ContainerImage.Pinniped/internal/controller/apicerts
Monis Khan 4bf715758f
Do not rotate impersonation proxy signer CA unless necessary
This change fixes a copy paste error that led to the impersonation
proxy signer CA being rotated based on the configuration of the
rotation of the aggregated API serving certificate.  This would lead
to occasional "Unauthorized" flakes in our CI environments that
rotate the serving certificate at a frequent interval.

Updated the certs_expirer controller logs to be more detailed.

Updated CA common names to be more specific (this does not update
any previously generated CAs).

Signed-off-by: Monis Khan <mok@vmware.com>
2021-10-06 12:03:49 -04:00
..
apiservice_updater.go Use TokenCredentialRequest instead of base64 token with impersonator 2021-03-10 10:30:06 -08:00
apiservice_updater_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
certs_expirer.go Do not rotate impersonation proxy signer CA unless necessary 2021-10-06 12:03:49 -04:00
certs_expirer_test.go Add leader election middleware 2021-08-20 12:18:25 -04:00
certs_manager.go certauthority.go: Refactor issuing client versus server certs 2021-03-12 16:09:37 -08:00
certs_manager_test.go certauthority.go: Refactor issuing client versus server certs 2021-03-12 16:09:37 -08:00
certs_observer.go dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00
certs_observer_test.go dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00
doc.go Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
update_api_service.go Prevent multiple pinnipeds from thrashing on the API service 2020-11-11 20:09:49 -05:00
update_api_service_test.go Use new 'go.pinniped.dev/generated/latest' package. 2021-02-16 13:00:08 -06:00