{"push_id":1237406738,"size":2,"distinct_size":2,"ref":"refs/heads/tls_bootstrap","head":"7af7be803ae671cd3c4c18953caa3f7ac2289122","before":"acb10481cd21aad6a1f2eb62552a8cc549d2ef37","commits":[{"sha":"55a297efcb16589b9de213190742bccae8b60a90","author":{"name":"Yifan Gu","email":"feae5e501efeebeb7d445ae9fb99dbc0b3268c82@coreos.com"},"message":"kubelet/app/server: Implement TLS bootstrap.\n\nThis commit adds `--bootstrap-auth-token` to kubelet.\n\nWhen starts, if kubelet doesn't have configured tls certificate/key,\nit will generate a key pair and create a certificate signing request\n(CSR) with this token, then kubelet will send the CSR to the API\nserver and watch for the issued certificate.\n\nIf the API server approves the request, the kubelet will store the\nissued certificate at `--tls-cert-file` (or `kubelet.crt` inside\n`--cert-dir` if the former is not specified).\n\nThe private key is also stored on disk during the creation of the\nCSR, it will be stored at `--tls-private-key-file` (or `kubelet.key`\ninside `--cert-dir` if the former is not specified).","distinct":true,"url":"https://api.github.com/repos/yifan-gu/kubernetes/commits/55a297efcb16589b9de213190742bccae8b60a90"},{"sha":"7af7be803ae671cd3c4c18953caa3f7ac2289122","author":{"name":"Yifan Gu","email":"feae5e501efeebeb7d445ae9fb99dbc0b3268c82@coreos.com"},"message":"kubelet/app/server: Add tests for requestCertificate().\n\nThis commit adds a unit test for the requestCertificate() function.\nIt mocks the rest client's Create() and Watch() alls to simulate\ndifferent scenarios.","distinct":true,"url":"https://api.github.com/repos/yifan-gu/kubernetes/commits/7af7be803ae671cd3c4c18953caa3f7ac2289122"}]}
{"actor":{"display_login":"yifan-gu"}}