Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

pf/tutorial kyverno version #1395

Closed
wants to merge 255 commits into from
Closed

pf/tutorial kyverno version #1395

wants to merge 255 commits into from

Conversation

hawksight
Copy link
Member

  • Update docs to reference gateway api v1
  • added doc for CA name constraints
  • addressed review comments
  • spell fix
  • fix ./scripts/gendocs/generate-new-import-path-docs script & update CLI references and API docs
  • Pre-release v1.14.0-alpha.0
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • feat: add tls config to metrics docs
  • update liveness probe docs because clock check was added and the probe was enabled by default
  • docs: add podmonitor example for tls metrics endpoint
  • docs: add note that tls metrics certs must be mounted into the pod
  • Add Certificate 'otherNames' SAN field description
  • Add more explanations in release notes
  • Add feature flag note
  • Quotes
  • docs: update prometheus example to correct port name
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • Pre-release v1.14.0-alpha.1
  • Fix link to feature-gate configuration document
  • feat: Certificate defaults tutorial with Kyverno
  • add release notes for 1.12.1, 1.12.2 and 1.12.3
  • fix spelling checker
  • Add release notes for 1.11.2->1.11.4
  • Annual review of the OWNERS file (2023): remove Joakim
  • Fix venafi link 404
  • add docs on trust namespace
  • update supported releases about 1.13
  • Annual review of the OWNERS file (2023): Maartje moved to Emeritus Maintainer
  • add docs for trust-manager v0.6.0
  • renaming all references to jetstack/testing
  • 1.11.5 and 1.12.4: release notes updates
  • Add link to zilore webhook
  • Update zeroSSL api version
  • build(deps): bump webpack from 5.70.0 to 5.88.2
  • Add queried endpoint to check Vault status when initializing issuer
  • Fix typos
  • build(deps-dev): bump @antfu/utils from 0.7.2 to 0.7.6
  • Adding accessKeyIDSecretRef feature documentation
  • document ingress/gateway subject annotations added in v1.12
  • fix copy-paste error for serialnumber
  • Add deletion of validatingwebhookconfigurations to stuck uninstall
  • apply review feedback
  • Add multiple ingresses usage section
  • Fix broken kyverno links
  • rename the Configuration and usage top-level menu items
  • rename 'Issuing Certificates' to 'Requesting Certificates'
  • concept/certificate: add the source of the PNG
  • use same method for creating on-page references across all pages
  • update release and support details for 1.13 release
  • release 1.12.4: update installation instructions to 1.12.4
  • add docs for stackit webhook
  • add upgrade notes for 1.13
  • fix typos
  • add 1.13 release notes
  • fix spelling
  • bump cert-manager versions (as described in the release-process)
  • fix search-replace mistake
  • remove sections in 'frozen' docs that are not necessary (based on feedback)
  • fix supported-releases page & clarify the LTS release
  • add upgrade notes to the manifest.json file
  • Add clarification to selfsigned bootstrapping
  • Update namespace delcaration
  • Refer to ClusterIssuer by name, reword for clarity
  • Add selfsigned-issuer to .spelling
  • update csi-driver project page
  • addressing review comments
  • review comments part 2
  • Add ejbca-issuer to external issuers list
  • Add ejbca as spelling exception to .spelling
  • update feature flags page to reflect changes made in 1.13
  • add 1.12.5 release notes
  • add version to spelling execeptions
  • add 1.13.1 release notes
  • add version to spelling execeptions
  • update latest version from v1.13.0 to v1.13.1
  • update 1.12 installation docs to refer to latest patch release
  • Restructure top-level menu
  • write documentation for the different kinds of policy
  • explain trust-store management
  • Apply code review suggestion
  • fix missing logic to unfold side menu when going to the link directly
  • fix broken approver-policy link
  • Partially revert "fix missing logic to unfold side menu when going to the link directly"
  • update support page: replace Jetstack with Venafi
  • Update CLI flag documentation
  • move release and upgrade notes to new "Releases" section
  • rename 'releases' menu items
  • use best-practice link format
  • fix remaining feedback
  • fix spelling alerts because links are splits over multiple lines
  • only include latest version of docs in sitemap
  • move copy icon to fix mobile view
  • update twitter icon to x
  • build(deps): bump postcss and next
  • cleanup installation section
  • re-organise the usage section & move missing topics to this section
  • fix broken links
  • improve titles
  • remove menu icons
  • Add command-issuer to external issuers list
  • Add Keyfactor to list of known words
  • release-process: sed command not compatible with BSD sed
  • release-process: fix find command being too loose
  • release-process: jetstack -> cert-manager
  • release-process: the update-cmd/ctl/ thing only works for 1.12 and above
  • release-process: reformulate 1.10-specific parts
  • release-process: fix release-notes already-ready URLs
  • release-process: explain that you need to push the branch
  • release-process: fixes
  • release-process: fix spelling
  • release-process: the "find" trick was completely broken!
  • release-process: -E should come before -e
  • release-process: remove duplicate explanation about github token
  • Update Google DNS doc in case custom role is used
  • add diagrams to the requesting certificates pages based on Mael's e2e diagram
  • fix bugs in diagrams & improve titles
  • fix: Docs needed Camel case feature gate names
  • docs: Bold and case correction
  • Write about high availability and scaling of cert-manager components
  • Apply suggestions from code review
  • Update content/docs/installation/best-practice.md
  • Remove mention of worker processes
  • Add discrete Helm values examples for each recommendation.
  • Explain when and how to limit the memory usage of cainjector
  • Explain that the default topology spread constraints are probably adequate
  • Update content/docs/installation/best-practice.md
  • Update content/docs/installation/best-practice.md
  • Fix typo
  • Further reading and warnings around the use of Pod Disruption Budget
  • Make this paragraph make sense
  • Link to The Darker Side of Webhooks blog post
  • add redirect rules for the /docs/installation/upgrading/, /docs/releases/upgrading/ and /docs/releases/release-notes/ pages
  • update paragraph to point to new location of upgrade & release notes
  • Explain why and how to isolate the cert-manager workloads
  • Use nodeSelector instead of affinity, for simplicity
  • Link to all the general documentation sites in addition to specific pages
  • Update content/docs/installation/best-practice.md
  • Make it clear that the use of taints and toleration is only an example
  • Add link to RedHat OpenShift pod placement documentation
  • Move links to pod placement docs nearer to where concepts are introduced
  • fix title casing in sidebar
  • add release notes for v1.12.6
  • add release notes for v1.13.2
  • update documentation to update to latest patch version
  • bump v1.12.5 to v1.12.6
  • Correct kubectl operator install for latest version of operator-sdk
  • PR Feedback
  • Update content/docs/installation/operator-lifecycle-manager.md
  • reorganise 'Certificate resource' page
  • improve reissuance titles & content
  • link to details about reissuance & flatten title structure
  • add overview diagrams
  • improve overview diagrams (decrease height, add legend & try to explain paths)
  • Explain how to install cert-manager using Flux
  • Update content/docs/installation/helm.md
  • Use the shorter .x semver range syntax
  • Create a new Continuous Deployment page
  • Update README.md
  • Update content/docs/trust/trust-manager/README.md
  • Update content/docs/trust/trust-manager/README.md
  • Update content/docs/trust/trust-manager/README.md
  • Fix broken link due to new structure of Knative docs website (knative/docs@6d93813)
  • Clarify that it is the webhook, not the CA Injector, which creates the secret with the webhook's root CA certificate
  • bump numbers on homepage
  • docs: Small typo on best practice: is should have been us
  • docs: Removed some repetition from liveness probe notes
  • Link to the official Flux example repo
  • Remove unnecessary --crds CreateReplace argument
  • Added horizon-issuer as an external issuer
  • Network policy recommendations
  • Make Peter Fiddes (@hawksight) a reviewer
  • add v1.13 upgrade note saying you should upgrade to v1.12 first
  • Update content/docs/releases/upgrading/upgrading-1.12-1.13.md
  • replace external issuers page with list of ALL issuers, also add ranks to indicate the quality of issuers and their documentation
  • reorder sections on issuers page
  • improvement based on feedback: update tier-2 requirement from 3 months to 12 months & add more info about what the e2e docs should look like
  • add horizon-issuer
  • update VEI docs link
  • removed the concepts certificate page and moved remaining info to the 'Requesting Certificates' > 'Certificate' page
  • fix broken links
  • Add/update docs for new trust-manager features
  • add a concrete example on how to restore a cert-manager installation
  • improve backup docs based on feedback
  • add FAQ entry on keystore passwords
  • add permanent link to keystore passwords
  • Add erikgb to project reviewers
  • Release notes for v1.13.3
  • Use v1.13.3 in the installation documentation
  • Verify Mastodon social media link
  • Update components/Header.jsx
  • Release notes for v1.12.7
  • Use v1.12.7 in the installation documentation
  • Create the cmd/ctl tag after merging the go.mod PR
  • Sign off the cmd/ctl go.mod commit
  • Quote the git add args which didn't work in my shell
  • Restore the git checkout $BRANCH step and fast-forward it
  • A note about skipping the homebrew step if the PR has been automatically created
  • update supported releases to match latest known details
  • Fixing link to 1.12 LTS release notes
  • Update docs to reference gateway api v1
  • Revert "Update docs to reference gateway api v1"
  • adding new version of adcs-issuer
  • sorting via tier 2
  • venafi: explain why "do not select 'refresh token enabled'"
  • changing release site for adcs-issuer
  • add thatsmrtalbot as reviewer
  • Format the issuers table
  • Fix broken ACME issuer link
  • Adding GlobalSign Issuer
  • fix error in request-certificate diagram
  • add FAQ entry on ca.crt
  • Update the last verified date of the AKS tutorial
  • update link to code in faqs
  • improve + fix signature verification examples
  • debugging guide: advise people to set timeoutSeconds to 30
  • Update content/docs/troubleshooting/webhook.md
  • Update content/docs/troubleshooting/webhook.md
  • added doc for CA name constraints
  • addressed review comments
  • spell fix
  • Update docs to reference gateway api v1
  • fix ./scripts/gendocs/generate-new-import-path-docs script & update CLI references and API docs
  • Pre-release v1.14.0-alpha.0
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • update liveness probe docs because clock check was added and the probe was enabled by default
  • feat: add tls config to metrics docs
  • docs: add podmonitor example for tls metrics endpoint
  • docs: add note that tls metrics certs must be mounted into the pod
  • docs: update prometheus example to correct port name
  • Add Certificate 'otherNames' SAN field description
  • Add more explanations in release notes
  • Add feature flag note
  • Quotes
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • Update content/docs/releases/release-notes/release-notes-1.14.md
  • Fix link to feature-gate configuration document
  • feat: Certificate defaults tutorial with Kyverno
  • Pre-release v1.14.0-alpha.1
  • add startupapicheck to signature verification commands
  • chore: Tutorial component install version increments

inteon and others added 30 commits January 2, 2024 13:18
@inteon
fix ./scripts/gendocs/generate-new-import-path-docs script & update C…
bd2d97c 
…LI references and API docs

Signed-off-by: Tim Ramlot <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1371 from inteon/update_cli_reference
5782b34 
Update CLI reference
@wallrj
Pre-release v1.14.0-alpha.0
cef1a04 
Signed-off-by: Richard Wall <[email protected]>
@wallrj @inteon
Update content/docs/releases/release-notes/release-notes-1.14.md
7105574 
Co-authored-by: Tim Ramlot <[email protected]>
Signed-off-by: Richard Wall <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1375 from wallrj/release-cert-manager…
ebfeb34 
…-v1.14.0-alpha.0

Pre-release v1.14.0-alpha.0
@ThatsMrTalbot
feat: add tls config to metrics docs
f46317d 
Signed-off-by: Adam Talbot <[email protected]>
@inteon
update liveness probe docs because clock check was added and the prob…
ec1f56c 
…e was enabled by default

Signed-off-by: Tim Ramlot <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1381 from inteon/update_liveness_prob…
c59a766 
…e_docs

Update liveness probe docs
@ThatsMrTalbot
docs: add podmonitor example for tls metrics endpoint
b1e8c99 
Signed-off-by: Adam Talbot <[email protected]>
@ThatsMrTalbot
docs: add note that tls metrics certs must be mounted into the pod
f72d3aa 
Signed-off-by: Adam Talbot <[email protected]>
Add Certificate 'otherNames' SAN field description
6671232 
Signed-off-by: SpectralHiss <[email protected]>
Add more explanations in release notes
62826bb 
* Explains the motivation behind the OtherName feature

Signed-off-by: SpectralHiss <[email protected]>
Add feature flag note
d79ccfd 
Signed-off-by: SpectralHiss <[email protected]>
Quotes
cde9e5d 
Signed-off-by: SpectralHiss <[email protected]>
@ThatsMrTalbot
docs: update prometheus example to correct port name
74017d6 
Signed-off-by: Adam Talbot <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1376 from ThatsMrTalbot/feat/tls-metr…
96f23a2 
…ics-endpoint

feat: add documentation for using TLS on the metric endpoint
@SpectralHiss @wallrj
Update content/docs/releases/release-notes/release-notes-1.14.md
3742399 
Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Houssem El Fekih <[email protected]>
@SpectralHiss @wallrj
Update content/docs/releases/release-notes/release-notes-1.14.md
4625aeb 
Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Houssem El Fekih <[email protected]>
@SpectralHiss @wallrj
Update content/docs/releases/release-notes/release-notes-1.14.md
f239e34 
Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Houssem El Fekih <[email protected]>
@wallrj
Pre-release v1.14.0-alpha.1
e8ed4c9 
Signed-off-by: Richard Wall <[email protected]>
@wallrj
Fix link to feature-gate configuration document
6749cea 
Signed-off-by: Richard Wall <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1378 from SpectralHiss/hef/add-othern…
bfaaf5f 
…ame-documentation

Add Certificate 'otherNames' SAN field description
@hawksight
feat: Certificate defaults tutorial with Kyverno
111a387 
Signed-off-by: Peter Fiddes <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1279 from hawksight/pf/kyverno-defaults
33a3d73 
docs: Certificate Defaults Tutorial
@jetstack-bot
Merge pull request cert-manager#1387 from wallrj/release-v1.14.0-alpha.1
eaed1c2 
Release notes for pre-release v1.14.0 alpha.1
@inteon @SgtCoDFish
add release notes for 1.12.1, 1.12.2 and 1.12.3
1bcc73b 
Signed-off-by: Tim Ramlot <[email protected]>
@inteon @SgtCoDFish
fix spelling checker
67c8687 
Signed-off-by: Tim Ramlot <[email protected]>
@swghosh @SgtCoDFish
Add release notes for 1.11.2->1.11.4
a782604 
Signed-off-by: Swarup Ghosh <[email protected]>
@maelvls @SgtCoDFish
Annual review of the OWNERS file (2023): remove Joakim
767f791 
Ref: cert-manager/cert-manager#6231

Signed-off-by: Maël Valais <[email protected]>
@ushuz @SgtCoDFish
Fix venafi link 404
f5eebe8 
Signed-off-by: John HU <[email protected]>
wallrj and others added 22 commits January 18, 2024 11:10
@wallrj @inteon @SgtCoDFish
Update content/docs/releases/release-notes/release-notes-1.14.md
652b52d 
Co-authored-by: Tim Ramlot <[email protected]>
Signed-off-by: Richard Wall <[email protected]>
@inteon @SgtCoDFish
update liveness probe docs because clock check was added and the prob…
91de376 
…e was enabled by default

Signed-off-by: Tim Ramlot <[email protected]>
@ThatsMrTalbot @SgtCoDFish
feat: add tls config to metrics docs
fb79b75 
Signed-off-by: Adam Talbot <[email protected]>
@ThatsMrTalbot @SgtCoDFish
docs: add podmonitor example for tls metrics endpoint
5727e01 
Signed-off-by: Adam Talbot <[email protected]>
@ThatsMrTalbot @SgtCoDFish
docs: add note that tls metrics certs must be mounted into the pod
f0fabf6 
Signed-off-by: Adam Talbot <[email protected]>
@ThatsMrTalbot @SgtCoDFish
docs: update prometheus example to correct port name
25d590b 
Signed-off-by: Adam Talbot <[email protected]>
@SgtCoDFish
Add Certificate 'otherNames' SAN field description
3f7fb85 
Signed-off-by: SpectralHiss <[email protected]>
@SgtCoDFish
Add more explanations in release notes
dbeb2df 
* Explains the motivation behind the OtherName feature

Signed-off-by: SpectralHiss <[email protected]>
@SgtCoDFish
Add feature flag note
4d66232 
Signed-off-by: SpectralHiss <[email protected]>
@SgtCoDFish
Quotes
ca8d2a8 
Signed-off-by: SpectralHiss <[email protected]>
@SpectralHiss @wallrj @SgtCoDFish
Update content/docs/releases/release-notes/release-notes-1.14.md
c157fbd 
Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Houssem El Fekih <[email protected]>
@SpectralHiss @wallrj @SgtCoDFish
Update content/docs/releases/release-notes/release-notes-1.14.md
7e86325 
Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Houssem El Fekih <[email protected]>
@SpectralHiss @wallrj @SgtCoDFish
Update content/docs/releases/release-notes/release-notes-1.14.md
0a10322 
Co-authored-by: Richard Wall <[email protected]>
Signed-off-by: Houssem El Fekih <[email protected]>
@wallrj @SgtCoDFish
Fix link to feature-gate configuration document
3ff824f 
Signed-off-by: Richard Wall <[email protected]>
@hawksight @SgtCoDFish
feat: Certificate defaults tutorial with Kyverno
a94b65e 
Signed-off-by: Peter Fiddes <[email protected]>
@wallrj @SgtCoDFish
Pre-release v1.14.0-alpha.1
dc30e11 
Signed-off-by: Richard Wall <[email protected]>
@SgtCoDFish
Merge remote-tracking branch 'upstream/master' into release-next-merge
444c3ca 
This includes manual fixes for several merge conflicts
@SgtCoDFish
Merge branch 'release-next' into release-next-merge
2029924
@jetstack-bot
Merge pull request cert-manager#1393 from SgtCoDFish/release-next-merge
dd0d409 
Merge master into release-next
@SgtCoDFish
add startupapicheck to signature verification commands
1724c5c 
Signed-off-by: Ashley Davis <[email protected]>
@jetstack-bot
Merge pull request cert-manager#1394 from SgtCoDFish/verify-startupap…
28bf739 
…icheck

[release-next] Also verify startupapicheck
@hawksight
chore: Tutorial component install version increments
9133bb3 
Signed-off-by: Peter Fiddes <[email protected]>
@jetstack-bot jetstack-bot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. dco-signoff: no Indicates that at least one commit in this pull request is missing the DCO sign-off message. labels Jan 19, 2024
@jetstack-bot
Copy link
Contributor

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.

📝 Please follow instructions in the contributing guide to update your commits with the DCO

Full details of the Developer Certificate of Origin can be found at developercertificate.org.

The list of commits missing DCO signoff:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@jetstack-bot jetstack-bot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Jan 19, 2024
@hawksight hawksight closed this Jan 19, 2024
@jetstack-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign munnerz for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@netlify Netlify
Copy link

netlify bot commented Jan 19, 2024

✅ Deploy Preview for cert-manager-website ready!

Name Link
🔨 Latest commit 9133bb3
🔍 Latest deploy log https://app.netlify.com/sites/cert-manager-website/deploys/65aa9024054ad40008b8b171
😎 Deploy Preview https://deploy-preview-1395--cert-manager-website.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@hawksight
Copy link
Member Author

I did the wrong gh command as I usually PR to main / master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dco-signoff: no Indicates that at least one commit in this pull request is missing the DCO sign-off message. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.