teleport/lib/config
Vitor Enes 3fd74ae3fd
Periodically reload proxy certificates (#19996)
This commit adds a certificate reloader that periodically reloads proxy
certificates.

Implementation was intentionally kept as simple as possible:
- periodically go through all key pairs and try to load them again
- if any key pair fails to load, then no certificate is updated
- no retry mechanism
- `inotify` is not used

The interval between reloads is configurable by setting
`https_keypairs_reload_interval` to some duration. If not set, or if set
to `0`, then certificates are not reloaded periodically. Thus, this
feature is opt-in and the current behaviour is maintained.
2023-01-10 16:27:40 +00:00
..
openssh Switch golang.org/x/crypto to gravitational fork (#19579) 2023-01-04 19:30:58 +00:00
testdata Remove tsh dependency on lib/config - build fix (#17193) 2022-10-07 21:06:56 +00:00
configuration.go Periodically reload proxy certificates (#19996) 2023-01-10 16:27:40 +00:00
configuration_test.go add dynamodb database access (#18843) 2022-12-30 18:22:30 +00:00
database.go add dynamodb database access (#18843) 2022-12-30 18:22:30 +00:00
database_test.go add dynamodb database access (#18843) 2022-12-30 18:22:30 +00:00
fileconf.go Periodically reload proxy certificates (#19996) 2023-01-10 16:27:40 +00:00
fileconf_test.go Add user-visible device trust settings (#19531) 2022-12-21 15:24:12 +00:00
systemd.go Standardize systemd LimitNOFILE (#17893) 2022-10-31 16:56:02 +00:00
systemd_test.go Enable GCI linter (#17894) 2022-10-28 20:20:28 +00:00
testdata_test.go Allow cluster_networking_config to have defaults origin (#19106) 2022-12-13 13:17:52 +00:00