Brad Davidson ddbe499d9a Add FilterCN function to prevent SAN Stuffing ...

Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aa76942d0f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

2023-08-04 16:08:16 -07:00

..

agent

Add support for {{ template "base" . }} in etc/containerd/config.toml.tmpl (#7991)

2023-08-04 16:08:16 -07:00

apis/k3s.cattle.io

Create CRDs with schema

2023-05-10 15:18:54 -07:00

authenticator

Consistently use constant-time comparison of password hashes

2023-05-10 15:18:54 -07:00

bootstrap

Replace deprecated ioutil package (#6230)

2022-10-07 17:36:57 -07:00

cgroups

Replace deprecated ioutil package (#6230)

2022-10-07 17:36:57 -07:00

cli

[Release-1.25] August Test Backports (#8127)

2023-08-04 11:38:23 -07:00

clientaccess

Fall back to basic/bearer auth when node identity auth is rejected

2023-07-07 14:12:02 -07:00

cloudprovider

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

cluster

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

codegen

[master] changing package to k3s-io (#4846)

2022-03-02 15:47:27 -08:00

configfilearg

[Release-1.25] August Test Backports (#8127)

2023-08-04 11:38:23 -07:00

containerd

Enable containerd aufs/devmapper/zfs snapshotter plugins

2023-06-12 10:53:26 -07:00

crd

Create CRDs with schema

2023-05-10 15:18:54 -07:00

ctr

Build & enable ctr with k3s server

2019-06-30 09:30:25 -07:00

daemons

Make apiserver egress args conditional on egress-selector-mode

2023-08-04 16:08:16 -07:00

data

code changes to drop the vendor dir

2021-12-21 14:23:38 -07:00

datadir

[master] changing package to k3s-io (#4846)

2022-03-02 15:47:27 -08:00

dataverify

Add file verification for data directory

2020-10-06 10:29:27 -07:00

deploy

Bump metrics-server to v0.6.3 and update tls-cipher-suites

2023-06-12 10:53:26 -07:00

etcd

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

flock

Update golangci-lint to 1.45.2

2022-04-13 14:48:42 -07:00

generated

Create CRDs with schema

2023-05-10 15:18:54 -07:00

kubeadm

Add support for k3s token command

2023-02-10 09:33:55 -08:00

kubectl

Track upstream changes to kubectl command execution

2022-03-16 17:19:18 -07:00

node

[master] changing package to k3s-io (#4846)

2022-03-02 15:47:27 -08:00

nodeconfig

VPN integration

2023-06-12 09:22:06 +02:00

nodepassword

Soft-fail on node password verification if the secret cannot be created

2023-06-12 10:53:26 -07:00

passwd

VPN integration

2023-06-12 09:22:06 +02:00

rootless

Address nits from self-review

2022-11-21 15:23:30 -08:00

rootlessports

[master] changing package to k3s-io (#4846)

2022-03-02 15:47:27 -08:00

secretsencrypt

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

server

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

static

go generate

2023-05-10 15:18:54 -07:00

untar

Bump wharfie to v0.5.1 and use shared decompression code

2021-12-07 12:50:57 -08:00

util

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

version

remove hard coded value

2020-07-09 11:20:06 -07:00

vpn

Support setting control server URL for Tailscale.

2023-07-07 12:31:19 +02:00