1
0
mirror of https://github.com/rancher/rke.git synced 2025-09-01 06:56:29 +00:00

Add Rotate certificates command to rke

This commit is contained in:
galal-hussein
2018-08-20 06:37:04 +02:00
committed by Alena Prokharchyk
parent 7582083e7a
commit 3551e6e4b6
25 changed files with 798 additions and 205 deletions

View File

@@ -1,5 +1,7 @@
package pki
import "time"
const (
CertPathPrefix = "/etc/kubernetes/ssl/"
CertificatesServiceName = "certificates"
@@ -12,17 +14,18 @@ const (
ClusterStateEnv = "CLUSTER_STATE"
BundleCertPath = "/backup/pki.bundle.tar.gz"
CACertName = "kube-ca"
RequestHeaderCACertName = "kube-apiserver-requestheader-ca"
KubeAPICertName = "kube-apiserver"
KubeControllerCertName = "kube-controller-manager"
KubeSchedulerCertName = "kube-scheduler"
KubeProxyCertName = "kube-proxy"
KubeNodeCertName = "kube-node"
EtcdCertName = "kube-etcd"
EtcdClientCACertName = "kube-etcd-client-ca"
EtcdClientCertName = "kube-etcd-client"
APIProxyClientCertName = "kube-apiserver-proxy-client"
CACertName = "kube-ca"
RequestHeaderCACertName = "kube-apiserver-requestheader-ca"
KubeAPICertName = "kube-apiserver"
KubeControllerCertName = "kube-controller-manager"
KubeSchedulerCertName = "kube-scheduler"
KubeProxyCertName = "kube-proxy"
KubeNodeCertName = "kube-node"
EtcdCertName = "kube-etcd"
EtcdClientCACertName = "kube-etcd-client-ca"
EtcdClientCertName = "kube-etcd-client"
APIProxyClientCertName = "kube-apiserver-proxy-client"
ServiceAccountTokenKeyName = "kube-service-account-token"
KubeNodeCommonName = "system:node"
KubeNodeOrganizationName = "system:nodes"
@@ -30,4 +33,5 @@ const (
KubeAdminCertName = "kube-admin"
KubeAdminOrganizationName = "system:masters"
KubeAdminConfigPrefix = "kube_config_"
duration365d = time.Hour * 24 * 365
)