Dalton Hubble 804dfea0f9 Add kubeconfig's for kube-scheduler and kube-controller-manager ... * Generate TLS client certificates for `kube-scheduler` and `kube-controller-manager` with `system:kube-scheduler` and `system:kube-controller-manager` CNs * Template separate kubeconfigs for kube-scheduler and kube-controller manager (`scheduler.conf` and `controller-manager.conf`). Rename admin for clarity * Before v1.16.0, Typhoon scheduled a self-hosted control plane, which allowed the steady-state kube-scheduler and kube-controller-manager to use a scoped ServiceAccount. With a static pod control plane, separate CN TLS client certificates are the nearest equiv. * https://kubernetes.io/docs/setup/best-practices/certificates/ * Remove unused Kubelet certificate, TLS bootstrap is used instead		2020-12-01 22:02:15 -08:00
..
kubernetes	Add kubeconfig's for kube-scheduler and kube-controller-manager	2020-12-01 22:02:15 -08:00