Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Add view permission to all resources to cluster-reader aggregated cluster role

Signed-off-by: Erik Godding Boye <[email protected]>

Annual review of the OWNERS file (2023): Maartje moved to Emeritus Maintainer

Further clarifications and updates to the proliferation design doc

Ref: https://github.com/cert-manager/cert-manager/issues/6231

Signed-off-by: Maël Valais <mael@...

Simplify flag and configfile parsing & add tests

Signed-off-by: Tim Ramlot <[email protected]>

Fix messageAppRoleAuthKeyRequired error message

Signed-off-by: Tim Ramlot <[email protected]>

Move logging options to webhook config file

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

[BUGFIX] defaulting partial ControllerConfiguration logging options

Signed-off-by: Tim Ramlot <[email protected]>

WebhookConfiguration: change the types of ports from *int to *int32

Signed-off-by: Tim Ramlot <[email protected]>

Co-authored-by: Josh Soref <[email protected]>
Signed-off-by: tommie <tomm...

internal: *int -> int32
public: *int -> *int32

Signed-off-by: Tim Ramlot <42113979+inteon@users....

add tests for ipv6 in ingress-shim

Signed-off-by: Ashley Davis <[email protected]>

distinguish dns names and ip address

Signed-off-by: zhangzhiqiang02 <[email protected]>

cleanup: some redundant code clean up

Signed-off-by: guiyong.ou <[email protected]>

Signed-off-by: guiyong.ou <[email protected]>

Restructure the controller configfile

Cleanup go.mod files

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Ignat Belousov <[email protected]>

Signed-off-by: Ignat Belousov <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Fix kubebuilder shas

Annual review of the OWNERS file (2023): remove Joakim

Ref: https://github.com/cert-manager/cert-manager/issues/6231

Signed-off-by: Maël Valais <mael@...

Signed-off-by: Ashley Davis <[email protected]>

Update nameserver lookup test to use upstream targets

In the long term I don't think this test should be run as a unit test
because it can randomly br...

Use logging library with json support in cmctl (part 3)

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Use logging library with json support in cmctl (part 2)

Signed-off-by: Tim Ramlot <[email protected]>

Support loading controller configuration from a versioned file

Signed-off-by: Cody W. Eilar <[email protected]>

- This commit changes the internal config to have fewer number of
optional parameters. It ch...

- Needed to add custom conversion functions to handle conversions from
public facing types to ...

Use logging library with json support in cmctl (part 1)

chore: When hostNetwork is enabled, dnsPolicy is now set to ClusterFirstWithHostNet.

[BUGFIX] Incorrect re-assignment of cross-invocation variable

Use supplied context where possible

this was discovered as part of the investigation into #6104

Signed-off-by: Ashley Davis <ashley...

Signed-off-by: Tim Ramlot <[email protected]>

fix: maxUnavailable pdb configuration cannot be used due to default set minAvailable

Improve Trigger, Readiness and PostIssuance Policy chains

Bump k8s.io dependencies

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Luca Comellini <[email protected]>

helm: Update Chart.template.yaml - add apache 2.0 license

add apache 2.0 license

Signed-off-by: arukiidou <[email protected]>

Fix indentation of Webhook NetworkPolicy matchLabels

service account labels introduce a white line issue

Bump go to latest patch release

Signed-off-by: Gerald Pape <[email protected]>

Signed-off-by: Ashley Davis <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Rouke Broersma <[email protected]>

Signed-off-by: Rouke Broersma <[email protected]>

Signed-off-by: Rouke Broersma <[email protected]>

Signed-off-by: Rouke Broersma <[email protected]>

Signed-off-by: Rouke Broersma <[email protected]>

Signed-off-by: Rouke Broersma <[email protected]>

Improve CertificateRequest's CSR validation code

Signed-off-by: Ben Gelens <[email protected]>

Remove VCert fork dependency replace statement

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

REVERT: Move e2e framework back to e2e module

Signed-off-by: Tim Ramlot <[email protected]>

Add validation to pki CertificateTemplate functions

Signed-off-by: Tim Ramlot <[email protected]>

and add support for add DontAllowInsecureCSRUsageDefinition featuregate
to use old behavior in co...

Reconcile when managed annotations/ labels are out-of-sync

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Tim Ramlot <[email protected]>

BUGFIX: Stricter CertificateRequest CSR webhook validation

Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Tim Ramlot <421139...

Handle multiple Cloudflare DNS01 challenges for the same FQDN

Signed-off-by: Tim Ramlot <[email protected]>

Signed-off-by: Richard Boldiš <[email protected]>

Honor KIND_CLUSTER_NAME for e2e-setup & clean

- Prior to this commit, regardless what was put for KIND_CLUSTER_NAME,
the name of the cluster...

Static e2e test build

Signed-off-by: Richard Wall <[email protected]>