kubernetes/cmd/kubeadm/app/phases/copycerts/copycerts.go

const externalEtcdCA …

const externalEtcdCert …

const externalEtcdKey …

// createShortLivedBootstrapToken creates the token used to manager kubeadm-certs
// and return the tokenID
func createShortLivedBootstrapToken(client clientset.Interface) (string, error) { … }

// CreateCertificateKey returns a cryptographically secure random key
func CreateCertificateKey() (string, error) { … }

// UploadCerts save certs needs to join a new control-plane on kubeadm-certs secret.
func UploadCerts(client clientset.Interface, cfg *kubeadmapi.InitConfiguration, key string) error { … }

func createRBAC(client clientset.Interface) error { … }

func getSecretOwnerRef(client clientset.Interface, tokenID string) ([]metav1.OwnerReference, error) { … }

func loadAndEncryptCert(certPath string, key []byte) ([]byte, error) { … }

func certsToTransfer(cfg *kubeadmapi.InitConfiguration) map[string]string { … }

func getDataFromDisk(cfg *kubeadmapi.InitConfiguration, key []byte) (map[string][]byte, error) { … }

// DownloadCerts downloads the certificates needed to join a new control plane.
func DownloadCerts(client clientset.Interface, cfg *kubeadmapi.InitConfiguration, key string) error { … }

func writeCertOrKey(certOrKeyPath string, certOrKeyData []byte) error { … }

func getSecret(client clientset.Interface) (*v1.Secret, error) { … }

func getDataFromSecret(secret *v1.Secret, key []byte) (map[string][]byte, error) { … }

func certOrKeyNameToSecretName(certOrKeyName string) string { … }