k3s/pkg/kubelet/certificate
Clayton Coleman fde87329cb
bootstrap: Use kubeconfig contents as seed for cert dir if necessary
kubeadm uses certificate rotation to replace the initial high-power
cert provided in --kubeconfig with a less powerful certificate on
the masters. This requires that we pass the contents of the client
config certData and keyData down into the cert store to populate
the initial client.

Add better comments to describe why the flow is required. Add a test
that verifies initial cert contents are written to disk. Change
the cert manager to not use MustRegister for prometheus so that
it can be tested.
2018-11-17 19:52:12 -05:00
..
bootstrap bootstrap: Use kubeconfig contents as seed for cert dir if necessary 2018-11-17 19:52:12 -05:00
BUILD Move from glog to klog 2018-11-10 07:50:31 -05:00
OWNERS certificates subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
kubelet.go bootstrap: Use kubeconfig contents as seed for cert dir if necessary 2018-11-17 19:52:12 -05:00
kubelet_test.go Derive kubelet serving certificate CSR template from node status addresses 2018-07-10 14:33:48 -04:00
transport.go Move from glog to klog 2018-11-10 07:50:31 -05:00
transport_test.go Restore "Make bootstrap client cert loading part of rotation"" 2018-11-17 13:44:58 -05:00