github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
baecb1981e
kubernetes/pkg/controller/certificates/authority
History
Monis Khan 7e891e5d6c
csr: correctly handle backdating of short lived certs 
This change updates the backdating logic to only be applied to the
NotBefore date and not the NotAfter date when the certificate is
short lived. Thus when such a certificate is issued, it will not be
immediately expired.  Long lived certificates continue to have the
same lifetime as before.

Consolidated all certificate lifetime logic into the
PermissiveSigningPolicy.policy method.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-06-23 15:36:11 -04:00
..
authority_test.go csr: correctly handle backdating of short lived certs 2021-06-23 15:36:11 -04:00
authority.go csr: correctly handle backdating of short lived certs 2021-06-23 15:36:11 -04:00
policies_test.go Switch CSR approver/signer/cleaner controllers to v1 2020-06-05 18:45:34 -04:00
policies.go csr: correctly handle backdating of short lived certs 2021-06-23 15:36:11 -04:00