Monis Khan 4bf715758f Do not rotate impersonation proxy signer CA unless necessary ... This change fixes a copy paste error that led to the impersonation proxy signer CA being rotated based on the configuration of the rotation of the aggregated API serving certificate. This would lead to occasional "Unauthorized" flakes in our CI environments that rotate the serving certificate at a frequent interval. Updated the certs_expirer controller logs to be more detailed. Updated CA common names to be more specific (this does not update any previously generated CAs). Signed-off-by: Monis Khan <mok@vmware.com>		2021-10-06 12:03:49 -04:00
..
apiserviceref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
authenticators	More LDAP WIP: started controller and LDAP server connection code	2021-04-09 18:49:43 -07:00
certauthority	certauthority: tolerate larger clock skew between API server and pinniped	2021-09-21 09:32:24 -04:00
clusterhost	Introduce clusterhost package to determine whether a cluster has control plane nodes	2021-02-09 11:16:01 -08:00
concierge	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
config	Remove references to impersonationConfigMap.	2021-05-26 15:24:59 -05:00
constable	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
controller	Do not rotate impersonation proxy signer CA unless necessary	2021-10-06 12:03:49 -04:00
controllerinit	kubecertagent: fix flakey tests	2021-09-16 14:48:04 -04:00
controllerlib	test/integration: run parallel tests concurrently with serial tests	2021-08-26 12:59:52 -04:00
controllermanager	Do not rotate impersonation proxy signer CA unless necessary	2021-10-06 12:03:49 -04:00
crud	Supervisor storage garbage collection controller enabled in production	2020-12-11 15:21:34 -08:00
deploymentref	Use API service as owner ref for cluster scoped resources	2021-02-10 21:52:08 -05:00
downward	internal/downward: add support for (optional) pod name	2020-12-11 11:49:27 -05:00
dynamiccert	dynamiccert: prevent misuse of NewServingCert	2021-08-17 12:58:32 -04:00
endpointaddr	Add endpointaddr pkg for parsing host+port inputs.	2021-05-25 16:17:26 -05:00
execcredcache	Add CLI caching of cluster-specific credentials.	2021-04-08 14:12:34 -05:00
fositestorage	Use a custom type for our static CLI client (smaller change).	2021-06-15 15:31:48 -05:00
fositestoragei	More adjustments based on PR feedback	2021-04-27 16:54:26 -07:00
groupsuffix	Remove `unparam` linter	2021-08-19 10:20:24 -07:00
here	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
httputil	Adjust our securityheader pkg to support form_post.	2021-07-09 12:08:43 -05:00
issuer	dynamiccert: split into serving cert and CA providers	2021-03-15 12:24:07 -04:00
kubeclient	Add leader election middleware	2021-08-20 12:18:25 -04:00
leaderelection	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
localuserauthenticator	Switch to a slimmer distroless base image.	2021-08-09 15:05:13 -04:00
mocks	Optionally allow OIDC password grant for CLI-based login experience	2021-08-12 10:45:39 -07:00
oidc	Merge pull request #695 from vmware-tanzu/active-directory-identity-provider	2021-08-27 08:39:12 -07:00
ownerref	internal/groupsuffix: mutate TokenCredentialRequest's Authenticator	2021-02-10 15:53:44 -05:00
plog	WIP on new plog	2021-04-21 09:02:45 -07:00
registry	token credential request: fix trace log kind	2021-09-20 15:34:05 -04:00
secret	All controller unit tests should not cancel context until test is over	2021-03-04 17:26:01 -08:00
supervisor/server	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
testutil	Tests use CertificatesV1 when available, otherwise use CertificatesV1beta1	2021-09-20 17:14:58 -07:00
upstreamldap	Review comments--	2021-08-19 14:21:18 -07:00
upstreamoidc	upstreamoidc: log claim keys at debug level	2021-09-28 12:58:00 -04:00
valuelesscontext	valuelesscontext: make unit tests more clear	2021-04-30 10:43:29 -04:00