Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kube-apiserver-cert-syncer-kubeconfig: point to serving cert #905

Merged
merged 1 commit into from Jul 17, 2020
Merged

kube-apiserver-cert-syncer-kubeconfig: point to serving cert #905

merged 1 commit into from Jul 17, 2020

Commits on Jul 17, 2020

  1. kube-apiserver-cert-syncer-kubeconfig: point to serving cert 

    The service account gets the service-account CA that is valid at the point of creation. So if the localhost-recovery CA is not yet part of the kube-apiserver serving CA (which is the case during bootstrapping), this service-account won't work with the localhost-recovery endpoints.

The serving CA bundle though is always correct as it changes with time.

Fixes openshift@2a44f96#r456357777
    @sttts
    sttts committed Jul 17, 2020
    Copy the full SHA
    16d93e6 View commit details
    Browse the repository at this point in the history