Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wait for ACME Orders to be in 'ready' state before attempting finalization #764

Merged
merged 3 commits into from
Jul 25, 2018

Conversation

munnerz
Copy link
Member

@munnerz munnerz commented Jul 25, 2018

What this PR does / why we need it:

When the new 'ready' state for orders was added, we did not add code into the obtainCertificate function to gate finalising orders with the ACME server until they are in a 'ready' state.

This PR adds a gate to ensure that the order is in a valid state for finalisation.

It may also require us to bump the version of Pebble used in our e2e tests, as the older versions will never set the status to 'ready'

Which issue this PR fixes: fixes #758

Release note:

Fix a race that could cause ACME orders to fail despite them being in a 'valid' state

/cc @kragniz
@tlycken @damienwebdev

@jetstack-bot jetstack-bot added release-note Denotes a PR that will be considered when it comes time to generate release notes. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jul 25, 2018
Copy link
Contributor

@kragniz kragniz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@jetstack-bot jetstack-bot added the lgtm Indicates that a PR is ready to be merged. label Jul 25, 2018
@jetstack-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kragniz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jetstack-bot jetstack-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 25, 2018
@jetstack-bot jetstack-bot merged commit 4216a4f into cert-manager:master Jul 25, 2018
jetstack-bot added a commit that referenced this pull request Jul 25, 2018
@munnerz munnerz deleted the fix-valid-orders branch January 29, 2019 23:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cert-manager retries even though order status is valid
3 participants