Monis Khan 7e891e5d6c csr: correctly handle backdating of short lived certs ...

This change updates the backdating logic to only be applied to the
NotBefore date and not the NotAfter date when the certificate is
short lived. Thus when such a certificate is issued, it will not be
immediately expired.  Long lived certificates continue to have the
same lifetime as before.

Consolidated all certificate lifetime logic into the
PermissiveSigningPolicy.policy method.

Signed-off-by: Monis Khan <mok@vmware.com>

2021-06-23 15:36:11 -04:00

..

approver

Update auth OWNERS files to only use aliases

2021-04-07 10:46:03 -04:00

authority

csr: correctly handle backdating of short lived certs

2021-06-23 15:36:11 -04:00

cleaner

hack/update-bazel.sh

2021-02-28 15:17:29 -08:00

rootcacertpublisher

include description of what kube-root-ca.crt can be used to verify

2021-04-08 10:43:41 -04:00

signer

csr: correctly handle backdating of short lived certs

2021-06-23 15:36:11 -04:00

certificate_controller_test.go

Switch CSR approver/signer/cleaner controllers to v1

2020-06-05 18:45:34 -04:00

certificate_controller_utils_test.go

Switch CSR approver/signer/cleaner controllers to v1

2020-06-05 18:45:34 -04:00

certificate_controller_utils.go

Some comments' typos

2020-11-02 15:05:23 +08:00

certificate_controller.go

[pkg/controller/certificates]: remove staled func comments

2020-07-11 17:08:28 +08:00

OWNERS

Merge pull request #72525 from justinsb/owners_should_not_be_executable

2019-02-14 23:55:45 -08:00