Andrey Smirnov 92314e47bf

refactor: use controllers/resources to feed trustd with data ...

This is mostly same as the way `apid` consumes certificates generated by
`machined` via COSI API connection.

Service `trustd` consumes two resources:

* `secrets.Trustd` which contains `trustd` server TLS certificates and
  it gets refreshed as e.g. node IP changes
* `secrets.OSRoot` which contains Talos API CA and join token

This PR fixes an issue with `trustd` certs not always including all IPs
of the node, as previously `trustd` certs will only capture addresses of
the node at the moment of `trustd` startup.

Another thing is that refactoring allows to dynamically change API CA
and join token. This needs more work, but `trustd` should now pick up
changes without any additional changes.

Fixes #5863

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>

2022-08-04 23:45:34 +04:00

..

internal

refactor: use controllers/resources to feed trustd with data

2022-08-04 23:45:34 +04:00

main.go

refactor: use controllers/resources to feed trustd with data

2022-08-04 23:45:34 +04:00