github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-16 14:45:28 +00:00
Code Issues Projects Releases Wiki Activity

Complete the mitm prevention on GCE.

Browse Source
This commit is contained in:
Brendan Burns
2014-09-23 14:14:34 -07:00
parent 31f4aba785
commit cafd20b233
3 changed files with 25 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
cluster/gce/util.sh
View File

@@ -254,9 +254,25 @@ function kube-up {
echo
echo " https://${user}:${passwd}@${KUBE_MASTER_IP}"
echo
echo "Security note: The server above uses a self signed certificate. This is"
echo " subject to \"Man in the middle\" type attacks."
kube_cert=".kubecfg.crt"
kube_key=".kubecfg.key"
ca_cert=".kubernetes.ca.crt"
(umask 077 && gcutil pull "${MASTER_NAME}" /usr/share/nginx/kubecfg.crt "${HOME}/${kube_cert}" && chmod 0600 "${HOME}/${kube_cert}")
(umask 077 && gcutil pull "${MASTER_NAME}" /usr/share/nginx/kubecfg.key "${HOME}/${kube_key}" && chmod 0600 "${HOME}/${kube_key}")
(umask 077 && gcutil pull "${MASTER_NAME}" /usr/share/nginx/ca.crt "${HOME}/${ca_cert}" && chmod 0600 "${HOME}/${ca_cert}")
(umask 077 && \
cat << EOF > ~/.kubernetes_auth
{
"User": "$user",
"Password": "$passwd",
"CAFile": "$HOME/$ca_crt",
"CertFile": "$HOME/$kube_crt",
"KeyFile": "$HOME/$kube_key",
}
EOF && \
chmod 0600 ~/.kubernetes_auth)
}
# Delete a kubernetes cluster