6 Commits (3999f832a6a5a4202b9132b2df06a73f8e840c5b)

Author	SHA1	Message	Date
Brad Davidson	e2aca9ccae	Fix rotateca validation failures when not touching default self-signed CAs ... Also silences warnings about bootstrap fields that are not intended to be handled by CA rotation Signed-off-by: Brad Davidson <brad.davidson@rancher.com> (cherry picked from commit fe3324cb84) Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 months ago
Brad Davidson	0d867fb35a	Convert remaining http handlers over to use util.SendError ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com> (cherry picked from commit f8e0648304) Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	6 months ago
Brad Davidson	8b089a4ffb	Move etcd snapshot management CLI to request/response ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com> (cherry picked from commit fe465cc832)	8 months ago
Brad Davidson	977a85559e	Add support for cross-signing new certs during ca rotation ... We need to send the full chain in order for cross-signing to work properly during switchover to a new root. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	3d146d2f1b	Allow for multiple sets of leader-elected controllers ... Addresses an issue where etcd controllers did not run on etcd-only nodes Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	215fb157ff	Add `certificate rotate-ca` to write updated CA certs to datastore ... This command must be run on a server while the service is running. After this command completes, all the servers in the cluster should be restarted to load the new CA files. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago