12 Commits

Author	SHA1	Message	Date
justinsb	8220211655	nodeup: store the CloudProvider in the context ... This is a bit simpler than fetching it from the cluster every time, and also can allow things like mixed-cloud clusters (in future).	2021-12-11 09:16:03 -05:00
justinsb	4cf52d0e51	GCE: Support kops-controller, including in gossip mode ... We discover the kops-controller in gossip mode using seeding code that calls into the GCE API, just like gossip itself does. We refactor the gossip code into a shared gcediscovery library with minimal dependencies.	2021-12-04 11:51:41 -05:00
justinsb	4dc2c062fd	Support GCE TPM verification	2021-10-06 08:40:20 -04:00
justinsb	fad6db8beb	Refactor bootstrap verifier/authenticator into its own package ... No code changes, but this avoids a circular package dependency that we would otherwise introduce in the GCE logic.	2021-09-26 09:43:53 -04:00
John Gardiner Myers	191df58267	Verify CA keypair IDs for kops-controller-issued certs	2021-07-14 08:15:28 -07:00
John Gardiner Myers	0dee785ebf	Pass multiple CA certs to kops-controller client	2021-06-19 10:50:53 -07:00
John Gardiner Myers	42bf3ee85b	Seed the random number generator on AWS	2021-06-17 22:59:43 -07:00
Justin SB	4ac9d5c17b	Boot nodes without state store access ... kops-controller can now serve the instance group & cluster config to nodes, as part of the bootstrap process. This enables nodes to boot without access to the state store (i.e. without S3 / GCS / etc permissions) Feature-flagged behind the KopsControllerStateStore feature-flag.	2021-01-09 13:08:48 -05:00
John Gardiner Myers	1a253dc574	Send the STS queries to the local region	2020-08-15 10:30:22 -07:00
John Gardiner Myers	c5871df319	Get kubelet certificate from kops-controller	2020-08-15 10:30:20 -07:00
John Gardiner Myers	cfa262a81a	Authenticate from nodeup to kops-controller	2020-08-15 09:50:08 -07:00
John Gardiner Myers	9c01e1f44d	Send bootstrap query from nodeup to kops-controller	2020-08-15 09:50:08 -07:00