Commits on Aug 27, 2020

1. Add --internal flag for export kubecfg that targets the internal dns … …

   …name
   
   Kops creates an "api.internal.$clustername" dns A record that points to the master IP(s)
   
   This adds a flag that will use that name and force the CA cert to be included.
   This is a workaround for client certificate authentication not working on API ELBs with ACM certificates.
   The ELB has a TLS listener rather than TCP, so the client certificate is not passed through to the apiserver.
   Using --internal will bypass the API ELB so that the client certificate will be passed directly to the apiserver.
   This also requires that the masters' security groups allow 443 access from the client which this does not handle automatically.

   

   rifelpet committed Aug 27, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for d0b8c65
   • Browse repository at this point

   Copy the full SHA

   d0b8c65 View commit details

   Browse the repository at this point in the history