Justin SB
4ac9d5c17b
Boot nodes without state store access
...
kops-controller can now serve the instance group & cluster config to
nodes, as part of the bootstrap process.
This enables nodes to boot without access to the state
store (i.e. without S3 / GCS / etc permissions)
Feature-flagged behind the KopsControllerStateStore feature-flag.
2021-01-09 13:08:48 -05:00
Ole Markus With
466dcd001e
Apply suggestions from code review
...
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-10-09 08:27:08 +02:00
Ole Markus With
809aa93634
Make use of kubelet service certificate
2020-10-09 08:27:08 +02:00
John Gardiner Myers
07220797b4
Issue the cilium etcd client cert out of kops-controller
2020-08-17 21:15:34 -07:00
Peter Rifel
bae8150e12
Update more klog v1 references to v2
...
I missed these in the previous PR. This removes the direct dependency on v1 entirely.
The kubernetes 1.19 upgrade will remove the indirect reference on v1.
2020-08-17 07:44:48 -05:00
John Gardiner Myers
d05f9a3eff
Don't issue certs for features not enabled
2020-08-16 23:40:43 -07:00
John Gardiner Myers
b6947ccaee
Use kops-controller to issue kube-router cert
2020-08-16 23:40:38 -07:00
John Gardiner Myers
8e43c1d637
Use kops-controller to issue kube-proxy cert
2020-08-16 23:36:42 -07:00
John Gardiner Myers
9e99f76a6e
Address review comments
2020-08-15 10:30:21 -07:00
John Gardiner Myers
bec273ebf1
Implement signing of kubelet cert in kops-controller
2020-08-15 10:30:20 -07:00
John Gardiner Myers
9cfa169740
Add server code to kops-controller
2020-08-15 10:30:15 -07:00
John Gardiner Myers
cfa262a81a
Authenticate from nodeup to kops-controller
2020-08-15 09:50:08 -07:00
John Gardiner Myers
9c01e1f44d
Send bootstrap query from nodeup to kops-controller
2020-08-15 09:50:08 -07:00
John Gardiner Myers
00c60ddff6
Add server code to kops-controller
2020-08-15 09:46:30 -07:00