Monis Khan 1e1789f6d1 Allow configuration of supervisor endpoints ... This change allows configuration of the http and https listeners used by the supervisor. TCP (IPv4 and IPv6 with any interface and port) and Unix domain socket based listeners are supported. Listeners may also be disabled. Binding the http listener to TCP addresses other than 127.0.0.1 or ::1 is deprecated. The deployment now uses https health checks. The supervisor is always able to complete a TLS connection with the use of a bootstrap certificate that is signed by an in-memory certificate authority. To support sidecar containers used by service meshes, Unix domain socket based listeners include ACLs that allow writes to the socket file from any runAsUser specified in the pod's containers. Signed-off-by: Monis Khan <mok@vmware.com>		2022-01-18 17:43:45 -05:00
..
apiserviceref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
authenticators	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
certauthority	certauthority: tolerate larger clock skew between API server and pinniped	2021-09-21 09:32:24 -04:00
clusterhost	Introduce clusterhost package to determine whether a cluster has control plane nodes	2021-02-09 11:16:01 -08:00
concierge	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
config	Allow configuration of supervisor endpoints	2022-01-18 17:43:45 -05:00
constable	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
controller	Merge branch 'main' into ldap_and_activedirectory_status_conditions_bug	2022-01-14 16:50:34 -08:00
controllerinit	kubecertagent: fix flakey tests	2021-09-16 14:48:04 -04:00
controllerlib	test/integration: run parallel tests concurrently with serial tests	2021-08-26 12:59:52 -04:00
controllermanager	Allow configuration of supervisor endpoints	2022-01-18 17:43:45 -05:00
crud	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
crypto/ptls	Force the use of secure TLS config	2021-11-17 16:55:35 -05:00
deploymentref	Allow configuration of supervisor endpoints	2022-01-18 17:43:45 -05:00
downward	internal/downward: add support for (optional) pod name	2020-12-11 11:49:27 -05:00
dynamiccert	Force the use of secure TLS config	2021-11-17 16:55:35 -05:00
endpointaddr	Add endpointaddr pkg for parsing host+port inputs.	2021-05-25 16:17:26 -05:00
execcredcache	Add CLI caching of cluster-specific credentials.	2021-04-08 14:12:34 -05:00
fositestorage	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
fositestoragei	More adjustments based on PR feedback	2021-04-27 16:54:26 -07:00
groupsuffix	Remove unparam linter	2021-08-19 10:20:24 -07:00
here	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
httputil	Force the use of secure TLS config	2021-11-17 16:55:35 -05:00
issuer	dynamiccert: split into serving cert and CA providers	2021-03-15 12:24:07 -04:00
kubeclient	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
leaderelection	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
localuserauthenticator	Force the use of secure TLS config	2021-11-17 16:55:35 -05:00
mocks	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
net/phttp	phttp: add generic support for RFC 2616 14.46 warnings headers	2021-11-30 15:11:59 -05:00
oidc	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
ownerref	internal/groupsuffix: mutate TokenCredentialRequest's Authenticator	2021-02-10 15:53:44 -05:00
plog	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
psession	Revert adding allowAccessTokenBasedRefresh flag to OIDCIdentityProvider	2022-01-12 18:03:25 -08:00
registry	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
secret	All controller unit tests should not cancel context until test is over	2021-03-04 17:26:01 -08:00
supervisor/server	Allow configuration of supervisor endpoints	2022-01-18 17:43:45 -05:00
testutil	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
upstreamldap	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
upstreamoidc	Merge branch 'main' into upstream_access_revocation_during_gc	2022-01-14 10:49:22 -08:00
valuelesscontext	valuelesscontext: make unit tests more clear	2021-04-30 10:43:29 -04:00