Brad Davidson
3d4c2cf2cf
Fix cert startup check events
...
Ensure that cert checks don't run until after the apiserver is ready to receive events
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-08-12 11:56:15 -07:00
Brad Davidson
3a428ff02c
Update metric help to be more descriptive.
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-07-17 11:24:17 -07:00
Brad Davidson
17b43b63db
Emit certs OK event on startup, if no certs need renewal
...
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2025-07-16 10:51:01 -07:00
bo.jiang
4c1f014d27
Optimize certificate status check
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io >
2025-05-08 11:57:29 -07:00
Koen de Laat
79ba10f5ec
fix: Use actual warningPeriod in certmonitor
...
Signed-off-by: Koen de Laat <koen.de.laat@philips.com >
2024-06-03 11:20:15 -07:00
Brad Davidson
ff679fb3ab
Refactor supervisor listener startup and add metrics
...
* Refactor agent supervisor listener startup and authn/authz to use upstream
auth delegators to perform for SubjectAccessReview for access to
metrics.
* Convert spegel and pprof handlers over to new structure.
* Promote bind-address to agent flag to allow setting supervisor bind
address for both agent and server.
* Promote enable-pprof to agent flag to allow profiling agents. Access
to the pprof endpoint now requires client cert auth, similar to the
spegel registry api endpoint.
* Add prometheus metrics handler.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-05-28 16:24:57 -07:00
Hussein Galal
144f5ad333
Kubernetes V1.30.0-k3s1 ( #10063 )
...
* kubernetes 1.30.0-k3s1
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Update go version to v1.22.2
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update dynamiclistener and helm-controller
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update go in go.mod to 1.22.2
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update go in Dockerfiles
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update cri-dockerd
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Add proctitle package with linux and windows constraints
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* go mod tidy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* Fixing setproctitle function
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
* update dynamiclistener to v0.6.0-rc1
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
---------
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2024-05-06 19:42:27 +03:00
Brad Davidson
7f659759dd
Add certificate expiry check and warnings
...
* Add ADR
* Add `k3s certificate check` command.
* Add periodic check and events when certs are about to expire.
* Add metrics for certificate validity remaining, labeled by cert subject
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2024-03-28 12:05:21 -07:00
