Monis Khan 7e891e5d6c csr: correctly handle backdating of short lived certs ... This change updates the backdating logic to only be applied to the NotBefore date and not the NotAfter date when the certificate is short lived. Thus when such a certificate is issued, it will not be immediately expired. Long lived certificates continue to have the same lifetime as before. Consolidated all certificate lifetime logic into the PermissiveSigningPolicy.policy method. Signed-off-by: Monis Khan <mok@vmware.com>		2021-06-23 15:36:11 -04:00
..
approver	Update auth OWNERS files to only use aliases	2021-04-07 10:46:03 -04:00
authority	csr: correctly handle backdating of short lived certs	2021-06-23 15:36:11 -04:00
cleaner	hack/update-bazel.sh	2021-02-28 15:17:29 -08:00
rootcacertpublisher	include description of what kube-root-ca.crt can be used to verify	2021-04-08 10:43:41 -04:00
signer	csr: correctly handle backdating of short lived certs	2021-06-23 15:36:11 -04:00
certificate_controller_test.go	Switch CSR approver/signer/cleaner controllers to v1	2020-06-05 18:45:34 -04:00
certificate_controller_utils_test.go	Switch CSR approver/signer/cleaner controllers to v1	2020-06-05 18:45:34 -04:00
certificate_controller_utils.go	Some comments' typos	2020-11-02 15:05:23 +08:00
certificate_controller.go	[pkg/controller/certificates]: remove staled func comments	2020-07-11 17:08:28 +08:00
OWNERS	Merge pull request #72525 from justinsb/owners_should_not_be_executable	2019-02-14 23:55:45 -08:00