linkerd2/pkg
Tarun Pothulapati c19cfd71a1
upgrades: make webhooks restart if TLS creds are updated (#5349)
* upgrades: make webhooks restart if TLS creds are updated

Fixes #5231

Currently, we do not re-use the TLS certs during upgrades, which
means that the secrets are updated while the webhooks are still
paired with the older ones, causing the webhook requests to fail.

This can be solved by making webhooks be restarted whenever there
is a change in the certs. This can be performed by storing the hash
of the `*-rbac` file, which contains the secrets, thus making the
pod templates change whenever there is an update to the certs thus
making restarts required.

Signed-off-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
2020-12-10 11:56:53 -05:00
..
addr Add some unit test (#4853) 2020-08-18 16:10:13 -07:00
admin remove admin server timeouts (#4350) 2020-05-08 12:59:43 -07:00
charts upgrades: make webhooks restart if TLS creds are updated (#5349) 2020-12-10 11:56:53 -05:00
config Add safe accessor for Global in linkerd-config (#5269) 2020-11-23 12:45:58 -08:00
filesonly Enable lint check for comments (#2023) 2019-01-02 14:03:59 -08:00
flags jaeger: Add support for override flags (#5304) 2020-12-04 16:35:39 -08:00
healthcheck Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
identity cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
inject Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
issuercerts cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
k8s Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
multicluster Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
profiles Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
prometheus Trace Control plane Components with OC (#3495) 2019-10-18 12:19:13 -07:00
protohttp Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
servicemirror Add support for service-mirror selectors (#4795) 2020-07-30 10:07:14 -07:00
tap Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
tls Have webhooks refresh their certs automatically (#5282) 2020-12-04 16:25:59 -05:00
trace Trace Control plane Components with OC (#3495) 2019-10-18 12:19:13 -07:00
tree Expose namespaceSelector for admission webhooks in helm chart (#5074) 2020-10-13 16:08:56 -07:00
util Add unit test for pkg/util/http.go (#4770) 2020-07-21 14:08:53 -07:00
version Bump proxy-init to v1.3.8 (#5283) 2020-11-27 09:07:34 -05:00