John Gardiner Myers
321035f460
Allow cert/key file tasks to specify owner
2020-08-15 10:30:20 -07:00
John Gardiner Myers
9d7a93e124
Issue kubelet-api cert in nodeup
2020-06-13 16:35:44 -07:00
Justin SB
bf11a65bd3
Try wrapping pkix.Name
2020-06-09 20:24:09 -07:00
John Gardiner Myers
bacaf87f0e
Don't try building TLS for etcd-manager if not using etcd-manager
2020-06-08 10:04:28 -07:00
John Gardiner Myers
8b9145f6c4
Create nodetasks.IssueCert()
2020-06-05 08:00:38 -07:00
John Gardiner Myers
d64e760d5b
Use pki.IssueCert() for nodeup client certs
2020-06-04 10:26:45 -07:00
John Gardiner Myers
935d757a7c
Use KOPS_RSA_PRIVATE_KEY_SIZE for more keys
2020-04-26 20:17:02 -07:00
Justin SB
b1f8f84306
Code changes for 1.15
2019-08-25 16:00:39 -04:00
Justin SB
3e33ac7682
Change code from glog to klog
...
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog. That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Justin SB
f0241294ac
Refactored out repeated joining code
...
Thanks for suggestion @chrisz100!
2019-03-19 09:48:16 -07:00
Justin SB
31f408c978
Support etcd-manager in kops 1.12
...
In 1.12 (kops & kubenetes):
* We default etcd-manager on
* We default to etcd3
* We default to full TLS for etcd (client and peer)
* We stop allowing external access to etcd
2019-03-14 23:13:06 -04:00
Justin SB
dd7533398d
Support etcd-manager v3, suitable for backporting
...
Add etcd-manager v3 in a way that we can safely backport.
2019-01-29 23:51:26 -05:00