ContainerImage.Pinniped/internal/controller
Monis Khan 4bf715758f
Do not rotate impersonation proxy signer CA unless necessary
This change fixes a copy paste error that led to the impersonation
proxy signer CA being rotated based on the configuration of the
rotation of the aggregated API serving certificate.  This would lead
to occasional "Unauthorized" flakes in our CI environments that
rotate the serving certificate at a frequent interval.

Updated the certs_expirer controller logs to be more detailed.

Updated CA common names to be more specific (this does not update
any previously generated CAs).

Signed-off-by: Monis Khan <mok@vmware.com>
2021-10-06 12:03:49 -04:00
..
apicerts Do not rotate impersonation proxy signer CA unless necessary 2021-10-06 12:03:49 -04:00
authenticator jwtcachefiller: update to use CAContentProvider 2021-08-09 19:16:25 -04:00
conditionsutil Split package upstreamwatchers into four packages 2021-05-12 14:00:39 -07:00
impersonatorconfig Do not rotate impersonation proxy signer CA unless necessary 2021-10-06 12:03:49 -04:00
issuerconfig When merging CredentialIssuer updates, don't overwrite LastUpdated. 2021-05-27 17:09:12 -05:00
kubecertagent kubecertagent: attempt to load signer as long as agent labels match 2021-09-21 16:20:56 -04:00
supervisorconfig Do not truncate x509 errors 2021-09-29 09:38:22 -04:00
supervisorstorage Add leader election middleware 2021-08-20 12:18:25 -04:00
controller_test.go Clean this test up a trivial amount using require.Implementsf(). 2020-12-17 08:38:16 -06:00
utils.go Upstream Watcher Controller Syncs less often by adjusting its filters 2020-12-18 15:41:18 -08:00