go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
gvisor/images/certs/server.conf

9 lines
241 B
Plaintext
Raw Normal View History

Make the webhook deterministic. We add a simple image that will generate certificates as a init container, and refer to this directly use the Kubernetes yaml. Note that this also fixes the issue of versioning within the yaml file, as this will now generate a version of this file that refers to the precise local versions. PiperOrigin-RevId: 421671040
2022-01-13 23:17:44 +00:00
[req]
req_extensions = v3_req
distinguished_name = req_distinguished_name
[req_distinguished_name]
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = clientAuth, serverAuth