Brad Davidson ab82705c9c Add FilterCN function to prevent SAN Stuffing ...

Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aa76942d0f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

2023-08-04 16:31:16 -07:00

..

api.go

Check for RBAC before starting tunnel controllers

2022-11-03 20:54:07 -07:00

cert.go

Add support for cross-signing new certs during ca rotation

2023-03-13 20:08:26 -07:00

client_test.go

[Release-1.24] CLI + Config Enhancement (#7407)

2023-05-02 15:09:08 -07:00

client.go

Use distinct clients for supervisor, deploy, and helm controllers

2023-06-12 10:53:41 -07:00

errors.go

Initial windows support for agent (#3375)

2021-06-01 12:29:46 -07:00

file.go

Remove file_windows.go

2023-07-05 18:08:32 +02:00

gates_test.go

Exporting the AddFeatureGate function and adding a unit test for it. (#3661)

2021-07-28 13:04:42 -07:00

gates.go

Exporting the AddFeatureGate function and adding a unit test for it. (#3661)

2021-07-28 13:04:42 -07:00

labels.go

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:31:16 -07:00

net_test.go

Include node-external-ip in serving-kubelet.crt SANs (#4620)

2021-12-07 15:42:40 -08:00

net.go

Migrate netutil methods into /utils/net.go

2023-05-05 09:08:45 +02:00

reflect.go

Disable deprecated insecure port

2021-08-20 18:47:16 -07:00

wait.go

Move servicelb into cloudprovider LoadBalancer interface

2022-10-07 16:57:30 -07:00