Sasha Klizhentas 3e144cb900 Teleport certificate authority rotation. ... This commit implements #1860 During the the rotation procedure issuing TLS and SSH certificate authorities are re-generated and all internal components of the cluster re-register to get new credentials. The rotation procedure is based on a distributed state machine algorithm - certificate authorities have explicit rotation state and all parts of the cluster sync local state machines by following transitions between phases. Operator can launch CA rotation in auto or manual modes. In manual mode operator moves cluster bewtween rotation states and watches the states of the components to sync. In auto mode state transitions are happening automatically on a specified schedule. The design documentation is embedded in the code: lib/auth/rotate.go		2018-04-30 12:58:57 -07:00
..
fixtures.go	Teleport certificate authority rotation.	2018-04-30 12:58:57 -07:00
keys.go	Mutual TLS Auth server and clients.	2017-12-27 11:37:19 -08:00