k3s/pkg/cluster
Brad Davidson ab82705c9c Add FilterCN function to prevent SAN Stuffing
Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aa76942d0f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-08-04 16:31:16 -07:00
..
managed [master] changing package to k3s-io (#4846) 2022-03-02 15:47:27 -08:00
address_controller.go Add FilterCN function to prevent SAN Stuffing 2023-08-04 16:31:16 -07:00
bootstrap.go Lock bootstrap data with empty key to prevent conflicts 2023-04-05 16:29:31 -07:00
bootstrap_test.go [master] changing package to k3s-io (#4846) 2022-03-02 15:47:27 -08:00
cluster.go Add FilterCN function to prevent SAN Stuffing 2023-08-04 16:31:16 -07:00
encrypt.go Revert "VPN integration" 2023-06-12 11:24:29 +02:00
etcd.go [master] changing package to k3s-io (#4846) 2022-03-02 15:47:27 -08:00
https.go Add FilterCN function to prevent SAN Stuffing 2023-08-04 16:31:16 -07:00
managed.go Fix race condition in tunnel server startup 2023-05-10 15:02:29 -07:00
router.go Remove unnecessary copies of runtime struct 2022-02-28 12:05:16 -08:00
storage.go Fail to validate server tokens that use bootstrap id/secret format 2023-05-10 15:02:29 -07:00