Tracking issue for Certificates copy for join --control-plane

[fabriziopandini]

This is the tracking issue for the implementation of Certificates copy for join --control-plane, original issue here. Help is welcome! If you want to pick up some help wanted activity just write it in a comment; "on hold" means the activity should wait for some predecessor before being actively worked

Certificates copy workflow

• WIP - Upload encrypted certs on init #1374 Upload encrypted certs on init (@yagonobre Add kubeadm init upload encrypted certs phase kubernetes#73907)
• WIP - Use encrypted certs on join #1407 Use encrypted certs on join (@ereslibre kubeadm: Join download certs kubernetes#74168)
• Alllow user to provide the certificate key on upload-certs #1408 Alllow user to provide the certificate key on upload-certs (@yagonobre Add certificate-key to kubeadm upload-certs phase, and improve init output kubernetes#74671)
• Periodic test in test-grid
  • Make kind support multi control-plane without upload certs (@fabriziopandini support n>1 control plane nodes and the external load balancer kubernetes-sigs/kind#233 Introduce Actions; fully support multi-node with n>0 workers kubernetes-sigs/kind#164 Multi node config kubernetes-sigs/kind#147 add v1alpha2 config version kubernetes-sigs/kind#143 Split internal/current config from v1alpha1 and start using k8s.Scheme  kubernetes-sigs/kind#137)
  • kinder test utils (@neolit123/@fabriziopandini)
  • Write a minimal e2e deployer for kinder in the kubeadm repo (@neolit123/@fabriziopandini)
  • Periodic job for multi control-plane without upload certs (@neolit123)
  • Make kinder support upload certs (@neolit123/@fabriziopandini)
  • Periodic job for multi control-plane with upload certs (on hold/@neolit123)

Other HA Improvements

• Improve init completion message for HA (@fabriziopandini fix kubeadm init output kubernetes#75420)
• Join control-plane improvements
  • Pre pull images (@MalloZup Kubeadm/HA: pull images during join for control-plane kubernetes#72870 )
  • SANS validation (@ereslibre kubeadm: verify that present certificates contain at least the required SANs kubernetes#73093)
  • Wait for etcd joining the new member (@ereslibre kubeadm: wait for the etcd cluster to be available when growing it kubernetes#72984)
  • Rename --experimental-control-plane into --control-plane (on hold/moved to v1.15/@yuexiao-wang)
• Upgrade improvements
  • Improve UX for upgrade node experimental-control-plane  #1071 merge kubeadm upgrade node experimental-control-plane into kubeadm upgrade node (on hold/moved to v1.15 @yuexiao-wang)
• Reset improvements
  • Kubeadm reset should cleanup control-plane nodes properly #1312 Remove control-plane nodes from ClusterStatus (@neolit123 kubeadm-reset: add means to clear the ClusterStatus kubernetes#75082)
  • Kubeadm reset command whether remove etcd member on the master #1211 Remove etcd members from the etcd cluster (@pytimer kubeadm: Remove etcd members from the etcd cluster when reset the nodes kubernetes#74112)

Docs

• https://kubernetes.io/docs/setup/independent/high-availability/ v1.14 edition (@neolit123 kubeadm: update the 1.14 HA guide website#13191)

Nice to have

• E2E test cases for ClusterStatus management in the kubeadm-config config-map (@fabriziopandini
  E2e kubeadm new test kubernetes#75641)
• E2E test cases for kubeadm-certs secret (@fabriziopandini E2e kubeadm new test kubernetes#75641)
• Periodic jobs for HA upgrades, For Add/Remove control-plane nodes etc. (on hold/help wanted)

[neolit123]

added myself to a couple of items.

[yagonobre]

I can take

#1374 Upload encrypted certs on init (help wanted)
Use encrypted certs on join (on hold/help wanted)

[ereslibre]

I can take Use encrypted certs on join

@yagonobre I see that on your comment you are taking both, is that intended? Otherwise I can take a different one if you prefer to do both.

[yagonobre]

@ereslibre feel free to take this :)
I can take Make kind support upload certs.

[yuexiao-wang]

I can take Rename --experimental-control-plane into --control-plane

[yuexiao-wang]

I will work on #1071 merge kubeadm upgrade node experimental-control-plane into kubeadm upgrade node (help wanted)

[yagonobre]

/assign

[fabriziopandini]

@yuexiao-wang please sync with @MalloZup because he was interested in #1071 merge kubeadm upgrade node experimental-control-plane into kubeadm upgrade node (help wanted) too

[yuexiao-wang]

@fabriziopandini I will take it #1071 this week after talking with @MalloZup

[pytimer]

@fabriziopandini I can take the #1211 if the remove etcd members can be added to the reset process.

[fabriziopandini]

@pytimer awesome, thanks!

[yagonobre]

#1408

[neolit123]

moving to 1.15 to not confuse the release team.

[fabriziopandini]

moving the remaing items to #1567
Thanks to all for helping in this effor