Function KeypairNamesForInstanceGroup

pkg/model/bootstrapscript.go:165–211

(cluster *kops.Cluster, ig *kops.InstanceGroup)

}

func KeypairNamesForInstanceGroup(cluster *kops.Cluster, ig *kops.InstanceGroup) []string {
	keypairs := []string{"kubernetes-ca"}

	// Add keypairs for default etcd clusters (main and events, not cilium)
	if ig.IsControlPlane() {
		for _, etcdCluster := range cluster.Spec.EtcdClusters {
			k := etcdCluster.Name
			if k != "events" && k != "main" {
				// Likely cilium
				continue
			}
			keypairs = append(keypairs, "etcd-manager-ca-"+k, "etcd-peers-ca-"+k)
			// The client ca certificate is shared between events and main etcd clusters
			keypairs = append(keypairs, "etcd-clients-ca")
		}
	}

	// Add keypair for discovery service CA if enabled
	if ig.IsControlPlane() {
		if cluster.Spec.ServiceAccountIssuerDiscovery != nil &&
			cluster.Spec.ServiceAccountIssuerDiscovery.DiscoveryService != nil &&
			cluster.Spec.ServiceAccountIssuerDiscovery.DiscoveryService.URL != "" {
			keypairs = append(keypairs, fi.DiscoveryCAID)
		}
	}

	if ig.HasAPIServer() {
		keypairs = append(keypairs, "apiserver-aggregator-ca", "service-account", "etcd-clients-ca")
	}

	// Add keypairs for cilium etcd clusters (not the default etcd clusters)
	for _, etcdCluster := range cluster.Spec.EtcdClusters {
		k := etcdCluster.Name
		if k == "events" || k == "main" {
			// Not cilium
			continue
		}

		keypairs = append(keypairs, "etcd-manager-ca-"+k, "etcd-peers-ca-"+k, "etcd-clients-ca-"+k)
	}

	if ig.IsBastion() {
		keypairs = nil
	}

	return keypairs
}

// ResourceNodeUp generates and returns a nodeup (bootstrap) script from a
// template file, substituting in specific env vars & cluster spec configuration