certrotation

Oct 8, 2023 GO-2024-3343

  GO-2024-3343: Open Cluster Management vulnerable to Trust Boundary Violation in open-cluster-management.io/ocm

Jul 4, 2023 GO-2024-3343

  GO-2024-3343: Open Cluster Management vulnerable to Trust Boundary Violation in open-cluster-management.io/ocm

Changes in this version

+ type CABundleRotation struct

+ Client corev1client.ConfigMapsGetter

+ EventRecorder events.Recorder

+ Lister corev1listers.ConfigMapLister

+ Name string

+ Namespace string

+ func (c CABundleRotation) EnsureConfigMapCABundle(ctx context.Context, signingCertKeyPair *crypto.CA) ([]*x509.Certificate, error)

+ type SigningRotation struct

+ Client corev1client.SecretsGetter

+ EventRecorder events.Recorder

+ Lister corev1listers.SecretLister

+ Name string

+ Namespace string

+ SignerNamePrefix string

+ Validity time.Duration

+ func (c SigningRotation) EnsureSigningCertKeyPair(ctx context.Context) (*crypto.CA, error)

+ type TargetRotation struct

+ Client corev1client.SecretsGetter

+ EventRecorder events.Recorder

+ HostNames []string

+ Lister corev1listers.SecretLister

+ Name string

+ Namespace string

+ Validity time.Duration

+ func (c TargetRotation) EnsureTargetCertKeyPair(ctx context.Context, signingCertKeyPair *crypto.CA, ...) error

+ func (c TargetRotation) NewCertificate(signer *crypto.CA, validity time.Duration) (*crypto.TLSCertificateConfig, error)