Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Network component should refresh certificates if they expire #17135

Merged
merged 2 commits into from
Nov 4, 2017
Merged

Network component should refresh certificates if they expire #17135

merged 2 commits into from
Nov 4, 2017

Commits on Nov 3, 2017

  1. UPSTREAM: 54979: Certificate store handles rel path incorrectly 

    Symlinks must be to absolute paths, or relative to the target. Absolute
is easier here.
    @smarterclayton
    smarterclayton committed Nov 3, 2017
    Configuration menu
    Copy the full SHA
    d872bdc View commit details
    Browse the repository at this point in the history

  2. Network component should refresh certificates if they expire 

    A single process openshift start node has both kubelet and network.
Kubelet rotates its client certs - network does not. Until we split out
network we need to do something minimal to ensure the cert is refreshed.
Use the same code as the kubelet, but when the cert expires check disk
and see if it was refreshed. That should work for bootstrapped
environments because the file is updated.
    @smarterclayton
    smarterclayton committed Nov 3, 2017
    Configuration menu
    Copy the full SHA
    097350e View commit details
    Browse the repository at this point in the history