{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/85466","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/85466/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/85466/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/85466/events","html_url":"https://github.com/kubernetes/kubernetes/pull/85466","id":525339310,"node_id":"MDExOlB1bGxSZXF1ZXN0MzQyOTUwNzY0","number":85466,"title":"Update GCE Windows startup scripts for TPM-based authentication","user":{"login":"pjh","id":280787,"node_id":"MDQ6VXNlcjI4MDc4Nw==","avatar_url":"https://avatars1.githubusercontent.com/u/280787?v=4","gravatar_id":"","url":"https://api.github.com/users/pjh","html_url":"https://github.com/pjh","followers_url":"https://api.github.com/users/pjh/followers","following_url":"https://api.github.com/users/pjh/following{/other_user}","gists_url":"https://api.github.com/users/pjh/gists{/gist_id}","starred_url":"https://api.github.com/users/pjh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pjh/subscriptions","organizations_url":"https://api.github.com/users/pjh/orgs","repos_url":"https://api.github.com/users/pjh/repos","events_url":"https://api.github.com/users/pjh/events{/privacy}","received_events_url":"https://api.github.com/users/pjh/received_events","type":"User","site_admin":false},"labels":[{"id":477397086,"node_id":"MDU6TGFiZWw0NzczOTcwODY=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"bfe5bf","default":false,"description":"Indicates the PR's author has signed the CNCF CLA."},{"id":687565804,"node_id":"MDU6TGFiZWw2ODc1NjU4MDQ=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/do-not-merge/hold","name":"do-not-merge/hold","color":"e11d21","default":false,"description":"Indicates that a PR should not merge because someone has issued a /hold command."},{"id":267761362,"node_id":"MDU6TGFiZWwyNjc3NjEzNjI=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/feature","name":"kind/feature","color":"c7def8","default":false,"description":"Categorizes issue or PR as related to a new feature."},{"id":1111992057,"node_id":"MDU6TGFiZWwxMTExOTkyMDU3","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/needs-priority","name":"needs-priority","color":"ededed","default":false,"description":"Indicates a PR lacks a `priority/foo` label and requires one."},{"id":200149833,"node_id":"MDU6TGFiZWwyMDAxNDk4MzM=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/release-note","name":"release-note","color":"c2e0c6","default":false,"description":"Denotes a PR that will be considered when it comes time to generate release notes."},{"id":173494222,"node_id":"MDU6TGFiZWwxNzM0OTQyMjI=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/sig/cluster-lifecycle","name":"sig/cluster-lifecycle","color":"d2b48c","default":false,"description":"Categorizes an issue or PR as relevant to sig-cluster-lifecycle."},{"id":253450978,"node_id":"MDU6TGFiZWwyNTM0NTA5Nzg=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/L","name":"size/L","color":"ee9900","default":false,"description":"Denotes a PR that changes 100-499 lines, ignoring generated files."}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2019-11-20T00:04:12Z","updated_at":"2019-11-20T18:19:07Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/85466","html_url":"https://github.com/kubernetes/kubernetes/pull/85466","diff_url":"https://github.com/kubernetes/kubernetes/pull/85466.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/85466.patch"},"body":"\"Shielded\" nodes have a virtual TPM attached which is used for generating the client certificate, instead of using a bootstrap kubeconfig. This PR updates the Windows GCE cluster scripts to support TPM-based authentication. Determining which to use happens during node startup based on the instance metadata.\r\n\r\nTested by running [kube-up](https://github.com/kubernetes/kubernetes/blob/master/cluster/gce/windows/README-GCE-Windows-kube-up.md) as usual for non-TPM nodes (this PR should be a no-op) and by running kube-up with these kube-env fields manually set to test authentication:\r\n  `TPM_BOOTSTRAP_CERT`\r\n  `TPM_BOOTSTRAP_KEY`\r\n  `EXEC_AUTH_PLUGIN_URL`\r\n  `EXEC_AUTH_PLUGIN_LICENSE_URL`\r\n  `EXEC_AUTH_PLUGIN_SHA1`\r\n\r\n/kind feature\r\n\r\n```release-note\r\nWindows nodes on GCE can use TPM-based authentication to the master.\r\n```"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/556201683","html_url":"https://github.com/kubernetes/kubernetes/pull/85466#issuecomment-556201683","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/85466","id":556201683,"node_id":"MDEyOklzc3VlQ29tbWVudDU1NjIwMTY4Mw==","user":{"login":"pjh","id":280787,"node_id":"MDQ6VXNlcjI4MDc4Nw==","avatar_url":"https://avatars1.githubusercontent.com/u/280787?v=4","gravatar_id":"","url":"https://api.github.com/users/pjh","html_url":"https://github.com/pjh","followers_url":"https://api.github.com/users/pjh/followers","following_url":"https://api.github.com/users/pjh/following{/other_user}","gists_url":"https://api.github.com/users/pjh/gists{/gist_id}","starred_url":"https://api.github.com/users/pjh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pjh/subscriptions","organizations_url":"https://api.github.com/users/pjh/orgs","repos_url":"https://api.github.com/users/pjh/repos","events_url":"https://api.github.com/users/pjh/events{/privacy}","received_events_url":"https://api.github.com/users/pjh/received_events","type":"User","site_admin":false},"created_at":"2019-11-20T18:19:07Z","updated_at":"2019-11-20T18:19:07Z","author_association":"CONTRIBUTOR","body":"/retest"}}
{"actor":{"display_login":"pjh"}}