4 Commits (23d6842f9ad929f51dc67e9664854a81257e9f5d)

Author	SHA1	Message	Date
Brad Davidson	aa76942d0f	Add FilterCN function to prevent SAN Stuffing ... Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	1 year ago
Brad Davidson	3d146d2f1b	Allow for multiple sets of leader-elected controllers ... Addresses an issue where etcd controllers did not run on etcd-only nodes Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f37e7565b8	Move the apiserver addresses controller into the etcd package ... This controller only needs to run when using managed etcd, so move it in with the rest of the etcd stuff. This change also modifies the controller to only watch the Kubernetes service endpoint, instead of watching all endpoints in the entire cluster. Fixes an error message revealed by use of a newer grpc client in Kubernetes 1.24, which logs an error when the Put to etcd failed because kine doesn't support the etcd Put operation. The controller shouldn't have been running without etcd in the first place. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Chris Kim	928b8531c3	[master] Add `etcd-member-management` controller to K3s (#4001) ... * Initial leader elected etcd member management controller * Bump etcd to v3.5.0-k3s2 Signed-off-by: Chris Kim <oats87g@gmail.com>	3 years ago