Create certificates, admin kubeconfig, bootstrap token and discoveryhashes using kubeadm (#136)

* Generate certificates using kubeadm instead of manual operations right now, this consolidates efforts into upstream, any bug fixes, updates are consumed

* Update cluster-api dependency (#133)

Signed-off-by: Stephen Augustus <[email protected]>

* Bring vendor into sync

* Bring vendor into sync

* Fix lint issues

* Address review comments

* Move adminkubeconfig and discoverhashes to cluster status instead of clusterspec

Author: awesomenix

.gitignore

@@ -23,9 +23,9 @@
 envfile
 
 # kubeconfigs
-kind.kubeconfig
-minikube.kubeconfig
-kubeconfig
+/kind.kubeconfig
+/minikube.kubeconfig
+/kubeconfig
 
 # binaries
 /manager

Gopkg.lock

@@ -48,15 +48,6 @@ required = [
   name = "sigs.k8s.io/cluster-api"
   revision = "af298a2a480fb7143786cf4f9990e741855f08e9"
 
-# TODO: It's currently necessary to pin this to kubernetes-1.13.1, instead of
-# kubernetes-1.13.4, due to some transitive dependencies upstream.
-# See here:
-#  - https://github.com/kubernetes-sigs/cluster-api-provider-azure/pull/116#discussion_r262599059
-#  - https://github.com/kubernetes-sigs/controller-runtime/pull/349
-[[constraint]]
-  name = "k8s.io/client-go"
-  version = "kubernetes-1.13.1"
-
 [[constraint]]
   name = "github.com/Azure/azure-sdk-for-go"
   version = "26.3.0"

Gopkg.toml

@@ -30,8 +30,9 @@ type AzureClusterProviderStatus struct {
 	metav1.TypeMeta   `json:",inline"`
 	metav1.ObjectMeta `json:"metadata,omitempty"`
 
-	Network Network `json:"network,omitempty"`
-	Bastion VM      `json:"bastion,omitempty"`
+	CertificateStatus CertificateStatus `json:"certificateStatus,omitempty"`
+	Network           Network           `json:"network,omitempty"`
+	Bastion           VM                `json:"bastion,omitempty"`
 }
 
 // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object

pkg/apis/azureprovider/v1alpha1/azureclusterproviderstatus_types.go

@@ -85,6 +85,16 @@ type Network struct {
 	APIServerIP PublicIP `json:"apiServerIp,omitempty"`
 }
 
+//CertificateStatus contains fields generated along with certificate generation
+type CertificateStatus struct {
+	// AdminKubeconfig generated using the certificates part of the spec
+	AdminKubeconfig string `json:"adminKubeconfig,omitempty"`
+
+	// DiscoveryHashes generated using the certificates part of the spec, used by master and nodes bootstrapping
+	// this never changes until ca is rotated
+	DiscoveryHashes []string `json:"discoveryHashes,omitempty"`
+}
+
 // TODO: Implement tagging
 /*
 // Tags defines resource tags.

pkg/apis/azureprovider/v1alpha1/types.go

@@ -12,8 +12,22 @@ go_library(
         "//pkg/apis/azureprovider/v1alpha1:go_default_library",
         "//pkg/cloud/azure/actuators:go_default_library",
         "//vendor/github.com/pkg/errors:go_default_library",
-        "//vendor/k8s.io/client-go/tools/clientcmd/api:go_default_library",
+        "//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
+        "//vendor/k8s.io/client-go/kubernetes:go_default_library",
+        "//vendor/k8s.io/client-go/tools/clientcmd:go_default_library",
+        "//vendor/k8s.io/client-go/util/cert:go_default_library",
+        "//vendor/k8s.io/cluster-bootstrap/token/util:go_default_library",
         "//vendor/k8s.io/klog:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/scheme:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta1:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/constants:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/bootstraptoken/node:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/certs:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/kubeconfig:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/kubeconfig:go_default_library",
+        "//vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/pubkeypin:go_default_library",
+        "//vendor/sigs.k8s.io/controller-runtime/pkg/client/config:go_default_library",
     ],
 )
 
@@ -23,6 +37,8 @@ go_test(
     embed = [":go_default_library"],
     deps = [
         "//pkg/apis/azureprovider/v1alpha1:go_default_library",
-        "//vendor/github.com/pkg/errors:go_default_library",
+        "//pkg/cloud/azure/actuators:go_default_library",
+        "//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
+        "//vendor/sigs.k8s.io/cluster-api/pkg/apis/cluster/v1alpha1:go_default_library",
     ],
 )