1
0
Fork 0
mirror of https://github.com/poseidon/typhoon synced 2024-06-09 00:06:13 +02:00
typhoon/digital-ocean
Dalton Hubble 804dfea0f9 Add kubeconfig's for kube-scheduler and kube-controller-manager
* Generate TLS client certificates for `kube-scheduler` and
`kube-controller-manager` with `system:kube-scheduler` and
`system:kube-controller-manager` CNs
* Template separate kubeconfigs for kube-scheduler and
kube-controller manager (`scheduler.conf` and
`controller-manager.conf`). Rename admin for clarity
* Before v1.16.0, Typhoon scheduled a self-hosted control
plane, which allowed the steady-state kube-scheduler and
kube-controller-manager to use a scoped ServiceAccount.
With a static pod control plane, separate CN TLS client
certificates are the nearest equiv.
* https://kubernetes.io/docs/setup/best-practices/certificates/
* Remove unused Kubelet certificate, TLS bootstrap is used
instead
2020-12-01 22:02:15 -08:00
..
fedora-coreos/kubernetes Add kubeconfig's for kube-scheduler and kube-controller-manager 2020-12-01 22:02:15 -08:00
flatcar-linux/kubernetes Add kubeconfig's for kube-scheduler and kube-controller-manager 2020-12-01 22:02:15 -08:00