This change updates the API server code to load the encryption config once at start up instead of multiple times. Previously the code would set up the storage transformers and the etcd healthz checks in separate parse steps. This is problematic for KMS v2 key ID based staleness checks which need to be able to assert that the API server has a single view into the KMS plugin's current key ID. Signed-off-by: Monis Khan <mok@microsoft.com> Kubernetes-commit: f507bc255382b2e2095351053bc17e74f7100d35 |
||
---|---|---|
.. | ||
apiserver | ||
audit | ||
config | ||
example | ||
example2 | ||
flowcontrol/bootstrap | ||
OWNERS |