Merge pull request #99494 from enj/enj/i/not_after_ttl_hint

csr: add expirationSeconds field to control cert lifetime

Kubernetes-commit: 659c7e709f3b7f5f2a25e456525cd8747f2e68cc
This commit is contained in:
Kubernetes Publisher 2021-07-01 23:02:12 -07:00
commit bbbe4f3c8e
3 changed files with 12 additions and 12 deletions

View File

@ -193,8 +193,8 @@ type CSRSigningControllerConfiguration struct {
// legacyUnknownSignerConfiguration holds the certificate and key used to issue certificates for the kubernetes.io/legacy-unknown
LegacyUnknownSignerConfiguration CSRSigningConfiguration
// clusterSigningDuration is the length of duration signed certificates
// will be given.
// clusterSigningDuration is the max length of duration signed certificates will be given.
// Individual CSRs may request shorter certs by setting spec.expirationSeconds.
ClusterSigningDuration metav1.Duration
}

8
go.mod
View File

@ -11,11 +11,11 @@ require (
)
replace (
k8s.io/api => k8s.io/api v0.0.0-20210701054328-f75dde501d56
k8s.io/api => k8s.io/api v0.0.0-20210702094336-49e8721f8489
k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20210701054147-830375057167
k8s.io/apiserver => k8s.io/apiserver v0.0.0-20210701055507-8d4ac24e5b70
k8s.io/client-go => k8s.io/client-go v0.0.0-20210701054555-843bb800b12a
k8s.io/apiserver => k8s.io/apiserver v0.0.0-20210702055056-e3515abe00ca
k8s.io/client-go => k8s.io/client-go v0.0.0-20210702094607-ca3a47f0b44a
k8s.io/cloud-provider => k8s.io/cloud-provider v0.0.0-20210701061056-e2596319f644
k8s.io/component-base => k8s.io/component-base v0.0.0-20210701055118-2b6184b12d2d
k8s.io/component-base => k8s.io/component-base v0.0.0-20210702054709-fddd92849e34
k8s.io/controller-manager => k8s.io/controller-manager v0.0.0-20210701060950-b1e2edf4da2a
)

12
go.sum
View File

@ -681,16 +681,16 @@ honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWh
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
k8s.io/api v0.0.0-20210701054328-f75dde501d56 h1:D7+RjL9qHD5SvrWwSnT0NugysPfJAopsJphgGxpp+kU=
k8s.io/api v0.0.0-20210701054328-f75dde501d56/go.mod h1:zoURDvOPW5UMFZr2YUU/sStjYnWSPt+x+MM4R94ATgQ=
k8s.io/api v0.0.0-20210702094336-49e8721f8489 h1:R+giJyPdlHfUvmzHBQ6tm2tlmxcZ2NWgkGSxLbQZ/ZM=
k8s.io/api v0.0.0-20210702094336-49e8721f8489/go.mod h1:zoURDvOPW5UMFZr2YUU/sStjYnWSPt+x+MM4R94ATgQ=
k8s.io/apimachinery v0.0.0-20210701054147-830375057167 h1:fob/j8+uMBIVvyo+9bG7GvjFSj0LX3RNuSXW+RcUrwo=
k8s.io/apimachinery v0.0.0-20210701054147-830375057167/go.mod h1:O3oNtNadZdeOMxHFVxOreoznohCpy0z6mocxbZr7oJ0=
k8s.io/apiserver v0.0.0-20210701055507-8d4ac24e5b70/go.mod h1:FyAyuH6fM9rtGXN7YQxBH0Bd/90pXcFPBe6HSe/niO8=
k8s.io/client-go v0.0.0-20210701054555-843bb800b12a/go.mod h1:16T5YsHbw60Osvo1XWwrY0LRCCT2NVgowSJr6mtlhks=
k8s.io/apiserver v0.0.0-20210702055056-e3515abe00ca/go.mod h1:TRzXAeTvL4hakSeqebQ0o6QVQbZ5q/mDgVlvDeR7QCA=
k8s.io/client-go v0.0.0-20210702094607-ca3a47f0b44a/go.mod h1:q7LwMTm+ipCQu7UHo7eO1qrjkqaEjj/WmgmKGZGzmcA=
k8s.io/cloud-provider v0.0.0-20210701061056-e2596319f644 h1:khvF7TKhSq7hBsa6kkNH2zM+OjyAcaJKinKVl/HnH1M=
k8s.io/cloud-provider v0.0.0-20210701061056-e2596319f644/go.mod h1:DkibgzPOtpl4afDgEviAR6AJQ4el83AjcmLvE04PYBE=
k8s.io/component-base v0.0.0-20210701055118-2b6184b12d2d h1:j3xTR867tS0hjgDF0JuaF1lh9r9reZGmalLxFqv/qy8=
k8s.io/component-base v0.0.0-20210701055118-2b6184b12d2d/go.mod h1:a8pntMMGk8KQTeJ2H54nF7WPTcu4EgHb2q61t/1bSu8=
k8s.io/component-base v0.0.0-20210702054709-fddd92849e34 h1:L7kJX0+rX5SJ2ZUaFy8zarcUMW0+2AHkd3gyuIp0ZLM=
k8s.io/component-base v0.0.0-20210702054709-fddd92849e34/go.mod h1:KuldLgSPMxWtcVmPn3hcUoWNJqm7HEdVcSID+ZdAB24=
k8s.io/controller-manager v0.0.0-20210701060950-b1e2edf4da2a h1:Dcnptk1Awlw2c2W02sapp99wH8EGT/6UcgecFexWQfI=
k8s.io/controller-manager v0.0.0-20210701060950-b1e2edf4da2a/go.mod h1:NPwc5909AvN9w6Xk6MvFciiGS7hOZyU0oe8QmpPds1A=
k8s.io/gengo v0.0.0-20200413195148-3a45101e95ac/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=