GitLab

* Support opensuseleap, opensusetumbleweed, sles
* Add efs-utils version info field to self-signed certificate
* Check if the localhost stunnel port can be connected before performing the mount operation to avoid connection refused
* Fix the issue that socket is not opened in container network namespace

Fix an issue where watchdog crashed during restart because stunnel was killed and pid key was removed from state file

Fixes an issue with watchdog where it sometimes fails to restart stunnels in efs-csi-driver container
* Fixes an issue where fs cannot be mounted with tls using systemd.automount-units due to mountpoint check

Revert "Fixes an issue with watchdog where it sometimes fails to restart stunnels in efs-csi-driver container"

This reverts commit 87a868ec.

Fixes an issue with watchdog where it sometimes fails to restart stunnels in efs-csi-driver container

* Fix an issue where subprocess was not killed successfully
* Stop emitting unrecognized init system supervisord if the watchdog daemon has already been launched by supervisor
* Support Fedora
* Change version format to Major-Minor.ReleaseId

Enable region sourcing from efs-utils configuration file and fix stunnel exec path issue in openSUSE

* Support new option: netns, enable file system to mount in given network namespace
* Support new option: awscredsuri, enable sourcing iam authorization from aws credentials relative uri
* List openssl and util-linux as package dependency for IAM/AP authorization and command nsenter to mount file system to given network namespace

* Support retrieving metadata using IMDSv2
* Allow specification of interval for certificate renewal in the config file
* Fix retrieval of instance metadata on ECS

* Ensure that certificate renewals always use the original credentials source
* Include file system ID in all client TLS certificates
* Updates to man page and README

Fixes the mount issue with full DNS name in the AWS China Regions; Upgrades unit test coverage version dependency to enable accurate python3.8 coverage test

Added region localization, Integrate repository with CircleCI to enable package build visualization, Unit tests bug fixes for python3.5

The default stunnel idle timeout is many hours. By setting it to a value based
on the NFS lease length we can recover from network partitions sooner.

- Fixes Python shebangs to work on systems without a default "python" version.
- Fixes watchdog process not being properly started on systemd systems.

To use OCSP, the client accessing EFS must be able to reach the Amazon Certificate
Authority (CA). To maximize file system availability in the event that the CA is
not reachable from your VPC, the EFS mount helper no longer enables OCSP by default.

See here for more info:

https://aws.amazon.com/about-aws/whats-new/2019/07/configuration-update-for-amazon-efs-encryption-data-in-transit/

add test for additional unexpected arguments

increment version number

This prevents waiting for a close_notify when shutting down a connection.

* Add a manpage for mount.efs
* Improve warning messages in the mount helper
* Improve stunnel cleanup functionality

* Improve detection of root user
* Require OCSPaia and checkHost options for stunnel
* Install and use a hand-managed trust store

Includes a mount helper utility (mount.efs), an associated watchdog
process, unit tests, and build scripts.

The utility simplifies mounting and using EFS file systems and
optionally enables clients to mount over a TLS tunnel.