Lubomir I. Ivanov 431fd630ff kubeadm: enable kubelet client certificate rotation on primary CP nodes ...

- Don't always print to stdout that the kubelet is starting.
instead delegate this to the callers of TryStartKubelet.
- Add a new root kubeadm init phase called "kubelet-finalize"
- Add a sub-phase to "kubelet-finalize"
called "experimental-cert-rotation"
- "cert-rotation" performs the following actions:
  - tries to guess if kubelet client cert rotation is enabled
  - update the kubelet.conf to use the rotatable cert/key

2019-11-13 15:49:33 +02:00

3.2 KiB

Raw Blame History

View Raw