github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/pkg/kubelet/certificate/BUILD

64 lines
2.0 KiB
Python
Raw Normal View History

Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
package(default_visibility = ["//visibility:public"])
licenses(["notice"])
load(
"@io_bazel_rules_go//go:def.bzl",
"go_library",
"go_test",
)
go_library(
name = "go_default_library",
srcs = [
"certificate_manager.go",
"certificate_store.go",
Move the kubelet certificate management code into a single package Code is very similar and belongs together.
2017-07-05 22:09:26 +00:00
"kubelet.go",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
],
tags = ["automanaged"],
deps = [
Move the kubelet certificate management code into a single package Code is very similar and belongs together.
2017-07-05 22:09:26 +00:00
"//pkg/apis/componentconfig:go_default_library",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
"//pkg/util:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/github.com/golang/glog:go_default_library",
run hack/update-all
2017-06-22 18:24:23 +00:00
"//vendor/k8s.io/api/certificates/v1beta1:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
"//vendor/k8s.io/apimachinery/pkg/fields:go_default_library",
Move the kubelet certificate management code into a single package Code is very similar and belongs together.
2017-07-05 22:09:26 +00:00
"//vendor/k8s.io/apimachinery/pkg/types:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/k8s.io/apimachinery/pkg/util/wait:go_default_library",
"//vendor/k8s.io/apimachinery/pkg/watch:go_default_library",
Scripted migration from clientset_generated to client-go.
2017-06-23 20:56:37 +00:00
"//vendor/k8s.io/client-go/kubernetes:go_default_library",
"//vendor/k8s.io/client-go/kubernetes/typed/certificates/v1beta1:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/k8s.io/client-go/util/cert:go_default_library",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
],
)
go_test(
name = "go_default_test",
srcs = [
"certificate_manager_test.go",
"certificate_store_test.go",
],
library = ":go_default_library",
tags = ["automanaged"],
deps = [
run hack/update-all
2017-06-22 18:24:23 +00:00
"//vendor/k8s.io/api/certificates/v1beta1:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
"//vendor/k8s.io/apimachinery/pkg/watch:go_default_library",
Scripted migration from clientset_generated to client-go.
2017-06-23 20:56:37 +00:00
"//vendor/k8s.io/client-go/kubernetes/typed/certificates/v1beta1:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/k8s.io/client-go/util/cert:go_default_library",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
],
)
filegroup(
name = "package-srcs",
srcs = glob(["**"]),
tags = ["automanaged"],
visibility = ["//visibility:private"],
)
filegroup(
name = "all-srcs",
srcs = [":package-srcs"],
tags = ["automanaged"],
)