mirror of https://github.com/kubernetes/kops.git
Merge pull request #8661 from tanjunchen/add-flag
support apiserver --kubelet-certificate-authority flag
This commit is contained in:
commit
45957e15a1
|
@ -1054,6 +1054,10 @@ spec:
|
|||
description: InsecurePort is the port the insecure api runs
|
||||
format: int32
|
||||
type: integer
|
||||
kubeletCertificateAuthority:
|
||||
description: KubeletCertificateAuthority is the path of a certificate
|
||||
authority for secure communication between api and kubelet.
|
||||
type: string
|
||||
kubeletClientCertificate:
|
||||
description: KubeletClientCertificate is the path of a certificate
|
||||
for secure communication between api and kubelet
|
||||
|
|
|
@ -315,6 +315,8 @@ type KubeAPIServerConfig struct {
|
|||
RuntimeConfig map[string]string `json:"runtimeConfig,omitempty" flag:"runtime-config"`
|
||||
// KubeletClientCertificate is the path of a certificate for secure communication between api and kubelet
|
||||
KubeletClientCertificate string `json:"kubeletClientCertificate,omitempty" flag:"kubelet-client-certificate"`
|
||||
// KubeletCertificateAuthority is the path of a certificate authority for secure communication between api and kubelet.
|
||||
KubeletCertificateAuthority string `json:"kubeletCertificateAuthority,omitempty" flag:"kubelet-certificate-authority"`
|
||||
// KubeletClientKey is the path of a private to secure communication between api and kubelet
|
||||
KubeletClientKey string `json:"kubeletClientKey,omitempty" flag:"kubelet-client-key"`
|
||||
// AnonymousAuth indicates if anonymous authentication is permitted
|
||||
|
|
|
@ -315,6 +315,8 @@ type KubeAPIServerConfig struct {
|
|||
RuntimeConfig map[string]string `json:"runtimeConfig,omitempty" flag:"runtime-config"`
|
||||
// KubeletClientCertificate is the path of a certificate for secure communication between api and kubelet
|
||||
KubeletClientCertificate string `json:"kubeletClientCertificate,omitempty" flag:"kubelet-client-certificate"`
|
||||
// KubeletCertificateAuthority is the path of a certificate authority for secure communication between api and kubelet.
|
||||
KubeletCertificateAuthority string `json:"kubeletCertificateAuthority,omitempty" flag:"kubelet-certificate-authority"`
|
||||
// KubeletClientKey is the path of a private to secure communication between api and kubelet
|
||||
KubeletClientKey string `json:"kubeletClientKey,omitempty" flag:"kubelet-client-key"`
|
||||
// AnonymousAuth indicates if anonymous authentication is permitted
|
||||
|
|
|
@ -3363,6 +3363,7 @@ func autoConvert_v1alpha1_KubeAPIServerConfig_To_kops_KubeAPIServerConfig(in *Ku
|
|||
out.APIServerCount = in.APIServerCount
|
||||
out.RuntimeConfig = in.RuntimeConfig
|
||||
out.KubeletClientCertificate = in.KubeletClientCertificate
|
||||
out.KubeletCertificateAuthority = in.KubeletCertificateAuthority
|
||||
out.KubeletClientKey = in.KubeletClientKey
|
||||
out.AnonymousAuth = in.AnonymousAuth
|
||||
out.KubeletPreferredAddressTypes = in.KubeletPreferredAddressTypes
|
||||
|
@ -3463,6 +3464,7 @@ func autoConvert_kops_KubeAPIServerConfig_To_v1alpha1_KubeAPIServerConfig(in *ko
|
|||
out.APIServerCount = in.APIServerCount
|
||||
out.RuntimeConfig = in.RuntimeConfig
|
||||
out.KubeletClientCertificate = in.KubeletClientCertificate
|
||||
out.KubeletCertificateAuthority = in.KubeletCertificateAuthority
|
||||
out.KubeletClientKey = in.KubeletClientKey
|
||||
out.AnonymousAuth = in.AnonymousAuth
|
||||
out.KubeletPreferredAddressTypes = in.KubeletPreferredAddressTypes
|
||||
|
|
|
@ -315,6 +315,8 @@ type KubeAPIServerConfig struct {
|
|||
RuntimeConfig map[string]string `json:"runtimeConfig,omitempty" flag:"runtime-config"`
|
||||
// KubeletClientCertificate is the path of a certificate for secure communication between api and kubelet
|
||||
KubeletClientCertificate string `json:"kubeletClientCertificate,omitempty" flag:"kubelet-client-certificate"`
|
||||
// KubeletCertificateAuthority is the path of a certificate authority for secure communication between api and kubelet.
|
||||
KubeletCertificateAuthority string `json:"kubeletCertificateAuthority,omitempty" flag:"kubelet-certificate-authority"`
|
||||
// KubeletClientKey is the path of a private to secure communication between api and kubelet
|
||||
KubeletClientKey string `json:"kubeletClientKey,omitempty" flag:"kubelet-client-key"`
|
||||
// AnonymousAuth indicates if anonymous authentication is permitted
|
||||
|
|
|
@ -3633,6 +3633,7 @@ func autoConvert_v1alpha2_KubeAPIServerConfig_To_kops_KubeAPIServerConfig(in *Ku
|
|||
out.APIServerCount = in.APIServerCount
|
||||
out.RuntimeConfig = in.RuntimeConfig
|
||||
out.KubeletClientCertificate = in.KubeletClientCertificate
|
||||
out.KubeletCertificateAuthority = in.KubeletCertificateAuthority
|
||||
out.KubeletClientKey = in.KubeletClientKey
|
||||
out.AnonymousAuth = in.AnonymousAuth
|
||||
out.KubeletPreferredAddressTypes = in.KubeletPreferredAddressTypes
|
||||
|
@ -3733,6 +3734,7 @@ func autoConvert_kops_KubeAPIServerConfig_To_v1alpha2_KubeAPIServerConfig(in *ko
|
|||
out.APIServerCount = in.APIServerCount
|
||||
out.RuntimeConfig = in.RuntimeConfig
|
||||
out.KubeletClientCertificate = in.KubeletClientCertificate
|
||||
out.KubeletCertificateAuthority = in.KubeletCertificateAuthority
|
||||
out.KubeletClientKey = in.KubeletClientKey
|
||||
out.AnonymousAuth = in.AnonymousAuth
|
||||
out.KubeletPreferredAddressTypes = in.KubeletPreferredAddressTypes
|
||||
|
|
Loading…
Reference in New Issue