Skip to content

podcertcontroller: signers share one certificate lifetime check - #3603

Open
Eric Curtin (ericcurtin) wants to merge 2 commits into
agent-substrate:mainfrom
ericcurtin:podcert-lifetime
Open

Eric Curtin (ericcurtin) wants to merge 2 commits into
agent-substrate:mainfrom
ericcurtin:podcert-lifetime

Conversation

@ericcurtin

Copy link
Copy Markdown
Contributor

podidentity and servicedns signers dereferenced MaxExpirationSeconds without a nil check, and neither enforced the one hour minimum postgres did. All three now use podcertificate.Lifetime.

Fixes #3034

AI use: AI-assisted (opencode). I reviewed it. Unit tests, lint and boilerplate checks run locally.

  • Tests pass
  • Docs updated

podidentity and servicedns dereferenced MaxExpirationSeconds without a nil
check, and neither enforced the one hour minimum that postgres did.

Signed-off-by: Eric Curtin <eric.curtin@docker.com>
@ericcurtin

Copy link
Copy Markdown
Contributor Author

Dmitry Berkovich (@dberkov) Lior Lieberman (@LiorLieberman) PTAL when you get a chance. Thank you!

Signed-off-by: Eric Curtin <eric.curtin@docker.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Guard MaxExpirationSeconds nil pointer and minimum lifetime in podidentitysigner and servicednssigner

1 participant