contexts

Signed-off-by: Tim Ramlot <[email protected]>

23373e4323f1120c983fe866aa475f98187c3bed authored 11 months ago

Merge pull request #6807 from bwaldrep/bw/alias

feat: Add optional flag to specify jks keystore alias

fe39c52aafe28299f619ab1e2b6795d2f9d4147e authored 11 months ago

Merge pull request #6840 from inteon/bump_base_images

Run ./hack/latest-base-images.sh

b2d728488161751c87aa10c2b34ec84424189fe7 authored 11 months ago

Merge pull request #6831 from inteon/bump_go

Bump to latest go version (1.22.1)

4e0c54509de6a34ca4cd8c912c8cb6c7e548bd02 authored 11 months ago

run ./hack/latest-base-images.sh

Signed-off-by: Tim Ramlot <[email protected]>

6134af7341ee9a55c08a0cb719ae7b0b36b84e37 authored 11 months ago

bump to latest go version

Signed-off-by: Tim Ramlot <[email protected]>

c052ff6e4e05acf757e53e53879b372c0be5cac8 authored 11 months ago

Merge pull request #6827 from inteon/cve_fix

Bump google.golang.org/protobuf fixing GO-2024-2611

f3737e6dbf3a5b9f77f0c951c96eb9f40e8b0429 authored 11 months ago

run 'make update-licenses'

Signed-off-by: Tim Ramlot <[email protected]>

e0392eac5d14de973891a10f8fab0496591f6155 authored 11 months ago

bump google.golang.org/protobuf fixing GO-2024-2611

Signed-off-by: Tim Ramlot <[email protected]>

531e1e46c7d5e9a16d230c568262e620b749c26f authored 11 months ago

Merge pull request #6823 from inteon/bump_go

Bump go to 1.21.8

c8e2be5f3489d32df7257c10707564a4444e4734 authored 11 months ago

bump go to 1.21.8

Signed-off-by: Tim Ramlot <[email protected]>

f011d80ace3df21dd6fde370b762211b5503deea authored 11 months ago

Merge pull request #6816 from inteon/bugfix_cainjector_leaderelection_config

BUGFIX: cainjector leaderelection defaults are missing

098c07206dbd82daaf16b495d0542969fddbcb31 authored 11 months ago

prevent fuzzer from generating impossible configurations

Signed-off-by: Tim Ramlot <[email protected]>

ad1847cc3ce4dab3fc2dc2fba61931313fa14020 authored 11 months ago

BUGFIX: cainjector leaderelection defaults were missing

Signed-off-by: Tim Ramlot <[email protected]>

620d6ff679e65083a8f383559efd6a34869908c9 authored 11 months ago

Add optional flag to specify jks keystore alias.

Previously the JKS keystore alias was hardcoded to "certificate".
This change adds an optional c...

d4911ebfaa04c8cc8c3b16ee1fba56e189f31f2e authored 11 months ago

Merge pull request #6806 from bwaldrep/bw/truststores

bugfix: include all CA certificates in encoded pkcs12/jks stores

fd551160b18955eac56568b3e2b41b360f8c29d4 authored 11 months ago

add new utility method to clarify cert decoding semantics

Signed-off-by: Bill Waldrep <[email protected]>

bf3d202c725bef113c0d154c42b9637baef8aa5f authored 11 months ago

Merge pull request #6801 from jkroepke/allow-secret-injection

Allow `cert-manager.io/allow-direct-injection` in annotations

a7c78684ae6c9dc5d636ff8183482aff46679fd4 authored 11 months ago

include full CA chain contents in encoded pkcs12/jks stores

Signed-off-by: Bill Waldrep <[email protected]>

251610d9514b18c40fd634b509a2fca5480f7d82 authored 11 months ago

Allow `cert-manager.io/allow-direct-injection` in annotations

Signed-off-by: Jan-Otto Kröpke <[email protected]>

818df603f53a60fe1ab9f7cbcfbe8fed53818dd4 authored 11 months ago

Merge pull request #6800 from inteon/helm_fix_matchlabels_granularity

Helm: fix matchLabels selector - select on minimum subset of labels that uniquely identifies the...

7155520dbce03e5b5ea6fed05211e76803026e93 authored 11 months ago

fix matchLabels selector - select on minimum subset of labels that uniquely identifies the resources

Signed-off-by: Tim Ramlot <[email protected]>

5af22527ee4973b21f85ffc39b18473293fe1fbd authored 11 months ago

Merge pull request #6793 from inteon/remove_errors_direct_dependency

Remove github.com/pkg/errors as a direct dependency

50ab3683d657146ff21b0b35063dd169867da0d5 authored 12 months ago

Merge pull request #6795 from ThatsMrTalbot/feat/e2e-test-existing-charts

feat: allow running e2e tests against a deployed chart

7549adff8b725922d1a755a44330eac7dd9561de authored 12 months ago

docs: add comment describing e2e testing of existing charts

Signed-off-by: Adam Talbot <[email protected]>

8a103930c599f3fc49c99ce67fd677e5db447681 authored 12 months ago

feat: allow running e2e tests against a deployed chart

Signed-off-by: Adam Talbot <[email protected]>

cfffa15c2171171d3e4511454bf2fa5cf00e887f authored 12 months ago

remove the github.com/pkg/errors as a direct dependency

Signed-off-by: Tim Ramlot <[email protected]>

6c6d18d0b88939f5c3b4184f0d241f42e995569e authored 12 months ago

Merge pull request #6785 from arcezd/fix-cert-manager-docs

fix: SecretName description for DynamicServingConfig

59676d2c63b5515ca2c97c6dc3d3df05083afd08 authored 12 months ago

Merge pull request #6791 from inteon/bump_controller_gen

Bump controller-gen to v0.14.0

796c00a8bb089cbea30f9d0a26d056912b61afee authored 12 months ago

Merge pull request #6761 from inteon/add_custom_dn_parse

Stop using github.com/go-ldap/ldap/v3 ParseDN and use a custom ParseDN function instead

b65ccfa1b5f0787af733271633b1b559cdcacf72 authored 12 months ago

run 'make update-crds'

Signed-off-by: Tim Ramlot <[email protected]>

d7a23387c3270f704b1c4965b54ca83b1ec6508b authored 12 months ago

bump controller-gen to v0.14.0

Signed-off-by: Tim Ramlot <[email protected]>

d0508a5bc6014df92254b68b244c6f4dd52ba91f authored 12 months ago

Update internal/apis/config/webhook/types.go

Signed-off-by: Tim Ramlot <[email protected]>

1e8ec4a65fcb35c20f17026834f9e7412af374ef authored 12 months ago

fix: SecretName description for DynamicServingConfig

Signed-off-by: Diego Arce <[email protected]>

83e0f95e58f55f4279b49cc53182c75c2de2b134 authored 12 months ago

Merge pull request #6779 from inteon/fix_json_logging

Fix broken json logging

3204b21a822afb6b70c751cffde465c20a64a9e3 authored 12 months ago

fix broken json logging

Signed-off-by: Tim Ramlot <[email protected]>

8fd62df268f38efa3f8e64032689f8ca28f84cb3 authored 12 months ago

Merge pull request #6778 from wallrj/fix-best-practice-e2e-tests

Fix broken best-practice e2e tests

39041fd695356fca95ef9143e1dbcbb33f455626 authored 12 months ago

Merge pull request #6755 from import-shiburin/master

bugfix: wrong certificate chain is used if preferredChain is configured

f643eef2b2b0bb3071e254ec68597fe70123ebb1 authored 12 months ago

kustomize build . > policy.yaml

Signed-off-by: Richard Wall <[email protected]>

541798c9e293d90ef98d17882259332cd3334d6b authored 12 months ago

Add e2e-vault-mtls to the list of excluded namespaces

Signed-off-by: Richard Wall <[email protected]>

bbc006760f23bb63c011e933f3f5589a2cc05782 authored 12 months ago

Fix broken upstream Kyverno policy link

Signed-off-by: Richard Wall <[email protected]>

0ffc3c25502f42817588f6295475b8181c095346 authored 12 months ago

Merge pull request #6760 from inteon/add_crd_keep

Add `crds.keep` and `crds.enabled` Helm options

0b379e4b5cdaf93000335a80bbea18c992895633 authored 12 months ago

Merge pull request #6764 from inteon/replace_deprecated

Replace deprecated functions

8c772fa89df221469362c04ed56b071ec510b6dc authored 12 months ago

replace deprecated NewCertManagerBasicCertificate function

Signed-off-by: Tim Ramlot <[email protected]>

473c8337b2df829e6750f22376d510a4380947e1 authored 12 months ago

add namespace to gen builders

Signed-off-by: Tim Ramlot <[email protected]>

c3b1a5d8c8c667413e941651bc6595bb08610a3b authored 12 months ago

change signature of SetCertificateDuration and SetCertificateRenewBefore

Signed-off-by: Tim Ramlot <[email protected]>

b77910d78595a19764d339bd9f305d29b51bad01 authored 12 months ago

replace deprecated functions

Signed-off-by: Tim Ramlot <[email protected]>

e85b024c20c0a2fd088106c667d01182b17321e8 authored 12 months ago

fix bug in gen lib

Signed-off-by: Tim Ramlot <[email protected]>

4ae9c68ddaf6e69b7642db9a2d9751754d235569 authored 12 months ago

stop using github.com/go-ldap/ldap/v3 ParseDN and use a custom ParseDN function instead

Signed-off-by: Tim Ramlot <[email protected]>

a2b3cc81c3d7010fea5e90784a2305c6344645fd authored 12 months ago

add error case to DNParse tests

Signed-off-by: Tim Ramlot <[email protected]>

0f078859deaad64d13f3a4c745c3fdecf5f369db authored 12 months ago

add benchmark

Signed-off-by: Tim Ramlot <[email protected]>

99942446ff9b161b98368bd0882ff8e900fbd666 authored 12 months ago

update test, with new error message

Signed-off-by: Tim Ramlot <[email protected]>

ed280d28cd02b262c5db46054d88e70ab518299c authored 12 months ago

Merge pull request #6763 from inteon/upgrade_deps

Upgrade dependencies

51d12ddf33dac2b1e7e304189a9a9304a9b489f3 authored 12 months ago

Merge pull request #6770 from inteon/dn_parse_quick_fix

Fix a memory bug in ldap's ParseDN function by disabling part of the functionality

d642df3b5f8a5942c215ac55ba538b85780be8b7 authored 12 months ago

the upgrade script has to keep using the old installCRDs option

Signed-off-by: Tim Ramlot <[email protected]>

15d69499528a70ec477b179c1a1212b316f7c257 authored 12 months ago

remove unused and in Helm template

Signed-off-by: Tim Ramlot <[email protected]>

815dbc9e8faec7bcd2ba5bdad6fe71fc3c3bd30a authored 12 months ago

fix typo

Signed-off-by: Tim Ramlot <[email protected]>

2deaaaa2333e0dec5935063150fb386835e64980 authored 12 months ago

replace usage of installCRDs with crds.enabled

Signed-off-by: Tim Ramlot <[email protected]>

4a35796f00d21260d9db223bcdaa659a0a938561 authored 12 months ago

Merge pull request #6767 from lunarwhite/fix-msg

Fix webhook validation bug for cert subjects

d2e2e257d0b002781cf86f2d48951478b46bf51b authored 12 months ago

Fix a memory bug in ldap's ParseDN function by disabling part of the functionality

Signed-off-by: Tim Ramlot <[email protected]>

4a8b8c4e09103360c9f723579459c8635717bd27 authored 12 months ago

fix webhook validation error msg

and use commonName variable value

Signed-off-by: Yuedong Wu <[email protected]>

baa73aa8eee34fb1be147aa4413d6fdf19bce81d authored 12 months ago

Merge pull request #6124 from tommie/route-design

Add design/20230601.gateway-route-hostnames.

8ea586e946f5ecba00ea3cd3abcec1453f521ffd authored 12 months ago

run 'make update-crds'

Signed-off-by: Tim Ramlot <[email protected]>

f44238fd80176a5d5b3d8eca90bd4fe4e5fa3fbb authored 12 months ago

Apply suggestions from @jsoref

Co-authored-by: Josh Soref <[email protected]>
Signed-off-by: tommie <tomm...

f515aa71c14b51855c644ed91b7a73e6e5cf4b86 authored 12 months ago

upgrade dependencies

Signed-off-by: Tim Ramlot <[email protected]>

012794e891caf9c8b016adf6208dadd9a345ef06 authored 12 months ago

fix incorrect comments and error messages

Signed-off-by: Tim Ramlot <[email protected]>

0ed660873e15446d612405be0b4e578a8a228a2c authored 12 months ago

Merge pull request #6614 from rodrigorfk/feat-vault-mtls

feat: Add the ability to communicate with Vault via mTLS

7f92e38988bbb39185ca5ac6be9e3106026d7335 authored 12 months ago

update tests to match the current Let's encrypt setup

Signed-off-by: Tim Ramlot <[email protected]>

205067b834a44b92bcd84accab924dd007eda578 authored 12 months ago

don't call ListCertAlternates if default chain matches the preferred chain

Signed-off-by: Tim Ramlot <[email protected]>

672aad41bf9b5505511213418d0988c3911e7d30 authored 12 months ago

tests: require Vault mTLS during e2e

Signed-off-by: Rodrigo Fior Kuntzer <[email protected]>

0e51dc709ae0dc85a20de651835a7e7fc34b3477 authored 12 months ago

add CRD keep annotation

Signed-off-by: Tim Ramlot <[email protected]>

d34e2c858999ef4251393fa623a2064ea0d22554 authored 12 months ago

Merge pull request #6751 from inteon/dont_mutate

Use unstructured.Unstructured in Mutation webhook

a22d1d673ae8c16733ed342d4330eb5f5ab3f016 authored 12 months ago

use DefaultUnstructuredConverter to convert extras to unstructured

Signed-off-by: Tim Ramlot <[email protected]>

8425b9fe75d4415946771b96267f65f9fc1ec433 authored 12 months ago

Merge pull request #6759 from inteon/improve_chart_yaml

Improve Chart.yaml and README.md

cffacaca551752ac2595e053de5fa6a202259788 authored 12 months ago

improve Chart.yaml and README.md

Signed-off-by: Tim Ramlot <[email protected]>

ad018a7b1a6dcb756fe2ef5d9f74615e19cff2b0 authored 12 months ago

Move helm hook from labels to annotations

Signed-off-by: Jason Witkowski <[email protected]>

72b627d12a8c684012abdf30db9e6236c90ed569 authored 12 months ago

feat: Add option to keep CRDs when helm chart is uninstalled

Signed-off-by: Jason Witkowski <[email protected]>

a6f665353fa2629ee3dfee85a761d899c211ea13 authored 12 months ago

remove URL verification from alternateCertChain tests

Signed-off-by: Sam Lee <[email protected]>

ff5c4103a0c55e99c15e6400093c80f599897773 authored 12 months ago

changed term 'alt' to 'preferred'

Signed-off-by: Sam Lee <[email protected]>

94509d0490be10953fd97086260d6c37acd8c0c0 authored 12 months ago

fix getAltCertChain not considering primary chain as candidate

Signed-off-by: Sam Lee <[email protected]>

811cc7908ec96e2a6cf3112b6e677838f9caa16e authored 12 months ago

make getAltCertChain checks only topmost certificate

Signed-off-by: Sam Lee <[email protected]>

b9ac41726cff8ba9b62ee69c6a7d651002505a77 authored 12 months ago

Merge pull request #6719 from inteon/add_helm_designproposal

Proposal: add "helm.sh/resource-policy: keep" CRD annotation and uniformise CRD options.

57de0fc4d2e1e6856600773a4ab4605ed50ceab0 authored 12 months ago

remove testgroup CRD scripts

Signed-off-by: Tim Ramlot <[email protected]>

8f7af98772ae52b35d4543e0953b00469f898c94 authored 12 months ago

use unstructured.Unstructured in Mutation webhook

Signed-off-by: Tim Ramlot <[email protected]>

23ab96de9105fb161a62d26d35bf60c29a1146fa authored 12 months ago

Merge pull request #6455 from inteon/webhook_cr

Switch Webhook to controller-runtime.

b632eed8ecdb00ab1791d8446f50e59677ce0ee3 authored 12 months ago

buildAdmissionChain: return admission.PluginChain instead of admission.Interface

Signed-off-by: Tim Ramlot <[email protected]>

8eaeeb78c0cb4ec4d1f7abca72744ce1a83a5e15 authored 12 months ago

Simplify webhook and switch Webhook to controller-runtime.

Signed-off-by: Tim Ramlot <[email protected]>

b9a216cdfc27f4dd9608588100c934906f059fd3 authored 12 months ago

Merge pull request #6750 from inteon/remove_dead_code

Remove dead & deprecated code from cert-manager codebase

707491319944ff87f3874286e28af278e978fe58 authored 12 months ago

remove dead & deprecated code from cert-manager codebase

Signed-off-by: Tim Ramlot <[email protected]>

ffb47e52facc9a3f774b2b33c3aee0bc2bd7d653 authored 12 months ago

Merge pull request #6747 from erikgb/patch-1

Add erikgb to reviewers

c376bc495c8bb7f710155634ca919e65e134b33e authored 12 months ago

Add erikgb to reviewers

Signed-off-by: Erik Godding Boye <[email protected]>

9aa9aa55098618458fd69b2efd086b2fff0fbfdd authored 12 months ago

Merge pull request #6744 from andrey-dubnik/master

Move token audiences under the SA ref for the Vault kubernetes auth

c4c0fd32689cdf46987d68b1f031c916f5e5d2db authored 12 months ago

Merge pull request #6667 from davidnoyes/proposal/scarf

Scarf Proposal

886e874c56f1936f714fbb816c0b4fc4faed9924 authored 12 months ago

Merge pull request #6671 from inteon/aws_v2

Migrate to AWS library to v2

b1adfb6623306e3560c42524a733788f78b8ceba authored 12 months ago

improve comment that explains what removeReqID does and when it fails

Signed-off-by: Tim Ramlot <[email protected]>

c3b8cbd608f178b704aa92efdfd75036dfe02d48 authored 12 months ago

migrate to github.com/aws/aws-sdk-go-v2

Signed-off-by: Tim Ramlot <[email protected]>

893d30d9380044bcf04e6414b7356e0d27a493bb authored 12 months ago

add testcase for nested errors

Signed-off-by: Tim Ramlot <[email protected]>

06b3cd337204cfbabac2725d9962eb7e686609ae authored 12 months ago

use errors.Is instead of errors.As

Signed-off-by: Tim Ramlot <[email protected]>

deab9548c0ada51b5e2a539b63357b9f66ef4e8d authored 12 months ago

remove trivy ignore file

Signed-off-by: Tim Ramlot <[email protected]>

5a84e40944e72c89c3f17a4a74c25224cfc16e36 authored 12 months ago