enable more conformance tests

Signed-off-by: Tim Ramlot <[email protected]>

Author: inteon

internal/testsetups/simple/controller/signer.go

@@ -82,8 +82,7 @@ func (Signer) Sign(ctx context.Context, cr signer.CertificateRequestObject, issu
 		NotBefore: time.Now(),
 		NotAfter:  time.Now().Add(time.Hour * 24 * 180),
 
-		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
-		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
 		BasicConstraintsValid: true,
 	}
 

internal/testsetups/simple/e2e/conformance/conformance.go

@@ -26,12 +26,7 @@ var _ = framework.ConformanceDescribe("Certificates", func() {
 	kubeClients := testresource.KubeClients(t, ctx)
 
 	unsupportedFeatures := featureset.NewFeatureSet(
-		featureset.DurationFeature,
-		featureset.KeyUsagesFeature,
 		featureset.SaveCAToSecret,
-		featureset.Ed25519FeatureSet,
-		featureset.IssueCAFeature,
-		featureset.LiteralSubjectFeature,
 	)
 
 	issuerBuilder := newIssuerBuilder("SimpleIssuer")
@@ -59,12 +54,7 @@ var _ = framework.ConformanceDescribe("CertificateSigningRequests", func() {
 	kubeClients := testresource.KubeClients(t, ctx)
 
 	unsupportedFeatures := featureset.NewFeatureSet(
-		featureset.DurationFeature,
-		featureset.KeyUsagesFeature,
 		featureset.SaveCAToSecret,
-		featureset.Ed25519FeatureSet,
-		featureset.IssueCAFeature,
-		featureset.LiteralSubjectFeature,
 	)
 
 	clusterIssuerBuilder := newIssuerBuilder("SimpleClusterIssuer")
@@ -93,12 +83,7 @@ var _ = framework.ConformanceDescribe("RBAC", func() {
 	kubeClients := testresource.KubeClients(t, ctx)
 
 	unsupportedFeatures := featureset.NewFeatureSet(
-		featureset.DurationFeature,
-		featureset.KeyUsagesFeature,
 		featureset.SaveCAToSecret,
-		featureset.Ed25519FeatureSet,
-		featureset.IssueCAFeature,
-		featureset.LiteralSubjectFeature,
 	)
 
 	issuerBuilder := newIssuerBuilder("SimpleIssuer")

make/e2e-setup.mk

@@ -78,7 +78,8 @@ e2e-setup-cert-manager: | kind-cluster images $(NEEDS_HELM) $(NEEDS_KUBECTL)
 		--namespace cert-manager \
 		--repo https://charts.jetstack.io \
 		--set installCRDs=true \
-		--set featureGates=ServerSideApply=true \
+		--set featureGates=ServerSideApply=true,LiteralCertificateSubject=true \
+		--set webhook.featureGates=ServerSideApply=true,LiteralCertificateSubject=true \
 		--set image.repository=$(quay.io/jetstack/cert-manager-controller.REPO) \
 		--set image.tag=$(quay.io/jetstack/cert-manager-controller.TAG) \
 		--set image.pullPolicy=Never \