Mike Danese
25651408ae
generated: run refactor
2020-02-08 12:30:21 -05:00
Mike Danese
3aa59f7f30
generated: run refactor
2020-02-07 18:16:47 -08:00
Jordan Liggitt
054e3846fc
Use v1 subjectaccessreview API in controller-manager CSR approver
2020-01-13 15:55:52 -05:00
Mike Danese
6a004d0c18
support URI SANs in local signer
2019-11-04 10:56:06 -08:00
Mike Danese
4bd2c3998f
don't use cfssl in signer
2019-11-04 10:56:06 -08:00
Ryan Phillips
f87da3fdfa
fixes for tests to pass with FIPS compiler
...
* use P256 ECDSA key since P224 is not supported
* regen test certs to be 2048bits
2019-10-30 10:10:11 -05:00
David Eads
e8b5781499
add identification for particular certificate controllers
2019-09-03 14:05:04 -04:00
SataQiu
3c35e4e2d6
fix golint failures of pkg/controller/certificates/approver
2019-05-02 10:37:38 +08:00
Guoliang Wang
b1ac6df4dc
remove unused code of (pkg/controller)
2018-10-09 08:15:30 +08:00
Jeff Grafton
23ceebac22
Run hack/update-bazel.sh
2018-06-22 16:22:57 -07:00
Mike Danese
7665f15b7d
sarapprover: remove self node cert
...
The functionality to bootstrap node certificates is ready but is blocked
by a seperable issue discussed in:
https://github.com/kubernetes/community/pull/1982 . The functionality
could be useful for power users who want to write their own approvers if
the feature could be promoted to beta. In it's current state this
feature doesn't help anybody.
I propose that we remove automated approval of node serving certificates
for now and work towards getting the node functionality to beta.
2018-04-13 11:23:51 -07:00
Jeff Grafton
ef56a8d6bb
Autogenerated: hack/update-bazel.sh
2018-02-16 13:43:01 -08:00
Jeff Grafton
efee0704c6
Autogenerate BUILD files
2017-12-23 13:12:11 -08:00
Mike Danese
302fe7c0c8
sarapprover: ignore authz errors
2017-11-16 11:27:05 -08:00
supereagle
b694d51842
use versiond group clients from client-go
2017-11-07 14:47:22 +08:00
Mike Danese
1181a88cf2
certs: remove always nil error from New signature
2017-10-23 11:43:08 -07:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Kubernetes Submit Queue
319bef285a
Merge pull request #49788 from mikedanese/resync-csr
...
Automatic merge from submit-queue (batch tested with PRs 49615, 49321, 49982, 49788, 50355)
csr: add resync to csr approver
fixes https://github.com/kubernetes/kubernetes/issues/49787
```release-note
Fix an issue where if a CSR is not approved initially by the SAR approver is not retried.
```
2017-08-09 23:56:05 -07:00
Mike Danese
cb56558531
csr: add resync to csr approver
2017-08-09 11:47:08 -07:00
Davanum Srinivas
9a761b16c1
Add missing UID in SubjectAccessReviewSpec
...
WebhookAuthorizer's Authorize should send *all* the information
present in the user.Info data structure. We are not sending the
UID currently.
2017-08-02 10:49:02 -04:00
Jacob Simpson
29c1b81d4c
Scripted migration from clientset_generated to client-go.
2017-07-17 15:05:37 -07:00
Chao Xu
60604f8818
run hack/update-all
2017-06-22 11:31:03 -07:00
Chao Xu
cde4772928
run ./root-rewrite-all-other-apis.sh, then run make all, pkg/... compiles
2017-06-22 11:30:52 -07:00
Jacob Simpson
334de1cbe1
Auto approve kubelet certificate signing requests.
2017-06-16 08:47:12 -07:00
Mike Danese
66b4b99616
migrate group approver to use subject access reviews
2017-05-30 11:43:03 -07:00
Mike Danese
f04ce3cfba
refactor certificate controller
2017-05-23 15:25:58 -07:00
