linkerd2/policy-controller
Alex Leong 96131b5ee8
Reload TLS credentials in policy validator (#7698)
The validating webhook admission controller in the policy controller loads it's
TLS credentials from files at startup and uses them for the lifetime of the
process. This means that if the credentials are rotated, the admission
controller will not use the updated credentials until the process is restarted.

We instead load these credentials each time a connection is established so that
new connections will always use the newest credentials. In doing so, we remove
warp and instead create a hyper server manually.

Fixes #7519
2022-01-28 16:01:17 -08:00
..
core policy-controller: Use `AHashMap` for indices (#7616) 2022-01-17 09:08:43 -08:00
grpc policy-controller: Update tonic (#7169) 2021-10-28 10:08:18 -05:00
k8s Update kube to v0.67 (#7690) 2022-01-25 11:50:21 -08:00
src Reload TLS credentials in policy validator (#7698) 2022-01-28 16:01:17 -08:00
.dockerignore Import the linkerd-policy-controller (#6485) 2021-08-11 12:56:12 -07:00
Cargo.toml Reload TLS credentials in policy validator (#7698) 2022-01-28 16:01:17 -08:00
amd64.dockerfile Add a devcontainer configuration (#7583) 2022-01-11 14:38:18 -08:00
arm.dockerfile Add a devcontainer configuration (#7583) 2022-01-11 14:38:18 -08:00
arm64.dockerfile Add a devcontainer configuration (#7583) 2022-01-11 14:38:18 -08:00