cert-manager/pkg/util/pki
Christopher Broglie 0f74d7536e Add renewBeforePercentage alternative to renewBefore
Since the actual duration is unknown until a cert has been issued,
providing an absolute duration for renewBefore can result in accidental
renewal loops. The new renewBeforePercentage field computes the
effective renewBefore using the actual duration, allowing users to
better express intent while maintaining backwards compatibility.

Fixes #4423, resolves #5821

Signed-off-by: Christopher Broglie <cbroglie@cloudflare.com>
2024-06-29 21:18:15 -07:00
..
internal add benchmark 2024-02-20 08:34:53 +01:00
asn1_util_test.go Fix OtherName feature flag validation logic 2024-01-08 13:34:09 +00:00
asn1_util.go fix gocritic linter 2024-04-29 15:50:47 +02:00
basicconstraints.go make KeyUsage and BasicConstraints Critical extensions 2023-05-11 10:29:02 +02:00
certificatetemplate_test.go fix unparam linter 2024-04-30 10:47:21 +02:00
certificatetemplate.go fix unused linter 2024-04-29 15:29:00 +02:00
csr_test.go fix unparam linter 2024-04-30 10:47:21 +02:00
csr.go fix webhook validation error msg 2024-02-19 10:16:38 +08:00
generate_test.go use Version 3 for all Certificates and Version 0 for all CertificateRequests 2023-05-11 10:21:55 +02:00
generate.go
keyusage.go make KeyUsage and BasicConstraints Critical extensions 2023-05-11 10:29:02 +02:00
kube_test.go fix unparam linter 2024-04-30 10:47:21 +02:00
kube.go
match_test.go fix gocritic linter 2024-04-29 15:50:47 +02:00
match.go fix unparam linter 2024-04-30 10:47:21 +02:00
nameconstraints_test.go fix forbidigo linter 2024-04-30 10:01:34 +02:00
nameconstraints.go Refactor the solution 2023-12-13 09:37:21 +00:00
parse_certificate_chain_test.go add tests for the improvements made in #6561 2024-01-03 17:25:15 +01:00
parse_certificate_chain.go add additional validation checks 2023-12-20 10:13:11 +01:00
parse_test.go fix dupword linter 2024-04-29 13:47:25 +02:00
parse.go add new utility method to clarify cert decoding semantics 2024-03-04 12:47:27 -05:00
renewaltime_test.go Add renewBeforePercentage alternative to renewBefore 2024-06-29 21:18:15 -07:00
renewaltime.go Add renewBeforePercentage alternative to renewBefore 2024-06-29 21:18:15 -07:00
sans_test.go Fix csr_test.go critical SAN on tests without Subjects 2023-12-21 18:44:49 +00:00
sans.go fix unconvert linter 2024-04-29 15:30:30 +02:00
subject.go fix gocritic linter 2024-04-29 15:50:47 +02:00
temporarycertificate.go