You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Matt Keeler 9da8c51ac5 Fix issue with changing the agent token causing failure to renew the auto-encrypt certificate ... The fallback method would still work but it would get into a state where it would let the certificate expire for 10s before getting a new one. And the new one used the less secure RPC endpoint. This is also a pretty large refactoring of the auto encrypt code. I was going to write some tests around the certificate monitoring but it was going to be impossible to get a TestAgent configured in such a way that I could write a test that ran in less than an hour or two to exercise the functionality. Moving the certificate monitoring into its own package will allow for dependency injection and in particular mocking the cache types to control how it hands back certificates and how long those certificates should live. This will allow for exercising the main loop more than would be possible with it coupled so tightly with the Agent.		4 years ago
..
ca	Remove unused return values	4 years ago
common_names.go	Updates to Config Entries and Connect for Namespaces (#7116)	5 years ago
common_names_test.go	Enable gofmt simplify	5 years ago
csr.go	auto_encrypt: set dns and ip san for k8s and provide configuration (#6944)	5 years ago
generate.go	connect: add validations around intermediate cert ttl (#7213)	5 years ago
generate_test.go	ci: Do not skip tests because of missing binaries on CI	5 years ago
parsing.go	Fix support for RSA CA keys in Connect. (#6638)	5 years ago
sni.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340)	5 years ago
sni_test.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340)	5 years ago
testing_ca.go	Fix issue with changing the agent token causing failure to renew the auto-encrypt certificate	4 years ago
testing_ca_test.go	ci: Do not skip tests because of missing binaries on CI	5 years ago
testing_spiffe.go	…
uri.go	tls: auto_encrypt enables automatic RPC cert provisioning for consul clients (#5597)	6 years ago
uri_agent.go	Fix issue with changing the agent token causing failure to renew the auto-encrypt certificate	4 years ago
uri_agent_test.go	tls: auto_encrypt enables automatic RPC cert provisioning for consul clients (#5597)	6 years ago
uri_service.go	Fix issue with changing the agent token causing failure to renew the auto-encrypt certificate	4 years ago
uri_service_oss.go	Fix a couple bugs regarding intentions with namespaces (#7169)	5 years ago
uri_service_test.go	Intentions ACL enforcement updates (#7028)	5 years ago
uri_signing.go	Replace whitelist/blacklist terminology with allowlist/denylist (#7971)	5 years ago
uri_signing_test.go	…
uri_test.go	tls: auto_encrypt enables automatic RPC cert provisioning for consul clients (#5597)	6 years ago