kubernetes
/
kube-controller-manager
mirror of https://github.com/kubernetes/kube-controller-manager.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kube-controller-manager component configs
471 Commits 24 Branches 1,328 Tags 3.9 MiB
Go 100%
Go to file
Monis Khan 5b2f02f6dc csr: add expirationSeconds field to control cert lifetime 
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: cd91e59f7c351fce47c064a5162c2cb79075159c
 		2021-06-25 22:08:10 -04:00
.github delete all duplicate empty blanks 2019-02-22 09:43:51 +08:00
config csr: add expirationSeconds field to control cert lifetime 2021-06-25 22:08:10 -04:00
CONTRIBUTING.md Update deprecated links 2019-02-04 13:28:31 -05:00
LICENSE [kube-controller-manager] create package to hold kube-controller-manager component api 2018-09-04 19:02:08 +08:00
OWNERS Updated OWNERS files to include link to docs 2019-01-30 20:05:00 +01:00
README.md [kube-controller-manager] create package to hold kube-controller-manager component api 2018-09-04 19:02:08 +08:00
SECURITY_CONTACTS Update SECURITY_CONTACTS with current PSC 2019-05-29 15:22:35 +05:30
code-of-conduct.md [kube-controller-manager] create package to hold kube-controller-manager component api 2018-09-04 19:02:08 +08:00
go.mod Merge pull request #103176 from CaoDonghui123/updatemod 2021-07-01 06:11:58 +00:00
go.sum Merge pull request #103176 from CaoDonghui123/updatemod 2021-07-01 06:11:58 +00:00

README.md

Kube-controller-manager

Purpose

This library contains code to expose kube-controller-manager API.

Compatibility

There are NO compatibility guarantees for this repository, yet. It is in direct support of Kubernetes, so branches will track Kubernetes and be compatible with that repo. As we more cleanly separate the layers, we will review the compatibility guarantee. We have a goal to make this easier to use in the future.

Where does it come from?

kube-controller-manager is synced from https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/kube-controller-manager. Code changes are made in that location, merged into k8s.io/kubernetes and later synced here.

Things you should NOT do

  1. Directly modify any files under pkg in this repo. Those are driven from k8s.io/kubernetes/staging/src/k8s.io/kube-controller-manager.
  2. Expect compatibility. This repo is changing quickly in direct support of Kubernetes and the kube-controller-manager API.