Jacob Simpson 855627e5cb Rotate the kubelet certificate when about to expire. ...

Changes the kubelet so it doesn't use the cert/key files directly for
starting the TLS server. Instead the TLS server reads the cert/key from
the new CertificateManager component, which is responsible for
requesting new certificates from the Certificate Signing Request API on
the API Server.

2017-02-17 17:42:35 -08:00

..

BUILD

…

certificate_manager_test.go

…

certificate_manager.go

…

certificate_store_test.go

…

certificate_store.go

…