search

rancher / dynamiclistener

Apache License 2.0
17 stars 61 forks source link

How does the built-in UI cert get updated? #31

Open troy256 opened 3 years ago

troy256 commented 3 years ago

This is a question in reference to the default Rancher SSL certificate attached to the Rancher UI that is Issued to "dynamic" and Issued by "dynamiclistener-ca". We notice that is occasionally renewed (the "Valid to" date changes), but cannot figure out what triggers it to renew. Neither a container restart or a container upgrade on its own seems to force it. How does it work?

xiaods commented 3 years ago

read the code. and check expired func