[pull] master from cert-manager:master#1066
Open
pull[bot] wants to merge 3818 commits into
Open
Conversation
…x-deps fix(deps): update module golang.org/x/crypto to v0.51.0 (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
replacing pebble with our fork
fix(deps): update cloud go deps (master)
…b-actions chore(deps): update github/codeql-action action to v4.35.4 (master)
It seems this had no effect: kubernetes/gengo#209 Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
fix(deps): update module github.com/venafi/vcert/v5 to v5.13.2 (master)
This brings in a tonne of changes to codegen which come with the upgraded versions of the codegen tools This is being done along with the bounding-dirs flag removal because they come together Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
```text pkg/controller/util.go:217:62: inline: Constant reflect.Ptr should be inlined (govet) if v := reflect.ValueOf(arg); !v.IsValid() || ((v.Kind() == reflect.Ptr || ``` Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
Delete now-removed bounding dirs flag && make upgrade
Prevent global solver extra labels from overwriting ACME identity labels (acme.cert-manager.io/http-domain, acme.cert-manager.io/http-token, acme.cert-manager.io/http01-solver) on dynamically-created HTTP01 solver resources. A filterACMEIdentityLabels helper strips these protected keys before merging. Without this guard, extra labels could silently break resource discovery. Signed-off-by: Yuedong Wu <dwcn22@outlook.com>
Signed-off-by: Richard Wall <richard@the-moon.net>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…-go-deps fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1 (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…-go-patches fix(deps): update kubernetes go patches to v0.36.1 (master)
Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
[CI] Merge self-upgrade-master into master
Signed-off-by: Richard Wall <richard@the-moon.net>
Signed-off-by: Richard Wall <richard@the-moon.net>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
fix(deps): update cloud go deps (master)
feat: Add `--acme-http01-solver-extra-labels` for propagating custom labels to ACME HTTP01 solver resources
Signed-off-by: felix.phipps <felix.phipps@cyberark.com>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
fix(deps): update module github.com/digitalocean/godo to v1.191.0 (master)
* acmechallenges: retry on transient ACME errors Treat context.Canceled, context.DeadlineExceeded, and any net.Error as transient when evaluating ACME challenge sync errors, so the controller requeues instead of marking the challenge failed. Fixes #8747 Signed-off-by: texasich <texasich@users.noreply.github.com> * test: cover transient ACME challenge errors Signed-off-by: Zhanybek Mamataliev <rogma07k@gmail.com> --------- Signed-off-by: texasich <texasich@users.noreply.github.com> Signed-off-by: Zhanybek Mamataliev <rogma07k@gmail.com> Co-authored-by: texasich <texasich@users.noreply.github.com> Co-authored-by: Zhanybek Mamataliev <rogma07k@gmail.com>
Harden ACME Challenge and Order RBAC (GHSA-8rvj-mm4h-c258)
fix(deps): update cloud go deps (master)
Fix make e2e-setup-pebble when _bin/downloaded is missing
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…trata domain Signed-off-by: Maël Valais <mael@vls.dev>
vcert: upgrade lib so that the ngts API defaults to the correct api.strata domain
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
fix(deps): update module github.com/aws/smithy-go to v1.27.3 (master)
…o-gateway-api-1.x chore(deps): update module sigs.k8s.io/gateway-api to v1.6.0 (master)
…pi v1.6.0 gateway-api v1.6.0 bumped to k8s 1.36 deps (kubernetes-sigs/gateway-api#4819), which picked up the removal of the Deprecated godoc annotation from gwfake.NewSimpleClientset (kubernetes/kubernetes#136455). With no deprecation notice, staticcheck SA1019 no longer fires, so the //nolint:staticcheck directive became dead code that nolintlint now rejects. Also expand the FIXME comment to link to the root-cause issue (kubernetes/kubernetes#126850) and the un-deprecation PR, so future readers understand why NewSimpleClientset is still used deliberately. Signed-off-by: Richard Wall <richard.wall@cyberark.com>
…-go-deps fix(deps): update module sigs.k8s.io/gateway-api to v1.6.0 (master)
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
…ndition fix(controller/trigger): adding check for race condition of get v/s list in trigger ctrl
Introduce `CertificateRequestMaximumBackoffDuration` field to the controller config API, `--certificate-request-maximum-backoff-duration` to the controller CLI flags, default as 32h for backwards compatibility. Allow users controlling the upper bound of exponential backoff after certificate request failures, which previously hardcoded at 32h. Signed-off-by: Yuedong Wu <dwcn22@outlook.com>
Replace hardcoded maxDelay/stopIncreaseBackoff constants with the configured `CertificateRequestMaximumBackoffDuration`, add overflow guard for extreme attempt counts. Signed-off-by: Yuedong Wu <dwcn22@outlook.com>
feat: Add configurable CertificateRequest max backoff duration as controller option
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
fix(deps): update cloud go deps (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…odules chore(deps): update makefile modules to 6ec965f (master)
feat(design): proposed ari design
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…odules chore(deps): update makefile modules to 1a9e320 (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…odules chore(deps): update makefile modules to e18d942 (master)
- Update Runtime Class reference text+link Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
- for Affinity - for Tolerations - for Topology Spread Constraints - Insert trailing `.`s Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Add acmesolver.runtimeClassName
Replace reference links with concept links
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot]
Can you help keep this open source service alive? 💖 Please sponsor : )