typhoon

Commit Graph

Author	SHA1	Message	Date
Dalton Hubble	812a1adb49	Use a lower-privilege Kubelet kubeconfig in system:nodes * Kubelets can use a lower-privilege TLS client certificate with Org system:nodes and a binding to the system:node ClusterRole * Admin kubeconfig's continue to belong to Org system:masters to provide cluster-admin (available in assets/auth/kubeconfig or as a Terraform output kubeconfig-admin) * Remove bare-metal output variable kubeconfig	2019-01-05 13:08:56 -08:00
Dalton Hubble	2b74aba564	Add Google Cloud fedora-atomic module * Network load balancer for ingress doesn't work yet because Compute Engine packages are missing * port-forward / socat is broken	2018-04-21 18:46:56 -07:00

Author

SHA1

Message

Date

Dalton Hubble

812a1adb49

Use a lower-privilege Kubelet kubeconfig in system:nodes

* Kubelets can use a lower-privilege TLS client certificate with
Org system:nodes and a binding to the system:node ClusterRole
* Admin kubeconfig's continue to belong to Org system:masters to
provide cluster-admin (available in assets/auth/kubeconfig or as
a Terraform output kubeconfig-admin)
* Remove bare-metal output variable kubeconfig

2019-01-05 13:08:56 -08:00

Dalton Hubble

2b74aba564

Add Google Cloud fedora-atomic module

* Network load balancer for ingress doesn't work yet
because Compute Engine packages are missing
* port-forward / socat is broken

2018-04-21 18:46:56 -07:00

2 Commits