Shihang Zhang
2c378beb64
abort if namespace doesn't exist or terminating
2020-11-05 11:12:15 -08:00
Shihang Zhang
d40f0c43c4
separate RootCAConfigMap from BoundServiceAccountTokenVolume
2020-11-04 17:10:39 -08:00
qingsenLi
30bfa7d078
remove unused const failedExpiration
2020-10-22 18:57:36 +08:00
Kubernetes Prow Robot
215d2c6bce
Merge pull request #92983 from iotty/csr.clean
...
[pkg/controller/certificates]: remove staled func comments
2020-08-27 19:08:23 -07:00
Zhou Peng
80519cee5b
[pkg/controller/certificates]: remove staled func comments
...
This was introduced by commit: f04ce3cfba
2020-07-11 17:08:28 +08:00
David Eads
1233a6f63e
generated
2020-07-09 08:14:55 -04:00
David Eads
e88fecf26b
allow setting different certificates for kube-controller-managed CSR signers
2020-07-09 08:14:55 -04:00
Kobayashi Daisuke
4ae11dac2e
Replace StartLogging(klog.Infof) with StartStructuredLogging(0)
2020-06-15 17:48:35 +09:00
Jordan Liggitt
db4ca87d9d
Switch CSR approver/signer/cleaner controllers to v1
2020-06-05 18:45:34 -04:00
Jordan Liggitt
7049149181
Generated files
2020-05-28 16:53:23 -04:00
Jordan Liggitt
94fd1d76ca
Switch issued check to inspect certificate length
2020-05-28 12:20:40 -04:00
Jordan Liggitt
d33a19cee7
Clean failed CSRs
2020-05-28 12:20:40 -04:00
Jordan Liggitt
57eddd5e04
Record Failed condition in signer controller
2020-05-28 12:20:40 -04:00
Davanum Srinivas
07d88617e5
Run hack/update-vendor.sh
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-16 07:54:33 -04:00
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-16 07:54:27 -04:00
David Eads
83035890ad
refactor the CSR controller into distinct controllers to allow easy configuration of multiple signing keys
2020-05-05 10:18:04 -04:00
Jordan Liggitt
d8abacba40
client-go: update expansions callers
2020-03-06 16:50:41 -05:00
Mike Danese
c58e69ec79
automated refactor
2020-03-05 14:59:46 -08:00
James Munnelly
d5dae04898
certificates: update controllers to understand signerName field
...
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2020-02-27 15:54:31 +00:00
James Munnelly
a983356caa
Add signerName field to CSR resource spec
...
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2020-02-27 10:17:55 +00:00
taesun_lee
79680b5d9b
Fix pkg/controller typos in some error messages, comments etc
...
- applied review results by LuisSanchez
- Co-Authored-By: Luis Sanchez <sanchezl@redhat.com>
genernal -> general
iniital -> initial
initalObjects -> initialObjects
intentionaly -> intentionally
inforer -> informer
anotother -> another
triger -> trigger
mutli -> multi
Verifyies -> Verifies
valume -> volume
unexpect -> unexpected
unfulfiled -> unfulfilled
implenets -> implements
assignement -> assignment
expectataions -> expectations
nexpected -> unexpected
boundSatsified -> boundSatisfied
externel -> external
calcuates -> calculates
workes -> workers
unitialized -> uninitialized
afater -> after
Espected -> Expected
nodeMontiorGracePeriod -> NodeMonitorGracePeriod
estimateGrracefulTermination -> estimateGracefulTermination
secondrary -> secondary
ShouldRunDaemonPodOnUnscheduableNode -> ShouldRunDaemonPodOnUnschedulableNode
rrror -> error
expectatitons -> expectations
foud -> found
epackage -> package
succesfulJobs -> successfulJobs
namesapce -> namespace
ConfigMapResynce -> ConfigMapResync
2020-02-27 00:15:33 +09:00
Mike Danese
25651408ae
generated: run refactor
2020-02-08 12:30:21 -05:00
Mike Danese
3aa59f7f30
generated: run refactor
2020-02-07 18:16:47 -08:00
Tim Allclair
9d3670f358
Ensure testing credentials are labeled as such
2020-02-04 10:36:05 -08:00
David Eads
5c2d2c5ef1
rename dynamic cert loading to be more accurate
2020-01-22 15:00:46 -05:00
David Eads
6ccfc3aecf
add dynamic reloading for CSR signing controllers
2020-01-22 15:00:46 -05:00
Jordan Liggitt
054e3846fc
Use v1 subjectaccessreview API in controller-manager CSR approver
2020-01-13 15:55:52 -05:00
danielqsj
5bc0e26c19
unify alias of api errors under pkg and staging
2019-12-26 16:42:28 +08:00
yuxiaobo
81e9f21f83
Correct spelling mistakes
...
Signed-off-by: yuxiaobo <yuxiaobogo@163.com>
2019-11-06 20:25:19 +08:00
Mike Danese
6a004d0c18
support URI SANs in local signer
2019-11-04 10:56:06 -08:00
Mike Danese
fe51712288
refactor into seperate authority package
2019-11-04 10:56:06 -08:00
Mike Danese
4bd2c3998f
don't use cfssl in signer
2019-11-04 10:56:06 -08:00
Ryan Phillips
f87da3fdfa
fixes for tests to pass with FIPS compiler
...
* use P256 ECDSA key since P224 is not supported
* regen test certs to be 2048bits
2019-10-30 10:10:11 -05:00
wojtekt
7b6bcdf780
Autogenerated code
2019-10-24 20:21:00 +02:00
Yassine TIJANI
c1487840bc
move util/metrics to component-base
...
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
2019-10-08 14:42:31 +02:00
David Eads
e8b5781499
add identification for particular certificate controllers
2019-09-03 14:05:04 -04:00
Yassine TIJANI
7e4c3096fe
move WaitForCacheSync to the sharedInformer package
...
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
2019-08-22 16:13:41 +01:00
David Xia
fabfd950b1
cleanup: fix some log and error capitalizations
...
Part of https://github.com/kubernetes/kubernetes/issues/15863
2019-07-20 18:26:16 -04:00
SataQiu
3c35e4e2d6
fix golint failures of pkg/controller/certificates/approver
2019-05-02 10:37:38 +08:00
stewart-yu
ecbd5427e7
auto-generated file
2019-03-02 12:55:26 +08:00
stewart-yu
e01ff1641c
move config local to every controllers in kube-controller-manager
2019-03-02 12:54:33 +08:00
Jordan Liggitt
d1e865ee34
Update client callers to use explicit versions
2019-02-26 08:36:30 -05:00
Kubernetes Prow Robot
9fcbf02dca
Merge pull request #74044 from danielqsj/dr
...
fix the disruption-recheck metrics register error
2019-02-21 20:51:01 -08:00
danielqsj
687d759e36
fix more metrics rergister errors
2019-02-22 10:20:09 +08:00
Kubernetes Prow Robot
808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable
...
Remove executable file permission from OWNERS files
2019-02-14 23:55:45 -08:00
Kubernetes Prow Robot
b50c643be0
Merge pull request #73540 from rlenferink/patch-5
...
Updated OWNERS files to include link to docs
2019-02-08 09:05:56 -08:00
Roy Lenferink
b43c04452f
Updated OWNERS files to include link to docs
2019-02-04 22:33:12 +01:00
David Eads
179dc4ca43
csr signer has no need to sign certificates for a duration longer than the signer itself
2019-02-04 13:22:17 -05:00
Justin SB
dd19b923b7
Remove executable file permission from OWNERS files
2019-01-11 16:42:59 -08:00
k8s-ci-robot
1a9fd268a9
Merge pull request #71005 from mikedanese/certpubfix
...
rootcacertpublisher: trigger resync on namespace add and update
2018-11-14 11:38:07 -08:00
