Matthew Mosesohn
f0c0390646
Fix creation and sync of etcd certs
Admin certs only go to etcd nodes
Only generate cert-data for nodes that need sync
8 years ago
Matthew Mosesohn
ad796d188d
Individual etcd ssl certs
Includes hooks for triggering calico, kubelet, and kube-apiserver restarts
if etcd certs changed.
8 years ago
Matthew Mosesohn
a32cd85eb7
Add etcd TLS support
8 years ago
Matthew Mosesohn
84052ff0b6
use nginx proxy on non-master nodes to proxy apiserver traffic
Also adds all masters by hostname and localhost/127.0.0.1 to
apiserver SSL certificate.
Includes documentation update on how localhost loadbalancer works.
8 years ago
Smana
4f627baf71
generate secrets on first master
8 years ago
Spencer Smith
20adb604cc
confirmed working change to mktemp command
9 years ago
Smana
91fca69aa0
generate secrets on deployment machine
test travis with sudo=true instead of required
9 years ago
Smaine Kahlouch
d1e19563b0
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs
9 years ago