consul/agent/connect/ca
Matt Keeler 7cddf128e9
Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571)
Backport of PR: 9570

After fixing that bug I uncovered a couple more:

Fix an issue where we might try to cross sign a cert when we never had a valid root.
Fix a potential issue where reconfiguring the CA could cause either the Vault or AWS PCA CA providers to delete resources that are still required by the new incarnation of the CA.

Ensure that CA initialization does not block leader election.

After fixing that bug I uncovered a couple more:

Fix an issue where we might try to cross sign a cert when we never had a valid root.
Fix a potential issue where reconfiguring the CA could cause either the Vault or AWS PCA CA providers to delete resources that are still required by the new incarnation of the CA.
2021-01-21 09:04:30 -05:00
..
common.go connect: Add AWS PCA provider (#6795) 2019-11-21 17:40:29 +00:00
mock_Provider.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
provider.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
provider_aws.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
provider_aws_test.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
provider_consul.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
provider_consul_config.go Merge pull request #8646 from hashicorp/common-intermediate-ttl 2020-09-15 19:04:27 +00:00
provider_consul_test.go Merge pull request #9009 from hashicorp/update-secondary-ca 2020-11-30 16:13:12 -08:00
provider_test.go Merge pull request #8646 from hashicorp/common-intermediate-ttl 2020-09-15 19:04:27 +00:00
provider_vault.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
provider_vault_test.go Backport #9570 to release/1.8.x: Ensure that CA initialization does not block leader election. (#9571) 2021-01-21 09:04:30 -05:00
testing.go Merge pull request #9009 from hashicorp/update-secondary-ca 2020-11-30 16:13:12 -08:00