Monis Khan 91c8f747f4 certauthority: tolerate larger clock skew between API server and pinniped ... This change updates our certificate code to use the same 5 minute backdate that is used by the Kubernetes controller manager. This helps to account for clock skews between the API servers and the kubelets that are running the pinniped pods. While this backdating reflects a large percentage of the lifetime of our short lived certificates (100% for the 5 minute client certificates), even a 10 minute irrevocable client certificate is within our limits. When we move to the CSR based short lived certificates, they will always have at least a 15 minute lifetime (5 minute backdating plus 10 minute minimum valid duration). Signed-off-by: Monis Khan <mok@vmware.com>		2021-09-21 09:32:24 -04:00
..
apiserviceref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
authenticators	More LDAP WIP: started controller and LDAP server connection code	2021-04-09 18:49:43 -07:00
certauthority	certauthority: tolerate larger clock skew between API server and pinniped	2021-09-21 09:32:24 -04:00
clusterhost	Introduce clusterhost package to determine whether a cluster has control plane nodes	2021-02-09 11:16:01 -08:00
concierge	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
config	Remove references to impersonationConfigMap.	2021-05-26 15:24:59 -05:00
constable	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
controller	certauthority: tolerate larger clock skew between API server and pinniped	2021-09-21 09:32:24 -04:00
controllerinit	kubecertagent: fix flakey tests	2021-09-16 14:48:04 -04:00
controllerlib	test/integration: run parallel tests concurrently with serial tests	2021-08-26 12:59:52 -04:00
controllermanager	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
crud	Supervisor storage garbage collection controller enabled in production	2020-12-11 15:21:34 -08:00
deploymentref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
downward	internal/downward: add support for (optional) pod name	2020-12-11 11:49:27 -05:00
dynamiccert	dynamiccert: prevent misuse of NewServingCert	2021-08-17 12:58:32 -04:00
endpointaddr	Add endpointaddr pkg for parsing host+port inputs.	2021-05-25 16:17:26 -05:00
execcredcache	Add CLI caching of cluster-specific credentials.	2021-04-08 14:12:34 -05:00
fositestorage	Use a custom type for our static CLI client (smaller change).	2021-06-15 15:31:48 -05:00
fositestoragei	More adjustments based on PR feedback	2021-04-27 16:54:26 -07:00
groupsuffix	Remove unparam linter	2021-08-19 10:20:24 -07:00
here	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
httputil	Adjust our securityheader pkg to support form_post.	2021-07-09 12:08:43 -05:00
issuer	dynamiccert: split into serving cert and CA providers	2021-03-15 12:24:07 -04:00
kubeclient	Add leader election middleware	2021-08-20 12:18:25 -04:00
leaderelection	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
localuserauthenticator	Switch to a slimmer distroless base image.	2021-08-09 15:05:13 -04:00
mocks	Optionally allow OIDC password grant for CLI-based login experience	2021-08-12 10:45:39 -07:00
oidc	Merge pull request #695 from vmware-tanzu/active-directory-identity-provider	2021-08-27 08:39:12 -07:00
ownerref	internal/groupsuffix: mutate TokenCredentialRequest's Authenticator	2021-02-10 15:53:44 -05:00
plog	WIP on new plog	2021-04-21 09:02:45 -07:00
registry	credentialrequest: use safer approximation for ExpirationTimestamp	2021-06-23 11:07:00 -04:00
secret	All controller unit tests should not cancel context until test is over	2021-03-04 17:26:01 -08:00
supervisor/server	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
testutil	Improve the selectors of Deployments and Services	2021-09-14 13:35:10 -07:00
upstreamldap	Review comments--	2021-08-19 14:21:18 -07:00
upstreamoidc	remove one nolint:unparam comment	2021-08-19 10:57:00 -07:00
valuelesscontext	valuelesscontext: make unit tests more clear	2021-04-30 10:43:29 -04:00