d14c27a347
In v1alpha3's, control plane component config options were nested directly into the ClusterConfiguration structure. This is cluttering the config structure and makes it hard to maintain. Therefore the control plane config options must be separated into different substructures in order to graduate the format to beta. This change does the following: - Introduces a new structure called ControlPlaneComponent, that contains fields common to all control plane component types. These are currently extra args and extra volumes. - Introduce a new structure called APIServer that contains ControlPlaneComponent and APIServerCertSANs field (from ClusterConfiguration) - Replace all API Server, Scheduler and Controller Manager options in ClusterConfiguration with APIServer, ControllerManager and Scheduler fields of APIServer and ControlPlaneComponent types. Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
59 lines
1.9 KiB
Go
59 lines
1.9 KiB
Go
/*
|
|
Copyright 2016 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package certs
|
|
|
|
/*
|
|
|
|
PHASE: CERTIFICATES
|
|
|
|
INPUTS:
|
|
From InitConfiguration
|
|
.API.AdvertiseAddress is an optional parameter that can be passed for an extra addition to the SAN IPs
|
|
.APIServer.CertSANs is an optional parameter for adding DNS names and IPs to the API Server serving cert SAN
|
|
.Etcd.Local.ServerCertSANs is an optional parameter for adding DNS names and IPs to the etcd serving cert SAN
|
|
.Etcd.Local.PeerCertSANs is an optional parameter for adding DNS names and IPs to the etcd peer cert SAN
|
|
.Networking.DNSDomain is needed for knowing which DNS name the internal Kubernetes service has
|
|
.Networking.ServiceSubnet is needed for knowing which IP the internal Kubernetes service is going to point to
|
|
.CertificatesDir is required for knowing where all certificates should be stored
|
|
|
|
OUTPUTS:
|
|
Files to .CertificatesDir (default /etc/kubernetes/pki):
|
|
- ca.crt
|
|
- ca.key
|
|
- apiserver.crt
|
|
- apiserver.key
|
|
- apiserver-kubelet-client.crt
|
|
- apiserver-kubelet-client.key
|
|
- apiserver-etcd-client.crt
|
|
- apiserver-etcd-client.key
|
|
- etcd/ca.crt
|
|
- etcd/ca.key
|
|
- etcd/server.crt
|
|
- etcd/server.key
|
|
- etcd/peer.crt
|
|
- etcd/peer.key
|
|
- etcd/healthcheck-client.crt
|
|
- etcd/healthcheck-client.key
|
|
- sa.pub
|
|
- sa.key
|
|
- front-proxy-ca.crt
|
|
- front-proxy-ca.key
|
|
- front-proxy-client.crt
|
|
- front-proxy-client.key
|
|
|
|
*/
|