k3s/pkg/server
Brad Davidson ab82705c9c Add FilterCN function to prevent SAN Stuffing
Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aa76942d0f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-08-04 16:31:16 -07:00
..
auth.go Make supervisor errors parsable by Kubernetes client libs 2022-04-29 09:23:37 -07:00
cert.go Add support for cross-signing new certs during ca rotation 2023-03-13 20:08:26 -07:00
context.go Soft-fail on node password verification if the secret cannot be created 2023-06-12 10:53:41 -07:00
router.go Fix rootless node password (#7899) 2023-07-07 10:19:46 -07:00
secrets-encrypt.go Add FilterCN function to prevent SAN Stuffing 2023-08-04 16:31:16 -07:00
server.go Add FilterCN function to prevent SAN Stuffing 2023-08-04 16:31:16 -07:00
types.go Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control 2022-10-07 16:57:30 -07:00