Jordan Liggitt
db4ca87d9d
Switch CSR approver/signer/cleaner controllers to v1
2020-06-05 18:45:34 -04:00
Jordan Liggitt
d8abacba40
client-go: update expansions callers
2020-03-06 16:50:41 -05:00
James Munnelly
d5dae04898
certificates: update controllers to understand signerName field
...
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2020-02-27 15:54:31 +00:00
James Munnelly
a983356caa
Add signerName field to CSR resource spec
...
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
2020-02-27 10:17:55 +00:00
Mike Danese
25651408ae
generated: run refactor
2020-02-08 12:30:21 -05:00
Mike Danese
3aa59f7f30
generated: run refactor
2020-02-07 18:16:47 -08:00
Jordan Liggitt
054e3846fc
Use v1 subjectaccessreview API in controller-manager CSR approver
2020-01-13 15:55:52 -05:00
Mike Danese
6a004d0c18
support URI SANs in local signer
2019-11-04 10:56:06 -08:00
Mike Danese
4bd2c3998f
don't use cfssl in signer
2019-11-04 10:56:06 -08:00
David Eads
e8b5781499
add identification for particular certificate controllers
2019-09-03 14:05:04 -04:00
SataQiu
3c35e4e2d6
fix golint failures of pkg/controller/certificates/approver
2019-05-02 10:37:38 +08:00
Mike Danese
7665f15b7d
sarapprover: remove self node cert
...
The functionality to bootstrap node certificates is ready but is blocked
by a seperable issue discussed in:
https://github.com/kubernetes/community/pull/1982 . The functionality
could be useful for power users who want to write their own approvers if
the feature could be promoted to beta. In it's current state this
feature doesn't help anybody.
I propose that we remove automated approval of node serving certificates
for now and work towards getting the node functionality to beta.
2018-04-13 11:23:51 -07:00
Mike Danese
302fe7c0c8
sarapprover: ignore authz errors
2017-11-16 11:27:05 -08:00
supereagle
b694d51842
use versiond group clients from client-go
2017-11-07 14:47:22 +08:00
Mike Danese
1181a88cf2
certs: remove always nil error from New signature
2017-10-23 11:43:08 -07:00
Kubernetes Submit Queue
319bef285a
Merge pull request #49788 from mikedanese/resync-csr
...
Automatic merge from submit-queue (batch tested with PRs 49615, 49321, 49982, 49788, 50355)
csr: add resync to csr approver
fixes https://github.com/kubernetes/kubernetes/issues/49787
```release-note
Fix an issue where if a CSR is not approved initially by the SAR approver is not retried.
```
2017-08-09 23:56:05 -07:00
Mike Danese
cb56558531
csr: add resync to csr approver
2017-08-09 11:47:08 -07:00
Davanum Srinivas
9a761b16c1
Add missing UID in SubjectAccessReviewSpec
...
WebhookAuthorizer's Authorize should send *all* the information
present in the user.Info data structure. We are not sending the
UID currently.
2017-08-02 10:49:02 -04:00
Jacob Simpson
29c1b81d4c
Scripted migration from clientset_generated to client-go.
2017-07-17 15:05:37 -07:00
Chao Xu
cde4772928
run ./root-rewrite-all-other-apis.sh, then run make all, pkg/... compiles
2017-06-22 11:30:52 -07:00
Jacob Simpson
334de1cbe1
Auto approve kubelet certificate signing requests.
2017-06-16 08:47:12 -07:00
Mike Danese
66b4b99616
migrate group approver to use subject access reviews
2017-05-30 11:43:03 -07:00
