Brad Davidson ddbe499d9a Add FilterCN function to prevent SAN Stuffing ...

Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit aa76942d0f)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

2023-08-04 16:08:16 -07:00

..

api.go

Check for RBAC before starting tunnel controllers

2022-10-26 15:08:13 -07:00

cert.go

Add support for cross-signing new certs during ca rotation

2023-03-13 20:04:11 -07:00

client_test.go

[Release-1.25] CLI + Config Enhancement (#7404)

2023-05-02 14:03:59 -07:00

client.go

Use distinct clients for supervisor, deploy, and helm controllers

2023-06-12 10:53:26 -07:00

command.go

VPN integration

2023-06-12 09:22:06 +02:00

errors.go

Initial windows support for agent (#3375)

2021-06-01 12:29:46 -07:00

file.go

Remove file_windows.go

2023-07-04 12:47:05 +02:00

gates_test.go

Exporting the AddFeatureGate function and adding a unit test for it. (#3661)

2021-07-28 13:04:42 -07:00

gates.go

Exporting the AddFeatureGate function and adding a unit test for it. (#3661)

2021-07-28 13:04:42 -07:00

labels.go

Add FilterCN function to prevent SAN Stuffing

2023-08-04 16:08:16 -07:00

net_test.go

Include node-external-ip in serving-kubelet.crt SANs (#4620)

2021-12-07 15:42:40 -08:00

net.go

Check if we are on ipv4, ipv6 or dualStack when doing tailscale

2023-07-06 11:13:11 +02:00

reflect.go

Disable deprecated insecure port

2021-08-20 18:47:16 -07:00

token.go

VPN integration

2023-06-12 09:22:06 +02:00