Skip to content

Commit 98fb657

Browse files
committed
generated
1 parent 50d6165 commit 98fb657

File tree

2 files changed

+5
-84
lines changed

2 files changed

+5
-84
lines changed

tls/autoregenerate-after-expiry/autoregenerate-after-expiry.md

Lines changed: 5 additions & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# Auto Regenerate After Offline Expiry
22

33
## Table of Contents
4-
- [Items That Cannot Auto Regenerate After Offline Expiry (252)](#Items-That-Cannot-Auto-Regenerate-After-Offline-Expiry-252)
4+
- [Items Do NOT Meet the Requirement (252)](#Items-Do-NOT-Meet-the-Requirement-252)
55
- [ (39)](#-39)
66
- [Certificates (23)](#Certificates-23)
77
- [Certificate Authority Bundles (16)](#Certificate-Authority-Bundles-16)
@@ -31,29 +31,22 @@
3131
- [service-ca (98)](#service-ca-98)
3232
- [Certificates (95)](#Certificates-95)
3333
- [Certificate Authority Bundles (3)](#Certificate-Authority-Bundles-3)
34-
- [Items That Can Auto Regenerate After Offline Expiry (0)](#Items-That-Can-Auto-Regenerate-After-Offline-Expiry-0)
34+
- [Items That DO Meet the Requirement (0)](#Items-That-DO-Meet-the-Requirement-0)
3535

3636

3737
Acknowledging that a cert/key pair or CA bundle can auto-regenerate after it expires offline means
38-
Acknowledging that a cert/key pair or CA bundle can auto-regenerate after it expires offline means
3938
that if the cluster is shut down until the certificate expires, when the machines are restarted
40-
that if the cluster is shut down until the certificate expires, when the machines are restarted
4139
the cluster will automatically create new cert/key pairs or update CA bundles as required without human
42-
the cluster will automatically create new cert/key pairs or update CA bundles as required without human
4340
intervention.
44-
intervention.
4541
To assert that a particular cert/key pair or CA bundle can do this, add the "certificates.openshift.io/auto-regenerate-after-offline-expiry" annotation to the secret or configmap and
46-
To assert that a particular cert/key pair or CA bundle can do this, add the "certificates.openshift.io/auto-regenerate-after-offline-expiry" annotation to the secret or configmap and
4742
setting the value of the annotation a github link to the PR adding the annotation.
48-
setting the value of the annotation a github link to the PR adding the annotation.
4943
This assertion also means that you have
50-
This assertion also means that you have
5144
1. Manually tested that this works or seen someone else manually test that this works. AND
5245
2. Written an automated e2e job that your team has an alert for and is a blocking GA criteria, and/or
5346
QE has required test every release that ensures the functionality works every release.
5447
Links should be provided in the PR adding the annotation.
55-
Links should be provided in the PR adding the annotation.
56-
## Items That Cannot Auto Regenerate After Offline Expiry (252)
48+
49+
## Items Do NOT Meet the Requirement (252)
5750
### (39)
5851
#### Certificates (23)
5952
1. ns/openshift-ingress secret/router-certs-default
@@ -173,8 +166,6 @@ Links should be provided in the PR adding the annotation.
173166

174167

175168

176-
177-
178169
#### Certificate Authority Bundles (16)
179170
1. ns/openshift-config configmap/admin-kubeconfig-client-ca
180171

@@ -258,8 +249,6 @@ Links should be provided in the PR adding the annotation.
258249

259250

260251

261-
262-
263252
### Cloud Compute / Cloud Controller Manager (1)
264253
#### Certificate Authority Bundles (1)
265254
1. ns/openshift-cloud-controller-manager configmap/ccm-trusted-ca
@@ -269,8 +258,6 @@ Links should be provided in the PR adding the annotation.
269258

270259

271260

272-
273-
274261
### End User (1)
275262
#### Certificate Authority Bundles (1)
276263
1. ns/openshift-config configmap/user-ca-bundle
@@ -280,8 +267,6 @@ Links should be provided in the PR adding the annotation.
280267

281268

282269

283-
284-
285270
### Etcd (28)
286271
#### Certificates (19)
287272
1. ns/openshift-apiserver secret/etcd-client
@@ -381,8 +366,6 @@ Links should be provided in the PR adding the annotation.
381366

382367

383368

384-
385-
386369
#### Certificate Authority Bundles (9)
387370
1. ns/openshift-apiserver configmap/etcd-serving-ca
388371

@@ -431,8 +414,6 @@ Links should be provided in the PR adding the annotation.
431414

432415

433416

434-
435-
436417
### Machine Config Operator (2)
437418
#### Certificates (1)
438419
1. ns/openshift-machine-config-operator secret/machine-config-server-tls
@@ -442,8 +423,6 @@ Links should be provided in the PR adding the annotation.
442423

443424

444425

445-
446-
447426
#### Certificate Authority Bundles (1)
448427
1. ns/openshift-config configmap/initial-kube-apiserver-server-ca
449428

@@ -452,8 +431,6 @@ Links should be provided in the PR adding the annotation.
452431

453432

454433

455-
456-
457434
### Networking / cluster-network-operator (30)
458435
#### Certificate Authority Bundles (30)
459436
1. ns/openshift-apiserver configmap/trusted-ca-bundle
@@ -608,8 +585,6 @@ Links should be provided in the PR adding the annotation.
608585

609586

610587

611-
612-
613588
### apiserver-auth (3)
614589
#### Certificates (1)
615590
1. ns/openshift-oauth-apiserver secret/openshift-authenticator-certs
@@ -619,8 +594,6 @@ Links should be provided in the PR adding the annotation.
619594

620595

621596

622-
623-
624597
#### Certificate Authority Bundles (2)
625598
1. ns/openshift-config-managed configmap/oauth-serving-cert
626599

@@ -634,8 +607,6 @@ Links should be provided in the PR adding the annotation.
634607

635608

636609

637-
638-
639610
### kube-apiserver (39)
640611
#### Certificates (22)
641612
1. ns/openshift-config-managed secret/kube-controller-manager-client-cert-key
@@ -750,8 +721,6 @@ Links should be provided in the PR adding the annotation.
750721

751722

752723

753-
754-
755724
#### Certificate Authority Bundles (17)
756725
1. ns/openshift-config-managed configmap/kube-apiserver-aggregator-client-ca
757726

@@ -840,8 +809,6 @@ Links should be provided in the PR adding the annotation.
840809

841810

842811

843-
844-
845812
### kube-controller-manager (10)
846813
#### Certificates (3)
847814
1. ns/openshift-kube-controller-manager secret/csr-signer
@@ -861,8 +828,6 @@ Links should be provided in the PR adding the annotation.
861828

862829

863830

864-
865-
866831
#### Certificate Authority Bundles (7)
867832
1. ns/openshift-config-managed configmap/csr-controller-ca
868833

@@ -901,8 +866,6 @@ Links should be provided in the PR adding the annotation.
901866

902867

903868

904-
905-
906869
### kube-scheduler (1)
907870
#### Certificate Authority Bundles (1)
908871
1. ns/openshift-kube-scheduler configmap/serviceaccount-ca
@@ -912,8 +875,6 @@ Links should be provided in the PR adding the annotation.
912875

913876

914877

915-
916-
917878
### service-ca (98)
918879
#### Certificates (95)
919880
1. ns/openshift-apiserver secret/serving-cert
@@ -1393,8 +1354,6 @@ Links should be provided in the PR adding the annotation.
13931354

13941355

13951356

1396-
1397-
13981357
#### Certificate Authority Bundles (3)
13991358
1. ns/openshift-config-managed configmap/service-ca
14001359

@@ -1413,6 +1372,4 @@ Links should be provided in the PR adding the annotation.
14131372

14141373

14151374

1416-
1417-
1418-
## Items That Can Auto Regenerate After Offline Expiry (0)
1375+
## Items That DO Meet the Requirement (0)

tls/ownership/ownership.md

Lines changed: 0 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -151,8 +151,6 @@
151151

152152

153153

154-
155-
156154
### Certificate Authority Bundles (16)
157155
1. ns/openshift-config configmap/admin-kubeconfig-client-ca
158156

@@ -236,8 +234,6 @@
236234

237235

238236

239-
240-
241237
## Cloud Compute / Cloud Controller Manager (1)
242238
### Certificate Authority Bundles (1)
243239
1. ns/openshift-cloud-controller-manager configmap/ccm-trusted-ca
@@ -247,8 +243,6 @@
247243

248244

249245

250-
251-
252246
## End User (1)
253247
### Certificate Authority Bundles (1)
254248
1. ns/openshift-config configmap/user-ca-bundle
@@ -258,8 +252,6 @@
258252

259253

260254

261-
262-
263255
## Etcd (28)
264256
### Certificates (19)
265257
1. ns/openshift-apiserver secret/etcd-client
@@ -359,8 +351,6 @@
359351

360352

361353

362-
363-
364354
### Certificate Authority Bundles (9)
365355
1. ns/openshift-apiserver configmap/etcd-serving-ca
366356

@@ -409,8 +399,6 @@
409399

410400

411401

412-
413-
414402
## Machine Config Operator (2)
415403
### Certificates (1)
416404
1. ns/openshift-machine-config-operator secret/machine-config-server-tls
@@ -420,8 +408,6 @@
420408

421409

422410

423-
424-
425411
### Certificate Authority Bundles (1)
426412
1. ns/openshift-config configmap/initial-kube-apiserver-server-ca
427413

@@ -430,8 +416,6 @@
430416

431417

432418

433-
434-
435419
## Networking / cluster-network-operator (30)
436420
### Certificate Authority Bundles (30)
437421
1. ns/openshift-apiserver configmap/trusted-ca-bundle
@@ -586,8 +570,6 @@
586570

587571

588572

589-
590-
591573
## apiserver-auth (3)
592574
### Certificates (1)
593575
1. ns/openshift-oauth-apiserver secret/openshift-authenticator-certs
@@ -597,8 +579,6 @@
597579

598580

599581

600-
601-
602582
### Certificate Authority Bundles (2)
603583
1. ns/openshift-config-managed configmap/oauth-serving-cert
604584

@@ -612,8 +592,6 @@
612592

613593

614594

615-
616-
617595
## kube-apiserver (39)
618596
### Certificates (22)
619597
1. ns/openshift-config-managed secret/kube-controller-manager-client-cert-key
@@ -728,8 +706,6 @@
728706

729707

730708

731-
732-
733709
### Certificate Authority Bundles (17)
734710
1. ns/openshift-config-managed configmap/kube-apiserver-aggregator-client-ca
735711

@@ -818,8 +794,6 @@
818794

819795

820796

821-
822-
823797
## kube-controller-manager (10)
824798
### Certificates (3)
825799
1. ns/openshift-kube-controller-manager secret/csr-signer
@@ -839,8 +813,6 @@
839813

840814

841815

842-
843-
844816
### Certificate Authority Bundles (7)
845817
1. ns/openshift-config-managed configmap/csr-controller-ca
846818

@@ -879,8 +851,6 @@
879851

880852

881853

882-
883-
884854
## kube-scheduler (1)
885855
### Certificate Authority Bundles (1)
886856
1. ns/openshift-kube-scheduler configmap/serviceaccount-ca
@@ -890,8 +860,6 @@
890860

891861

892862

893-
894-
895863
## service-ca (98)
896864
### Certificates (95)
897865
1. ns/openshift-apiserver secret/serving-cert
@@ -1371,8 +1339,6 @@
13711339

13721340

13731341

1374-
1375-
13761342
### Certificate Authority Bundles (3)
13771343
1. ns/openshift-config-managed configmap/service-ca
13781344

@@ -1391,5 +1357,3 @@
13911357

13921358

13931359

1394-
1395-

0 commit comments

Comments
 (0)