teleport/lib/tbot
Noah Stride c18d914745
Machine ID CA rotation (#13231)
* start hashing out machine id CA rotation

* filter out incoming ca events by type

* support multiple trusted certificate authorities in known_hosts

* remove redundant trace.Debug from `tbot` `main()`

* filter to only recieve relevant CA events

* add exponential backoff to renewal

* remove unnecessary `.Ping()` check with new client

* add unit test for filtering CA events

* debounce reloads

* add retry limit and backoff for CA watching

* add integration test for CA rotation

* modify CA rotation watcher loop to retry forever

Co-authored-by: Tim Buckley <tim@goteleport.com>
2022-07-13 16:52:44 +00:00
..
botfs Refactor tbot (#12855) 2022-06-01 17:15:26 +00:00
config Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
destination Refactor tbot (#12855) 2022-06-01 17:15:26 +00:00
identity Refactor tbot (#12855) 2022-06-01 17:15:26 +00:00
testhelpers Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
tshwrap Refactor tbot (#12855) 2022-06-01 17:15:26 +00:00
ca_rotation.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
ca_rotation_test.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
configtemplate_test.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
identity_test.go Fix listener flakiness in tbot tests 2022-06-10 11:12:01 +02:00
renew.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
renew_test.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
tbot.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00
tbot_test.go Machine ID CA rotation (#13231) 2022-07-13 16:52:44 +00:00