Brad Davidson ab004371f6 Add client certificate authentication support to core Authenticator ...

This is required to make the websocket tunnel server functional on
etcd-only nodes, and will save some code on the RKE2 side once pulled
through.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit af0b496ef3)

2022-04-15 11:15:54 -07:00

..

agent

Improve config retrieval messages

2022-04-15 11:15:54 -07:00

apiaddresses

Close additional leaked GPRC clients

2022-03-15 18:09:26 -07:00

apis/k3s.cattle.io

Update generated code

2019-10-30 19:08:26 -07:00

authenticator

Add client certificate authentication support to core Authenticator

2022-04-15 11:15:54 -07:00

bootstrap

Resolve Bootstrap Migration Edge Case (#4730)

2021-12-13 13:04:33 -07:00

cli

Fixed flannel backend helper text

2022-04-14 10:43:57 +02:00

clientaccess

Backport secrets-encrypte command (#4658)

2021-12-07 17:21:10 -08:00

cloudprovider

Fix race condition in cloud provider

2021-10-19 10:25:34 +02:00

cluster

Defragment etcd datastore before clearing alarms

2022-03-28 09:28:36 -07:00

codegen

Add support for disabling all staged content

2020-09-14 14:21:37 -07:00

configfilearg

Improved regex for double equals arguments (#4508)

2021-11-16 11:31:46 -08:00

containerd

AkihiroSuda/containerd-fuse-overlayfs -> containerd/fuse-overlayfs-snapshotter

2021-03-24 10:34:34 -07:00

ctr

Build & enable ctr with k3s server

2019-06-30 09:30:25 -07:00

daemons

Add client certificate authentication support to core Authenticator

2022-04-15 11:15:54 -07:00

data

code to remove vendor dir

2021-12-27 15:02:34 -07:00

datadir

Make program name a variable to be changed at compile time

2020-06-06 16:39:41 -07:00

dataverify

Add file verification for data directory

2020-10-06 10:29:27 -07:00

deploy

go generate

2022-03-18 23:31:36 -07:00

etcd

Skip setting up client tls when etcd server does not have tls enabled

2022-03-30 01:06:46 -07:00

flock

Add Release function for flock

2020-10-06 10:29:27 -07:00

generated

Update go.mod for k8s 1.19

2020-08-28 17:18:31 -07:00

kubectl

Check for --kubeconfig flag with embedded kubectl (#5064) (#5074)

2022-02-07 10:49:04 -08:00

netutil

Initial Logging Output Update (#2246)

2020-09-21 09:56:03 -07:00

node

Use secrets for node-passwd entries and cleanup

2020-11-05 09:48:53 -07:00

nodeconfig

Use config file values in node-args annotation

2021-05-10 14:08:02 -07:00

nodepassword

Use secrets for node-passwd entries and cleanup

2020-11-05 09:48:53 -07:00

passwd

Use secrets for node-passwd entries and cleanup

2020-11-05 09:48:53 -07:00

rootless

rootless: allow kernel.dmesg_restrict=1

2021-03-24 01:03:14 -07:00

rootlessports

Initial Logging Output Update (#2246)

2020-09-21 09:56:03 -07:00

secretsencrypt

Fix etcd-only secrets encryption rotation

2022-03-25 15:08:58 -07:00

server

Sync DisableKubeProxy into control struct

2022-04-15 11:15:54 -07:00

servicelb

Allow svclb pod to enable ipv6 forwarding

2021-11-17 19:50:00 +01:00

static

Upgrade to V1.21.10+k3s1 (#5137)

2022-02-20 20:48:06 +02:00

token

Refactor tokens, bootstrap, and cli args

2019-10-30 19:06:49 -07:00

untar

Bump wharfie to v0.5.1 and use shared decompression code

2021-12-08 13:33:45 -08:00

util

Ensure that apiserver ready channel checks re-dial every time

2022-03-23 13:23:54 -07:00

version

remove hard coded value

2020-07-09 11:20:06 -07:00