)]}'
{
  "commit": "568c38c74f95612fc3c236539b037ebe490302ee",
  "tree": "8380bdc8956c3843cce7fae9cf4c700576d22d87",
  "parents": [
    "7eeef0f448a4ec1737e2e63961f24f51eec5deae"
  ],
  "author": {
    "name": "Serge Bazanski",
    "email": "serge@monogon.tech",
    "time": "Mon Feb 05 14:40:39 2024 +0100"
  },
  "committer": {
    "name": "Serge Bazanski",
    "email": "serge@monogon.tech",
    "time": "Thu Feb 08 11:10:07 2024 +0000"
  },
  "message": "m/c/metroctl: use TOFU CA for Kubernetes with node pinning hack\n\nNow that we have a persisted CA certificate in metroctl, we can use it\nwhen generating a kubeconfig to verify the cluster.\n\nThere\u0027s a catch though: the presented node certificates do not have any\n\u0027global\u0027 name (just per-node names), and we can\u0027t easily tell Kubernetes\nto trust any name from a given CA. Thus, we introduce a hack to pin the\nname of the node we\u0027re connecting to within the generated kubeconfig.\n\nChange-Id: Iea6aa5c0012c793fcb42a94c3c9bf35ea5787ab1\nReviewed-on: https://review.monogon.dev/c/monogon/+/2744\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0e2476761d3e22c86104b97125a8141abd0b2fb9",
      "old_mode": 33188,
      "old_path": "metropolis/cli/metroctl/cmd_k8s_configure.go",
      "new_id": "4b29fb052295d1799f842b2028ae95906d30a53a",
      "new_mode": 33188,
      "new_path": "metropolis/cli/metroctl/cmd_k8s_configure.go"
    },
    {
      "type": "modify",
      "old_id": "2a93b57f8f81f298764ed70fab0a2dc1972b228b",
      "old_mode": 33188,
      "old_path": "metropolis/cli/metroctl/cmd_takeownership.go",
      "new_id": "18ad367c4ba096953aec0cadaa5ddc6f8e782949",
      "new_mode": 33188,
      "new_path": "metropolis/cli/metroctl/cmd_takeownership.go"
    },
    {
      "type": "modify",
      "old_id": "92a8871a0a1d66df6588c2e37f0486b69318dffd",
      "old_mode": 33188,
      "old_path": "metropolis/cli/metroctl/core/config.go",
      "new_id": "639bfc38ac10c3595e44abf505bc13c646655595",
      "new_mode": 33188,
      "new_path": "metropolis/cli/metroctl/core/config.go"
    },
    {
      "type": "modify",
      "old_id": "141ad93f8889eec7c649f4baefe0f2b669522614",
      "old_mode": 33188,
      "old_path": "metropolis/test/launch/cli/launch-multi2/main.go",
      "new_id": "f174c9842ca58cc672d6488c7a32c73e1141db93",
      "new_mode": 33188,
      "new_path": "metropolis/test/launch/cli/launch-multi2/main.go"
    }
  ]
}