Brad Davidson ab82705c9c Add FilterCN function to prevent SAN Stuffing ...

Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aa76942d0f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

2023-08-04 16:31:16 -07:00

..

auth.go

Make supervisor errors parsable by Kubernetes client libs

2022-04-29 09:23:37 -07:00

cert.go

Add support for cross-signing new certs during ca rotation

2023-03-13 20:08:26 -07:00

context.go

Soft-fail on node password verification if the secret cannot be created

2023-06-12 10:53:41 -07:00

router.go

Fix rootless node password (#7899)

2023-07-07 10:19:46 -07:00

secrets-encrypt.go

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:31:16 -07:00

server.go

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:31:16 -07:00

types.go

Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control

2022-10-07 16:57:30 -07:00