Ryan Richard ae5aad178d TokenCredentialRequest uses actual cert expiry time instead of estimate ...

and also audit logs both the NotBefore and NotAfter of the issued cert.
Implemented by changing the return type of the cert issuer helpers
to make them also return the NotBefore and NotAfter values of the new
cert, along with the key PEM and cert PEM.

2024-11-27 13:53:03 -06:00

..

apiservice_updater_test.go

…

apiservice_updater.go

Enforce aliases for 'k8s.io/apimachinery/pkg/util/errors' and 'k8s.io/apimachinery/pkg/api/errors'

2024-05-21 09:31:15 -05:00

certs_expirer_test.go

plog.TestLogger returns a buffer instead of taking one in

2024-11-07 17:46:01 -06:00

certs_expirer.go

Enforce aliases for 'k8s.io/apimachinery/pkg/util/errors' and 'k8s.io/apimachinery/pkg/api/errors'

2024-05-21 09:31:15 -05:00

certs_manager_test.go

use .cluster.local address for LUA (squid cannot resolve .svc addresses)

2024-10-10 14:44:14 -07:00

certs_manager.go

use .cluster.local address for LUA (squid cannot resolve .svc addresses)

2024-10-10 14:44:14 -07:00

certs_observer_test.go

TokenCredentialRequest uses actual cert expiry time instead of estimate

2024-11-27 13:53:03 -06:00

certs_observer.go

Enforce aliases for 'k8s.io/apimachinery/pkg/util/errors' and 'k8s.io/apimachinery/pkg/api/errors'

2024-05-21 09:31:15 -05:00

doc.go

…

update_api_service_test.go

…

update_api_service.go

…