Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cert-manager/cert-manager
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.11.4
Choose a base ref
...
head repository: cert-manager/cert-manager
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.12.0
Choose a head ref
22 contributors

Commits on Aug 22, 2022

  1. handle subject escaped csv 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    3d3e277 View commit details

  2. subject street tests 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    8f597da View commit details

  3. cleanup comment 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    89ae723 View commit details

  4. ingress subject annotations & helper tests 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    d9a8047 View commit details

  5. remove empty subject annotations 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    d9a95b7 View commit details

  6. escape subject util cleanup 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    4413e83 View commit details

  7. fix merge conflict 

    Signed-off-by: ctrought <65360454+ctrought@users.noreply.github.com>
    @ctrought
    ctrought committed Aug 22, 2022
    Copy the full SHA
    6fa81fe View commit details

Commits on Jan 5, 2023

  1. move custom acmesolver image above extraArgs 

    since the acmesolver image has defaults (i.e. the repository is set by
default[1]), the helm chart changes introduced in #5554 will always set
the `--acme-http01-solver-image` parameter.

This can break users who previously had this parameter set via the
extraArgs Helm option, which was found and reported on Slack[2].

This commit moves the new Helm value added in #5554 above extraArgs,
so that if extraArgs is set it will take precedence and nothing should
change as users upgrade.

[1] https://github.com/cert-manager/cert-manager/blob/a5d67d3a21f86fb21b8194808601da429a1c4752/deploy/charts/cert-manager/values.yaml#L504-L516
[2] https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1672925692339849

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
    @SgtCoDFish
    SgtCoDFish committed Jan 5, 2023
    Copy the full SHA
    264ebe6 View commit details

Commits on Jan 6, 2023

  1. Adds a new label to cert-manager API 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 6, 2023
    Copy the full SHA
    767170d View commit details

  2. Issuing controller ensures that cert.spec.secretName secrets are labe… 

    …lled

Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 6, 2023
    Copy the full SHA
    c7465fd View commit details

  3. Keymanager controller ensures that temporary private key Secrets are … 

    …labelled

Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 6, 2023
    Copy the full SHA
    213949a View commit details

  4. Policy check ensures that cert.sepc.secretName secret gets labelled 

    Makes sure that when an unlabelled Secret is encountered at any point (even outside issuance) it will be labelled

Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 6, 2023
    Copy the full SHA
    5e8fd7d View commit details

Commits on Jan 9, 2023

  1. Merge pull request #5693 from SgtCoDFish/extraarghs 

    Move custom acmesolver image above extraArgs
    @jetstack-bot
    jetstack-bot authored Jan 9, 2023
    Copy the full SHA
    7c175c5 View commit details

  2. Merge pull request #5660 from irbekrm/certificate_labels 

    Ensures that certificate.spec.secretName and temporary private key Secrets are labelled
    @jetstack-bot
    jetstack-bot authored Jan 9, 2023
    Copy the full SHA
    aa7fe11 View commit details

  3. bump containerd to fix reported vuln 

    note that cert-manager is not actually vulnerable to CVE-2022-23471
since the affected code is not used

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
    @SgtCoDFish
    SgtCoDFish committed Jan 9, 2023
    Copy the full SHA
    8c4f6cd View commit details

Commits on Jan 10, 2023

  1. Merge pull request #5706 from SgtCoDFish/bumpcontainerd 

    Bump containerd to fix reported vuln
    @jetstack-bot
    jetstack-bot authored Jan 10, 2023
    Copy the full SHA
    44383b0 View commit details

  2. Initial commit 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 10, 2023
    Copy the full SHA
    65be2ca View commit details

Commits on Jan 11, 2023

  1. Bump go to 1.19.5 

    Signed-off-by: yanggang <gang.yang@daocloud.io>
    yanggang committed Jan 11, 2023
    Copy the full SHA
    44e8f9c View commit details

  2. Merge pull request #5712 from yanggangtony/go-version 

    Bump go to 1.19.5
    @jetstack-bot
    jetstack-bot authored Jan 11, 2023
    Copy the full SHA
    4b0aa9d View commit details

Commits on Jan 12, 2023

  1. Add a note about how often issuer secrets are retrieved 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 12, 2023
    Copy the full SHA
    47c3c4c View commit details

  2. Adds overwhelming kube apiserver to risks&mitigations 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 12, 2023
    Copy the full SHA
    2d2985b View commit details

  3. Use fake kube apiserver version when generating helm template in cmct… 

    …l x install

Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 12, 2023
    Copy the full SHA
    53abc8c View commit details

  4. Merge pull request #5720 from irbekrm/fix_helm_version_check 

    Use fake kube apiserver version when generating helm template in cmctl x install
    @jetstack-bot
    jetstack-bot authored Jan 12, 2023
    Copy the full SHA
    b99fdc3 View commit details

Commits on Jan 13, 2023

  1. Add org.opencontainers.image.source OCI label to containers 

    A full list of pre-defined annotations is available at:
https://github.com/opencontainers/image-spec/blob/main/annotations.md#pre-defined-annotation-keys

Signed-off-by: James Callahan <james@wavesquid.com>
    @james-callahan
    james-callahan committed Jan 13, 2023
    Copy the full SHA
    33e9c03 View commit details

  2. bump base images to latest 

    Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
    @SgtCoDFish
    SgtCoDFish committed Jan 13, 2023
    Copy the full SHA
    5f910ce View commit details

  3. Merge pull request #5723 from SgtCoDFish/bumpbase 

    Bump base images to latest
    @jetstack-bot
    jetstack-bot authored Jan 13, 2023
    Copy the full SHA
    9b24e88 View commit details

  4. Bump dependencies 

    Signed-off-by: Luca Comellini <luca.com@gmail.com>
    @lucacome
    lucacome committed Jan 13, 2023
    Copy the full SHA
    85ca8e0 View commit details

  5. Update Cloudflare ListDNSRecords 

    Signed-off-by: Luca Comellini <luca.com@gmail.com>
    @lucacome
    lucacome committed Jan 13, 2023
    Copy the full SHA
    7e5cd34 View commit details

  6. Update Helm and Kubebuilder 

    Signed-off-by: Luca Comellini <luca.com@gmail.com>
    @lucacome
    lucacome committed Jan 13, 2023
    Copy the full SHA
    98ce593 View commit details

  7. Bump keystore-go to v4.4.1 

    This version points to the same commit as v4.4.0, so there is no actual
code change. However, trying to build cert-manager with v4.4.0 errors
out due to a checksum mismatch. Bumping to the new tag solved the
issue.

Signed-off-by: Guillermo Gaston <gaslor@amazon.com>
    @g-gaston
    g-gaston committed Jan 13, 2023
    Copy the full SHA
    7528760 View commit details

Commits on Jan 14, 2023

  1. [helm] expose enable-certificate-owner-ref and -dns01-recursive-names… 

    …ervers as helm value

Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
    @jkroepke
    jkroepke committed Jan 14, 2023
    Copy the full SHA
    b952058 View commit details

Commits on Jan 16, 2023

  1. Merge pull request #5614 from jkroepke/dns-extra-args 

    helm: expose enable-certificate-owner-ref and -dns01-recursive-nameservers as helm value
    @jetstack-bot
    jetstack-bot authored Jan 16, 2023
    Copy the full SHA
    3115953 View commit details

  2. Adding the ability to set volumes and volumeMounts to all pods 

    Signed-off-by: Aaron Aichlmayr <aaichlmayr@conquestcyber.com>
    @waterfoul
    waterfoul committed Jan 16, 2023
    Copy the full SHA
    0ce3553 View commit details

  3. Fixed a few indents 

    Signed-off-by: Aaron Aichlmayr <aaichlmayr@conquestcyber.com>
    @waterfoul
    waterfoul committed Jan 16, 2023
    Copy the full SHA
    b967232 View commit details

Commits on Jan 17, 2023

  1. Merge pull request #5711 from lucacome/bump-deps 

    Bump dependencies
    @jetstack-bot
    jetstack-bot authored Jan 17, 2023
    Copy the full SHA
    a6e00a8 View commit details

  2. Merge pull request #5724 from g-gaston/bump-keystore-go-4-4-1 

    Bump keystore-go to v4.4.1
    @jetstack-bot
    jetstack-bot authored Jan 17, 2023
    Copy the full SHA
    ece47eb View commit details

Commits on Jan 18, 2023

  1. Merge pull request #5722 from james-callahan/container-label 

    Add org.opencontainers.image.source OCI label to containers
    @jetstack-bot
    jetstack-bot authored Jan 18, 2023
    Copy the full SHA
    d5125b5 View commit details

  2. A bunch of comments on webhook solver functionality 

    With the goal of making folks working on these parts of code be aware that this is the one bit that will be imported in external projects

Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 18, 2023
    Copy the full SHA
    1834afa View commit details

  3. RFC2136 solver has an init option to reset secrets lister 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 18, 2023
    Copy the full SHA
    216b60e View commit details

  4. Resets secrets lister in RFC2136 conformance tests 

    The way the tests run (a new kube apiserver with a different client created for the same initialized solver) is not how this solver would actually run

Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 18, 2023
    Copy the full SHA
    644a46c View commit details

Commits on Jan 19, 2023

  1. Code review feedback: fix imports 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 19, 2023
    Copy the full SHA
    438c79d View commit details

  2. Merge pull request #5736 from irbekrm/webhook_solver_conformance_bugfix 

    Webhook solver conformance bugfix
    @jetstack-bot
    jetstack-bot authored Jan 19, 2023
    Copy the full SHA
    c08b337 View commit details

  3. fix: goimports 

    Signed-off-by: ctrought <k8s@trought.ca>
    @ctrought
    ctrought committed Jan 19, 2023
    Copy the full SHA
    575e315 View commit details

Commits on Jan 20, 2023

  1. Merge pull request #4502 from ctrought/master 

    support subject and email annotations for ingress/gateway
    @jetstack-bot
    jetstack-bot authored Jan 20, 2023
    Copy the full SHA
    1038ca4 View commit details

Commits on Jan 23, 2023

  1. move utility functions to reduce fragmentation and rename functions f… 

    …or consistency

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Jan 23, 2023
    Copy the full SHA
    23de524 View commit details

  2. add (deprecated) stub functions 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Jan 23, 2023
    Copy the full SHA
    191e7ca View commit details

  3. Remove the double cache mechanism for cainjector 

    Signed-off-by: irbekrm <irbekrm@gmail.com>
    @irbekrm
    irbekrm committed Jan 23, 2023
    Copy the full SHA
    4776597 View commit details

  4. Cleaning up a check 

    Co-authored-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Aaron Aichlmayr <waterfoul@gmail.com>
    @waterfoul @inteon
    waterfoul and inteon authored Jan 23, 2023
    Copy the full SHA
    1d7e360 View commit details

Commits on Jan 24, 2023

  1. Cleaning up a checks 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Jan 24, 2023
    Copy the full SHA
    3978597 View commit details

  2. Merge pull request #5668 from waterfoul/volumes 

    Added the ability to set volumes and volumeMounts to all pods  via helm
    @jetstack-bot
    jetstack-bot authored Jan 24, 2023
    Copy the full SHA
    be017fa View commit details
Showing 480 changed files with 20,752 additions and 7,865 deletions.
2 changes: 2 additions & 0 deletions .gitignore
View file
Original file line number Diff line number Diff line change
@@ -18,3 +18,5 @@ _bin/
.bin/
user.bazelrc
*.bak
/go.work.sum
**/go.work
Loading