Justin Santa Barbara
7f3d3544c4
Refactor: clean up SecretStore to not use KeystoreItem
...
More moving to use API objects, except in this case we eventually want
to deprecate SecretStore entirely.
2017-12-19 11:43:43 -05:00
Kashif Saadat
79eef3cc6c
Support replacing kops secrets via force flag
2017-11-21 11:47:03 +00:00
chrislovecnm
1e418c3e13
more goimport updates
2017-11-04 10:03:02 -06:00
Justin Santa Barbara
a4a58d277d
Mirroring - Fixes from code review
2017-09-30 22:05:14 -04:00
Justin Santa Barbara
559d885480
Mirror keystore & secretstore
...
This allows us to have our API objects in kops-server, but our
configuration on S3 or GCS.
2017-09-24 00:09:02 -04:00
Justin Santa Barbara
914fe68ee2
SecretStore and CAStore implementations backed by API
...
Not yet wired in
2017-09-17 23:01:13 -04:00
Justin Santa Barbara
106875115d
Support for deleting tokens & keypairs
...
This now allows for deleting all secrets, which means we can have a
procedure for rotating all keys.
2017-09-09 01:04:45 -04:00
chrislovecnm
8fa2aac99f
fixing more headers
2016-10-15 19:20:56 -06:00
Justin Santa Barbara
5f8d68ec85
Refactor shared packages into util directory
2016-09-25 18:27:09 -04:00
Justin Santa Barbara
af841d50c0
Create more consistent secret CLI
2016-08-04 22:18:29 -04:00
Justin Santa Barbara
39a3d71def
Revert "Import SSH public key into the keystore"
...
This reverts commit bd3ab166b7 .
2016-07-29 13:06:37 -04:00
Justin Santa Barbara
bd3ab166b7
Import SSH public key into the keystore
...
This means it only needs to be specified during `kops create`. We
remove the option from `kops update` for consistency.
This will shortly be manageable using the secrets functionality.
Fix #221
2016-07-29 00:45:37 -04:00
Justin Santa Barbara
d427858477
Rename to kops
...
The upup tool is now called kops, and we have moved repos
2016-06-30 09:25:25 -04:00
Justin Santa Barbara
93f634b428
upup: use vfs for secretstore/keystore
...
This is needed so that we can have encrypted storage and complex keys
(e.g. multiple CA certs). Multiple CA certs are needed for an in-place
upgrade from kube-up v1.
2016-06-23 08:58:54 -04:00
Justin Santa Barbara
338f158d22
upup: Add VFS for storing state in S3 or locally
...
This also fixes a few concurrency issues, because we're writing in one
place now.
2016-06-09 23:08:10 -04:00
Justin Santa Barbara
a4408f76be
upup: better secrets support
...
Start creating commands to manage secrets, and also stop implicitly
creating them.
2016-05-30 18:47:20 -04:00
Justin Santa Barbara
d4c2cfaae7
Initial version of upup: cloudup & nodeup
...
* GCE support only
* Key and secret generation
* "Direct mode" makes API calls
* "Dry run mode" previews the changes
* Terraform output (though key generation not working for master ip)
* cloud-init output (though debian image does not ship with cloud-init)
2016-05-06 16:01:33 -04:00