Files
Andrew Martinez 1b180d14e8 fix #3933 add controller to enrollment response (#3947)
* fix #3933 add controller to enrollment response

- adds the cluster's controllers to ott, ottca, updb, and token enrollment
  responses with client and OIDC API addresses only
- synthesizes the running controller with its API addresses in non-HA mode
  so the list is never empty
- adds --not-before to ziti pki create for backdated test CAs
- replaces the test PKI with a SPIFFE-capable, ziti pki generated and managed
  one and rewires the config sets
- tests the controller list across ott/ottca/updb/token, non-HA, and raft

* fix missing wildcard cert from new PKI

* go mod tidy
2026-06-29 11:44:23 -04:00

69 lines
4.1 KiB
Plaintext

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----