Lubomir I. Ivanov b5b9698fbf kubeadm: print warnings on invalid cert period instead of erroring out ...

Client side period validation of certificates should not be
fatal, as local clock skews are not so uncommon. The validation
should be left to the running servers.

- Remove this validation from TryLoadCertFromDisk().
- Add a new function ValidateCertPeriod(), that can be used for this
purpose on demand.
- In phases/certs add a new function CheckCertificatePeriodValidity()
that will print warnings if a certificate does not pass period
validation, and caches certificates that were already checked.
- Use the function in a number of places where certificates
are loaded from disk.

2020-09-09 20:53:13 +03:00

..

BUILD

Fix duplicate altnames in cert

2020-07-03 12:14:36 +08:00

pki_helpers_test.go

Fix duplicate altnames in cert

2020-07-03 12:14:36 +08:00

pki_helpers.go

kubeadm: print warnings on invalid cert period instead of erroring out

2020-09-09 20:53:13 +03:00