k3s/pkg/agent
Brad Davidson 992e64993d Add support for kubeadm token and client certificate auth
Allow bootstrapping with kubeadm bootstrap token strings or existing
Kubelet certs. This allows agents to join the cluster using kubeadm
bootstrap tokens, as created with the `k3s token create` command.

When the token expires or is deleted, agents can successfully restart by
authenticating with their kubelet certificate via node authentication.
If the token is gone and the node is deleted from the cluster, node auth
will fail and they will be prevented from rejoining the cluster until
provided with a valid token.

Servers still must be bootstrapped with the static cluster token, as
they will need to know it to decrypt the bootstrap data.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2023-02-07 14:55:04 -08:00
..
config Add support for kubeadm token and client certificate auth 2023-02-07 14:55:04 -08:00
containerd Wait for cri-dockerd socket (#6812) 2023-01-27 13:16:59 -08:00
cri Wait for cri-dockerd socket (#6812) 2023-01-27 13:16:59 -08:00
cridockerd Wait for cri-dockerd socket (#6812) 2023-01-27 13:16:59 -08:00
flannel Remove deprecated flags in v1.26 (#6574) 2022-12-05 14:01:01 -08:00
loadbalancer Replace deprecated ioutil package (#6230) 2022-10-07 17:36:57 -07:00
netpol log kube-router version when starting netpol controller 2022-11-03 12:26:50 +01:00
proxy Fix issue with RKE2 servers hanging on listing apiserver addresses 2022-04-15 01:02:42 -07:00
syssetup Preload iptable_filter/ip6table_filter 2022-12-13 12:51:00 -08:00
templates Convert containerd config.toml.tmpl Linux template to v2 syntax 2022-10-27 16:55:03 -07:00
tunnel Add utility functions for getting kubernetes client 2023-02-06 15:09:31 -08:00
util Replace deprecated ioutil package (#6230) 2022-10-07 17:36:57 -07:00
run_linux.go Replace deprecated ioutil package (#6230) 2022-10-07 17:36:57 -07:00
run_windows.go Replace deprecated ioutil package (#6230) 2022-10-07 17:36:57 -07:00
run.go Add support for kubeadm token and client certificate auth 2023-02-07 14:55:04 -08:00