4 Commits

Author	SHA1	Message	Date
Dalton Hubble	60c70797ec	Use a single format of the admin kubeconfig ... * Use a single admin kubeconfig for initial bootkube bootstrap and for use by a human admin. Previously, an admin kubeconfig without a named context was used for bootstrap and direct usage with KUBECONFIG=path, while one with a named context was used for `kubectl config use-context` style usage. Confusing. * Provide the admin kubeconfig via `assets/auth/kubeconfig`, `assets/auth/CLUSTER-config`, or output `kubeconfig-admin`	2019-01-05 14:57:18 -08:00
Dalton Hubble	812a1adb49	Use a lower-privilege Kubelet kubeconfig in system:nodes ... * Kubelets can use a lower-privilege TLS client certificate with Org system:nodes and a binding to the system:node ClusterRole * Admin kubeconfig's continue to belong to Org system:masters to provide cluster-admin (available in assets/auth/kubeconfig or as a Terraform output kubeconfig-admin) * Remove bare-metal output variable kubeconfig	2019-01-05 13:08:56 -08:00
Dalton Hubble	bcb200186d	Add admin kubeconfig as a Terraform output ... * May be used to write a local file	2018-12-15 22:52:28 -08:00
Dalton Hubble	019009e9ee	Add outputs for Azure ingress IPv4 and worker pools	2018-08-27 23:30:32 -07:00