1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
kyverno/pkg/tls
Charles-Edouard Brétéché 97cf1b3e95
feat: gracefull certificates rotation support (#3890)
* refactor: remove deployment hash on certs secrets

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* feat: add label on kyverno webhooks

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* feat: implement update ca bundle

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* test: set very low validity and expiration intervals

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: writing secret

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* add renew ca

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* decouple ca and tls validity duration

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactored code, everything is in place to finalize implementation

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* use real validity periods

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-12 14:07:25 +00:00
..
keypair.go feat: gracefull certificates rotation support (#3890) 2022-05-12 14:07:25 +00:00
log.go feat: gracefull certificates rotation support (#3890) 2022-05-12 14:07:25 +00:00
props.go refactor: remove deployment hash on certs secrets (#3886) 2022-05-11 16:58:14 +02:00
reader.go feat: gracefull certificates rotation support (#3890) 2022-05-12 14:07:25 +00:00
renewer.go feat: gracefull certificates rotation support (#3890) 2022-05-12 14:07:25 +00:00
utils.go feat: gracefull certificates rotation support (#3890) 2022-05-12 14:07:25 +00:00