github.com/cert-manager/cert-manager commits | Ecosyste.ms: OpenCollective

Merge pull request #5880 from SgtCoDFish/proliferate

Separate binaries/tests into separate modules with minimal dependencies

f6f07c7b212d624b60c270eed6868998bd375d3a authored almost 2 years ago

Merge pull request #5843 from SgtCoDFish/design-gomod

Design: Go Module Proliferation

b840eee9c3b99131e1e409c82b8713feed8fe191 authored almost 2 years ago

separate binaries/tests into separate modules with minimal dependencies

also add gomod validation in CI, along with a cmrel version bump

Signed-off-by: Ashley Davis <a...

6ce6ae839ecc05ead16be6813ffdcb2433a030ef authored almost 2 years ago

Merge pull request #5910 from SgtCoDFish/gittags

Fix upstream-tags sort order

4cb885a41ec536ea65c75dca9b7208a38c30ce90 authored almost 2 years ago

fix upstream tags generation to use sorting

also changes upstream tags to have a version suffix so it can be
manually bumped

Signed-off-by:...

73bdee6e429ff532967f892b12ca15c8fb960b61 authored almost 2 years ago

Merge pull request #5909 from maelvls/flaky

Migrate tests: higher timeout to lower the number of false-positives

3548ce6496119ac4cf0af18f0d5fb08093ccc53a authored almost 2 years ago

migrate tests: higher timeout to lower the number of false-positives

Signed-off-by: Maël Valais <[email protected]>

90787301299f227aac69f4460343b6cfc12761b6 authored almost 2 years ago

Merge pull request #5903 from irbekrm/remove_redundant_replace

Removes leftover replace statement

fd9c01fa8ce02decf22f917535af26ec9468f988 authored almost 2 years ago

Removes leftover replace statement

This should have been removed in [200~https://github.com/cert-manager/cert-manager/pull/4958

S...

76173022ea0b6a6992a67185e20a5830ae500139 authored almost 2 years ago

Merge pull request #5896 from maumontesilva/cmctl-error

Error if the resource name is omitted, unless --all is also used.

c7abccba3369a024d05d9c13eb7a6ac8c7485a7d authored almost 2 years ago

improving the error message

Signed-off-by: Mauro M. Silva <[email protected]>

5ec677d9b42ebde3e3d93f14ce835d9d441c1d80 authored almost 2 years ago

change the message

Signed-off-by: Mauro M. Silva <[email protected]>

9f584cfb9aa3a44f23484f39eb7246bc7ebcd699 authored almost 2 years ago

Error if the resource name is omitted, unless --all is also used.

Signed-off-by: Mauro M. Silva <[email protected]>

f703a5409d05365ffcb9969b0ff4267d52f83539 authored almost 2 years ago

Merge pull request #5887 from irbekrm/retry_denied_crs

Fixes a race condition in retrying denied/invalid issuances

ac134ec14e77cd8a3288bfc0414e8dd6bf66f53d authored almost 2 years ago

Cleanup

Signed-off-by: irbekrm <[email protected]>

241680658b5e60451c83e8f9cb9123e9fb168a23 authored almost 2 years ago

Makes some updates to CertificateRequests design

The design is out of date in general though

Signed-off-by: irbekrm <[email protected]>

de3469451639f73dc523bd17a1d22e97867c5280 authored almost 2 years ago

Certificate-requests controller does not process invalid certificaterequests

Signed-off-by: irbekrm <[email protected]>

6e294ae359d43ddf5232a9ad7d073112cfe39927 authored almost 2 years ago

Issuing controller fails issuances for denied/invalid CRs

This is not necessarily a breaking change as this appears to have been the current behaviour in ...

f5ea95831748bf7c4e41f2795caa29ea249c34dc authored almost 2 years ago

Cleanup

Signed-off-by: irbekrm <[email protected]>

729d358cd2d315eb8615c248004d6ec3cb1f12f0 authored almost 2 years ago

Allows secrets event handler predicate to accept partial metadata

This will only be needed by the SecretsFilteredCaching feature, but I cannot think of any harm b...

a7e2abe5faea41e1a1cdb40082088901cad1c3ba authored almost 2 years ago

Update comment on controller.cert-manager.io/fao label key

As this PR actually starts using this label to filter secrets

Signed-off-by: irbekrm <irbekrm@g...

8f3ea9a40da4c57b04b25f97a07323305db497d6 authored almost 2 years ago

Adds a core informer factory with a filtered secrets informer

The new core informer factory wraps a typed and a partial metadata factory

Signed-off-by: irbek...

16d98637435ca0bb2e671174d0dc2a11c18f0fd0 authored almost 2 years ago

Adds fakes for listers and secrets client

To enable unit testing

Signed-off-by: irbekrm <[email protected]>

d8dcf0b5e5832ed1feb103f07230bdba7892d7b4 authored almost 2 years ago

Swap upstream core informers factory with out wrapper

This does not actually change how the informers work. This also adds a partial metadata client t...

7d592a82707d8d4bbb13f913e3528a28ad63dd3f authored almost 2 years ago

Passes controller context into all NewController funcs

Instead of individual arguments. For readability and consistency.

Signed-off-by: irbekrm <irbek...

5d7614ddd43fef1ef5f02283316fedf13daeea6a authored almost 2 years ago

Uses the filtered informer factory if the SecretsFilteredCaching feature is enabled

Signed-off-by: irbekrm <[email protected]>

c3bd14ead79227cdf8db6ec9a913b47acd916f06 authored almost 2 years ago

Adds SecretsFilteredCaching alpha feature

Signed-off-by: irbekrm <[email protected]>

53918b5d6cd521bdae8b14327491952862d52304 authored almost 2 years ago

Adds custom informer interfaces and implementation

To enable swapping core informers for custom implementations

Signed-off-by: irbekrm <irbekrm@gm...

1612d7548d86a581e64e96f7be1ecb19d33c6147 authored almost 2 years ago

remove invalid check

GVK cannot be reliably checked here, see TODO, this is not expected to cause issues

Signed-off-...

26563feae168c93496328d89d7f044af80d09076 authored almost 2 years ago

Adds unit tests

Signed-off-by: irbekrm <[email protected]>

2370e1be62a816280fce1f0e99eaa6c7fc83fcfe authored almost 2 years ago

go modules proposal based on hackathon work

Signed-off-by: Ashley Davis <[email protected]>

d5fc39667374f5a63279656bcd2238068cd980fc authored almost 2 years ago

Merge pull request #5878 from avi-08/handle-foreground-deletion

Skip syncing resources deleted via foreground cascading

0c071f8d2fbe0a568469f1bbf4eb7710ee0a2d0b authored almost 2 years ago

Add testcases for foreground deletion sync

Signed-off-by: Avi Sharma <[email protected]>

a62f92e33ddd2c06b04988cd668cb281f5e47cff authored almost 2 years ago

Skip syncing resources deleted via foreground cascading

Signed-off-by: Avi Sharma <[email protected]>

e5d97450788a92722085e8c9de9a25f50cbdc8a4 authored almost 2 years ago

cleanup certificate request approval webhook

Signed-off-by: Tim Ramlot <[email protected]>

fc83eece01042d9c6570c0c9e0df03d583087dfb authored almost 2 years ago

Merge pull request #5820 from lucacome/bump-k8s.io-deps

Bump k8s.io dependencies

706ad574b9bb7669ae94d293d4136cc37cb7d09f authored almost 2 years ago

Merge pull request #5871 from olekfur/remove-obsolete-documentation

Remove obsolete bazel documentation

a717539023d65a0e48aae13f12ae4819ffcb49d2 authored almost 2 years ago

Merge pull request #5869 from andrewsomething/asb/godo-ua

digitalocean: Pass user agent string to godo client.

1e460486c68100504b31b3075c635aae414acb51 authored almost 2 years ago

Remove obsolete bazel documentation

Signed-off-by: Ole Furseth <[email protected]>

f5eff1f318e10855d9f962fff538e4cea6142c99 authored almost 2 years ago

digitalocean: Pass user agent string to godo client.

Signed-off-by: Andrew Starr-Bochicchio <[email protected]>

70594bd7ca72a0ad6dd239cb122b20e386b884ae authored almost 2 years ago

Merge pull request #5865 from SgtCoDFish/containerfileprelude

Add license preludes for a variety of files

3d1638264f3c90c873ca37dc929e261291186ad6 authored almost 2 years ago

add license preludes for a variety of files

Signed-off-by: Ashley Davis <[email protected]>

f3a051d94fb372973320b8a76f74b6961c744d8b authored almost 2 years ago

Bump k8s.io dependencies

Signed-off-by: Luca Comellini <[email protected]>

0f64e055ae92727417c3c52186bbb79b4b65ee84 authored almost 2 years ago

Merge pull request #5768 from yulng/gatewayversion

Bump gateway-api version to 0.6.0

6ba1dcaf4375b9526815a62af14872e68883a6b8 authored almost 2 years ago

Merge pull request #5849 from maelvls/ingressclassname

Add the ingressClassName field to the Issuer and ClusterIssuer resources to support the ingressC...

34d245f69f1766769eb06092e5d5f9d771d1c996 authored almost 2 years ago

Merge pull request #5858 from irbekrm/add_tim

Adds Tim to security contacts

8646e10d6c5325a21dd51d8942c2cd5ea2a61718 authored almost 2 years ago

Adds Tim to security contacts

Signed-off-by: irbekrm <[email protected]>

ecb0ac57d94401ce0af3a8b5e990c9d5d6c0fb4b authored almost 2 years ago

Merge pull request #5812 from rayandas/rayandas-registry.k8s.io

Update k8s.gcr.io to registry.k8s.io

75c260f663a7998441cdbdcb2c7fafd775a6f6aa authored almost 2 years ago

ingressClassName: document the "oneOf" contraint for the "name" field

Signed-off-by: Maël Valais <[email protected]>

f0449ddb3b1cac65fa08d92dea055d67b3c7777b authored almost 2 years ago

ingressClassName: let's remove the link placeholder

The link itself is way too long to fit in the API reference.

Signed-off-by: Maël Valais <mael@v...

ca9aaa044027c3001f2c951140ef092a137ebf8d authored almost 2 years ago

remove unused test func

Signed-off-by: Maël Valais <[email protected]>

1b9cd207d310b6f9105fa3ec0ccb4b7de57b3335 authored almost 2 years ago

Migrated to policy/v1

Signed-off-by: Eike Wichern <[email protected]>

f96dba6f2f6f719a4fa0377180ccb51b5507e8e6 authored almost 2 years ago

Added PodDisruptionBudgets to helm chart

Signed-off-by: Eike Wichern <[email protected]>

9c16cdd711c33acf01674662fc0aa0bf0d372aa2 authored almost 2 years ago

PDBs can be edited per service; extended readme

Signed-off-by: Eike Wichern <[email protected]>

629deb14b046fa3e6dd0a4cefb607b2c47807712 authored almost 2 years ago

Adjusted to code-review comments

Signed-off-by: Eike Wichern <[email protected]>

1c243450926f435c7ed804e1bd25dd4c71df8be7 authored almost 2 years ago

fix Helm errors and simplify

Signed-off-by: Tim Ramlot <[email protected]>

d93f26df28044334c506a4984756f015571f6995 authored almost 2 years ago

Merge pull request #5852 from SgtCoDFish/removetools

Remove tools/cobra script

860b143c05699cc4bbd5f1f54cf41e3be8db5a09 authored almost 2 years ago

remove tools/cobra script

Signed-off-by: Ashley Davis <[email protected]>

086c36a2ec7a605ddfe1ad48e84da337fe69f61b authored almost 2 years ago

Move from a flag to the Issuer field "ingressClassName"

Signed-off-by: Maël Valais <[email protected]>

6458ed1543b5b2c47dff59178ae0e78e4e0c2ed8 authored almost 2 years ago

Add flag to allow switching ingressClassName specification

Adds a flag to allow between using the old class name annotation or the new
ingressClassName tha...

44d146721741c7569187769ed9c3252431799c79 authored almost 2 years ago

make: force the use of registry.k8s.io by ingressnginx

Signed-off-by: Maël Valais <[email protected]>

138b75cd24d88a36b2771ba581246c51bf4dc7bc authored almost 2 years ago

Merge pull request #5834 from inteon/remove_unused_parameter

Removed unused NewCertManagerWebhookServer function argument

4e889b702b8bbfb082b7a3234569dc173c1c286d authored almost 2 years ago

Merge pull request #5835 from cert-manager/move_cmd_util

Move `cmd/util/` to `internal/cmd/util/`

34a48e9de0c88f357694fa8c5c4aae74783aad0f authored almost 2 years ago

move cmd/util/ to internal/cmd/util/, since it is also imported by packages outside of cmd/

Signed-off-by: Tim Ramlot <[email protected]>

f36c06f10d80d3001233741b77223d4ff675b787 authored almost 2 years ago

removed unused NewCertManagerWebhookServer function argument

Signed-off-by: Tim Ramlot <[email protected]>

82beacaee275fb50ed50f44f90e37defa5cae57b authored almost 2 years ago

Merge pull request #5832 from irbekrm/updates_base_images

Updates base images

9a4cad7472c558089c9126df8bdbb34d361a64bf authored almost 2 years ago

Updates base images

Signed-off-by: irbekrm <[email protected]>

6a7a2dea18b5f155994570b21364c73ba6bc905f authored almost 2 years ago

make: fix the hash of the Gateway API YAML manifests

Signed-off-by: Maël Valais <[email protected]>

69c778572314e88f4f1937a7cd1d6056414147c8 authored almost 2 years ago

Merge pull request #5813 from SgtCoDFish/bumphelm

Bump deps, go and base images

0fb98c3aafe75113bbd24bebe3ca59f00e305ac4 authored almost 2 years ago

e2e: update Contour to 1.24.1 and chart to 11.0.0

Signed-off-by: Maël Valais <[email protected]>

716bd2a59d56c71de5d03ca5603d224b48e30695 authored almost 2 years ago

Merge pull request #5805 from inteon/vcert_fix_issue

Use jetstack vcert fork to properly reset on TPP error

bf18c49904b19e9c81ba44f9c34b4fc0c3561896 authored almost 2 years ago

Merge pull request #5639 from irbekrm/memory_design

Design: reduce cert-manager controller's memory consumption

2f2f6201611c93d5c1f11bb0d906ece41b66c9b6 authored almost 2 years ago

bump go version

Signed-off-by: Ashley Davis <[email protected]>

357a2f30aa469fe0b63e5509be19edbd497b4ab2 authored almost 2 years ago

update base images to latest

Signed-off-by: Ashley Davis <[email protected]>

592abc4a36d3f481d1bf6436d643768329e52f44 authored almost 2 years ago

bump dependencies to fix CVEs

Signed-off-by: Ashley Davis <[email protected]>

018e6dc83b052749ffbd31c3553c12c5fb97d560 authored almost 2 years ago

Merge pull request #5810 from SgtCoDFish/aarch64

Handle uname on linux/arm64

2aaef76b233066239aa405f3c47bbfeb43163abd authored almost 2 years ago

update k8s.gcr.io to registry.k8s.io

Signed-off-by: Rayan Das <[email protected]>

11071f59bb03e34ed3c939861a68423821bf73d3 authored almost 2 years ago

handle uname on linux/arm64

Signed-off-by: Ashley Davis <[email protected]>

819a82a19a8f3f90d6c7a5f07bde16af99086d3b authored almost 2 years ago

Merge pull request #5804 from wallrj/compile-e2e

A Makefile target to build a standalone E2E test binary: make e2e-build

b5d1b1e27467e7fd9be4124f0041ec58524105c4 authored almost 2 years ago

A Makefile target to build a standalone E2E test binary

Signed-off-by: Richard Wall <[email protected]>

9bf2fed7d612f3b3b83f99e12d007374b708a7a2 authored almost 2 years ago

use jetstack vcert fork to properly reset on error for TPP

Signed-off-by: Tim Ramlot <[email protected]>

6d7b3dd216555933c57e71529cc709579cd9205a authored almost 2 years ago

Stop the internal variable E2E_SETUP_DEPENDENCIES being shown in the make help output

Signed-off-by: Richard Wall <[email protected]>

b29404b094381b91ac260c9e0609c0861cacf1a4 authored almost 2 years ago

Merge pull request #5801 from malovme/solver-image-pull-secret

Add imagePullSecrets for AMCE http01 solver pod

4a7fa9071085266e60132aba59c0f1bf06706b10 authored almost 2 years ago

Merge pull request #5788 from ExNG/dev/jbh/add-kubernetes-api-to-egress

Add 6443/TCP to webhook egress NetworkPolicy

55b815364339540599ad5a77870df4d8665ef297 authored almost 2 years ago

Add imagePullSecrets for AMCE http01 solver pod

Signed-off-by: Michael Malov <[email protected]>

dc621e9306097163c9c0be8a3f5798a90f365100 authored almost 2 years ago

Merge pull request #5793 from irbekrm/bump_base_images

Bumps base images

a0bc4bd09742600086c912b472c93eb8f5b3a74f authored almost 2 years ago

Update deploy/charts/cert-manager/values.yaml

Co-authored-by: Maël Valais <[email protected]>
Signed-off-by: Johann Behr <[email protected]...

ea5c7b3bfd5aba6a0f5a302f51e840d66db57ee5 authored almost 2 years ago

Bumps base images

Signed-off-by: irbekrm <[email protected]>

638c0515e9a83e84d254a8adc290b1c71935f5bb authored almost 2 years ago

Add 6443/TCP to webhook egress NetworkPolicy

Signed-off-by: Johann Behr <[email protected]>

d9a68bee40f26e20d0e0aa960c66f3db95951dc3 authored almost 2 years ago

Merge pull request #5502 from maelvls/projected-sa-vault

The vault issuer can now be given a serviceAccountRef instead of relying on static service accou...

2b48160c28f4ad83a783fc2cb834e422b68cfad6 authored almost 2 years ago

removed the unused "addVaultNamespaceToRequest"

I had mistakenly re-added this function in 76eef68730.
It had been removed in 6e05f43f8e.

Signe...

5083b3e36cb22906ebdaddd8c20e7718c27042a4 authored almost 2 years ago

serviceAccountRef: update tests of the controller-side validation

Signed-off-by: Maël Valais <[email protected]>

7a856af843425317d34778667bc99f35383d0a7f authored almost 2 years ago

e2e: the vault addon was incorrectly using StdoutPipe

The documentation [1] mentions that `StdoutPipe` should not be used
along with `Run`:

"Wait wil...

ba0bb5d5030a06a00f38779fbc9feb609c41dfee authored almost 2 years ago

serviceAccountRef: 10 minutes is the min for SA tokens

Signed-off-by: Maël Valais <[email protected]>

511e64feaadf5c2024234ae0df143e4799c3da5e authored almost 2 years ago

api: explicit the fact that no "oneOf" validation is performed

Signed-off-by: Maël Valais <[email protected]>

ac9791abae1fb6f5f35e579c01a86eb3795ea0d9 authored almost 2 years ago

serviceAccountRef: detail why secretRef isn't a pointer

Signed-off-by: Maël Valais <[email protected]>

f1cfffd06b63f5ebef57060c19467600a15dbdc3 authored almost 2 years ago

serviceAccountRef: remove aud and exp, secretRef now a pointer

Changing SecretRef to be a pointer will break people using the package as
a library.

I disabled...

bfce5436402c63330be49e2c22703802b6e44900 authored almost 2 years ago

serviceAccountRef: comment on the reason for backwards compatibility

Signed-off-by: Maël Valais <[email protected]>

d54f18d0c091a535ed7528c08f2f477393f5d248 authored almost 2 years ago

add validation for Vault Issuer Auth

Signed-off-by: Tim Ramlot <[email protected]>

ed310388e1cbe0e6339aa97dba62ab25bf0943d2 authored almost 2 years ago

serviceAccountRef: auto-generate "aud" and hardcode "exp"

Signed-off-by: Maël Valais <[email protected]>

aed8a2ec85616fd68e93037efa577780d5fc5356 authored almost 2 years ago