10 Commits

Author	SHA1	Message	Date
justinsb	4dc2c062fd	Support GCE TPM verification	2021-10-06 08:40:20 -04:00
justinsb	fad6db8beb	Refactor bootstrap verifier/authenticator into its own package ... No code changes, but this avoids a circular package dependency that we would otherwise introduce in the GCE logic.	2021-09-26 09:43:53 -04:00
John Gardiner Myers	191df58267	Verify CA keypair IDs for kops-controller-issued certs	2021-07-14 08:15:28 -07:00
John Gardiner Myers	0dee785ebf	Pass multiple CA certs to kops-controller client	2021-06-19 10:50:53 -07:00
John Gardiner Myers	42bf3ee85b	Seed the random number generator on AWS	2021-06-17 22:59:43 -07:00
Justin SB	4ac9d5c17b	Boot nodes without state store access ... kops-controller can now serve the instance group & cluster config to nodes, as part of the bootstrap process. This enables nodes to boot without access to the state store (i.e. without S3 / GCS / etc permissions) Feature-flagged behind the KopsControllerStateStore feature-flag.	2021-01-09 13:08:48 -05:00
John Gardiner Myers	1a253dc574	Send the STS queries to the local region	2020-08-15 10:30:22 -07:00
John Gardiner Myers	c5871df319	Get kubelet certificate from kops-controller	2020-08-15 10:30:20 -07:00
John Gardiner Myers	cfa262a81a	Authenticate from nodeup to kops-controller	2020-08-15 09:50:08 -07:00
John Gardiner Myers	9c01e1f44d	Send bootstrap query from nodeup to kops-controller	2020-08-15 09:50:08 -07:00