Clayton Coleman 7555dec82e Kubelet should exit if the current client cert has expired ... The client cert manager uses the most recent cert to request new certificates. If that certificate is expired, it will be unable to complete new CSR requests. This commit alters the manager to force process exit if no further client cert rotation is possible, which is expected to trigger a restart of the kubelet and either a re-bootstrap from the bootstrap kubeconfig or a re-read of the current disk state (assuming that some other agent is managing the bootstrap configuration). This prevents the Kubelet from wedging in a state where it cannot make API calls.		2017-10-16 14:27:03 +02:00
..
bootstrap	Delete the private key for the bootstrap client cert on failure	2017-10-16 14:27:02 +02:00
BUILD	update BUILD files	2017-10-15 18:18:13 -07:00
OWNERS	Update OWNERS to correct members' handles.	2017-08-04 15:00:15 +08:00
kubelet.go	Move certificate manager to client.	2017-10-05 12:54:38 -07:00
transport.go	Kubelet should exit if the current client cert has expired	2017-10-16 14:27:03 +02:00
transport_test.go	Kubelet should exit if the current client cert has expired	2017-10-16 14:27:03 +02:00