John Gardiner Myers
7c3e32369a
Refactor Context into separate cloudup and nodeup types
2022-12-17 17:42:46 -08:00
Ciprian Hacman
8f79c9bd68
Replace fi.Bool/Float*/Int*/String() with fi.PtrTo()
2022-11-19 03:45:22 +02:00
Ole Markus With
e7a77e808b
Use cabundle for etcd CA files
2022-07-28 22:27:19 +02:00
John Gardiner Myers
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
John Gardiner Myers
a33a30a859
Refactor out some legacy interfaces
2021-07-10 23:23:12 -07:00
John Gardiner Myers
c35d101a89
Refactor keysets for etcd-manager
2021-07-08 18:46:03 -07:00
John Gardiner Myers
3de05a500e
Refactor etcd-clients-ca keyset for api-server
2021-06-30 18:55:30 -07:00
Ole Markus With
f80b550c7a
Use internal name for cilium etcd if we do not enable api server nodes
2021-06-16 08:27:26 +02:00
Ole Markus With
a3cfe8d098
Don't try to build etcd-manager secrets for cilium twice
2021-06-15 12:42:11 +02:00
Alexander Block
bb52334222
Make the events etcd cluster optional
2021-05-20 08:05:42 +02:00
Ole Markus With
20bd724f5e
Add support for scaling out the control plane with dedicated apiserver nodes
...
Ensure apiserver role can only be used on AWS (because of firewalling)
Apply api-server label to CP as well
Consolidate node not ready validation message
Guard apiserver nodes with a feature flag
Rename Apiserver role to APIServer
Add an integration test for apiserver nodes
Rename Apiserver role to APIServer
Enumerate all roles in rolling update docs
Apply suggestions from code review
Co-authored-by: Steven E. Harris <seh@panix.com>
2021-03-20 20:57:00 +01:00
John Gardiner Myers
321035f460
Allow cert/key file tasks to specify owner
2020-08-15 10:30:20 -07:00
John Gardiner Myers
9d7a93e124
Issue kubelet-api cert in nodeup
2020-06-13 16:35:44 -07:00
Justin SB
bf11a65bd3
Try wrapping pkix.Name
2020-06-09 20:24:09 -07:00
John Gardiner Myers
bacaf87f0e
Don't try building TLS for etcd-manager if not using etcd-manager
2020-06-08 10:04:28 -07:00
John Gardiner Myers
8b9145f6c4
Create nodetasks.IssueCert()
2020-06-05 08:00:38 -07:00
John Gardiner Myers
d64e760d5b
Use pki.IssueCert() for nodeup client certs
2020-06-04 10:26:45 -07:00
John Gardiner Myers
935d757a7c
Use KOPS_RSA_PRIVATE_KEY_SIZE for more keys
2020-04-26 20:17:02 -07:00
Justin SB
b1f8f84306
Code changes for 1.15
2019-08-25 16:00:39 -04:00
Justin SB
3e33ac7682
Change code from glog to klog
...
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog. That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Justin SB
f0241294ac
Refactored out repeated joining code
...
Thanks for suggestion @chrisz100!
2019-03-19 09:48:16 -07:00
Justin SB
31f408c978
Support etcd-manager in kops 1.12
...
In 1.12 (kops & kubenetes):
* We default etcd-manager on
* We default to etcd3
* We default to full TLS for etcd (client and peer)
* We stop allowing external access to etcd
2019-03-14 23:13:06 -04:00
Justin SB
dd7533398d
Support etcd-manager v3, suitable for backporting
...
Add etcd-manager v3 in a way that we can safely backport.
2019-01-29 23:51:26 -05:00