Code

make kubernetes_ca_cert optional#238

Code

Merged

thyton merged 18 commits intomainhashicorp/vault-plugin-auth-kubernetes:mainfrom VAULT-1729-make-kubernetes-ca-cert-optionalhashicorp/vault-plugin-auth-kubernetes:VAULT-1729-make-kubernetes-ca-cert-optionalCopy head branch name to clipboardMar 27, 2024

+159-20

Commits

Commits on Mar 13, 2024

• make kubernetes-ca-cert optional and default to local CA cert

  thyton

  committed
  ee49a2e

• update CHANGELOG

  thyton

  committed
  875494f

Commits on Mar 14, 2024

• do nothing to TSL config when true disable_local_ca_jwt & unset kubernetes_ca_cert

  thyton

  committed
  cac8247

Commits on Mar 18, 2024

• skip updating root CAs

  thyton

  committed
  a3f2e86

• set transport.TLSClientConfig to getDefaultTLSConfig() when falling back to the system's trust store

  thyton

  committed
  ef0454e

• forgot to stage transport.TLSClientConfig = getDefaultTLSConfig() change

  thyton

  committed
  e77f4e6

Commits on Mar 19, 2024

• only update transport.TLSClientConfig when transport.TLSClientConfig.RootCAs has become nil or at the initial update

  thyton

  committed
  27b3933

• Use the SystemCertPool() when no CACert chain is provided

  Show description for 0af6e94
  benashz

  committed
  0af6e94

• Minor fix ups

  benashz

  committed
  f033819

• Guard against nil RootCAs

  benashz

  committed
  2a8f1d3

Commits on Mar 20, 2024

• add test for invalid CA cert

  thyton

  committed
  e6e5bd8

Commits on Mar 26, 2024

• Update path_config_test.go

  Show description for 82ec9fb
  

  thyton

  and

  benashz

  authored
  82ec9fb

• Update path_config.go

  Show description for 698a21b
  

  thyton

  and

  benashz

  authored
  698a21b

• Update path_config.go

  Show description for 6b84d97
  

  thyton

  and

  benashz

  authored
  6b84d97

• update CHANGELOG entry

  thyton

  committed
  3a5f5d7

• use truncated CA cert for invalid kubernetes_ca_cert test

  thyton

  committed
  5025f03

• add new line

  thyton

  committed
  f1c5acf

Commits on Mar 27, 2024

• fold long lines

  thyton

  committed
  f916f7e