mirror of https://github.com/k3s-io/k3s
45 lines
1.5 KiB
Bash
45 lines
1.5 KiB
Bash
#!/bin/bash
|
|
|
|
# Copyright 2015 The Kubernetes Authors All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# This script is intended to set up the files necessary to run a master.
|
|
# It currently creates:
|
|
# * The basic auth file for access to the kubernetes api server
|
|
# * Service tokens for accessing the kubernetes api server
|
|
# * The CA cert and keys for HTTPS access to the kubernetes api server
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
|
|
create_token() {
|
|
echo $(cat /dev/urandom | base64 | tr -d "=+/" | dd bs=32 count=1 2> /dev/null)
|
|
}
|
|
|
|
# Create basic token authorization
|
|
echo "admin,admin,admin" > /data/basic_auth.csv
|
|
|
|
# Create HTTPS certificates
|
|
groupadd -f -r kube-cert-test
|
|
CERT_DIR=/data CERT_GROUP=kube-cert-test /make-ca-cert.sh $(hostname -i)
|
|
|
|
# Create known tokens for service accounts
|
|
echo "$(create_token),admin,admin" >> /data/known_tokens.csv
|
|
echo "$(create_token),kubelet,kubelet" >> /data/known_tokens.csv
|
|
echo "$(create_token),kube_proxy,kube_proxy" >> /data/known_tokens.csv
|
|
|
|
while true; do
|
|
sleep 3600
|
|
done
|