14 commits

Author	SHA1	Message	Date
Derek Nola	fa69c45926	Align Value CLI ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2025-04-07 09:08:22 -07:00
Derek Nola	786efd1bff	Mark rotate-keys as GA ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2025-04-07 09:08:22 -07:00
Derek Nola	aea3703f68	Implement secrets-encryption secretbox provider ... - Add testlet for new provider switch - Handle migration between providers - Add exception for criticalcontrolargs Signed-off-by: Derek Nola <derek.nola@suse.com>	2025-04-07 09:08:22 -07:00
Derek Nola	ac38633c71	Migrate to UrfaveCLI v2 (#11831) ... * Bump rootlesskit tov 1.1.1, last of the v1 line * Migrate to urfavecli v2 * Disable StringSlice seperattion Signed-off-by: Derek Nola <derek.nola@suse.com>	2025-03-12 09:02:45 -07:00
Derek Nola	fa11850563	Readd k3s secrets-encrypt rotate-keys with correct support for KMSv2 GA (#9340) ... * Reorder copy order for caching * Enable longer http timeout requests Signed-off-by: Derek Nola <derek.nola@suse.com> * Setup reencrypt controller to run on all apiserver nodes * Fix reencryption for disabling secrets encryption, reenable drone tests	2024-02-09 11:37:37 -08:00
Derek Nola	3190a5faa2	Remove rotate-keys subcommand (#9079) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2023-12-20 12:26:41 -08:00
Derek Nola	51f1a5a0ab	Review comments and fixes ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2023-08-25 14:17:00 -06:00
Derek Nola	42c2ac95e2	CLI + Backend for Secrets Encryption v3 ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2023-08-25 14:17:00 -06:00
Derek Nola	32086717fc	Ensure flag type consistency (#6852) ... * Convert all flags to pointers for consistency Signed-off-by: Derek Nola <derek.nola@suse.com>	2023-01-31 12:57:48 -08:00
Derek Nola	b5d39df929	Deprecation of etcd-snapshot command in v1.26 (#6575) ... * Consolidate etcd snapshot commands * Consolidate secrets encryption commands * Move etcd-snapshot to fatal error stage. Signed-off-by: Derek Nola <derek.nola@suse.com>	2022-12-05 15:28:01 -08:00
Luther Monson	9a849b1bb7	[master] changing package to k3s-io (#4846) ... * changing package to k3s-io Signed-off-by: Luther Monson <luther.monson@gmail.com> Co-authored-by: Derek Nola <derek.nola@suse.com>	2022-03-02 15:47:27 -08:00
Derek Nola	a698ece9c5	Add --json flag for k3s secrets-encrypt status (#5127) ... * Add json flag for secrets-encrypt status Signed-off-by: Derek Nola <derek.nola@suse.com>	2022-02-28 09:14:32 -08:00
Derek Nola	d583a99f62	Add server flag to access nonlocal/nondefault k3s server (#5016) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2022-01-27 10:53:38 -08:00
Derek Nola	bcb662926d	Secrets-encryption rotation (#4372) ... * Regular CLI framework for encrypt commands * New secrets-encryption feature * New integration test * fixes for flaky integration test CI * Fix to bootstrap on restart of existing nodes * Consolidate event recorder Signed-off-by: Derek Nola <derek.nola@suse.com>	2021-12-07 14:31:32 -08:00