{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/9547","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/9547/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/9547/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/9547/events","html_url":"https://github.com/openshift/origin/pull/9547","id":162165676,"number":9547,"title":"Allow nodes to bootstrap and add `oc cluster join` for nodes","user":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/openshift/origin/milestones/17","html_url":"https://github.com/openshift/origin/milestone/17","labels_url":"https://api.github.com/repos/openshift/origin/milestones/17/labels","id":2049440,"number":17,"title":"1.5.0","description":null,"creator":{"login":"soltysh","id":576341,"avatar_url":"https://avatars.githubusercontent.com/u/576341?v=3","gravatar_id":"","url":"https://api.github.com/users/soltysh","html_url":"https://github.com/soltysh","followers_url":"https://api.github.com/users/soltysh/followers","following_url":"https://api.github.com/users/soltysh/following{/other_user}","gists_url":"https://api.github.com/users/soltysh/gists{/gist_id}","starred_url":"https://api.github.com/users/soltysh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/soltysh/subscriptions","organizations_url":"https://api.github.com/users/soltysh/orgs","repos_url":"https://api.github.com/users/soltysh/repos","events_url":"https://api.github.com/users/soltysh/events{/privacy}","received_events_url":"https://api.github.com/users/soltysh/received_events","type":"User","site_admin":false},"open_issues":34,"closed_issues":28,"state":"open","created_at":"2016-10-05T12:16:28Z","updated_at":"2017-01-17T12:14:07Z","due_on":null,"closed_at":null},"comments":7,"created_at":"2016-06-24T14:58:12Z","updated_at":"2017-01-20T21:29:41Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/9547","html_url":"https://github.com/openshift/origin/pull/9547","diff_url":"https://github.com/openshift/origin/pull/9547.diff","patch_url":"https://github.com/openshift/origin/pull/9547.patch"},"body":"Leverage the alpha CSR endpoint in Kube to allow nodes to bootstrap themselves.  On startup, the node now accepts `--bootstrap` which instructs it to perform the following steps:\r\n\r\n1. Connect to the master using `--kubeconfig` and attempt to create a CSR for a client cert on `system:nodes`, with the common name `system:node:NAME`\r\n2. Given a successful client cert, use that cert to request a serving cert for the node hostnames\r\n3. Given that, attempt to download the ConfigMap `node-config` in namespace `openshift-infra` if it exists\r\n4. Create a default node-config.yaml if none was download (if the config map does not exist)\r\n5. Merge any command line flags with the config file\r\n6. Start\r\n\r\nThe server creates a new infra service account on startup - `node-bootstrap` in `openshift-infra`. This account is granted the ability to create client CSRs (and nothing else).  The CSR controller is initialized (if no defaults are set) to allow the `system:service accounts:openshift-infra` group to request client CSRs and the `system:nodes` group to request server CSRs.  The controller can be disabled by setting an invalid or unused group.  \r\n\r\nAdd a new command `oc serviceaccounts create-kubeconfig` which generates a kubeconfig file for a service account (to make it easy to generate a kubeconfig that can be used to bootstrap the node).\r\n\r\nAdd a new command `oc cluster join` which launches a container that acts as a node."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/274184793","html_url":"https://github.com/openshift/origin/pull/9547#issuecomment-274184793","issue_url":"https://api.github.com/repos/openshift/origin/issues/9547","id":274184793,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2017-01-20T21:29:41Z","updated_at":"2017-01-20T21:29:41Z","body":"continuous-integration/openshift-jenkins/test Running (https://ci.openshift.redhat.com/jenkins/job/test_pr_origin/13109/) (Base Commit: 8492871bdd0f30803767187e4edeaa30df2cc477)"}}
{"actor":{"display_login":"openshift-bot"}}