apiserver/pkg/server/options
Monis Khan 242620fc19 kmsv2: validate encrypt response at DEK generation time
Prior to this change, we wait until the DEK is used to perform an
encryption before validating the response.  This means that the
plugin could report healthy but all TransformToStorage calls would
fail.  Now we correctly cause the plugin to become unhealthy and do
not attempt to use the newly generated DEK.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 5469c198e5d074c7e88e14c3dcbc3ebb2b37cfa8
2023-03-22 21:27:47 -04:00
..
encryptionconfig kmsv2: validate encrypt response at DEK generation time 2023-03-22 21:27:47 -04:00
testdata kms: add wiring to support automatic encryption config reload 2022-11-02 01:08:42 -04:00
OWNERS Cleanup OWNERS files (No Activity in the last year) 2021-12-10 15:18:50 -05:00
admission.go Rename admission cel package to validatingadmissionpolicy 2022-11-08 14:18:26 +00:00
admission_test.go Integrate cel admission with API. 2022-11-07 21:38:55 +00:00
api_enablement.go fix typo `registry` 2021-08-08 18:37:16 +08:00
api_enablement_test.go fix typo `registry` 2021-08-08 18:37:16 +08:00
audit.go Ensure the dir of --audit-log-path exists 2022-06-27 17:21:02 +03:00
audit_test.go Ensure the dir of --audit-log-path exists 2022-06-27 17:21:02 +03:00
authentication.go Clear front proxy headers after authentication is complete 2023-03-20 13:11:38 -04:00
authentication_dynamic_request_header.go API Server Changes 2022-03-07 09:20:45 -05:00
authentication_test.go wire up a means to dynamically reload ca bundles for kube-apiserver 2019-10-07 14:06:42 -04:00
authorization.go Fix indentation/spacing in comments to render correctly in godoc 2022-12-17 17:31:05 -05:00
coreapi.go kubelet tracing 2021-10-10 09:17:27 -04:00
deprecated_insecure_serving.go remove DeprecatedInsecureServingOptionsWithLoopback 2022-09-11 21:22:18 +08:00
doc.go move apiserver options 2017-02-02 09:36:48 -05:00
egress_selector.go fix all keps links 404 for kep folder migration 2021-01-14 14:03:21 +08:00
etcd.go staging: fix "go vet" issues 2023-02-28 21:22:40 +01:00
etcd_test.go feat: implements kms encryption config hot reload 2022-11-07 22:15:56 +00:00
feature.go *: Make docs more accurate for the contention-profiling flag 2022-12-14 17:34:47 +05:30
recommended.go feat: implements kms encryption config hot reload 2022-11-07 22:15:56 +00:00
server_run_options.go apiserver: make watch termination during shutdown configurable 2023-02-10 11:43:06 -05:00
server_run_options_test.go apiserver: make watch termination during shutdown configurable 2023-02-10 11:43:06 -05:00
serving.go run hack/update-netparse-cve.sh 2021-08-20 01:16:14 +02:00
serving_test.go run hack/update-netparse-cve.sh 2021-08-20 01:16:14 +02:00
serving_unix.go generated: Run hack/update-gofmt.sh 2021-08-12 17:13:11 -04:00
serving_unix_test.go generated: Run hack/update-gofmt.sh 2021-08-12 17:13:11 -04:00
serving_windows.go generated: Run hack/update-gofmt.sh 2021-08-12 17:13:11 -04:00
serving_with_loopback.go Switch the order of adding SNICert and creating LoopbackClientConfig 2021-04-22 23:17:39 +00:00
serving_with_loopback_test.go run hack/update-netparse-cve.sh 2021-08-20 01:16:14 +02:00
tracing.go graduate API Server tracing to beta 2023-03-07 21:39:39 +00:00
tracing_test.go Migrate apiserver to registry.k8s.io 2023-02-09 06:49:27 +13:00