*: reorganize
diff --git a/cluster/certs/bc01n01.hswaw.net-kube-node.crt b/cluster/certs/bc01n01.hswaw.net-kube-node.crt
new file mode 100644
index 0000000..faaac92
--- /dev/null
+++ b/cluster/certs/bc01n01.hswaw.net-kube-node.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----
+MIIF+jCCA+KgAwIBAgIJAIDxP85du/ccMA0GCSqGSIb3DQEBCwUAMIG3MQswCQYD
+VQQGEwJQTDEUMBIGA1UECAwLTWF6b3dpZWNraWUxETAPBgNVBAcMCFdhcnN6YXdh
+MS4wLAYDVQQKDCVTdG93YXJ6eXN6ZW5pZSBXYXJzemF3c2tpIEhhY2tlcnNwYWNl
+MRAwDgYDVQQLDAdoc2Nsb3VkMRowGAYDVQQDDBFCb290c3RyYXAgTm9kZSBDQTEh
+MB8GCSqGSIb3DQEJARYScTNrQGhhY2tlcnNwYWNlLnBsMB4XDTE5MDExMzAzMzA1
+OFoXDTE5MDIxMjAzMzA1OFowgZ4xCzAJBgNVBAYTAlBMMRQwEgYDVQQIDAtNYXpv
+d2llY2tpZTEUMBIGA1UEBwwLTWF6b3dpZWNraWUxFTATBgNVBAoMDHN5c3RlbTpu
+b2RlczEkMCIGA1UECwwbS3ViZXJuZXRlcyBOb2RlIENlcnRpZmljYXRlMSYwJAYD
+VQQDDB1zeXN0ZW06bm9kZTpiYzAxbjAxLmhzd2F3Lm5ldDCCAiIwDQYJKoZIhvcN
+AQEBBQADggIPADCCAgoCggIBAMmgCuw8NEbYDPAYxT+3RXKnr8tpKFam0UTIPEO5
+PZ63gEJHm5pdhlDbojKfNzWiSliUQ3qtxeFZfA5NLkdhwJesBPXOUcZkzNGIBces
+nmetfN2sakbUwTucCTjVDq5gAXQ5wlHGjMI7G9iddjF1DmvE+s2ewtCOa6nR1v7b
+Ltx7gmuxorq5FtWTnzeTLz+35savmz+5gQ4hTgEDVyne/BCJ+DeVynawgJ8LGGbg
+zpiyoQE3Fl0Aqy96J1uUOhpJ1r4XVv4H1vzmJclRJjx/m6QsJy9VPKUX382dQVgD
+98eVokg+BusblxW4+mY/WNv5a7N2L7h4ek4s2ocyVjUKBo67vipd0EbES0mHSOJe
+zwYU8lQ5QIRsnJkUocGcwGDZ4eLijdYDz++SqBsqwbziprpSw+m3Wyl0F6BCYLvH
+5l9tsMC569jEhQUZ64+NoN4dls6URO4IdtX4ZSONeydaxIfd51CVPyIviT0jlCto
+Ii3AkSbsNBZDR16T7e6b6zPaPEBnk1g1SbcVbGi1gIPyrU788m+QbDUo/E8m2WzQ
+ou9DlMgMEXJg3QMHJwqUiazNxL3OTSiw0p5d6cXzRA1+21l8TdGfzgnefSDapbBG
+RN5WjzW6Vx2lrEcG2Novf3Hlk4/rrHTc8/Sh4pdnGO2R3JWqG/UqbMForp8emuMk
+l6MBAgMBAAGjIDAeMBwGA1UdEQQVMBOCEWJjMDFuMDEuaHN3YXcubmV0MA0GCSqG
+SIb3DQEBCwUAA4ICAQA/ASwzUfjy0rQKbt2a3aheYLwF6ZUpuI6GSTElXiNfPSyh
+XpN6hWkrAetk2ReCxMHuvbNA2Bt6poKUURKOtfJGf1//a2qWeJTMwx3ALSJOrzfF
+18RIJK8zOkgr3LjjbqFQbeT/yAxyhTx5nOfbQA/dOfo2vOBb+4lrhGFheO4VvOQq
+1bcWWTE7rdQBhcIh3dYawKAE4UHHUPCOAPjbLyrAnvZCQXZXgAitExhue+l13rFZ
+ko0T8Il6rAf7eUWjJPfnBJHKGh2YXL2O3YgcJnPQs9EzmJKCjsaTEjA70sB/A4yY
+lc6ZeATT0iwnKcJYkRsu4gX8VwG9yYDk3vNUGorStdiqKFCGwHuTqmj0ArITNMLe
+Mo8FBeB3YzCd354roHATfWwRGMmu1xzZmOC/Yi8XGQwDYBmkKguEAayuqJnYiAVd
+H3tf5Xytj0LVWcWy2kb5Xl131JQe1cMb4Do9fvYM5H2e39bZorq7z6QjKK8IKdWU
+Q48ExHJ0HBclu34DE1orljxkD3seE7xziWgO2WfEYShaQgrl9U0VJBWQqnGvFj3c
+lCx8ZbDGZAhhvfYM5E+R16LPDZ3L9vt0ea/Lmhzg23GFQmfsD6fsw3CJPHOir5UC
+tSzRY23cl2Fc1FDnH9CXgBwEFIAjm4oJSkbEcXUvkDwqlWghvFue+uv/TvtkUg==
+-----END CERTIFICATE-----
diff --git a/cluster/certs/bc01n01.hswaw.net-node.crt b/cluster/certs/bc01n01.hswaw.net-node.crt
new file mode 100644
index 0000000..46e5781
--- /dev/null
+++ b/cluster/certs/bc01n01.hswaw.net-node.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/bc01n01.hswaw.net.crt b/cluster/certs/bc01n01.hswaw.net.crt
new file mode 100644
index 0000000..e5ae757
--- /dev/null
+++ b/cluster/certs/bc01n01.hswaw.net.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/bc01n02.hswaw.net-kube-node.crt b/cluster/certs/bc01n02.hswaw.net-kube-node.crt
new file mode 100644
index 0000000..e92410d
--- /dev/null
+++ b/cluster/certs/bc01n02.hswaw.net-kube-node.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----
+MIIF+jCCA+KgAwIBAgIJAIDxP85du/cdMA0GCSqGSIb3DQEBCwUAMIG3MQswCQYD
+VQQGEwJQTDEUMBIGA1UECAwLTWF6b3dpZWNraWUxETAPBgNVBAcMCFdhcnN6YXdh
+MS4wLAYDVQQKDCVTdG93YXJ6eXN6ZW5pZSBXYXJzemF3c2tpIEhhY2tlcnNwYWNl
+MRAwDgYDVQQLDAdoc2Nsb3VkMRowGAYDVQQDDBFCb290c3RyYXAgTm9kZSBDQTEh
+MB8GCSqGSIb3DQEJARYScTNrQGhhY2tlcnNwYWNlLnBsMB4XDTE5MDExMzAzMzIw
+M1oXDTE5MDIxMjAzMzIwM1owgZ4xCzAJBgNVBAYTAlBMMRQwEgYDVQQIDAtNYXpv
+d2llY2tpZTEUMBIGA1UEBwwLTWF6b3dpZWNraWUxFTATBgNVBAoMDHN5c3RlbTpu
+b2RlczEkMCIGA1UECwwbS3ViZXJuZXRlcyBOb2RlIENlcnRpZmljYXRlMSYwJAYD
+VQQDDB1zeXN0ZW06bm9kZTpiYzAxbjAyLmhzd2F3Lm5ldDCCAiIwDQYJKoZIhvcN
+AQEBBQADggIPADCCAgoCggIBAOGSPDwayWrojo+PwSKnz7gMfX72Ht3mKh6MQpvi
+rbR4A2hwE6XaJLenH13vtnvsNE2otCLQn/o59e0sQmHlVFqXks5+mmSYpSacLLPj
+kwON+fjFeVma8NDPTZqHVnbIAau4mXz5KAEraw6gvcxjQG6mDfQZjvZBWtNZiLPj
+rXTZVTKYiT64Vp6GRm/pXWmDaAHVTWfp7atqZ7uAgL8Y2J4FLe4zJxD8odqaP1QK
+ouARpLdhPbvbg6SzLcBBlSLKst8uB+tjKSkor6uZplz9ZycBqQUwXD2Yu6lPwNr4
+eeaHc22rqsYNh6kbRIA2HViohy/1HgyyXzR1zsVIiAiOaLpcTMqRrlDALj7CPiS1
++iGDEkIUaHJGtpmeqlvWvQgkBlclnn34I+XJoKgfh5N8CueawWoRYlh59pX5XK/b
+5eRQPem38vxdDAkhuI/FrxBNNSAslZTL2/vxl15NMUDCfHUJzwq7urpQe3KJWjgR
+lS/nyhipHH1nGfg/IONbmsTVjabVcueTwIxbGZxichc55kNrrZRZiLnQawqKnZCV
+CIaoBGh527Q/JmRk5ietaMOYAh+jJxPTdSAJIq/ZjF/GX5mn+Ssd8POgXHkhrVL+
+2XV7dBDS7k+2nKj59z1x8tfo6T6V7Vdsop/AmLlv3gENPB93Cm23xDV64hjg5lGg
+dkt3AgMBAAGjIDAeMBwGA1UdEQQVMBOCEWJjMDFuMDIuaHN3YXcubmV0MA0GCSqG
+SIb3DQEBCwUAA4ICAQCfzQoxBJDC4H7ibYcE/b5tV01XNYQHWctd/9Kmu5nCP3EV
+J10+neSxClp9OsDFlow32GL5TKZVrmEAiGw0Oy2HTawG0Nd781T9L0py2Gd7R7tE
+40qBIHh8Xdpn5mGWtevXMWbN2phrV2sS2qn7lO1HhLbjgAJefXApiiQZbWv1oh/1
+flwIi+fZxWZ01GRnJEtkU5bGoHqLhDRh+9bGS2Fi4NqrZkxpfDTZYDe0r1IVODAs
+/C+OFWbsfYsQLWtNFbgl7y0CqfgFz2cmtT21XE27PWuA5USQ8gqwPUfA0OaEMWDx
+wM/D2RPB+LsQDpNk3lKBSgXNY7GVJNDmgFXFQhdlcE3KjX9kFbmXtLrEqUQMqGQY
+f4J44QWZXc2oWDDqs9O3B71suW9xfBhzAutjNe54yC/XFvz3Mqz+5OLXQTvVzoLO
+49F4871z6hqrWmqgXdWBTS9kW6PzEGiVKxB+tKzweq0aTK7cghVHh8ie5DsK6oFz
+mhrFsKjSEZuPr53umJDzV/X7roECGU6YW/3n7QGhZRjk5SgTwaB6gl6r8liEEP0H
+KH72le415hp1qWvBCfVmUFGOB58Rotv5w2E5mWkQ0qW/jLCX1CYCOU/fck2r2+vm
+oPX/hbt7a7iECsryrF9/XIF+Knon5FIenm/NtLIZEy4uIG/P6RHFAInEazU2aw==
+-----END CERTIFICATE-----
diff --git a/cluster/certs/bc01n02.hswaw.net.crt b/cluster/certs/bc01n02.hswaw.net.crt
new file mode 100644
index 0000000..72ee33d
--- /dev/null
+++ b/cluster/certs/bc01n02.hswaw.net.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/bc01n03.hswaw.net-kube-node.crt b/cluster/certs/bc01n03.hswaw.net-kube-node.crt
new file mode 100644
index 0000000..9e3eb87
--- /dev/null
+++ b/cluster/certs/bc01n03.hswaw.net-kube-node.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
diff --git a/cluster/certs/bc01n03.hswaw.net.crt b/cluster/certs/bc01n03.hswaw.net.crt
new file mode 100644
index 0000000..8f44b35
--- /dev/null
+++ b/cluster/certs/bc01n03.hswaw.net.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/ca.crt b/cluster/certs/ca.crt
new file mode 100644
index 0000000..07a53d1
--- /dev/null
+++ b/cluster/certs/ca.crt
@@ -0,0 +1,36 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/ca.srl b/cluster/certs/ca.srl
new file mode 100644
index 0000000..3469067
--- /dev/null
+++ b/cluster/certs/ca.srl
@@ -0,0 +1 @@
+80F13FCE5DBBF71E
diff --git a/cluster/certs/kube-apiserver.crt b/cluster/certs/kube-apiserver.crt
new file mode 100644
index 0000000..240aa2f
--- /dev/null
+++ b/cluster/certs/kube-apiserver.crt
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/kube-controller-manager.crt b/cluster/certs/kube-controller-manager.crt
new file mode 100644
index 0000000..785e1ce
--- /dev/null
+++ b/cluster/certs/kube-controller-manager.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/kube-proxy.crt b/cluster/certs/kube-proxy.crt
new file mode 100644
index 0000000..240b98f
--- /dev/null
+++ b/cluster/certs/kube-proxy.crt
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/cluster/certs/kube-scheduler.crt b/cluster/certs/kube-scheduler.crt
new file mode 100644
index 0000000..a3edfe9
--- /dev/null
+++ b/cluster/certs/kube-scheduler.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/kube-serviceaccount.crt b/cluster/certs/kube-serviceaccount.crt
new file mode 100644
index 0000000..1b10c1d
--- /dev/null
+++ b/cluster/certs/kube-serviceaccount.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/certs/kube-serviceaccounts.crt b/cluster/certs/kube-serviceaccounts.crt
new file mode 100644
index 0000000..8a1897e
--- /dev/null
+++ b/cluster/certs/kube-serviceaccounts.crt
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cluster/openssl.cnf b/cluster/openssl.cnf
new file mode 100644
index 0000000..1e5cc2e
--- /dev/null
+++ b/cluster/openssl.cnf
@@ -0,0 +1,350 @@
+#
+# OpenSSL example configuration file.
+# This is mostly being used for generation of certificate requests.
+#
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME = .
+RANDFILE = $ENV::HOME/.rnd
+
+# Extra OBJECT IDENTIFIER info:
+#oid_file = $ENV::HOME/.oid
+oid_section = new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions =
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+####################################################################
+[ ca ]
+default_ca = CA_default # The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir = ./demoCA # Where everything is kept
+certs = $dir/certs # Where the issued certs are kept
+crl_dir = $dir/crl # Where the issued crl are kept
+database = $dir/index.txt # database index file.
+#unique_subject = no # Set to 'no' to allow creation of
+ # several ctificates with same subject.
+new_certs_dir = $dir/newcerts # default place for new certs.
+
+certificate = $dir/cacert.pem # The CA certificate
+serial = $dir/serial # The current serial number
+crlnumber = $dir/crlnumber # the current crl number
+ # must be commented out to leave a V1 CRL
+crl = $dir/crl.pem # The current CRL
+private_key = $dir/private/cakey.pem# The private key
+RANDFILE = $dir/private/.rand # private random number file
+
+x509_extensions = usr_cert # The extentions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt = ca_default # Subject Name options
+cert_opt = ca_default # Certificate field options
+
+# Extension copying option: use with caution.
+copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions = crl_ext
+
+default_days = 365 # how long to certify for
+default_crl_days= 30 # how long before next CRL
+default_md = default # use public key default MD
+preserve = no # keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy = policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName = match
+stateOrProvinceName = match
+organizationName = match
+organizationalUnitName = optional
+commonName = supplied
+emailAddress = optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName = optional
+stateOrProvinceName = optional
+localityName = optional
+organizationName = optional
+organizationalUnitName = optional
+commonName = supplied
+emailAddress = optional
+
+####################################################################
+[ req ]
+default_bits = 2048
+default_keyfile = privkey.pem
+distinguished_name = req_distinguished_name
+attributes = req_attributes
+x509_extensions = v3_ca # The extentions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName = Country Name (2 letter code)
+countryName_default = AU
+countryName_min = 2
+countryName_max = 2
+
+stateOrProvinceName = State or Province Name (full name)
+stateOrProvinceName_default = Some-State
+
+localityName = Locality Name (eg, city)
+
+0.organizationName = Organization Name (eg, company)
+0.organizationName_default = Internet Widgits Pty Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName = Second Organization Name (eg, company)
+#1.organizationName_default = World Wide Web Pty Ltd
+
+organizationalUnitName = Organizational Unit Name (eg, section)
+#organizationalUnitName_default =
+
+commonName = Common Name (e.g. server FQDN or YOUR name)
+commonName_max = 64
+
+emailAddress = Email Address
+emailAddress_max = 64
+
+# SET-ex3 = SET extension number 3
+
+[ req_attributes ]
+challengePassword = A challenge password
+challengePassword_min = 4
+challengePassword_max = 20
+
+unstructuredName = An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType = server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment = "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+# This is what PKIX recommends but some broken software chokes on critical
+# extensions.
+#basicConstraints = critical,CA:true
+# So we do this instead.
+basicConstraints = CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType = server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment = "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1 # the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir = ./demoCA # TSA root directory
+serial = $dir/tsaserial # The current serial number (mandatory)
+crypto_device = builtin # OpenSSL engine to use for signing
+signer_cert = $dir/tsacert.pem # The TSA signing certificate
+ # (optional)
+certs = $dir/cacert.pem # Certificate chain to include in reply
+ # (optional)
+signer_key = $dir/private/tsakey.pem # The TSA private key (optional)
+
+default_policy = tsa_policy1 # Policy if request did not specify it
+ # (optional)
+other_policies = tsa_policy2, tsa_policy3 # acceptable policies (optional)
+digests = md5, sha1 # Acceptable message digests (mandatory)
+accuracy = secs:1, millisecs:500, microsecs:100 # (optional)
+clock_precision_digits = 0 # number of digits after dot. (optional)
+ordering = yes # Is ordering defined for timestamps?
+ # (optional, default: no)
+tsa_name = yes # Must the TSA name be included in the reply?
+ # (optional, default: no)
+ess_cert_id_chain = no # Must the ESS cert id chain be included?
+ # (optional, default: no)
diff --git a/cluster/scripts/secretstore b/cluster/scripts/secretstore
new file mode 100755
index 0000000..d1945ec
--- /dev/null
+++ b/cluster/scripts/secretstore
@@ -0,0 +1,32 @@
+#!/usr/bin/env python3
+
+# A little tool to encrypt/decrypt git secrets. Kinda like password-store, but more purpose specific and portable.
+
+import sys
+import subprocess
+
+keys = [
+ "63DFE737F078657CC8A51C00C29ADD73B3563D82", # q3k
+ "482FF104C29294AD1CAF827BA43890A3DE74ECC7", # inf
+]
+
+def main():
+ if len(sys.argv) < 3 or sys.argv[1] not in ('encrypt', 'decrypt'):
+ raise Exception("Usage: {} encrypt/decrypt file".format(sys.argv[0]))
+
+ action = sys.argv[1]
+ src = sys.argv[2]
+
+ if action == 'encrypt':
+ cmd = ['gpg' , '--encrypt', '--armor', '--batch', '--yes', '--output', '-']
+ for k in keys:
+ cmd.append('--recipient')
+ cmd.append(k)
+ cmd.append(src)
+ subprocess.check_call(cmd)
+ else:
+ cmd = ['gpg', '--decrypt', '--output', '-', src]
+ subprocess.check_call(cmd)
+
+if __name__ == '__main__':
+ sys.exit(main() or 0)
diff --git a/cluster/secrets/cipher/ca.key b/cluster/secrets/cipher/ca.key
new file mode 100644
index 0000000..071f6ee
--- /dev/null
+++ b/cluster/secrets/cipher/ca.key
@@ -0,0 +1,69 @@
+-----BEGIN PGP MESSAGE-----
+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+=w4ME
+-----END PGP MESSAGE-----
diff --git a/cluster/secrets/cipher/kube-apiserver.key b/cluster/secrets/cipher/kube-apiserver.key
new file mode 100644
index 0000000..00171e5
--- /dev/null
+++ b/cluster/secrets/cipher/kube-apiserver.key
@@ -0,0 +1,69 @@
+-----BEGIN PGP MESSAGE-----
+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+=F86X
+-----END PGP MESSAGE-----
diff --git a/cluster/secrets/cipher/kube-controller-manager.key b/cluster/secrets/cipher/kube-controller-manager.key
new file mode 100644
index 0000000..00d46fa
--- /dev/null
+++ b/cluster/secrets/cipher/kube-controller-manager.key
@@ -0,0 +1,69 @@
+-----BEGIN PGP MESSAGE-----
+
+hQEMAzhuiT4RC8VbAQf/XRp0DuHLkVbtpCvNhatJ9cEsHBsvYteUW4lnQ8/TQ+9r
+wYvsxdI7cF8P6NsFdn98Vfa/goPbcKrNB8MPl7fPhXV2AABIi4Jwp2wC6Fps3qCi
+wz80tc50mTRJjou6t0nTkr6yrd98vc8TZJ8wa3kEAi7NrpXDUQJGWeBe7FfTY7NY
+KxltiQehZArWj93pKq7V0f52t6+tDCDW4iDEs35xQ1ihKHlrqTdP473RRQg91cEk
+6Thu5eNFEBr1+D+X25R5uHDhknTF9SREhzZP2FHXO2lSvsuKfC1aqgAmYa/D5ABd
+brH7DtcDY3yA4ltlHOEDmxe2UiVRInT2Km6IfTrqn4UBDANcG2tp6fXqvgEH/2l3
+GPbIx9kfs9ijvCrqfX2QM2yfoUnHXyPeEP6XsMmGORlbFkHlt2QxagcDzD5kIity
+HoRjLFFQkJnaVwJstpSM0Wu3sbQ57d6p98eEEMA4xq4oH0UFdQhXjkiIydQhW1UD
+uw4ZbK6/pTMuIlnZhEv79tmGZ3hi3Wr6vxglKvvsX1y2LK7HQpBwHDWqgRWWnFsu
+uBIVPJhxwrjiV/jsy6+b3HCR+H6TSYXGRP7gSwlXC8P4/m/PJ6mf3vrsoFuyA8Ot
+dMKpij3m9cq8WZYfgkHMV3fsS+GiVvYYmUVlmKORQfsauDaspx1gQuR0Ea9VFeqf
+QVqwEtd13tfUgn6YwPDS6wERL0iqlK8ZSWpMDapA0LzGSWWB3vj+/Ybfo0q5dHeU
+DsoUPdbYZeQplHYebldUeiOVmgJ0Q0eilChaK7oK7qoXgD/50OJpXDsU354r+EPK
+DH8704RqZ5HKo24wzzEDxHPmpX6AzWay7YrFLPM0daLm7+0QSpcd1xKzt21hN4sk
+Ix2lD5VWhsHtcxmryerfeoZIB55JbWowVsoBXcrTqIaeBzlo8hk63PFFBYP8kKW5
+FAXh8MIfwY/KGf1KguMxIOYXM8QbEh42HSQRKpxGLcT7X7tehD5nA+jRtev1p02V
+9hs+/Zkvxa9GcyNBEfEPVJL1OdhNY0wQ1+ifO50dBYYMsW3CH+uV7eA5bybqR0ss
+7Nb8khu85p/SMmDuLU8MVx+Dbz+ph9kMa//MPYhm1LgHTfzueCtZoRm0iH6t4iCy
+WMe5fjkCh6t1/LxAOghNfuHrdDjfOqHRfMwgClZQ9l1fqyk3k1SohXnxNV1wEsyj
+LOCOSjPRA/tKxFWePwIMCGgvpcPYK2bUJxDLE743QaC3ufGM5miqH18hbrl0uu4R
+VxDmwaPZzep38OIqYwSWCXvGB4VmVNL+OYxIUxpXm6ygzQKCgDiA4TBUNBu5kA52
+DH4ci24rT5BT4AywpiY5HqSS5Be0aIDuwm+2xr1/jyzqIjx8KAWdSAUO7f5xLu3D
+OKr3Kf2ivaPSSX93ahXrgln+Ged5152eC5vbP1OtUJiaWuR1KLFPgymp4orPJy4p
+1eECKRWZdh5o6uGoIrmJwUMlmbZMeY6DAa6U485aVe/lXbeo2Y2nhx9ZSoUcDp12
+yVxaICfYyJl6BB8Vrz9y+QDZ2lF22ZQli3kQVbaEVJ1szfsguH8k2wtOhYiBP8b6
+5qq58Nzgl6pEm0PZ3f0sXFlgzkkBv+sXquSu1MAfKrpGk/6sKTnG8aDDg5Dc8rdX
+uzzYBSIuShwQ/XZiouoz3TJyxqe6cE0mqyeyldfmEkZ7fvjAMbY6kkWq2peMtmJw
+TVBEb78P2U/EJTYAbJpj1k7SXQkIMP0Tl3M65GnfN0V310vf5b0LNkIjnDSam5TK
+g/o3jVjZA8/a+gdO6UgIeN/FVn1ckLZPA/H4OeDJfO2zTrr6WAJVElLKQNGv40iN
+APPyQ3lYaBtvzP/xFW8OhjNEjzwrRSKcmNQCsLHAWWiLUtOvUVmVfkyBJab4FqzL
+Oiqf0X/HcjCrpctXbCoubbxmo/UIuoJJowAajCaPuiEpR9QwsjHjneOBtW2SVHj/
+4nDXWcOae53urDZKgCtoRMsc4v7ZCdZhc3jOEg17qOD05f/P/i03SQMsY0fI1VBF
+JMY8tZOGUdzwjQMuCmxIQOzNbPzahfTD8UQVQVXeWhJKaPuOMZ5qhMn5gzwWIpWZ
+WbuiIC2uKki4ss+Hcv+BHePxosNm1Yseyo5p3Uzbvenvhh++YZpUtj8MCZsLCaNc
+PqB7z1NEMHSe8xvHH7i8BEerdjK/O81S8yqkzzJZL5ni7ycVCcpgsgPlpE7RpWGI
+3DfQ6OnvHTMRZj0Hf7ircB8ct7+jKZJj2s/cy6AcIqcV6C/KPVPiumH3Oqu4QxA2
+K8INXFibiQd+5aj3engPDp3L10xMWEmq1+N+V7IGMjE1UQBB7MY45fR8U2EPZevj
+HbAsWcYOMTa+vm1msfuBi+M2y7iLHNcTi4SjvxKicPGAD1oq7tE+DUF2BAdOae/v
+trryhZXtpfpG19ZFZsRDE8gng9psFBwxsvEXUjSZI8xkPOKs4FtPfaFurK7mzWZX
+Cf+2Y4DBwKg+hJP6GyVPGKMPnD4hiNVE8SEwXyIQXJWLCRmkWYmdbcC1fTMFDCUj
+x4MEaKkq0xUzjYcU+iU3EMWInqsGwyzmZYTP0l8Q7eHmj5mMouV3bFlmpkBhgkzN
+tQV4ehVmJO3+67P8SVpnv6kugZzsX0ZuzGuhpzTOxPoVxrSn3NUa6WWIBo5A/2xe
+P/N7NaIB7xIt1Xb/eZFX2QMH0W81b8wH2z8ZNnBMGp9XMyOxgknxzG7ZNe5KiIvZ
+tnAfUvh4egNqDaPlMdlhmBSRFGI3yJy5ELainoQnl1heSXKVTfD5mTxCYQLiSr3/
+oG7nmPLKkOFdsBDiNPJhYohR5/Gfo7pn1EJhFLdMkmbAcA/m5Er4kz9Vpc+8HbJY
+myNdNpSMlPjUhQXVJf0zYH5X/Dh5IqFtEIcrJdCs/dnpUKaMv0IaosEvDwpHA8cz
+S2+mKtzzaE928w/Uj8VYIzTFB4SXR1otvdT3TCAMOxt5VyG2RLFEEN/5HLsOGcIF
+osiWI0IqFzzc5rCHd627jTl5hDypqg3uNgZYUxVosEy4ZuIqM+U3VcicOI9Z5XNo
+5zZp5tvjJztadb2CvqHw4mks79HNjtdSCvX3TOHJAsMtcrsTc4GRnLCNBtMdcLXk
+GSGzWYMRpzLFseR3+PEaVITk4iNGDceAJ62m8HCNgEIbZUJl7VNT9D/oZ5e4okk3
+t83KM38NkVuhy0xfOMWPSm0Bm4AQS9t4Snb0An4U5xsqMab5VOVazpPJ6bYwFon1
+gsZuVcZsh6oh/gVih/VNuOyOFq/2F0kxmi5fXS2pl0dx5pWBGC9gKmk9jtwGg+X/
+Uoj/WvKpJTSs/Wkcif9kXOZsIAktuYWaH/Z25Dtl6juuvu5mIy+MCp2L0EWMTkZ+
+eZRXC21zZopNMGnp2DHJjreGBtxtYJhK84zH1xPZpvT86ME3TIQ4Isls3pnZBDJL
+6V8BYOUq2htl4+QmF21iStwwOSCCgM0kHRXNWBkcKs5iq9S8SCHUiWP09YWKs+7n
+yY5kJNRSmcM5jpKhXPnosB9cPt7g3JR3m5CSbcZaoUjscODx2WE+4Vij5ZYhunVo
+cCsnS/A8i+fWcSVOI2okWXHmExJyP2b3IP+QsnApsDpVUbI8hspXPxomhSI2YU7h
+6LIbt37u1brJT5m89ePqPClfbFrnMuVlvQq3zJUb8OwLHSWBPQX64zgECpA9Rg19
+56NWZRAsgK6EV8+skVfoZrziRBdRS2TOfTYrMHSxRgp+mIRJ9MY9qfxr3h5nj4LC
+K7h9whHXxo3oRwilxnIgNJVZm4vO24L52HCrsgJffkaDfXOEDcTJDtKjce+laU1T
+i4jQOaYKU7z7Yr+o56TaJJ58pgCOZXZ6hBq3LjkcMNqFWirQSiam6IYF0/TYoVD/
+rJiRYDSHHSMDSlj9JHW9zbQWVgm2ja66OBfpFHEv3NEOrjzhsFbokJh85FzUHLkv
+5NBrWeHKDJYd9K1ziDqB3vmGGbDKzca1WRW2QJkiXZpnRGKp4I+2DiKifPSipKvd
+Tvmn2AUBIDFlkpeGwC4w6A/dkE6Ty+wO8idCOihSY9isqx5p2qkO+S1F2QDbm1pV
+cOwtPlB4791H0dIvyrs+iGGWK3TmigYcihcS3rqRxbwnAA==
+=jg1C
+-----END PGP MESSAGE-----
diff --git a/cluster/secrets/cipher/kube-proxy.key b/cluster/secrets/cipher/kube-proxy.key
new file mode 100644
index 0000000..4c5d6b6
--- /dev/null
+++ b/cluster/secrets/cipher/kube-proxy.key
@@ -0,0 +1,69 @@
+-----BEGIN PGP MESSAGE-----
+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+=P9jw
+-----END PGP MESSAGE-----
diff --git a/cluster/secrets/cipher/kube-scheduler.key b/cluster/secrets/cipher/kube-scheduler.key
new file mode 100644
index 0000000..0e64349
--- /dev/null
+++ b/cluster/secrets/cipher/kube-scheduler.key
@@ -0,0 +1,69 @@
+-----BEGIN PGP MESSAGE-----
+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+=7v9n
+-----END PGP MESSAGE-----
diff --git a/cluster/secrets/cipher/kube-serviceaccounts.key b/cluster/secrets/cipher/kube-serviceaccounts.key
new file mode 100644
index 0000000..cd71728
--- /dev/null
+++ b/cluster/secrets/cipher/kube-serviceaccounts.key
@@ -0,0 +1,69 @@
+-----BEGIN PGP MESSAGE-----
+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+=SlWh
+-----END PGP MESSAGE-----