Skip to content

Explicitly set master_auth for new GKE clusters

Thong Kuah requested to merge 58208-explicitly-set-masterauth into master

What does this MR do?

From 1.12, GKE will disable basic auth and client certificate by default. GKE has provided some options to enable those two options pre 1.12.

This MR explicitly enables those now (currently we use 1.10/1.11 clusters) so that GKE cluster configuration will continue to work in any version of GKE.

Explicitly sets:

  • master_auth.username
  • master_auth.client_certificate_config.issue_client_certificate

I have chosen admin as the value for master_auth.username as that has been the default value for GKE previously.

What are the relevant issue numbers?

Closes #58208 (closed)

QA

Tested on GKE versions 1.12.5-gke.10 (the current latest version) and 1.11.7-gke.4 (the current default version).

  1. Verified that GKE will return an auto-generated password in the master_auth.password field
  2. Tested that both ABAC and RBAC clusters will create and can install cluster applications

Screen_Shot_2019-03-13_at_5.05.10_PM

Tip: set initial_cluster_version to latest to get the latest cluster version GKE will currently support.

Does this MR meet the acceptance criteria?

Edited by 🤖 GitLab Bot 🤖

Merge request reports