Naadir Jeewa
Naadir Jeewa
Additionally, all of these distros do have `/etc/ssl/certs`. it's just that they're symlinked in different ways, sometimes multiply so. For Fedora derivatives, for example, `/etc/ssl/certs` will resolve to `/etc/pki/tls/certs`. This...
Nope. A compromise of say kube-controller-manager by some mechanism shouldn't grant an attacker access to the private keys for a colocated haproxy load balancer, which it might be if `/etc/pki`...
If we do this, we'll start being in the business of managing root certificates for the controller-manager cloud provider client code. Is that something kubeadm or the kubernetes project wants...
This is supported in VM Operator mode. Is this needed in non-supervisor mode?
@lubronzhan can you take a look at the doc above ^
Defer to MachineLoadBalancer proposal which will potentially cover this use case. /close
/assign @vrabbi /assign @randomvariable
/assign @rikatz
/lgtm cancel
/lifecycle frozen