Tom MeadowsandGitHub 9711883a2f kube/certs: honour Retry-After and skip escalation on transient errors (#20376) ...

Rate-limit responses from the CA now use the Retry-After hint (via
client/local.RateLimitRetryAfter) instead of walking the local retry
schedule.

Failures that never reached the CA -- context deadline/cancel,
ECONNREFUSED, ECONNRESET, EHOSTUNREACH, EPIPE, and net.Error
timeouts -- retry at retrySchedule[0] without advancing retryCount.

Updates tailscale/corp#42164

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>

2026-07-14 13:22:01 +01:00

..

certs_test.go

kube/certs: honour Retry-After and skip escalation on transient errors (#20376)

2026-07-14 13:22:01 +01:00

certs.go

kube/certs: honour Retry-After and skip escalation on transient errors (#20376)

2026-07-14 13:22:01 +01:00