Matt Moyer 2843c4f8cb Refactor kube-cert-agent controllers to use a Deployment. ... This is a relatively large rewrite of much of the kube-cert-agent controllers. Instead of managing raw Pod objects, they now create a single Deployment and let the builtin k8s controller handle it from there. This reduces the amount of code we need and should handle a number of edge cases better, especially those where a Pod becomes "wedged" and needs to be recreated. Signed-off-by: Matt Moyer <moyerm@vmware.com>		2021-04-26 08:19:45 -06:00
..
apiserviceref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
certauthority	dynamiccert: split into serving cert and CA providers	2021-03-15 12:24:07 -04:00
clusterhost	Introduce clusterhost package to determine whether a cluster has control plane nodes	2021-02-09 11:16:01 -08:00
concierge	impersonation proxy: add nested impersonation support	2021-04-19 15:52:46 -04:00
config	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
constable	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
controller	Refactor kube-cert-agent controllers to use a Deployment.	2021-04-26 08:19:45 -06:00
controllerlib	Allow multiple Pinnipeds to work on same cluster	2021-02-02 15:18:41 -08:00
controllermanager	Refactor kube-cert-agent controllers to use a Deployment.	2021-04-26 08:19:45 -06:00
crud	Supervisor storage garbage collection controller enabled in production	2020-12-11 15:21:34 -08:00
deploymentref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
downward	internal/downward: add support for (optional) pod name	2020-12-11 11:49:27 -05:00
dynamiccert	dynamiccert: unit test with DynamicServingCertificateController	2021-03-15 17:23:37 -04:00
execcredcache	Add CLI caching of cluster-specific credentials.	2021-04-08 14:12:34 -05:00
fositestorage	Update ExpectedAuthorizeCodeSessionJSONFromFuzzing.	2020-12-17 16:31:08 -06:00
groupsuffix	Add WhoAmIRequest Aggregated Virtual REST API	2021-02-22 20:02:41 -05:00
here	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
httputil	impersonator: test UID impersonation and header canonicalization	2021-03-16 13:00:51 -04:00
issuer	dynamiccert: split into serving cert and CA providers	2021-03-15 12:24:07 -04:00
kubeclient	internal/kubeclient: match plog level with klog level	2021-04-21 16:25:08 -04:00
mocks	dynamiccert: split into serving cert and CA providers	2021-03-15 12:24:07 -04:00
oidc	oidc discovery: encode metadata once and reuse	2021-03-03 13:37:43 -05:00
ownerref	internal/groupsuffix: mutate TokenCredentialRequest's Authenticator	2021-02-10 15:53:44 -05:00
plog	internal/plog: add KObj() and KRef()	2021-02-10 14:25:39 -05:00
registry	certauthority.go: Refactor issuing client versus server certs	2021-03-12 16:09:37 -08:00
secret	All controller unit tests should not cancel context until test is over	2021-03-04 17:26:01 -08:00
testutil	certauthority.go: Refactor issuing client versus server certs	2021-03-12 16:09:37 -08:00
upstreamoidc	Upgrade to github.com/coreos/go-oidc v3.0.0.	2021-01-21 12:08:14 -06:00