tree 71ada388ebad8a8a5698e2c782d2e38b42871c51
parent f6e6abb0f5d32f0d4bfc723db04d475438dd893a
author Serge Bazanski <q3k@hackerspace.pl> 1680302086 +0000
committer q3k <q3k@hackerspace.pl> 1680303239 +0000

cluster: partial cert bump

Done:

 1. etcd peer CA & certs
 2. etcd client CA & certs
 3. kube CA (currently all components set to accept both new and old CA,
    new CA called ca-kube-new)
 4. kube apiserver
 5. kubelet & kube-proxy
 6. prodvider intermediate

TODO:

 1. kubernetes controller-manager & kubernetes scheduler
 2. kubefront CA
 3. admitomatic?
 4. undo bundle on kube CA components to fully transition away from old
    CA

Change-Id: If529eeaed9a6a2063bed23c9d81c57b36b9a0115
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1487
Reviewed-by: q3k <q3k@hackerspace.pl>