kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
apiserver/pkg/server/options/testdata
History
Monis Khan e137a3da77 kms: add wiring to support automatic encryption config reload 
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime.  While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible.  This single healthz check handles
checking  all configured KMS providers.  When reloading is enabled
but no KMS providers are configured, it is a no-op.

k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime.  Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 22e540bc48d9bf698c4f381ccb56ed57dea0dae2
 		2022-11-02 01:08:42 -04:00
..
apiserver-loopback-client__ Remove executable permission from testdata 2019-01-03 12:21:19 -05:00
encryption-configs kms: add wiring to support automatic encryption config reload 2022-11-02 01:08:42 -04:00
localhost__ Remove executable permission from testdata 2019-01-03 12:21:19 -05:00
localhost__10.0.0.1,127.0.0.1 Remove executable permission from testdata 2019-01-03 12:21:19 -05:00
localhost__127.0.0.1 Remove executable permission from testdata 2019-01-03 12:21:19 -05:00
localhost_test.com_127.0.0.1 Remove executable permission from testdata 2019-01-03 12:21:19 -05:00
test.com__ Remove executable permission from testdata 2019-01-03 12:21:19 -05:00
README.md Ensure testing credentials are labeled as such 2020-02-04 10:36:05 -08:00
client-expired.pem add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
client-valid.pem add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
client.config.json add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
client.csr.json add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
generate.sh add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
intermediate.config.json add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
intermediate.csr.json add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
intermediate.pem add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
root.csr.json add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00
root.pem add ability to authenticators for dynamic update of certs 2019-09-05 09:59:59 -04:00

README.md

Keys in this directory are generated for testing purposes only.