rke/pki/constants.go

package pki

import "time"

const (
	K8sBaseDir              = "/etc/kubernetes/"
	CertPathPrefix          = K8sBaseDir + "ssl/"
	CertificatesServiceName = "certificates"
	CrtDownloaderContainer  = "cert-deployer"
	CertFetcherContainer    = "cert-fetcher"
	CertificatesSecretName  = "k8s-certs"
	TempCertPath            = "/etc/kubernetes/.tmp/"
	ClusterConfig           = "cluster.yml"
	ClusterStateFile        = "cluster-state.yml"
	ClusterStateExt         = ".rkestate"
	ClusterStateEnv         = "CLUSTER_STATE"
	BundleCertPath          = "/backup/pki.bundle.tar.gz"

	CACertName                 = "kube-ca"
	RequestHeaderCACertName    = "kube-apiserver-requestheader-ca"
	KubeAPICertName            = "kube-apiserver"
	KubeControllerCertName     = "kube-controller-manager"
	KubeSchedulerCertName      = "kube-scheduler"
	KubeProxyCertName          = "kube-proxy"
	KubeNodeCertName           = "kube-node"
	KubeletCertName            = "kube-kubelet"
	EtcdCertName               = "kube-etcd"
	EtcdClientCACertName       = "kube-etcd-client-ca"
	EtcdClientCertName         = "kube-etcd-client"
	APIProxyClientCertName     = "kube-apiserver-proxy-client"
	ServiceAccountTokenKeyName = "kube-service-account-token"

	KubeNodeCommonName       = "system:node"
	KubeNodeOrganizationName = "system:nodes"

	KubeAdminCertName         = "kube-admin"
	KubeAdminOrganizationName = "system:masters"
	KubeAdminConfigPrefix     = "kube_config_"
	duration365d              = time.Hour * 24 * 365
)
Add default cluster config file and return service container pointer Add more generic functions to go services Add x509 authentication 2017-10-31 13:55:35 +00:00			`package pki`

Add Rotate certificates command to rke 2018-08-20 04:37:04 +00:00			`import "time"`

Add default cluster config file and return service container pointer Add more generic functions to go services Add x509 authentication 2017-10-31 13:55:35 +00:00			`const (`
Able to include and extract state file in snapshot 2020-03-30 19:16:47 +00:00			`K8sBaseDir = "/etc/kubernetes/"`
			`CertPathPrefix = K8sBaseDir + "ssl/"`
Check image locally before pull 2017-12-13 00:29:24 +00:00			`CertificatesServiceName = "certificates"`
			`CrtDownloaderContainer = "cert-deployer"`
recoverable provisioning 2018-01-10 23:03:08 +00:00			`CertFetcherContainer = "cert-fetcher"`
Check image locally before pull 2017-12-13 00:29:24 +00:00			`CertificatesSecretName = "k8s-certs"`
recoverable provisioning 2018-01-10 23:03:08 +00:00			`TempCertPath = "/etc/kubernetes/.tmp/"`
[RKE Refactor] Generate cluster and node certs 2018-02-06 19:25:54 +00:00			`ClusterConfig = "cluster.yml"`
Save state to the nodes backup path 2018-09-13 00:29:53 +00:00			`ClusterStateFile = "cluster-state.yml"`
Able to include and extract state file in snapshot 2020-03-30 19:16:47 +00:00			`ClusterStateExt = ".rkestate"`
Save state to the nodes backup path 2018-09-13 00:29:53 +00:00			`ClusterStateEnv = "CLUSTER_STATE"`
Add certificate bundle backup with etcd snapshot-save 2018-05-29 15:21:24 +00:00			`BundleCertPath = "/backup/pki.bundle.tar.gz"`
Add default cluster config file and return service container pointer Add more generic functions to go services Add x509 authentication 2017-10-31 13:55:35 +00:00
Add Rotate certificates command to rke 2018-08-20 04:37:04 +00:00			`CACertName = "kube-ca"`
			`RequestHeaderCACertName = "kube-apiserver-requestheader-ca"`
			`KubeAPICertName = "kube-apiserver"`
			`KubeControllerCertName = "kube-controller-manager"`
			`KubeSchedulerCertName = "kube-scheduler"`
			`KubeProxyCertName = "kube-proxy"`
			`KubeNodeCertName = "kube-node"`
Add per node kubelet server certificate 2019-07-24 20:25:14 +00:00			`KubeletCertName = "kube-kubelet"`
Add Rotate certificates command to rke 2018-08-20 04:37:04 +00:00			`EtcdCertName = "kube-etcd"`
			`EtcdClientCACertName = "kube-etcd-client-ca"`
			`EtcdClientCertName = "kube-etcd-client"`
			`APIProxyClientCertName = "kube-apiserver-proxy-client"`
			`ServiceAccountTokenKeyName = "kube-service-account-token"`
Add default cluster config file and return service container pointer Add more generic functions to go services Add x509 authentication 2017-10-31 13:55:35 +00:00
Enable RBAC and needed addons/network plugin configuration 2017-12-14 21:56:19 +00:00			`KubeNodeCommonName = "system:node"`
Add default cluster config file and return service container pointer Add more generic functions to go services Add x509 authentication 2017-10-31 13:55:35 +00:00			`KubeNodeOrganizationName = "system:nodes"`
Deploy kube config file locally for admin 2017-11-01 21:46:43 +00:00
Add generic generation for pki objects and etcd TLS 2018-01-16 23:10:14 +00:00			`KubeAdminCertName = "kube-admin"`
Deploy kube config file locally for admin 2017-11-01 21:46:43 +00:00			`KubeAdminOrganizationName = "system:masters"`
make kubeconfig not hidden 2018-01-30 18:31:42 +00:00			`KubeAdminConfigPrefix = "kube_config_"`
Add Rotate certificates command to rke 2018-08-20 04:37:04 +00:00			`duration365d = time.Hour * 24 * 365`
Add default cluster config file and return service container pointer Add more generic functions to go services Add x509 authentication 2017-10-31 13:55:35 +00:00			`)`