4 Commits

Author	SHA1	Message	Date
Dalton Hubble	60c70797ec	Use a single format of the admin kubeconfig ... * Use a single admin kubeconfig for initial bootkube bootstrap and for use by a human admin. Previously, an admin kubeconfig without a named context was used for bootstrap and direct usage with KUBECONFIG=path, while one with a named context was used for `kubectl config use-context` style usage. Confusing. * Provide the admin kubeconfig via `assets/auth/kubeconfig`, `assets/auth/CLUSTER-config`, or output `kubeconfig-admin`	2019-01-05 14:57:18 -08:00
Dalton Hubble	812a1adb49	Use a lower-privilege Kubelet kubeconfig in system:nodes ... * Kubelets can use a lower-privilege TLS client certificate with Org system:nodes and a binding to the system:node ClusterRole * Admin kubeconfig's continue to belong to Org system:masters to provide cluster-admin (available in assets/auth/kubeconfig or as a Terraform output kubeconfig-admin) * Remove bare-metal output variable kubeconfig	2019-01-05 13:08:56 -08:00
Dalton Hubble	bcb200186d	Add admin kubeconfig as a Terraform output ... * May be used to write a local file	2018-12-15 22:52:28 -08:00
Dalton Hubble	da596e06bb	Add bare-metal support for Container Linux with Matchbox	2017-07-24 23:24:12 -07:00