github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/pkg/kubelet/certificate/BUILD

65 lines
2.2 KiB
Python
Raw Normal View History

Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
package(default_visibility = ["//visibility:public"])
load(
"@io_bazel_rules_go//go:def.bzl",
"go_library",
"go_test",
)
go_library(
name = "go_default_library",
srcs = [
Move the kubelet certificate management code into a single package Code is very similar and belongs together.
2017-07-05 22:09:26 +00:00
"kubelet.go",
generated: Commands run: ./hack/update-bazel.sh
2017-07-31 19:05:20 +00:00
"transport.go",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
],
update BUILD files
2017-10-12 20:52:10 +00:00
importpath = "k8s.io/kubernetes/pkg/kubelet/certificate",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
deps = [
move KubeletConfiguration out of componentconfig API group
2017-07-13 23:15:05 +00:00
"//pkg/kubelet/apis/kubeletconfig:go_default_library",
Add a kubelet metric to track certificate expiration.
2017-08-16 16:18:01 +00:00
"//pkg/kubelet/metrics:go_default_library",
Run hack/update-bazel.sh
2018-06-21 21:51:55 +00:00
"//staging/src/k8s.io/api/certificates/v1beta1:go_default_library",
Derive kubelet serving certificate CSR template from node status addresses
2018-06-28 18:44:25 +00:00
"//staging/src/k8s.io/api/core/v1:go_default_library",
Run hack/update-bazel.sh
2018-06-21 21:51:55 +00:00
"//staging/src/k8s.io/apimachinery/pkg/types:go_default_library",
"//staging/src/k8s.io/apimachinery/pkg/util/net:go_default_library",
"//staging/src/k8s.io/apimachinery/pkg/util/wait:go_default_library",
"//staging/src/k8s.io/client-go/kubernetes:go_default_library",
"//staging/src/k8s.io/client-go/kubernetes/typed/certificates/v1beta1:go_default_library",
"//staging/src/k8s.io/client-go/rest:go_default_library",
"//staging/src/k8s.io/client-go/util/certificate:go_default_library",
"//staging/src/k8s.io/client-go/util/connrotation:go_default_library",
autogenerated
2017-04-12 16:05:10 +00:00
"//vendor/github.com/golang/glog:go_default_library",
Add a kubelet metric to track certificate expiration.
2017-08-16 16:18:01 +00:00
"//vendor/github.com/prometheus/client_golang/prometheus:go_default_library",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
],
)
go_test(
name = "go_default_test",
Derive kubelet serving certificate CSR template from node status addresses
2018-06-28 18:44:25 +00:00
srcs = [
"kubelet_test.go",
"transport_test.go",
],
Autogenerate BUILD files
2017-12-23 21:06:26 +00:00
embed = [":go_default_library"],
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
deps = [
Derive kubelet serving certificate CSR template from node status addresses
2018-06-28 18:44:25 +00:00
"//staging/src/k8s.io/api/core/v1:go_default_library",
Run hack/update-bazel.sh
2018-06-21 21:51:55 +00:00
"//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
"//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
"//staging/src/k8s.io/client-go/kubernetes/typed/certificates/v1beta1:go_default_library",
"//staging/src/k8s.io/client-go/rest:go_default_library",
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
],
)
filegroup(
name = "package-srcs",
srcs = glob(["**"]),
tags = ["automanaged"],
visibility = ["//visibility:private"],
)
filegroup(
name = "all-srcs",
Move client cert bootstrap to a kubelet package Makes it more clearly associated with the existing code and simplifies cmd/kubelet/app.
2017-07-24 20:02:22 +00:00
srcs = [
":package-srcs",
"//pkg/kubelet/certificate/bootstrap:all-srcs",
],
Rotate the kubelet certificate when about to expire. Changes the kubelet so it doesn't use the cert/key files directly for starting the TLS server. Instead the TLS server reads the cert/key from the new CertificateManager component, which is responsible for requesting new certificates from the Certificate Signing Request API on the API Server.
2017-02-06 17:26:32 +00:00
tags = ["automanaged"],
)