10 Commits

Author	SHA1	Message	Date
justinsb	fad6db8beb	Refactor bootstrap verifier/authenticator into its own package ... No code changes, but this avoids a circular package dependency that we would otherwise introduce in the GCE logic.	2021-09-26 09:43:53 -04:00
John Gardiner Myers	191df58267	Verify CA keypair IDs for kops-controller-issued certs	2021-07-14 08:15:28 -07:00
Justin SB	4ac9d5c17b	Boot nodes without state store access ... kops-controller can now serve the instance group & cluster config to nodes, as part of the bootstrap process. This enables nodes to boot without access to the state store (i.e. without S3 / GCS / etc permissions) Feature-flagged behind the KopsControllerStateStore feature-flag.	2021-01-09 13:08:48 -05:00
Peter Rifel	bae8150e12	Update more klog v1 references to v2 ... I missed these in the previous PR. This removes the direct dependency on v1 entirely. The kubernetes 1.19 upgrade will remove the indirect reference on v1.	2020-08-17 07:44:48 -05:00
John Gardiner Myers	d05f9a3eff	Don't issue certs for features not enabled	2020-08-16 23:40:43 -07:00
John Gardiner Myers	9e99f76a6e	Address review comments	2020-08-15 10:30:21 -07:00
John Gardiner Myers	bec273ebf1	Implement signing of kubelet cert in kops-controller	2020-08-15 10:30:20 -07:00
John Gardiner Myers	cfa262a81a	Authenticate from nodeup to kops-controller	2020-08-15 09:50:08 -07:00
John Gardiner Myers	9c01e1f44d	Send bootstrap query from nodeup to kops-controller	2020-08-15 09:50:08 -07:00
John Gardiner Myers	00c60ddff6	Add server code to kops-controller	2020-08-15 09:46:30 -07:00