e5c321f6af
Without this kube2sky fails to comunicate to the API server because server TLS verification fails. DNS addon doesn't work on docker setups
50 lines
1.7 KiB
Bash
50 lines
1.7 KiB
Bash
#!/bin/bash
|
|
|
|
# Copyright 2015 The Kubernetes Authors All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# This script is intended to set up the files necessary to run a master.
|
|
# It currently creates:
|
|
# * The basic auth file for access to the kubernetes api server
|
|
# * Service tokens for accessing the kubernetes api server
|
|
# * The CA cert and keys for HTTPS access to the kubernetes api server
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
|
|
# Additional address of the API server to be added to the
|
|
# list of Subject Alternative Names of the server TLS certificate
|
|
# Should contain internal IP, i.e. IP:10.0.0.1 for 10.0.0.0/24 cluster IP range
|
|
EXTRA_SANS=$1
|
|
|
|
create_token() {
|
|
echo $(cat /dev/urandom | base64 | tr -d "=+/" | dd bs=32 count=1 2> /dev/null)
|
|
}
|
|
|
|
# Create basic token authorization
|
|
echo "admin,admin,admin" > /data/basic_auth.csv
|
|
|
|
# Create HTTPS certificates
|
|
groupadd -f -r kube-cert-test
|
|
CERT_DIR=/data CERT_GROUP=kube-cert-test /make-ca-cert.sh $(hostname -i) ${EXTRA_SANS}
|
|
|
|
# Create known tokens for service accounts
|
|
echo "$(create_token),admin,admin" >> /data/known_tokens.csv
|
|
echo "$(create_token),kubelet,kubelet" >> /data/known_tokens.csv
|
|
echo "$(create_token),kube_proxy,kube_proxy" >> /data/known_tokens.csv
|
|
|
|
while true; do
|
|
sleep 3600
|
|
done
|