28 Commits

Author SHA1 Message Date
2485c599d5 Fix v25 2025-07-28 15:33:30 +02:00
2d52da0a15 fix staticcheck ST1005 issues (follow error msg rules) 2025-07-15 17:16:16 +02:00
4809e5f4ac Fix cert-manager reconciliation. Added examples 2025-01-28 11:22:39 +01:00
10ba72cee8 Exported renewal functionality as funcs of pki pkg. Using them in certificate builder 2025-01-28 11:22:39 +01:00
6fac6327a5 Certificate reconciliation 2025-01-28 11:22:39 +01:00
e37dbf6c3c Enhancements in MariaDB TLS types 2025-01-28 11:22:39 +01:00
cb1a199701 Certificates issued by cert-manager 2025-01-28 11:22:39 +01:00
08b7728c28 Ability to recover Galera cluster with expired certificate 2025-01-28 11:22:39 +01:00
f9860bc207 Logging enhancements 2025-01-28 11:22:39 +01:00
270d58afdb Wait for CA rolling upgrade before renewing cert 2025-01-28 11:22:39 +01:00
5a55c53bd8 Added "bring your own CA" example 2025-01-28 11:22:39 +01:00
b16d0de27b Issuing certs for MariaDB 2025-01-28 11:22:39 +01:00
6c349ee859 Added watch label to reconciled TLS secrets 2025-01-28 11:22:39 +01:00
8f08c6b0fc Getting CA keypair from Secret when its issuance is disabled 2025-01-28 11:22:39 +01:00
ba0bbc4848 Ability disable CA/cert issuance in cert controller 2025-01-28 11:22:39 +01:00
6b7c30a275 Ability to pass a ref to a bundle in cert controller 2025-01-28 11:22:39 +01:00
7c50b7e29f Propagate keypair options to x509 pkg 2025-01-28 11:22:39 +01:00
c039c15ac8 Remove renewed flags in cert reconcile result 2025-01-28 11:22:39 +01:00
de0804cb12 Added certificate status logs 2025-01-28 11:22:39 +01:00
51e219c865 Support for renewBeforePercentage 2025-01-28 11:22:39 +01:00
2aca98a363 Refactor certificate controller to reconcile a different certificate on each reconciliation loop 2025-01-28 11:22:39 +01:00
bf706b5cf2 Added tests for ValidateCert 2025-01-28 11:22:39 +01:00
2c0f0e5d64 Added tests for CreateCA and CreateCert 2025-01-28 11:22:39 +01:00
1dbccf18cf ValidateCert to include intermediate CAs to form the chain leading to a trusted root CA 2025-01-28 11:22:39 +01:00
6e30716d3e Refactor x509 for more flexible certificate configuration 2025-01-28 11:22:39 +01:00
038a8c5604 Support for ECDSA private keys 2025-01-28 11:22:39 +01:00
c0679bba12 Refactor PKI pkg for better flexibility 2025-01-28 11:22:39 +01:00
7bf25741e0 Fix webhook certificate race condition (#266) 2023-11-16 22:01:01 +01:00