mirror of
https://github.com/rancher/rke.git
synced 2025-09-01 06:56:29 +00:00
Add Rotate certificates command to rke
This commit is contained in:
committed by
Alena Prokharchyk
parent
7582083e7a
commit
3551e6e4b6
@@ -1,5 +1,7 @@
|
||||
package pki
|
||||
|
||||
import "time"
|
||||
|
||||
const (
|
||||
CertPathPrefix = "/etc/kubernetes/ssl/"
|
||||
CertificatesServiceName = "certificates"
|
||||
@@ -12,17 +14,18 @@ const (
|
||||
ClusterStateEnv = "CLUSTER_STATE"
|
||||
BundleCertPath = "/backup/pki.bundle.tar.gz"
|
||||
|
||||
CACertName = "kube-ca"
|
||||
RequestHeaderCACertName = "kube-apiserver-requestheader-ca"
|
||||
KubeAPICertName = "kube-apiserver"
|
||||
KubeControllerCertName = "kube-controller-manager"
|
||||
KubeSchedulerCertName = "kube-scheduler"
|
||||
KubeProxyCertName = "kube-proxy"
|
||||
KubeNodeCertName = "kube-node"
|
||||
EtcdCertName = "kube-etcd"
|
||||
EtcdClientCACertName = "kube-etcd-client-ca"
|
||||
EtcdClientCertName = "kube-etcd-client"
|
||||
APIProxyClientCertName = "kube-apiserver-proxy-client"
|
||||
CACertName = "kube-ca"
|
||||
RequestHeaderCACertName = "kube-apiserver-requestheader-ca"
|
||||
KubeAPICertName = "kube-apiserver"
|
||||
KubeControllerCertName = "kube-controller-manager"
|
||||
KubeSchedulerCertName = "kube-scheduler"
|
||||
KubeProxyCertName = "kube-proxy"
|
||||
KubeNodeCertName = "kube-node"
|
||||
EtcdCertName = "kube-etcd"
|
||||
EtcdClientCACertName = "kube-etcd-client-ca"
|
||||
EtcdClientCertName = "kube-etcd-client"
|
||||
APIProxyClientCertName = "kube-apiserver-proxy-client"
|
||||
ServiceAccountTokenKeyName = "kube-service-account-token"
|
||||
|
||||
KubeNodeCommonName = "system:node"
|
||||
KubeNodeOrganizationName = "system:nodes"
|
||||
@@ -30,4 +33,5 @@ const (
|
||||
KubeAdminCertName = "kube-admin"
|
||||
KubeAdminOrganizationName = "system:masters"
|
||||
KubeAdminConfigPrefix = "kube_config_"
|
||||
duration365d = time.Hour * 24 * 365
|
||||
)
|
||||
|
Reference in New Issue
Block a user