3 Commits

Author	SHA1	Message	Date
Brad Davidson	41c24b6a88	Add support for cross-signing new certs during ca rotation ... We need to send the full chain in order for cross-signing to work properly during switchover to a new root. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-03-13 20:08:26 -07:00
Brad Davidson	77dbe648ad	Allow for multiple sets of leader-elected controllers ... Addresses an issue where etcd controllers did not run on etcd-only nodes Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-02-10 12:26:09 -08:00
Brad Davidson	6ae3370e28	Add certificate rotate-ca to write updated CA certs to datastore ... This command must be run on a server while the service is running. After this command completes, all the servers in the cluster should be restarted to load the new CA files. Signed-off-by: Brad Davidson <brad.davidson@rancher.com> (cherry picked from commit 215fb157ff)	2023-02-10 09:34:10 -08:00