mirror of https://github.com/k3s-io/k3s
2164f09bf9
Automatic merge from submit-queue (batch tested with PRs 50832, 51119, 51636, 48921, 51712) kubeadm: Add support for using an external CA whose key is never stored in the cluster We allow a kubeadm user to use an external CA by checking to see if ca.key is missing and skipping cert checks and kubeconfig generation if ca.key is missing. We also pass an empty arg --cluster-signing-key-file="" to kube controller manager so that the csr signer doesn't start. **What this PR does / why we need it**: This PR allows the kubeadm certs phase and kubeconfig phase to be skipped if the ca.key is missing but all other certs are present. **Which issue this PR fixes** : Fixes kubernetes/kubeadm/issues/280 **Special notes for your reviewer**: @luxas @mikedanese @fabriziopandini **Release note**: ```release-note kubeadm: Add support for using an external CA whose key is never stored in the cluster ``` |
||
|---|---|---|
| .. | ||
| clicheck | ||
| cloud-controller-manager | ||
| gendocs | ||
| genkubedocs | ||
| genman | ||
| genswaggertypedocs | ||
| genutils | ||
| genyaml | ||
| gke-certificates-controller | ||
| hyperkube | ||
| importverifier | ||
| kube-apiserver | ||
| kube-controller-manager | ||
| kube-proxy | ||
| kubeadm | ||
| kubectl | ||
| kubelet | ||
| kubemark | ||
| linkcheck | ||
| BUILD | ||
| OWNERS | ||