github/k3s - k3s - https://git.xinac.net

Tree: b3bb7e5a11

Author	SHA1	Message	Date
Derek Nola	42c2ac95e2	CLI + Backend for Secrets Encryption v3 Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Derek Nola	b967f92785	Replace os.Write with AtomicWrite function Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Brad Davidson	aa76942d0f	Add FilterCN function to prevent SAN Stuffing Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	1 year ago
Derek Nola	7d49202721	Ignore value conflicts when reencrypting secrets (#6850 ) * Ignore conflict secrets Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	06d81cb936	Replace deprecated ioutil package (#6230 ) * Replace ioutil package * check integration test null pointer * Remove rotate retries Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	035c03cfaa	Remove codespell from Drone, add to GH Actions (#6004 ) Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	1c17f05b8e	Fix secrets reencryption for 8K+ secrets (#5936 ) Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	3d425e5d20	Secrets Encryption: Add RetryOnConflict around updating nodes (#5495 ) * Add RetryOnConflict around updating nodes Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago
Brad Davidson	e811689df9	Fix etcd-only secrets encryption rotation Improve feedback when running secrets-encrypt commands on etcd-only nodes, and allow etcd-only nodes to properly restart when effecting rotation. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	d25ae8fbc2	Properly attach secrets-encrypt events to the node resource Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	965d0a08ef	Fix log spam due to servicelb event recorder namespace conflict Don't hardcode the event namespace when creating event recorders; some controllers want to create events in other namespaces. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Luther Monson	9a849b1bb7	[master] changing package to k3s-io (#4846 ) * changing package to k3s-io Signed-off-by: Luther Monson <luther.monson@gmail.com> Co-authored-by: Derek Nola <derek.nola@suse.com>	3 years ago
Brad Davidson	a1b800f0bf	Remove unnecessary copies of etcdconfig struct Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Derek Nola	bcb662926d	Secrets-encryption rotation (#4372 ) * Regular CLI framework for encrypt commands * New secrets-encryption feature * New integration test * fixes for flaky integration test CI * Fix to bootstrap on restart of existing nodes * Consolidate event recorder Signed-off-by: Derek Nola <derek.nola@suse.com>	3 years ago

14 Commits (b3bb7e5a11cf3356c7902ea1e59a16711f396b79)