Jacob Simpson 855627e5cb Rotate the kubelet certificate when about to expire. ...

Changes the kubelet so it doesn't use the cert/key files directly for
starting the TLS server. Instead the TLS server reads the cert/key from
the new CertificateManager component, which is responsible for
requesting new certificates from the Certificate Signing Request API on
the API Server.

2017-02-17 17:42:35 -08:00

9.2 KiB

Raw Blame History

View Raw