3 Commits

Author	SHA1	Message	Date
Dalton Hubble	812a1adb49	Use a lower-privilege Kubelet kubeconfig in system:nodes ... * Kubelets can use a lower-privilege TLS client certificate with Org system:nodes and a binding to the system:node ClusterRole * Admin kubeconfig's continue to belong to Org system:masters to provide cluster-admin (available in assets/auth/kubeconfig or as a Terraform output kubeconfig-admin) * Remove bare-metal output variable kubeconfig	2019-01-05 13:08:56 -08:00
Dalton Hubble	9b88d4bbfd	Use bootkube system container on fedora-atomic ... * Use the upstream bootkube image packaged with the required metadata to be usable as a system container under systemd * Run bootkube with runc so no host level components use Docker any more. Docker is still the runtime * Remove bootkube script and old systemd unit	2018-04-21 18:46:56 -07:00
Dalton Hubble	4e43b2ff48	Change DO Fedora module to fedora-atomic	2018-04-21 18:46:56 -07:00