Brad Davidson aa76942d0f Add FilterCN function to prevent SAN Stuffing ...

Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

2023-08-02 11:15:39 -07:00

..

api.go

Check for RBAC before starting tunnel controllers

2022-10-26 15:08:13 -07:00

cert.go

Add support for cross-signing new certs during ca rotation

2023-03-13 16:56:28 -07:00

client_test.go

Handle multiple arguments with StringSlice flags (#7380)

2023-05-02 09:55:48 -07:00

client.go

Use distinct clients for supervisor, deploy, and helm controllers

2023-05-30 18:15:11 -07:00

command.go

VPN PoC

2023-06-09 12:39:33 +02:00

errors.go

Initial windows support for agent (#3375)

2021-06-01 12:29:46 -07:00

file.go

Remove file_windows.go

2023-07-03 16:08:39 +02:00

gates_test.go

Exporting the AddFeatureGate function and adding a unit test for it. (#3661)

2021-07-28 13:04:42 -07:00

gates.go

Exporting the AddFeatureGate function and adding a unit test for it. (#3661)

2021-07-28 13:04:42 -07:00

labels.go

Add FilterCN function to prevent SAN Stuffing

2023-08-02 11:15:39 -07:00

net_test.go

Include node-external-ip in serving-kubelet.crt SANs (#4620)

2021-12-07 15:42:40 -08:00

net.go

Check if we are on ipv4, ipv6 or dualStack when doing tailscale

2023-07-03 10:48:59 +02:00

reflect.go

Disable deprecated insecure port

2021-08-20 18:47:16 -07:00

token.go

VPN PoC

2023-06-09 12:39:33 +02:00