1
0
Fork 0
hscloud/cluster/certs
q3k 73cef11c85 *: rejigger tls certs and more
This pretty large change does the following:

 - moves nix from bootstrap.hswaw.net to nix/
 - changes clustercfg to use cfssl and moves it to cluster/clustercfg
 - changes clustercfg to source information about target location of
   certs from nix
 - changes clustercfg to push nix config
 - changes tls certs to have more than one CA
 - recalculates all TLS certs
   (it keeps the old serviceaccoutns key, otherwise we end up with
   invalid serviceaccounts - the cert doesn't match, but who cares,
   it's not used anyway)
2019-04-07 00:06:23 +02:00
..
ca-etcd.crt *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
ca-etcdpeer.crt *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
ca-kube.crt *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
ca-kubefront.crt *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcd-bc01n01.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcd-bc01n02.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcd-bc01n03.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcd-calico.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcd-kube.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcd-root.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcdpeer-bc01n01.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcdpeer-bc01n02.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
etcdpeer-bc01n03.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-apiserver.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-controllermanager.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-kubelet-bc01n01.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-kubelet-bc01n02.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-kubelet-bc01n03.hswaw.net.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-proxy.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-scheduler.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kube-serviceaccounts.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00
kubefront-apiserver.cert *: rejigger tls certs and more 2019-04-07 00:06:23 +02:00