linkerd
/
linkerd2
mirror of https://github.com/linkerd/linkerd2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
linkerd2/cli/cmd
History
Tarun Pothulapati c19cfd71a1
upgrades: make webhooks restart if TLS creds are updated (#5349) 
* upgrades: make webhooks restart if TLS creds are updated

Fixes #5231

Currently, we do not re-use the TLS certs during upgrades, which
means that the secrets are updated while the webhooks are still
paired with the older ones, causing the webhook requests to fail.

This can be solved by making webhooks be restarted whenever there
is a change in the certs. This can be performed by storing the hash
of the `*-rbac` file, which contains the secrets, thus making the
pod templates change whenever there is an update to the certs thus
making restarts required.

Signed-off-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
 		2020-12-10 11:56:53 -05:00
..
testdata upgrades: make webhooks restart if TLS creds are updated (#5349) 2020-12-10 11:56:53 -05:00
alpha.go Remove SMI-Metrics charts and commands (#4843) 2020-08-24 14:35:33 -07:00
check.go Upgrade using config overrides (#5005) 2020-10-12 14:23:14 -07:00
check_test.go Output check result as json (#2666) 2019-05-20 09:04:28 -07:00
completion.go Fix CLI zsh completion (#5285) 2020-12-02 15:37:57 -05:00
completion_test.go Bump proxy-init to 1.2.0 (#3397) 2019-09-09 09:06:14 -07:00
dashboard.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
diagnostics.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
doc.go Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
edges.go Upgrade generated protobuf files to v1.4.2 (#4673) 2020-06-26 09:36:48 -05:00
edges_test.go Upgrade generated protobuf files to v1.4.2 (#4673) 2020-06-26 09:36:48 -05:00
endpoints.go Have `linkerd endpoints` use `Destination.Get` (#2990) 2019-07-03 09:11:03 -05:00
endpoints_test.go Have `linkerd endpoints` use `Destination.Get` (#2990) 2019-07-03 09:11:03 -05:00
inject.go Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
inject_test.go Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
inject_util.go Update `inject` to throw an error while injecting non-compliant pods (#4346) 2020-06-24 14:07:05 -05:00
install-cni-plugin.go extension: Add new jaeger binary (#5278) 2020-11-25 20:10:35 +05:30
install-cni-plugin_test.go CNI: Use skip ports configuration in CNI (#4974) 2020-09-23 13:00:22 +05:30
install-sp.go Add safe accessor for Global in linkerd-config (#5269) 2020-11-23 12:45:58 -08:00
install-sp_test.go Add cluster domain cli flag (#3360) 2019-09-19 16:08:50 -07:00
install.go upgrades: make webhooks restart if TLS creds are updated (#5349) 2020-12-10 11:56:53 -05:00
install_addon_test.go Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
install_cni_helm_test.go Upgrade to Helm v3 sdk (#4878) 2020-11-23 12:46:41 -08:00
install_helm_test.go extension: Add new jaeger binary (#5278) 2020-11-25 20:10:35 +05:30
install_test.go Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
main_test.go add flag for dumping rejected results to folder for use with external diff (#4509) 2020-06-04 10:49:41 -04:00
metrics.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
metrics_diagnostics_util.go Linkerd CLI command to get control plane diagnostics (#4050) 2020-02-24 09:09:54 -08:00
metrics_diagnostics_util_test.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
options.go `linkerd install --ha` was only partially applying HA config (#5358) 2020-12-09 15:23:37 -05:00
profile.go Add safe accessor for Global in linkerd-config (#5269) 2020-11-23 12:45:58 -08:00
profile_test.go Allow setting custom cluster domain in service profiles (#3148) 2019-08-07 09:49:54 -07:00
public_api.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
range_slice.go Enable mixed configuration of skip-[inbound|outbound]-ports (#3766) 2019-12-20 09:32:13 -05:00
range_slice_test.go Enable mixed configuration of skip-[inbound|outbound]-ports (#3766) 2019-12-20 09:32:13 -05:00
root.go extension: Separate multicluster chart and binary (#5293) 2020-12-04 16:36:10 -08:00
routes.go Simplified boolean expression (#5251) 2020-11-20 09:37:06 -05:00
routes_test.go Upgrade generated protobuf files to v1.4.2 (#4673) 2020-06-26 09:36:48 -05:00
stat.go Fixes unit tests when default kubeconfig namespace is not "default" (#4825) 2020-08-03 11:27:02 -07:00
stat_test.go Upgrade generated protobuf files to v1.4.2 (#4673) 2020-06-26 09:36:48 -05:00
tap.go cli: fix and update timeout warnings in profile cmd (#5122) 2020-10-27 22:08:21 +05:30
tap_test.go cli: fix and update timeout warnings in profile cmd (#5122) 2020-10-27 22:08:21 +05:30
test_helper.go Refactor upgrade tests to remove use of golden files (#4860) 2020-08-11 09:22:29 -07:00
top.go Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
uninject.go Update Injection to use new linkerd-config.values (#5036) 2020-10-07 09:54:34 -07:00
uninject_test.go Upgrade using config overrides (#5005) 2020-10-12 14:23:14 -07:00
uninstall.go extension: Separate multicluster chart and binary (#5293) 2020-12-04 16:36:10 -08:00
uninstall_test.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
upgrade.go Use linkerd-jaeger extension for control plane tracing (#5299) 2020-12-08 14:34:26 -08:00
upgrade_legacy.go Add safe accessor for Global in linkerd-config (#5269) 2020-11-23 12:45:58 -08:00
upgrade_test.go upgrades: make webhooks restart if TLS creds are updated (#5349) 2020-12-10 11:56:53 -05:00
version.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
version_test.go Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00