new file: 10_delete_kube-dns.sh

new file: 11_delete_all.sh new file: 12_uninstall_etcd.sh new file: 3_install_configure_kubernetes.sh new file: 5.1_worker_kubelet_setup.sh new file: 5.2_worker_kube-proxy_setup.sh new file: 5_worker_node_setup.sh new file: 6_client_admin_config.sh new file: 7_pod_routing.sh new file: 8_deploying_kube-dns.sh new file: 9_further_tests.sh new file: certs-dir/admin-csr.json new file: certs-dir/admin-key.pem new file: certs-dir/admin.csr new file: certs-dir/admin.kubeconfig new file: certs-dir/admin.pem new file: certs-dir/ca-config.json new file: certs-dir/ca-csr.json new file: certs-dir/ca-key.pem new file: certs-dir/ca.csr new file: certs-dir/ca.pem new file: certs-dir/encryption-config.yaml new file: certs-dir/kube-controller-manager-csr.json new file: certs-dir/kube-controller-manager-key.pem new file: certs-dir/kube-controller-manager.csr new file: certs-dir/kube-controller-manager.kubeconfig new file: certs-dir/kube-controller-manager.pem new file: certs-dir/kube-proxy-csr.json new file: certs-dir/kube-proxy-key.pem new file: certs-dir/kube-proxy.csr new file: certs-dir/kube-proxy.kubeconfig new file: certs-dir/kube-proxy.pem new file: certs-dir/kube-scheduler-csr.json new file: certs-dir/kube-scheduler-key.pem new file: certs-dir/kube-scheduler.csr new file: certs-dir/kube-scheduler.kubeconfig new file: certs-dir/kube-scheduler.pem new file: certs-dir/kubernetes-csr.json new file: certs-dir/kubernetes-key.pem new file: certs-dir/kubernetes.csr new file: certs-dir/kubernetes.pem new file: certs-dir/service-account-csr.json new file: certs-dir/service-account-key.pem new file: certs-dir/service-account.csr new file: certs-dir/service-account.pem new file: certs-dir/worker-0-csr.json new file: certs-dir/worker-0-key.pem new file: certs-dir/worker-0.csr new file: certs-dir/worker-0.kubeconfig new file: certs-dir/worker-0.pem new file: certs-dir/worker-1-csr.json new file: certs-dir/worker-1-key.pem new file: certs-dir/worker-1.csr new file: certs-dir/worker-1.kubeconfig new file: certs-dir/worker-1.pem new file: cni/bridge new file: cni/cni-plugins-amd64-v0.6.0.tgz new file: cni/dhcp new file: cni/flannel new file: cni/host-local new file: cni/ipvlan new file: cni/loopback new file: cni/macvlan new file: cni/portmap new file: cni/ptp new file: cni/sample new file: cni/tuning new file: cni/vlan new file: controller-0/apiserver new file: controller-0/config new file: controller-0/controller-manager new file: controller-0/etcd.conf new file: controller-0/etcd.service new file: controller-0/kube-apiserver.service new file: controller-0/kube-apiserver_rbac.yaml new file: controller-0/kube-controller-manager.service new file: controller-0/kube-scheduler.service new file: controller-0/kube-scheduler.yaml new file: controller-0/kubernetes.default.svc.cluster.local.conf new file: controller-0/kubernetes.repo new file: controller-0/rbac_authorizations.yaml new file: controller-0/scheduler new file: controller-1/apiserver new file: controller-1/config new file: controller-1/controller-manager new file: controller-1/etcd.conf new file: controller-1/etcd.service new file: controller-1/kube-apiserver.service new file: controller-1/kube-apiserver_rbac.yaml new file: controller-1/kube-controller-manager.service new file: controller-1/kube-scheduler.service new file: controller-1/kube-scheduler.yaml new file: controller-1/kubernetes.default.svc.cluster.local.conf new file: controller-1/kubernetes.repo new file: controller-1/rbac_authorizations.yaml new file: controller-1/scheduler new file: controller_manager_setup.sh new file: controller_setup.sh new file: controller_uninstall.sh new file: controllers new file: ctrl-mgr_vars new file: docs/0_Environment_Setup.md new file: docs/10_Create_kube-proxy_Instances.md new file: docs/11_Create_client_kubectl_admin.md new file: docs/12_Create_Pod_Routing_Rules.md new file: docs/13_Create_kube-dns_instances.md new file: docs/14_Additional_Functional_Tests.md new file: docs/15_Delete_kube-dns_Deployment.md new file: docs/16_Uninstall_etcd.md new file: docs/17_Uninstall_Everything.md new file: docs/1_GCloud_Resource_Setup.md new file: docs/2_Certificate_and_Authentication_Creation.md new file: docs/3_Install_and_Configure_etcd.md new file: docs/4_Install_and_Configure_apiserver.md new file: docs/5_Install_and_Configure_Controller_Manager.md new file: docs/6_Install_and_Configure_Scheduler.md new file: docs/7_Create_nginx_Health_Monitor.md new file: docs/8_Create_Load_Balancer.md new file: docs/9a_Create_Kubernetes_Workers_with_Docker.md new file: docs/9b_Create_Kubernetes_Workers_with_containerd.md new file: etcd-listen new file: etcd_setup.sh new file: etcd_vars new file: instance new file: kube-apiserver_setup.sh.orig new file: kube-dns.yaml new file: notes new file: old_stuff/cni/bridge new file: old_stuff/cni/cni-plugins-amd64-v0.6.0.tgz new file: old_stuff/cni/dhcp new file: old_stuff/cni/flannel new file: old_stuff/cni/host-local new file: old_stuff/cni/ipvlan new file: old_stuff/cni/loopback new file: old_stuff/cni/macvlan new file: old_stuff/cni/portmap new file: old_stuff/cni/ptp new file: old_stuff/cni/sample new file: old_stuff/cni/tuning new file: old_stuff/cni/vlan new file: old_stuff/controller-0/apiserver new file: old_stuff/controller-0/config new file: old_stuff/controller-0/controller-manager new file: old_stuff/controller-0/etcd.conf new file: old_stuff/controller-0/etcd.service new file: old_stuff/controller-0/kube-apiserver.service new file: old_stuff/controller-0/kube-apiserver_rbac.yaml new file: old_stuff/controller-0/kube-controller-manager.service new file: old_stuff/controller-0/kube-scheduler.service new file: old_stuff/controller-0/kube-scheduler.yaml new file: old_stuff/controller-0/kubernetes.default.svc.cluster.local.conf new file: old_stuff/controller-0/kubernetes.repo new file: old_stuff/controller-0/rbac_authorizations.yaml new file: old_stuff/controller-0/scheduler new file: old_stuff/controller-1/apiserver new file: old_stuff/controller-1/config new file: old_stuff/controller-1/controller-manager new file: old_stuff/controller-1/etcd.conf new file: old_stuff/controller-1/etcd.service new file: old_stuff/controller-1/kube-apiserver.service new file: old_stuff/controller-1/kube-apiserver_rbac.yaml new file: old_stuff/controller-1/kube-controller-manager.service new file: old_stuff/controller-1/kube-scheduler.service new file: old_stuff/controller-1/kube-scheduler.yaml new file: old_stuff/controller-1/kubernetes.default.svc.cluster.local.conf new file: old_stuff/controller-1/kubernetes.repo new file: old_stuff/controller-1/rbac_authorizations.yaml new file: old_stuff/controller-1/scheduler new file: old_stuff/controllers new file: scheduler_setup.sh new file: scripts/.gce_kubernetes.config new file: scripts/.variables new file: scripts/.worker_variables_0 new file: scripts/.worker_variables_1 new file: scripts/0_env_setup.sh new file: scripts/10_worker_kube-proxy_setup.sh new file: scripts/11_client_kubectl_admin_setup.sh new file: scripts/12_setup_pod_routing.sh new file: scripts/13_setup_core-dns.sh new file: scripts/13_setup_kube-dns.sh new file: scripts/14_additional_functional_tests.sh new file: scripts/14b_additional_functional_tests.sh new file: scripts/15_delete_kube-dns_pod.sh new file: scripts/16_uninstall_etcd.sh new file: scripts/17_uninstall_everything.sh new file: scripts/1_client_side_gcloud_setup.sh new file: scripts/2_cert_and_auth_create.sh new file: scripts/3_install_configure_etcd.sh new file: scripts/4_install_configure_apiserver.sh new file: scripts/5_install_configure_controller_manager.sh new file: scripts/6_install_configure_scheduler.sh new file: scripts/7_nginx_health_monitor_setup.sh new file: scripts/8_create_load_balancer.sh new file: scripts/9a_worker_kubelet_via_docker_setup.sh new file: scripts/9b_worker_kubelet_via_containerd_setup.sh new file: scripts/controller-files/kube-apiserver_rbac.yaml new file: scripts/controller-files/kubernetes.default.svc.cluster.local.conf new file: scripts/controller-files/rbac_authorizations.yaml new file: scripts/controller_manager_setup.sh new file: scripts/controller_manager_setup.sh.template new file: scripts/core-dns.yaml new file: scripts/ctrl-mgr_vars new file: scripts/etcd_setup.sh new file: scripts/etcd_vars new file: scripts/gvisor_tests.sh new file: scripts/instance new file: scripts/kube-apiserver_setup.sh new file: scripts/kube-apiserver_setup.sh.template new file: scripts/kube-dns.yaml new file: scripts/kube-dns.yaml.1 new file: scripts/kube-dns.yaml.2 new file: scripts/kube-dns.yaml.3 new file: scripts/nginx_health_monitor_setup.sh new file: scripts/scheduler_setup.sh new file: scripts/scheduler_setup.sh.template new file: scripts/untrusted.yaml new file: scripts/worker_kube-proxy_setup.sh new file: scripts/worker_kube-proxy_setup.sh.template new file: scripts/worker_kubelet_containerd_setup.sh.template new file: scripts/worker_kubelet_setup.sh new file: scripts/worker_kubelet_setup.sh.template new file: test.sh new file: test2 new file: u3_uninstall_kubernetes_controllers.sh new file: worker-0/10-bridge.conf new file: worker-0/99-loopback.conf new file: worker-0/config new file: worker-0/kube-proxy-config.yaml new file: worker-0/kube-proxy.service new file: worker-0/kubelet new file: worker-0/kubelet-config.yaml new file: worker-0/kubelet.service new file: worker-0/proxy new file: worker-1/10-bridge.conf new file: worker-1/99-loopback.conf new file: worker-1/config new file: worker-1/kube-proxy-config.yaml new file: worker-1/kube-proxy.service new file: worker-1/kubelet new file: worker-1/kubelet-config.yaml new file: worker-1/kubelet.service new file: worker-1/proxy new file: worker_kube-proxy_setup.sh new file: worker_kube-proxy_setup.sh.template new file: worker_kubelet_setup.sh new file: worker_setup.sh Initial commit
2020-02-19 07:40:43 +00:00 · 2020-02-19 07:40:43 +00:00 · c556fbaad5
commit c556fbaad5
parent 74699ed54a
246 changed files with 6509 additions and 0 deletions
--- a/10_delete_kube-dns.sh
+++ b/10_delete_kube-dns.sh
@ -0,0 +1,10 @@
+#!/bin/bash
+##
+## Script to delete the kube-dns components (in case it goes wrong)
+##
+POD=`kubectl get pods -n kube-system | grep kube | awk '{ print $1 }'`
+kubectl delete pods $POD -n kube-system
+kubectl delete configmaps kube-dns -n kube-system
+kubectl delete deployments kube-dns -n kube-system
+kubectl delete serviceaccounts kube-dns -n kube-system
+kubectl delete services kube-dns -n kube-system
--- a/11_delete_all.sh
+++ b/11_delete_all.sh
@ -0,0 +1,53 @@
+#!/bin/bash
+##
+## Script to completely delete the GCE infrastructure
+##
+echo "This script will completely remove the Kubernetes items that have been created"
+
+. .gce_kubernetes.config
+
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+
+gcloud compute forwarding-rules delete kubernetes-forwarding-rule --region $(gcloud config get-value compute/region) --quiet
+echo "Forwarding rule deleted"
+
+gcloud compute target-pools delete kubernetes-target-pool --quiet
+echo "Deleted the target pool"
+
+gcloud compute firewall-rules delete $KUBE_NETWORK-allow-health-check --quiet
+echo "Deleted the firewall rule to check health"
+
+gcloud compute http-health-checks delete kubernetes --quiet
+echo "Deleted the load balancer health check"
+
+KUBE_CONTROLLERS=$((KUBE_CONTROLLERS-1))
+KUBE_WORKERS=$((KUBE_WORKERS-1))
+for ((i=0; i<=$KUBE_CONTROLLERS; i++)); do
+  gcloud compute instances delete controller-${i} --quiet
+done
+for ((i=0; i<=$KUBE_WORKERS; i++)); do
+  gcloud compute instances delete worker-${i} --quiet
+done
+echo "Compute instances deleted"
+
+gcloud compute addresses delete $KUBE_NETWORK --region $(gcloud config get-value compute/region) --quiet
+echo "Deleted the reserved static address"
+
+gcloud compute firewall-rules delete $KUBE_EXT_FW_NAME --quiet
+gcloud compute firewall-rules delete $KUBE_INT_FW_NAME --quiet
+gcloud compute firewall-rules delete $KUBE_NETWORK-allow-nginx-service --quiet
+echo "Internal and external firewall rules deleted"
+
+gcloud compute routes delete kubernetes-route-10-200-0-0-24 --quiet
+gcloud compute routes delete kubernetes-route-10-200-1-0-24 --quiet
+gcloud compute networks subnets delete $KUBE_SUBNET --quiet
+gcloud compute networks delete $KUBE_NETWORK --quiet
+echo "Network, subnet, and routes deleted - all items created should now be deleted"
+
+rm -rf certs-dir
+echo "SSL keys, certificates, and kubeconfigs deleted"
+
+rm -f ~/bin/cfssl*
+echo "CloudFlare SSL tools deleted"
--- a/12_uninstall_etcd.sh
+++ b/12_uninstall_etcd.sh
@ -0,0 +1,19 @@
+#!/bin/bash
+##
+## Script to uninstall etcd from controllers
+##
+. .gce_kubernetes.config
+
+echo "######################################"
+echo "Set the gcloud compute region and zone"
+echo "######################################"
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+echo "Compute region and zone set"
+echo ""
+
+KUBE_CONTROLLERS=$((KUBE_CONTROLLERS-1))
+for (( i=0; i<=$KUBE_CONTROLLERS; i++ )); do
+  gcloud compute ssh controller-${i} -- 'sudo yum remove -y etcd; sudo rm -rf /var/lib/etcd /etc/etcd'
+done
--- a/3_install_configure_kubernetes.sh
+++ b/3_install_configure_kubernetes.sh
@ -0,0 +1,24 @@
+#!/bin/bash
+##
+## Script to automate the Kubernetes CentOS client side pieces
+##
+echo "######################################
+Set the gcloud compute region and zone
+######################################"
+gcloud config set compute/region us-west1
+gcloud config set compute/zone us-west1-c
+gcloud config set project kubernetescentos-205702
+echo "Compute region and zone set"
+
+for i in 0 1; do
+  gcloud compute scp controller_setup.sh controller-${i}:
+done
+
+gcloud compute scp controller-0/* controller-0:
+gcloud compute scp controller-1/* controller-1:
+
+echo "Controller setup scripts copied across"
+for i in 0 1; do
+  gcloud compute ssh controller-${i} -- ~/controller_setup.sh
+done
+
--- a/5.1_worker_kubelet_setup.sh
+++ b/5.1_worker_kubelet_setup.sh
@ -0,0 +1,19 @@
+#!/bin/bash
+. .gce_kubernetes.config
+echo "######################################
+Set the gcloud compute region and zone
+######################################"
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+echo "Compute region and zone set"
+
+KUBE_WORKERS=$((KUBE_WORKERS-1))
+
+for ((i=0; i<=$KUBE_WORKERS; i++)); do
+  echo "KUBE_POD_ADDR=$KUBE_POD_ADDR.$i.0" > .worker_variables_$i
+  echo "KUBE_NODE_POD_PREFIX=$KUBE_NODE_POD_PREFIX" >> .worker_variables_$i
+  gcloud compute scp .worker_variables_$i worker-${i}:.worker_variables
+  gcloud compute scp worker_kubelet_setup.sh worker-${i}:
+  gcloud compute ssh worker-${i} -- sudo ~/worker_kubelet_setup.sh
+done
--- a/5.2_worker_kube-proxy_setup.sh
+++ b/5.2_worker_kube-proxy_setup.sh
@ -0,0 +1,21 @@
+. .gce_kubernetes.config
+echo "######################################
+Set the gcloud compute region and zone
+######################################"
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+echo "Compute region and zone set"
+
+KUBE_WORKERS=$((KUBE_WORKERS-1))
+
+sed "s|KUBE_POD_CIDR|$KUBE_POD_CIDR|g" worker_kube-proxy_setup.sh.template > worker_kube-proxy_setup.sh
+chmod 755 worker_kube-proxy_setup.sh
+for ((i=0; i<=$KUBE_WORKERS; i++)); do  
+  gcloud compute scp worker_kube-proxy_setup.sh worker-${i}:
+done
+
+echo "Worker kube-proxy setup scripts copied across"
+for ((i=0; i<=$KUBE_WORKERS; i++)); do  
+  gcloud compute ssh worker-${i} -- sudo ~/worker_kube-proxy_setup.sh
+done
--- a/5_worker_node_setup.sh
+++ b/5_worker_node_setup.sh
@ -0,0 +1,19 @@
+echo "######################################
+Set the gcloud compute region and zone
+######################################"
+gcloud config set compute/region us-west1
+gcloud config set compute/zone us-west1-c
+gcloud config set-value project kubernetescentos-205702
+echo "Compute region and zone set"
+
+for i in 0 1; do
+  gcloud scp worker_setup.sh worker-${i}:
+done
+
+gcloud scp worker-0/* worker-0:
+gcloud scp worker-1/* worker-1:
+
+echo "Controller setup scripts copied across"
+for i in 0 1; do
+  gcloud compute ssh worker-${i} -- worker_setup.sh
+done
--- a/6_client_admin_config.sh
+++ b/6_client_admin_config.sh
@ -0,0 +1,24 @@
+#!/bin/bash
+##
+## Script to set up the client (this system) for Kubernetes access
+##
+. .gce_kubernetes.config
+echo "######################################
+Set the gcloud compute region and zone
+######################################"
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+echo "Compute region and zone set"
+
+cd certs-dir
+rm admin.kubeconfig
+KUBERNETES_PUBLIC_ADDRESS=$(gcloud compute addresses describe $KUBE_NETWORK --region $GCE_REGION --format 'value(address)')
+echo $KUBERNETES_PUBLIC_ADDRESS
+kubectl config set-cluster $KUBE_CLUSTER --certificate-authority=ca.pem --embed-certs=true --server=https://${KUBERNETES_PUBLIC_ADDRESS}:6443 --kubeconfig=admin.kubeconfig
+kubectl config set-credentials admin --client-certificate=admin.pem --client-key=admin-key.pem --kubeconfig=admin.kubeconfig
+kubectl config set-context $KUBE_NETWORK --cluster=$KUBE_CLUSTER --user=admin --kubeconfig=admin.kubeconfig
+kubectl config use-context $KUBE_NETWORK --kubeconfig=admin.kubeconfig
+
+kubectl get componentstatuses --kubeconfig=admin.kubeconfig
+kubectl get nodes --kubeconfig=admin.kubeconfig
--- a/7_pod_routing.sh
+++ b/7_pod_routing.sh
@ -0,0 +1,22 @@
+#!/bin/bash
+##
+## Script to set up the pod routing between nodes
+##
+. .gce_kubernetes.config
+echo "######################################
+Set the gcloud compute region and zone
+######################################"
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+echo "Compute region and zone set"
+
+KUBE_WORKERS=$((KUBE_WORKERS-1))
+
+for ((i=0; i<=$KUBE_WORKERS; i++)); do
+  gcloud compute routes create kubernetes-pod-route-worker-${i} --network $KUBE_NETWORK --next-hop-address $KUBE_SUBNET_ADDR.2${i} --destination-range $KUBE_POD_ADDR.${i}.0/24
+done
+sleep 10
+gcloud compute routes list --filter "network: $KUBE_NETWORK"
+
+echo "Routes should be listed above as created"
--- a/8_deploying_kube-dns.sh
+++ b/8_deploying_kube-dns.sh
@ -0,0 +1,22 @@
+#!/bin/bash
+##
+## Script to deploy the kube-dns pod to the cluster
+##
+echo "Taking the kube-dns.yaml file from the Kubernetes the Hard Way author"
+wget https://storage.googleapis.com/kubernetes-the-hard-way/kube-dns.yaml
+kubectl create -f kube-dns.yaml --kubeconfig=certs-dir/admin.kubeconfig
+
+sleep 2
+kubectl get pods -l k8s-app=kube-dns -n kube-system -o wide --kubeconfig=certs-dir/admin.kubeconfig
+
+echo "Verifying this has worked"
+kubectl run busybox --image=busybox --kubeconfig=certs-dir/admin.kubeconfig --command -- sleep 3600 
+
+echo "Is the busybox pod running?"
+kubectl get pods -l run=busybox --kubeconfig=certs-dir/admin.kubeconfig
+
+echo "Get the pod name"
+POD_NAME=$(kubectl get pods -l run=busybox --kubeconfig=certs-dir/admin.kubeconfig -o jsonpath="{.items[0].metadata.name}")
+
+echo "Is the DNS pod functional?"
+kubectl exec -ti --kubeconfig=certs-dir/admin.kubeconfig $POD_NAME -- nslookup kubernetes 
--- a/9_further_tests.sh
+++ b/9_further_tests.sh
@ -0,0 +1,55 @@
+#!/bin/bash
+##
+## Further set of tests to ensure that Kubernetes is working as expected
+##
+. .gce_kubernetes.config
+
+echo "######################################"
+echo "Set the gcloud compute region and zone"
+echo "######################################"
+gcloud config set compute/region $GCE_REGION
+gcloud config set compute/zone $GCE_ZONE
+gcloud config set project $GCE_PROJECT
+echo "Compute region and zone set"
+echo ""
+
+echo "Testing the encryption of data at rest via the key created earlier"
+kubectl create secret generic super-secret --from-literal="mykey=mydata" --kubeconfig=certs-dir/admin.kubeconfig
+
+gcloud compute ssh controller-0 \
+--command "sudo ETCDCTL_API=3 etcdctl get \
+--endpoints=https://127.0.0.1:2379 \
+--cacert=/etc/etcd/ca.pem \
+--cert=/etc/etcd/kubernetes.pem \
+--key=/etc/etcd/kubernetes-key.pem \
+/registry/secrets/default/super-secret | hexdump -C"
+
+echo "Output should be prefixed with k8s:enc:aescbc:v1:key1
+
+Testing application (nginx) deployments"
+kubectl run nginx --image=nginx --kubeconfig=certs-dir/admin.kubeconfig
+echo "Waiting 10 seconds for the pod to start ..."
+sleep 10
+kubectl get pods -l run=nginx -o wide --kubeconfig=certs-dir/admin.kubeconfig
+
+echo "nginx should be listed as running"
+POD_NAME=$(kubectl get pods -l run=nginx --kubeconfig=certs-dir/admin.kubeconfig -o jsonpath="{.items[0].metadata.name}")
+echo "You'll need to switch to another terminal and test with 'curl --head http://127.0.0.1:8080' Press Ctrl+C once completed"
+kubectl port-forward $POD_NAME 8080:80 --kubeconfig=certs-dir/admin.kubeconfig
+
+echo "Displaying the logs from the nginx container"
+kubectl logs $POD_NAME --kubeconfig=certs-dir/admin.kubeconfig
+
+echo "Executing a command inside a container"
+kubectl exec -it $POD_NAME --kubeconfig=certs-dir/admin.kubeconfig -- nginx -v
+
+echo "Exposing a container as a service (in this example NodePort)"
+kubectl expose deployment nginx --port 80 --type NodePort --kubeconfig=certs-dir/admin.kubeconfig
+NODE_PORT=$(kubectl get svc nginx --kubeconfig=certs-dir/admin.kubeconfig --output=jsonpath='{range .spec.ports[0]}{.nodePort}')
+echo "Creating a firewall rule to allow access to the exposed node"
+gcloud compute firewall-rules create kubernetes-centos-allow-nginx-service --allow=tcp:${NODE_PORT} --network $KUBE_NETWORK
+echo "Retrieving the external IP"
+EXTERNAL_IP=$(gcloud compute instances describe worker-0 --format 'value(networkInterfaces[0].accessConfigs[0].natIP)')
+curl -I http://${EXTERNAL_IP}:${NODE_PORT}
+
+echo "Functional tests should now be completed successfully"
--- a/certs-dir/admin-csr.json
+++ b/certs-dir/admin-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "admin",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "system:masters",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/admin-key.pem
+++ b/certs-dir/admin-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/admin.csr
+++ b/certs-dir/admin.csr
@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/admin.kubeconfig
+++ b/certs-dir/admin.kubeconfig
@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://127.0.0.1:6443
+  name: kube-cluster
+contexts:
+- context:
+    cluster: kube-cluster
+    user: admin
+  name: default
+current-context: default
+kind: Config
+preferences: {}
+users:
+- name: admin
+  user:
+    client-certificate-data: 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
+    client-key-data: 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
--- a/certs-dir/admin.pem
+++ b/certs-dir/admin.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----
+MIID7TCCAtWgAwIBAgIUeGQGfpEo3cbqmvHOCEoNTh/2n68wDQYJKoZIhvcNAQEL
+BQAwaDELMAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9y
+dGxhbmQxEzARBgNVBAoTCkt1YmVybmV0ZXMxCzAJBgNVBAsTAkNBMRMwEQYDVQQD
+EwpLdWJlcm5ldGVzMB4XDTE4MDcwNDAxNTEwMFoXDTE5MDcwNDAxNTEwMFoweDEL
+MAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9ydGxhbmQx
+FzAVBgNVBAoTDnN5c3RlbTptYXN0ZXJzMRwwGgYDVQQLExNLdWJlcm5ldGVzIC0g
+Q2VudE9TMQ4wDAYDVQQDEwVhZG1pbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
+AQoCggEBAL8sr/mDqamn+YcdrEuzbk7ou+knnYDOJSMGmqU5m3mnhBXimLHllccC
+LApgelp4lJgmltlP2zrVh3KDvobv7xDBdTy1x+NCiQWWQHsuir4uQ7RRQMexgm8j
+Ehdx6OyJVcQ1o0TqeiRdpFK5z7ZkhiC+2bmq9ilD1EjljyYJBRrwZUG2GMLOnIww
+yqs5wq57+mzeLZDopTkUpUeCcukMtWWzwvl79WjqV6T4oO90e00ncsqeoapE+O1a
+yCSiD7eUyWNpNRLzAs8CqAm3mQS5vEPUu9H/CTI8nnGewPYcoZc30CbOhg8UTsvG
+cTPP93rlD4uliNsY12utyZI5Bb9b05kCAwEAAaN/MH0wDgYDVR0PAQH/BAQDAgWg
+MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
+A1UdDgQWBBTIU9v7m/ej7qwpGdqHlGpguSWthzAfBgNVHSMEGDAWgBTfqs3yL4KG
+oVHsruKsx0SoHa/5/DANBgkqhkiG9w0BAQsFAAOCAQEAx/n8OqVFcsJdasKi2iMQ
+KQCxjhzWe/wRduLQ1+Nkhebfo8GOjTY4lXkyzHi+S2xNiYl0tdB/8u92XJ11R4iM
+4+OopMOUkyt5n+kW38r1D3Jue5AcjlAHsf+iMjGDA4k/qQkaAA+q1Nxc4mPFCgZv
+0a8XppLaXBHxmidu6uu7J+aoiNJR/BhRL6QO7Eu0L4LiIqrhXUMvXGjfIDeMvePJ
+kBd0DZ7i7FJbexMPA4KAqGYX1yXEAJHF6HdkYCv3NFrtAaQrKxiI9b/cC/VuttuX
+lJWfQ/MO1m2/KScqlf1Fh3EsRxQnsmyTszIveRVVzMPNcAAF2uHGX/lyAE/w/EGv
+FQ==
+-----END CERTIFICATE-----
--- a/certs-dir/ca-config.json
+++ b/certs-dir/ca-config.json
@ -0,0 +1,13 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h"
+    },
+    "profiles": {
+      "kubernetes": {
+        "usages": ["signing", "key encipherment", "server auth", "client auth"],
+        "expiry": "8760h"
+      }
+    }
+  }
+}
--- a/certs-dir/ca-csr.json
+++ b/certs-dir/ca-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "Kubernetes",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "Kubernetes",
+      "OU": "CA",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/ca-key.pem
+++ b/certs-dir/ca-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/ca.csr
+++ b/certs-dir/ca.csr
@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/ca.pem
+++ b/certs-dir/ca.pem
@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIIDxDCCAqygAwIBAgIUKi4Fnok+d8mN/+TtttkULwd0mnwwDQYJKoZIhvcNAQEL
+BQAwaDELMAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9y
+dGxhbmQxEzARBgNVBAoTCkt1YmVybmV0ZXMxCzAJBgNVBAsTAkNBMRMwEQYDVQQD
+EwpLdWJlcm5ldGVzMB4XDTE4MDcwNDAxNTEwMFoXDTIzMDcwMzAxNTEwMFowaDEL
+MAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9ydGxhbmQx
+EzARBgNVBAoTCkt1YmVybmV0ZXMxCzAJBgNVBAsTAkNBMRMwEQYDVQQDEwpLdWJl
+cm5ldGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X9PGTx2t45h
+ocH0OmOHGKje7VdQpB/MvwDdbAZvzelij+tWf4NRR26f/h+viCznYEXbO7nulH/c
+//QKwsYjOdns3GrMDK1mCsjqSKuoBfqEbYUPGx78kk9Pu3detTUQrSwv0mwPgh7c
+i11MuBEUKu3ETtnzNSP/E9dgL4HpkzSI0SPdZQYWtKOuDSDc9cCMcDdpaUWSjJ5Y
+gApvXH2lgLuibWY+EiXIzXR4rmNJIY0tJ6yg1OpNHYmO6IJG3qAG+NapNomQtIGm
+gXbmC/BC9/kEcw7ET6OB9tOvSF1Q0NKfoSKA1Q6cjxwEEDnXwlxzeI8yEL9fVV2U
+1ZQ2gG40dQIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB
+/wIBAjAdBgNVHQ4EFgQU36rN8i+ChqFR7K7irMdEqB2v+fwwHwYDVR0jBBgwFoAU
+36rN8i+ChqFR7K7irMdEqB2v+fwwDQYJKoZIhvcNAQELBQADggEBACaUXqxTWRKc
+LHjCPaun0TwpXINO00/x/z9Fpj5IhrwsVKlo+quobjiVy9VMf7QRlbzVi0HFZISs
+qBMAcHNvBxOmuCAe2gkHDWEvY3G/TwjK//R+j+d9EN10W0NJdFTBTr/NzOQUg5Ye
+PloszPx0Jpi2oMpTCk1AahWP9xBgBFVB+Vao3y7moBGoNiZ348tw48OXp7pG5Sag
+A6/A5YzGJ4fYMmzU65qxddNa3+a2XleYyy8g4om+fDuKT56HiZiPQKK8OQW5sp51
+98xkZPQWPlyfUR5iDU7zl4qzT9PK58mFVDTbnf3g+9iKTyAv50vyflkG522sxdi5
+TFBPPInZ1jI=
+-----END CERTIFICATE-----
--- a/certs-dir/encryption-config.yaml
+++ b/certs-dir/encryption-config.yaml
@ -0,0 +1,11 @@
+kind: EncryptionConfig
+apiVersion: v1
+resources:
+  - resources:
+      - secrets
+    providers:
+      - aescbc:
+          keys:
+            - name: key1
+              secret: P0bSRM4eag88PjJpXOEKEE1DheDfTJpeMNxL2BqCKvw=
+      - identity: {}
--- a/certs-dir/kube-controller-manager-csr.json
+++ b/certs-dir/kube-controller-manager-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "system:kube-controller-manager",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "system:kube-controller-manager",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/kube-controller-manager-key.pem
+++ b/certs-dir/kube-controller-manager-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/kube-controller-manager.csr
+++ b/certs-dir/kube-controller-manager.csr
@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/kube-controller-manager.kubeconfig
+++ b/certs-dir/kube-controller-manager.kubeconfig
@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://127.0.0.1:6443
+  name: kube-cluster
+contexts:
+- context:
+    cluster: kube-cluster
+    user: system:kube-controller-manager
+  name: default
+current-context: default
+kind: Config
+preferences: {}
+users:
+- name: system:kube-controller-manager
+  user:
+    client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUVGekNDQXYrZ0F3SUJBZ0lVSVBFYzFNYWtaeGFrQmYyZkdwVDN1SDZhZjdZd0RRWUpLb1pJaHZjTkFRRUwKQlFBd2FERUxNQWtHQTFVRUJoTUNWVk14RHpBTkJnTlZCQWdUQms5eVpXZHZiakVSTUE4R0ExVUVCeE1JVUc5eQpkR3hoYm1ReEV6QVJCZ05WQkFvVENrdDFZbVZ5Ym1WMFpYTXhDekFKQmdOVkJBc1RBa05CTVJNd0VRWURWUVFECkV3cExkV0psY201bGRHVnpNQjRYRFRFNE1EY3dOREF4TlRFd01Gb1hEVEU1TURjd05EQXhOVEV3TUZvd2dhRXgKQ3pBSkJnTlZCQVlUQWxWVE1ROHdEUVlEVlFRSUV3WlBjbVZuYjI0eEVUQVBCZ05WQkFjVENGQnZjblJzWVc1awpNU2N3SlFZRFZRUUtFeDV6ZVhOMFpXMDZhM1ZpWlMxamIyNTBjbTlzYkdWeUxXMWhibUZuWlhJeEhEQWFCZ05WCkJBc1RFMHQxWW1WeWJtVjBaWE1nTFNCRFpXNTBUMU14SnpBbEJnTlZCQU1USG5ONWMzUmxiVHByZFdKbExXTnYKYm5SeWIyeHNaWEl0YldGdVlXZGxjakNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQgpBT0MrOTQzaHh5amRDVzlMWlB0QjI2bit5SUx5YkJUZ1h0SGFOTXpkYmtOUHJ4Wk84M2dNeHlYc2k2T1NON0tFCjZleXFMUXV6bzhrdWU3ZEsrRmcybWsvNlhiWVdFUXJmNm5nMlBlbndLdTN4Z3FyNHBJNHRRUTc0b0drUDRxS2cKSHhqNlFOV1JDdnZ3eGc3dTlmNkhTTnpBN0o0L2NOcURLYkVuM0xkUjF0d3lncjF2Z24vclBBNldnQnViY1BTdwp5dG0zWDhadlR4MnFsWHBPKzdYek1vcUk0L3ZEUmY5ZC9ob0tuZTBMOW5kTkdkWjI4cE5aUjRWMHExbndJaVc3CkRyNU1Ecm56MVdxRnZ4Y0tnSUNKa3N3dzR3WDFVYnI2cFRpRUhjTmI4NWVSRjNCRFdOc1hvNy9iMWhwcDhQa0kKMXplcnVZZ1RhYjhacGhjUmZ3VndqVlVDQXdFQUFhTi9NSDB3RGdZRFZSMFBBUUgvQkFRREFnV2dNQjBHQTFVZApKUVFXTUJRR0NDc0dBUVVGQndNQkJnZ3JCZ0VGQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUIwR0ExVWREZ1FXCkJCUWZ6UnJveGFOSG1Mc2x3NUdEYlNtUWtzcnNOREFmQmdOVkhTTUVHREFXZ0JUZnFzM3lMNEtHb1ZIc3J1S3MKeDBTb0hhLzUvREFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBc0dGSVgvNVlDcHZ5b090NEpoWVhMalVwbnFjLwo4MW5CcU0yQXJqQXNPeXIwaEtmanIzNk0vVmtwSE1JS3g3WGQxcWR4R0FXazYvWTg2Y3BZdjRWbWwrbFZsNGRwCnBnQStZamprVjVWRHFpNWlzTWxNckQvcWQrYTltR0dMM0Yrazh4VWhrNFZ3VWx5S0NUOUFvVTJWOExqdjRYME4KQVY1eklHR2dPTFFiL1NiV1c3L2FVTUYwODU2Y1ZvTVlHQlp6V1BLb21vOHdtRmxBK2RWZ1VPdXpZZitPcFpqcQpkaUFmcjdTR1NXSlVTc09vMjVNb3NFbUF2T3VGRG9ua0l5eTRQTUpFMFZlb2ZrZ2RkWnlhUno0SGh1Z1ZZRDFFCldlVGFpdWJ0d1Z6RHgyRkg2Zk12RjhJWXpaWXdsRzRpdzRMb01NcEJDYU1kSXN5RkFXY2hlTDBuWWc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
+    client-key-data: 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
--- a/certs-dir/kube-controller-manager.pem
+++ b/certs-dir/kube-controller-manager.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs-dir/kube-proxy-csr.json
+++ b/certs-dir/kube-proxy-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "system:kube-proxy",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "system:node-proxier",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/kube-proxy-key.pem
+++ b/certs-dir/kube-proxy-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/kube-proxy.csr
+++ b/certs-dir/kube-proxy.csr
@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/kube-proxy.kubeconfig
+++ b/certs-dir/kube-proxy.kubeconfig
@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://:6443
+  name: kube-cluster
+contexts:
+- context:
+    cluster: kube-cluster
+    user: system:kube-proxy
+  name: default
+current-context: default
+kind: Config
+preferences: {}
+users:
+- name: system:kube-proxy
+  user:
+    client-certificate-data: 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
+    client-key-data: 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
--- a/certs-dir/kube-proxy.pem
+++ b/certs-dir/kube-proxy.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----
+MIID/zCCAuegAwIBAgIUXqnNf8S64Cil4KL8JHAy0rUsbKQwDQYJKoZIhvcNAQEL
+BQAwaDELMAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9y
+dGxhbmQxEzARBgNVBAoTCkt1YmVybmV0ZXMxCzAJBgNVBAsTAkNBMRMwEQYDVQQD
+EwpLdWJlcm5ldGVzMB4XDTE4MDcwNDAxNTEwMFoXDTE5MDcwNDAxNTEwMFowgYkx
+CzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAPBgNVBAcTCFBvcnRsYW5k
+MRwwGgYDVQQKExNzeXN0ZW06bm9kZS1wcm94aWVyMRwwGgYDVQQLExNLdWJlcm5l
+dGVzIC0gQ2VudE9TMRowGAYDVQQDExFzeXN0ZW06a3ViZS1wcm94eTCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBANf1+FPEX/qA8I6pjN7MXJCP2DO4YNES
+V9mJSpPujfm9MaGnDk9k87QeWOaC70Pogo/+8tTRiSEUs7QonqoYX9FW6fiFF69H
+o9c0hgDypDyLNhvsyBoHHja9tk8ih4KtFtDqYUH2pUTodPaO8ZtDbNEA0rLjQmHI
+nYuT2ZS9TABnrfZW6NN842LP32FXg/i8+uqUh9yLm+ZAZm25kyvqvjIiDGCqml4B
+V75K6HiaPFNz6RZByd+eN3r97xif3rfphTAxb4CK0HsK4xapXQ/eyXrukRKrBVOK
+trPJVaE/6jSblfVJUvGEqFwIArz8ZERY2AAzLnDTWYf0+QY9oOaYe98CAwEAAaN/
+MH0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
+AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTaJpFsQn0I1NV03VIlhc10iIPpwzAf
+BgNVHSMEGDAWgBTfqs3yL4KGoVHsruKsx0SoHa/5/DANBgkqhkiG9w0BAQsFAAOC
+AQEAxd6oYnzCWgEXmQfIeAhzOpX6uEmqjj56jfOCTFwwgbPrBkD3cdJmFjX8ZUiS
+vL1GaLch5obiCWAbLiRTk1Q0TLQaN2BIFPp79j4XWrehV2rbdcT5N4z2FsFHfph+
+a4Cuxsh7dsh9tGWRqyZ+aHCucMB9u6pdWzHwZXvf6iQz8HI8hswmIYHpHHXn6p+J
+kv8IROYYtZOni8mcFuFryTKcSm/xEn01LwqwRKpQQ4pRaLw+P+7m6VUC2ySUrIyc
+Js0bKGGpYnR4f/Y8RuQJ6shr3WUJklzNn5wwKIUxKri4jcEjWqt+AzlyjB4xGoQP
+FMuM1gq7JwKmETdffoN+vnVd7A==
+-----END CERTIFICATE-----
--- a/certs-dir/kube-scheduler-csr.json
+++ b/certs-dir/kube-scheduler-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "system:kube-scheduler",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "system:kube-scheduler",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/kube-scheduler-key.pem
+++ b/certs-dir/kube-scheduler-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/kube-scheduler.csr
+++ b/certs-dir/kube-scheduler.csr
@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/kube-scheduler.kubeconfig
+++ b/certs-dir/kube-scheduler.kubeconfig
@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://127.0.0.1:6443
+  name: kube-cluster
+contexts:
+- context:
+    cluster: kube-cluster
+    user: system:kube-scheduler
+  name: default
+current-context: default
+kind: Config
+preferences: {}
+users:
+- name: system:kube-scheduler
+  user:
+    client-certificate-data: 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
+    client-key-data: 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
--- a/certs-dir/kube-scheduler.pem
+++ b/certs-dir/kube-scheduler.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs-dir/kubernetes-csr.json
+++ b/certs-dir/kubernetes-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "kubernetes",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "Kubernetes",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/kubernetes-key.pem
+++ b/certs-dir/kubernetes-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/kubernetes.csr
+++ b/certs-dir/kubernetes.csr
@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/kubernetes.pem
+++ b/certs-dir/kubernetes.pem
@ -0,0 +1,25 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs-dir/service-account-csr.json
+++ b/certs-dir/service-account-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "service-accounts",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "Kubernetes",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/service-account-key.pem
+++ b/certs-dir/service-account-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/service-account.csr
+++ b/certs-dir/service-account.csr
@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/service-account.pem
+++ b/certs-dir/service-account.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs-dir/worker-0-csr.json
+++ b/certs-dir/worker-0-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "system:node:worker-0",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "system:nodes",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/worker-0-key.pem
+++ b/certs-dir/worker-0-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/worker-0.csr
+++ b/certs-dir/worker-0.csr
@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICyzCCAbMCAQAwgYUxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAP
+BgNVBAcTCFBvcnRsYW5kMRUwEwYDVQQKEwxzeXN0ZW06bm9kZXMxHDAaBgNVBAsT
+E0t1YmVybmV0ZXMgLSBDZW50T1MxHTAbBgNVBAMTFHN5c3RlbTpub2RlOndvcmtl
+ci0wMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmaKsGNE1WRu4XUd
+LBU3FogoiBD9DwQI/HKSluyIUdo94YiD+/ehP6CmjlloQen3+MIp15ZicVrniAv5
+zmcMcv5iPRnV9sF8XBSS6jJS3aqh2n6Fn0BanGpSwrJJd/WcOEnnqVtryQGKHL2j
+PUC95xehPbhOsY1fpk124oJKoiLlEomIR0RPaGOf24zRgpU7aueC5u5lG+147C2I
+MtpPxfWcGUYHmIdaU9qvcQz5/YlGSBBeYaaiRSTb6m2Y9IXR2d6h95JnatbWcuO8
+U9Mhmq1uhhm+ukA2u4Jrd7NMLwEC/TG+hCzK3Avi2WFp5fqkXRaeJQAUFoS588XZ
+THVCBQIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBADa7iOhoCYIiTbXM/6Ob188m
+6GTfi7NI12wt407jx/tRr/rIorOwH1BhkUmL79sPRA5tlrEnvBjzCU4epbjH4cjX
+2NzSnFkHOV9Sf7VaBMoTrHfsA/wg7TWrXJV+UoY2Y5+2nyB4KXKaENnSIaBzZ8pD
+RAFENV5/6n0o2Kk38qRa2pNz6lUdjW4xQ8w4Fs7ERvQCW1Vm005/pcCM0RsB4jgD
+4VsG2K3v07njEHoqXqyU/bMFiFJnzjsuIfiM5De4tX80DJgCrm9ItY8Yea4qwPbu
+lYmcvVb2nQXghAny69eFKGmTpn5bwCyFLBIZ1c7or3SdqxL2TYEu7IqkwvyKcvU=
+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/worker-0.kubeconfig
+++ b/certs-dir/worker-0.kubeconfig
@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://:6443
+  name: kube-cluster
+contexts:
+- context:
+    cluster: kube-cluster
+    user: system:node:worker-0
+  name: default
+current-context: default
+kind: Config
+preferences: {}
+users:
+- name: system:node:worker-0
+  user:
+    client-certificate-data: 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
+    client-key-data: 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
--- a/certs-dir/worker-0.pem
+++ b/certs-dir/worker-0.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs-dir/worker-1-csr.json
+++ b/certs-dir/worker-1-csr.json
@ -0,0 +1,16 @@
+{
+  "CN": "system:node:worker-1",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "system:nodes",
+      "OU": "Kubernetes - CentOS",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/certs-dir/worker-1-key.pem
+++ b/certs-dir/worker-1-key.pem
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/certs-dir/worker-1.csr
+++ b/certs-dir/worker-1.csr
@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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=
+-----END CERTIFICATE REQUEST-----
--- a/certs-dir/worker-1.kubeconfig
+++ b/certs-dir/worker-1.kubeconfig
@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: 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
+    server: https://:6443
+  name: kube-cluster
+contexts:
+- context:
+    cluster: kube-cluster
+    user: system:node:worker-1
+  name: default
+current-context: default
+kind: Config
+preferences: {}
+users:
+- name: system:node:worker-1
+  user:
+    client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUVGakNDQXY2Z0F3SUJBZ0lVVFBsZHJtTEEvUWpMRngreEhiT09teXJSYXBVd0RRWUpLb1pJaHZjTkFRRUwKQlFBd2FERUxNQWtHQTFVRUJoTUNWVk14RHpBTkJnTlZCQWdUQms5eVpXZHZiakVSTUE4R0ExVUVCeE1JVUc5eQpkR3hoYm1ReEV6QVJCZ05WQkFvVENrdDFZbVZ5Ym1WMFpYTXhDekFKQmdOVkJBc1RBa05CTVJNd0VRWURWUVFECkV3cExkV0psY201bGRHVnpNQjRYRFRFNE1EY3dOREF4TlRFd01Gb1hEVEU1TURjd05EQXhOVEV3TUZvd2dZVXgKQ3pBSkJnTlZCQVlUQWxWVE1ROHdEUVlEVlFRSUV3WlBjbVZuYjI0eEVUQVBCZ05WQkFjVENGQnZjblJzWVc1awpNUlV3RXdZRFZRUUtFd3h6ZVhOMFpXMDZibTlrWlhNeEhEQWFCZ05WQkFzVEUwdDFZbVZ5Ym1WMFpYTWdMU0JEClpXNTBUMU14SFRBYkJnTlZCQU1URkhONWMzUmxiVHB1YjJSbE9uZHZjbXRsY2kweE1JSUJJakFOQmdrcWhraUcKOXcwQkFRRUZBQU9DQVE4QU1JSUJDZ0tDQVFFQXZuS0Z2Q01BT0FLeE1nSHdIVXJXNHVzN0NJYlVnQ0QwZ2h5bwovY0dUczgwblh5bHdnZUcxV2hrVlQrRzBsMWh5NjBmTUlZSDlXMDhvdE15NlM0M0xBWGtBREk3Nm5kY3NGU0dxCnhjdkNDVFA1QU1ab1JVdjNPZEFrRXdrYU9NK20yek5Jc2pUaFFGbFlLSUFHQk1CeVBFUXh1TWltWHlaMTEvWU4KT1ZmMUFUdWR5YlVkd0tBUXc1aHJlSGJvOENXN3BQYk9ORGJackk3cHgwUldJSG1WcDdWbkQ2bGlHZzR6SmNnTQp2Sy9qUSs2bm9XREtYU3NLcy9IVDNoN3B0MlVJSXl5VGQ2ZDhFbS9OVFFhQVZzQWppd1ZYK212aVphNzVxbWdIClQ4SE5aRjBBOUVvU2JCMlV2VStNcmNwd0dMajNwQTZzWGZXekxQTFhsM0kwKzlwSFpRSURBUUFCbzRHWk1JR1cKTUE0R0ExVWREd0VCL3dRRUF3SUZvREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJdwpEQVlEVlIwVEFRSC9CQUl3QURBZEJnTlZIUTRFRmdRVUdEZDR5TGZEVlVlOS9DNmdrV0JtU2JNaWFySXdId1lEClZSMGpCQmd3Rm9BVTM2ck44aStDaHFGUjdLN2lyTWRFcUIyditmd3dGd1lEVlIwUkJCQXdEb0lJZDI5eWEyVnkKTFRHQ0FJSUFNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJSUGp5Q0dOTzJIazRxanhOR3poL1dNTmp5eklrSAo3T2ZnV2pORDltN3haY0VIVWZROVV3L0I4TlMrZHIxWkltVjU2SEhZbzI4REs0V1djV0FsTTdydFFpNHppLzNXCkd5ZVNpWXJHSGhGdm9RcWFWd3l6eHVMZlozelgzeHBBaUxwVmE4SGZkR0hJSmNIU3pTa29LcFNBRlcrdHJiMU8KMFZBcmRPV1JNeW1XUDRmb2llcjhCWllGRXJnd2pFbVhybHVUNDdraFlDdi9abEN4Z1dBQkVaNlhRejA1U2lLRApFNjZRNDFneWsxUk1QWTYzL3hZbm12L1hJbUpsRWprSU15dzlBQmlIZ3IzTVp1eFVPMkdEQ1JaMEV0Q01hUGJEClF5TzIwTlJIRm9uK09vYjRTZXpDQk9RQ3QxWUJqWDJPRUpvbkI4R3lhN3NPdVRWZzk1ODZNTkxECi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+    client-key-data: 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
--- a/certs-dir/worker-1.pem
+++ b/certs-dir/worker-1.pem
@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----
+MIIEFjCCAv6gAwIBAgIUTPldrmLA/QjLFx+xHbOOmyrRapUwDQYJKoZIhvcNAQEL
+BQAwaDELMAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdvbjERMA8GA1UEBxMIUG9y
+dGxhbmQxEzARBgNVBAoTCkt1YmVybmV0ZXMxCzAJBgNVBAsTAkNBMRMwEQYDVQQD
+EwpLdWJlcm5ldGVzMB4XDTE4MDcwNDAxNTEwMFoXDTE5MDcwNDAxNTEwMFowgYUx
+CzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAPBgNVBAcTCFBvcnRsYW5k
+MRUwEwYDVQQKEwxzeXN0ZW06bm9kZXMxHDAaBgNVBAsTE0t1YmVybmV0ZXMgLSBD
+ZW50T1MxHTAbBgNVBAMTFHN5c3RlbTpub2RlOndvcmtlci0xMIIBIjANBgkqhkiG
+9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnKFvCMAOAKxMgHwHUrW4us7CIbUgCD0ghyo
+/cGTs80nXylwgeG1WhkVT+G0l1hy60fMIYH9W08otMy6S43LAXkADI76ndcsFSGq
+xcvCCTP5AMZoRUv3OdAkEwkaOM+m2zNIsjThQFlYKIAGBMByPEQxuMimXyZ11/YN
+OVf1ATudybUdwKAQw5hreHbo8CW7pPbONDbZrI7px0RWIHmVp7VnD6liGg4zJcgM
+vK/jQ+6noWDKXSsKs/HT3h7pt2UIIyyTd6d8Em/NTQaAVsAjiwVX+mviZa75qmgH
+T8HNZF0A9EoSbB2UvU+MrcpwGLj3pA6sXfWzLPLXl3I0+9pHZQIDAQABo4GZMIGW
+MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
+DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGDd4yLfDVUe9/C6gkWBmSbMiarIwHwYD
+VR0jBBgwFoAU36rN8i+ChqFR7K7irMdEqB2v+fwwFwYDVR0RBBAwDoIId29ya2Vy
+LTGCAIIAMA0GCSqGSIb3DQEBCwUAA4IBAQBRPjyCGNO2Hk4qjxNGzh/WMNjyzIkH
+7OfgWjND9m7xZcEHUfQ9Uw/B8NS+dr1ZImV56HHYo28DK4WWcWAlM7rtQi4zi/3W
+GyeSiYrGHhFvoQqaVwyzxuLfZ3zX3xpAiLpVa8HfdGHIJcHSzSkoKpSAFW+trb1O
+0VArdOWRMymWP4foier8BZYFErgwjEmXrluT47khYCv/ZlCxgWABEZ6XQz05SiKD
+E66Q41gyk1RMPY63/xYnmv/XImJlEjkIMyw9ABiHgr3MZuxUO2GDCRZ0EtCMaPbD
+QyO20NRHFon+Oob4SezCBOQCt1YBjX2OEJonB8Gya7sOuTVg9586MNLD
+-----END CERTIFICATE-----
--- a/cni/bridge
+++ b/cni/bridge
--- a/cni/cni-plugins-amd64-v0.6.0.tgz
+++ b/cni/cni-plugins-amd64-v0.6.0.tgz
--- a/cni/dhcp
+++ b/cni/dhcp
--- a/cni/flannel
+++ b/cni/flannel
--- a/cni/host-local
+++ b/cni/host-local
--- a/cni/ipvlan
+++ b/cni/ipvlan
--- a/cni/loopback
+++ b/cni/loopback
--- a/cni/macvlan
+++ b/cni/macvlan
--- a/cni/portmap
+++ b/cni/portmap
--- a/cni/ptp
+++ b/cni/ptp
--- a/cni/sample
+++ b/cni/sample
--- a/cni/tuning
+++ b/cni/tuning
--- a/cni/vlan
+++ b/cni/vlan
--- a/controller-0/apiserver
+++ b/controller-0/apiserver
@ -0,0 +1,26 @@
+###
+# kubernetes system config
+#
+# The following values are used to configure the kube-apiserver
+#
+
+# The address on the local server to listen to.
+#KUBE_API_ADDRESS="--insecure-bind-address=127.0.0.1"
+
+# The port on the local server to listen on.
+#KUBE_API_PORT="--port=6443"
+
+# Port minions listen on
+KUBELET_PORT="--kubelet-port=10250"
+
+# Comma separated list of nodes in the etcd cluster
+KUBE_ETCD_SERVERS="--etcd-servers=https://10.240.0.10:2379,https://10.240.0.11:2379"
+
+# Address range to use for services
+KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.32.0.0/16"
+
+# default admission control policies
+KUBE_ADMISSION_CONTROL="--enable-admission-plugins=Initializers,NamespaceLifecycle,NodeRestriction,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota"                                                   
+
+# Add your own!
+KUBE_API_ARGS="--advertise-address=10.240.0.10 --allow-privileged=true --apiserver-count=2 --audit-log-maxage=30 --audit-log-maxbackup=3 audit-log-maxsize=100 audit-log-path=/var/log/audit/audit.log --authorization-mode=Node,RBAC --bind-address=0.0.0.0 --client-ca-file=/var/lib/kubernetes/ca.pem --enable-swagger-ui=true --etcd-cafile=/var/lib/kubernetes/ca.pem --etcd-certfile=/var/lib/kubernetes/kubernetes.pem --etcd-keyfile=/var/lib/kubernetes/kubernetes-key.pem --event-ttl=1h --experimental-encryption-provider-config=/var/lib/kubernetes/encryption-config.yaml --kubelet-certificate-authority=/var/lib/kubernetes/ca.pem --kubelet-client-certificate=/var/lib/kubernetes/kubernetes.pem --kubelet-client-key=/var/lib/kubernetes/kubernetes-key.pem --kubelet-https=true --runtime-config=api/all --service-account-key-file=/var/lib/kubernetes/service-account.pem --service-node-port-range=30000-32767 --tls-cert-file=/var/lib/kubernetes/kubernetes.pem --tls-private-key-file=/var/lib/kubernetes/kubernetes-key.pem --v=2"
--- a/controller-0/config
+++ b/controller-0/config
@ -0,0 +1,13 @@
+
+# This file controls the state of SELinux on the system.
+# SELINUX= can take one of these three values:
+#     enforcing - SELinux security policy is enforced.
+#     permissive - SELinux prints warnings instead of enforcing.
+#     disabled - No SELinux policy is loaded.
+#SELINUX=enforcing
+SELINUX=permissive
+# SELINUXTYPE= can take one of three two values:
+#     targeted - Targeted processes are protected,
+#     minimum - Modification of targeted policy. Only selected processes are protected. 
+#     mls - Multi Level Security protection.
+SELINUXTYPE=targeted
--- a/controller-0/controller-manager
+++ b/controller-0/controller-manager
@ -0,0 +1,7 @@
+###
+# The following values are used to configure the kubernetes controller-manager
+
+# defaults from config and apiserver should be adequate
+
+# Add your own!
+KUBE_CONTROLLER_MANAGER_ARGS="--address=0.0.0.0 --cluster-cidr=10.200.0.0/16 --cluster-name=kubernetes --cluster-signing-cert-file=/var/lib/kubernetes/ca.pem --cluster-signing-key-file=/var/lib/kubernetes/ca-key.pem --kubeconfig=/var/lib/kubernetes/kube-controller-manager.kubeconfig --leader-elect=true --root-ca-file=/var/lib/kubernetes/ca.pem --service-account-private-key-file=/var/lib/kubernetes/service-account-key.pem --service-cluster-ip-range=10.32.0.0/24 --use-service-account-credentials=true --v=2"
--- a/controller-0/etcd.conf
+++ b/controller-0/etcd.conf
@ -0,0 +1,69 @@
+#[Member]
+#ETCD_CORS=""
+ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
+#ETCD_WAL_DIR=""
+ETCD_LISTEN_PEER_URLS="https://10.240.0.10:2380"
+ETCD_LISTEN_CLIENT_URLS="https://10.240.0.10:2379,https://127.0.0.1:2379"
+#ETCD_MAX_SNAPSHOTS="5"
+#ETCD_MAX_WALS="5"
+ETCD_NAME="controller-0"
+#ETCD_SNAPSHOT_COUNT="100000"
+#ETCD_HEARTBEAT_INTERVAL="100"
+#ETCD_ELECTION_TIMEOUT="1000"
+#ETCD_QUOTA_BACKEND_BYTES="0"
+#ETCD_MAX_REQUEST_BYTES="1572864"
+#ETCD_GRPC_KEEPALIVE_MIN_TIME="5s"
+#ETCD_GRPC_KEEPALIVE_INTERVAL="2h0m0s"
+#ETCD_GRPC_KEEPALIVE_TIMEOUT="20s"
+#
+#[Clustering]
+ETCD_INITIAL_ADVERTISE_PEER_URLS="https://10.240.0.10:2380"
+ETCD_ADVERTISE_CLIENT_URLS="https://10.240.0.10:2379"
+#ETCD_DISCOVERY=""
+#ETCD_DISCOVERY_FALLBACK="proxy"
+#ETCD_DISCOVERY_PROXY=""
+#ETCD_DISCOVERY_SRV=""
+ETCD_INITIAL_CLUSTER="controller-0=https://10.240.0.10:2380,controller-1=https://10.240.0.11:2380"
+ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster"
+ETCD_INITIAL_CLUSTER_STATE="new"
+#ETCD_STRICT_RECONFIG_CHECK="true"
+#ETCD_ENABLE_V2="true"
+#
+#[Proxy]
+#ETCD_PROXY="off"
+#ETCD_PROXY_FAILURE_WAIT="5000"
+#ETCD_PROXY_REFRESH_INTERVAL="30000"
+#ETCD_PROXY_DIAL_TIMEOUT="1000"
+#ETCD_PROXY_WRITE_TIMEOUT="5000"
+#ETCD_PROXY_READ_TIMEOUT="0"
+#
+#[Security]
+ETCD_CERT_FILE="/etc/etcd/kubernetes.pem"
+ETCD_KEY_FILE="/etc/etcd/kubernetes-key.pem"
+ETCD_CLIENT_CERT_AUTH="true"
+ETCD_TRUSTED_CA_FILE="/etc/etcd/ca.pem"
+#ETCD_AUTO_TLS="false"
+ETCD_PEER_CERT_FILE="/etc/etcd/kubernetes.pem"
+ETCD_PEER_KEY_FILE="/etc/etcd/kubernetes-key.pem"
+ETCD_PEER_CLIENT_CERT_AUTH="true"
+ETCD_PEER_TRUSTED_CA_FILE="/etc/etcd/ca.pem"
+#ETCD_PEER_AUTO_TLS="false"
+#
+#[Logging]
+#ETCD_DEBUG="false"
+#ETCD_LOG_PACKAGE_LEVELS=""
+#ETCD_LOG_OUTPUT="default"
+#
+#[Unsafe]
+#ETCD_FORCE_NEW_CLUSTER="false"
+#
+#[Version]
+#ETCD_VERSION="false"
+#ETCD_AUTO_COMPACTION_RETENTION="0"
+#
+#[Profiling]
+#ETCD_ENABLE_PPROF="false"
+#ETCD_METRICS="basic"
+#
+#[Auth]
+#ETCD_AUTH_TOKEN="simple"
--- a/controller-0/etcd.service
+++ b/controller-0/etcd.service
@ -0,0 +1,18 @@
+[Unit]
+Description=Etcd Server
+After=network.target
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=notify
+WorkingDirectory=/var/lib/etcd/
+EnvironmentFile=-/etc/etcd/etcd.conf
+User=etcd
+# set GOMAXPROCS to number of processors
+ExecStart=/bin/bash -c "GOMAXPROCS=$(nproc) /usr/bin/etcd --name=${ETCD_NAME} --data-dir=${ETCD_DATA_DIR} --listen-client-urls=${ETCD_LISTEN_CLIENT_URLS} --listen-peer-urls=${ETCD_LISTEN_PEER_URLS} --initial-advertise-peer-urls=${ETCD_INITIAL_ADVERTISE_PEER_URLS} --advertise-client-urls=${ETCD_ADVERTISE_CLIENT_URLS} --initial-cluster=${ETCD_INITIAL_CLUSTER} --initial-cluster-token=${ETCD_INITIAL_CLUSTER_TOKEN} --initial-cluster-state=${ETCD_INITIAL_CLUSTER_STATE} --cert-file=${ETCD_CERT_FILE} --key-file=${ETCD_KEY_FILE} --client-cert-auth=${ETCD_CLIENT_CERT_AUTH} --trusted-ca-file=${ETCD_TRUSTED_CA_FILE} --peer-cert-file=${ETCD_PEER_CERT_FILE} --peer-key-file=${ETCD_PEER_KEY_FILE} --peer-client-cert-auth=${ETCD_PEER_CLIENT_CERT_AUTH} --peer-trusted-ca-file=${ETCD_PEER_TRUSTED_CA_FILE}"
+Restart=on-failure
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-0/kube-apiserver.service
+++ b/controller-0/kube-apiserver.service
@ -0,0 +1,27 @@
+[Unit]
+Description=Kubernetes API Server
+Documentation=https://github.com/GoogleCloudPlatform/kubernetes
+After=network.target
+After=etcd.service
+
+[Service]
+EnvironmentFile=-/etc/kubernetes/config
+EnvironmentFile=-/etc/kubernetes/apiserver
+#User=kube
+ExecStart=/usr/local/bin/kube-apiserver \
+            $KUBE_LOGTOSTDERR \
+            $KUBE_LOG_LEVEL \
+            $KUBE_ETCD_SERVERS \
+            $KUBE_API_ADDRESS \
+            $KUBE_API_PORT \
+            $KUBELET_PORT \
+            $KUBE_ALLOW_PRIV \
+            $KUBE_SERVICE_ADDRESSES \
+            $KUBE_ADMISSION_CONTROL \
+            $KUBE_API_ARGS
+Restart=on-failure
+Type=notify
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-0/kube-apiserver_rbac.yaml
+++ b/controller-0/kube-apiserver_rbac.yaml
@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: system:kube-apiserver
+  namespace: ""
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:kube-apiserver-to-kubelet
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: User
+    name: kubernetes
--- a/controller-0/kube-controller-manager.service
+++ b/controller-0/kube-controller-manager.service
@ -0,0 +1,18 @@
+[Unit]
+Description=Kubernetes Controller Manager
+Documentation=https://github.com/GoogleCloudPlatform/kubernetes
+
+[Service]
+EnvironmentFile=-/etc/kubernetes/config
+EnvironmentFile=-/etc/kubernetes/controller-manager
+#User=kube
+ExecStart=/usr/local/bin/kube-controller-manager \
+            $KUBE_LOGTOSTDERR \
+            $KUBE_LOG_LEVEL \
+            $KUBE_MASTER \
+            $KUBE_CONTROLLER_MANAGER_ARGS
+Restart=on-failure
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-0/kube-scheduler.service
+++ b/controller-0/kube-scheduler.service
@ -0,0 +1,13 @@
+[Unit]
+Description=Kubernetes Scheduler
+Documentation=https://github.com/kubernetes/kubernetes
+
+[Service]
+ExecStart=/usr/local/bin/kube-scheduler \
+  --config=/etc/kubernetes/kube-scheduler.yaml \
+  --v=2
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-0/kube-scheduler.yaml
+++ b/controller-0/kube-scheduler.yaml
@ -0,0 +1,6 @@
+apiVersion: componentconfig/v1alpha1
+kind: KubeSchedulerConfiguration
+clientConnection:
+  kubeconfig: "/var/lib/kubernetes/kube-scheduler.kubeconfig"
+leaderElection:
+  leaderElect: true
--- a/controller-0/kubernetes.default.svc.cluster.local.conf
+++ b/controller-0/kubernetes.default.svc.cluster.local.conf
@ -0,0 +1,9 @@
+server {
+  listen      80;
+  server_name kubernetes.default.svc.cluster.local;
+
+  location /healthz {
+     proxy_pass                    https://127.0.0.1:6443/healthz;
+     proxy_ssl_trusted_certificate /var/lib/kubernetes/ca.pem;
+  }
+}
--- a/controller-0/kubernetes.repo
+++ b/controller-0/kubernetes.repo
@ -0,0 +1,8 @@
+[kubernetes]
+name=Kubernetes
+baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg
+       https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
--- a/controller-0/rbac_authorizations.yaml
+++ b/controller-0/rbac_authorizations.yaml
@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  annotations:
+    rbac.authorization.kubernetes.io/autoupdate: "true"
+  labels:
+    kubernetes.io/bootstrapping: rbac-defaults
+  name: system:kube-apiserver-to-kubelet
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - nodes/proxy
+      - nodes/stats
+      - nodes/log
+      - nodes/spec
+      - nodes/metrics
+    verbs:
+      - "*"
--- a/controller-0/scheduler
+++ b/controller-0/scheduler
@ -0,0 +1,7 @@
+###
+# kubernetes scheduler config
+
+# default config should be adequate
+
+# Add your own!
+KUBE_SCHEDULER_ARGS="--config=/etc/kubernetes/kube-scheduler.yaml --v=2"
--- a/controller-1/apiserver
+++ b/controller-1/apiserver
@ -0,0 +1,26 @@
+###
+# kubernetes system config
+#
+# The following values are used to configure the kube-apiserver
+#
+
+# The address on the local server to listen to.
+#KUBE_API_ADDRESS="--insecure-bind-address=127.0.0.1"
+
+# The port on the local server to listen on.
+#KUBE_API_PORT="--port=6443"
+
+# Port minions listen on
+KUBELET_PORT="--kubelet-port=10250"
+
+# Comma separated list of nodes in the etcd cluster
+KUBE_ETCD_SERVERS="--etcd-servers=https://10.240.0.10:2379,https://10.240.0.11:2379"
+
+# Address range to use for services
+KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.32.0.0/16"
+
+# default admission control policies
+KUBE_ADMISSION_CONTROL="--enable-admission-plugins=Initializers,NamespaceLifecycle,NodeRestriction,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota"                                                   
+
+# Add your own!
+KUBE_API_ARGS="--advertise-address=10.240.0.11 --allow-privileged=true --apiserver-count=2 --audit-log-maxage=30 --audit-log-maxbackup=3 audit-log-maxsize=100 audit-log-path=/var/log/audit/audit.log --authorization-mode=Node,RBAC --bind-address=0.0.0.0 --client-ca-file=/var/lib/kubernetes/ca.pem --enable-swagger-ui=true --etcd-cafile=/var/lib/kubernetes/ca.pem --etcd-certfile=/var/lib/kubernetes/kubernetes.pem --etcd-keyfile=/var/lib/kubernetes/kubernetes-key.pem --event-ttl=1h --experimental-encryption-provider-config=/var/lib/kubernetes/encryption-config.yaml --kubelet-certificate-authority=/var/lib/kubernetes/ca.pem --kubelet-client-certificate=/var/lib/kubernetes/kubernetes.pem --kubelet-client-key=/var/lib/kubernetes/kubernetes-key.pem --kubelet-https=true --runtime-config=api/all --service-account-key-file=/var/lib/kubernetes/service-account.pem --service-node-port-range=30000-32767 --tls-cert-file=/var/lib/kubernetes/kubernetes.pem --tls-private-key-file=/var/lib/kubernetes/kubernetes-key.pem --v=2"
--- a/controller-1/config
+++ b/controller-1/config
@ -0,0 +1,13 @@
+
+# This file controls the state of SELinux on the system.
+# SELINUX= can take one of these three values:
+#     enforcing - SELinux security policy is enforced.
+#     permissive - SELinux prints warnings instead of enforcing.
+#     disabled - No SELinux policy is loaded.
+#SELINUX=enforcing
+SELINUX=permissive
+# SELINUXTYPE= can take one of three two values:
+#     targeted - Targeted processes are protected,
+#     minimum - Modification of targeted policy. Only selected processes are protected. 
+#     mls - Multi Level Security protection.
+SELINUXTYPE=targeted
--- a/controller-1/controller-manager
+++ b/controller-1/controller-manager
@ -0,0 +1,7 @@
+###
+# The following values are used to configure the kubernetes controller-manager
+
+# defaults from config and apiserver should be adequate
+
+# Add your own!
+KUBE_CONTROLLER_MANAGER_ARGS="--address=0.0.0.0 --cluster-cidr=10.200.0.0/16 --cluster-name=kubernetes --cluster-signing-cert-file=/var/lib/kubernetes/ca.pem --cluster-signing-key-file=/var/lib/kubernetes/ca-key.pem --kubeconfig=/var/lib/kubernetes/kube-controller-manager.kubeconfig --leader-elect=true --root-ca-file=/var/lib/kubernetes/ca.pem --service-account-private-key-file=/var/lib/kubernetes/service-account-key.pem --service-cluster-ip-range=10.32.0.0/24 --use-service-account-credentials=true --v=2"
--- a/controller-1/etcd.conf
+++ b/controller-1/etcd.conf
@ -0,0 +1,69 @@
+#[Member]
+#ETCD_CORS=""
+ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
+#ETCD_WAL_DIR=""
+ETCD_LISTEN_PEER_URLS="https://10.240.0.11:2380"
+ETCD_LISTEN_CLIENT_URLS="https://10.240.0.11:2379,https://127.0.0.1:2379"
+#ETCD_MAX_SNAPSHOTS="5"
+#ETCD_MAX_WALS="5"
+ETCD_NAME="controller-1"
+#ETCD_SNAPSHOT_COUNT="100000"
+#ETCD_HEARTBEAT_INTERVAL="100"
+#ETCD_ELECTION_TIMEOUT="1000"
+#ETCD_QUOTA_BACKEND_BYTES="0"
+#ETCD_MAX_REQUEST_BYTES="1572864"
+#ETCD_GRPC_KEEPALIVE_MIN_TIME="5s"
+#ETCD_GRPC_KEEPALIVE_INTERVAL="2h0m0s"
+#ETCD_GRPC_KEEPALIVE_TIMEOUT="20s"
+#
+#[Clustering]
+ETCD_INITIAL_ADVERTISE_PEER_URLS="https://10.240.0.11:2380"
+ETCD_ADVERTISE_CLIENT_URLS="https://10.240.0.11:2379"
+#ETCD_DISCOVERY=""
+#ETCD_DISCOVERY_FALLBACK="proxy"
+#ETCD_DISCOVERY_PROXY=""
+#ETCD_DISCOVERY_SRV=""
+ETCD_INITIAL_CLUSTER="controller-0=https://10.240.0.10:2380,controller-1=https://10.240.0.11:2380"
+ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster"
+ETCD_INITIAL_CLUSTER_STATE="new"
+#ETCD_STRICT_RECONFIG_CHECK="true"
+#ETCD_ENABLE_V2="true"
+#
+#[Proxy]
+#ETCD_PROXY="off"
+#ETCD_PROXY_FAILURE_WAIT="5000"
+#ETCD_PROXY_REFRESH_INTERVAL="30000"
+#ETCD_PROXY_DIAL_TIMEOUT="1000"
+#ETCD_PROXY_WRITE_TIMEOUT="5000"
+#ETCD_PROXY_READ_TIMEOUT="0"
+#
+#[Security]
+ETCD_CERT_FILE="/etc/etcd/kubernetes.pem"
+ETCD_KEY_FILE="/etc/etcd/kubernetes-key.pem"
+ETCD_CLIENT_CERT_AUTH="true"
+ETCD_TRUSTED_CA_FILE="/etc/etcd/ca.pem"
+#ETCD_AUTO_TLS="false"
+ETCD_PEER_CERT_FILE="/etc/etcd/kubernetes.pem"
+ETCD_PEER_KEY_FILE="/etc/etcd/kubernetes-key.pem"
+ETCD_PEER_CLIENT_CERT_AUTH="true"
+ETCD_PEER_TRUSTED_CA_FILE="/etc/etcd/ca.pem"
+#ETCD_PEER_AUTO_TLS="false"
+#
+#[Logging]
+#ETCD_DEBUG="false"
+#ETCD_LOG_PACKAGE_LEVELS=""
+#ETCD_LOG_OUTPUT="default"
+#
+#[Unsafe]
+#ETCD_FORCE_NEW_CLUSTER="false"
+#
+#[Version]
+#ETCD_VERSION="false"
+#ETCD_AUTO_COMPACTION_RETENTION="0"
+#
+#[Profiling]
+#ETCD_ENABLE_PPROF="false"
+#ETCD_METRICS="basic"
+#
+#[Auth]
+#ETCD_AUTH_TOKEN="simple"
--- a/controller-1/etcd.service
+++ b/controller-1/etcd.service
@ -0,0 +1,18 @@
+[Unit]
+Description=Etcd Server
+After=network.target
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=notify
+WorkingDirectory=/var/lib/etcd/
+EnvironmentFile=-/etc/etcd/etcd.conf
+User=etcd
+# set GOMAXPROCS to number of processors
+ExecStart=/bin/bash -c "GOMAXPROCS=$(nproc) /usr/bin/etcd --name=${ETCD_NAME} --data-dir=${ETCD_DATA_DIR} --listen-client-urls=${ETCD_LISTEN_CLIENT_URLS} --listen-peer-urls=${ETCD_LISTEN_PEER_URLS} --initial-advertise-peer-urls=${ETCD_INITIAL_ADVERTISE_PEER_URLS} --advertise-client-urls=${ETCD_ADVERTISE_CLIENT_URLS} --initial-cluster=${ETCD_INITIAL_CLUSTER} --initial-cluster-token=${ETCD_INITIAL_CLUSTER_TOKEN} --initial-cluster-state=${ETCD_INITIAL_CLUSTER_STATE} --cert-file=${ETCD_CERT_FILE} --key-file=${ETCD_KEY_FILE} --client-cert-auth=${ETCD_CLIENT_CERT_AUTH} --trusted-ca-file=${ETCD_TRUSTED_CA_FILE} --peer-cert-file=${ETCD_PEER_CERT_FILE} --peer-key-file=${ETCD_PEER_KEY_FILE} --peer-client-cert-auth=${ETCD_PEER_CLIENT_CERT_AUTH} --peer-trusted-ca-file=${ETCD_PEER_TRUSTED_CA_FILE}"
+Restart=on-failure
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-1/kube-apiserver.service
+++ b/controller-1/kube-apiserver.service
@ -0,0 +1,27 @@
+[Unit]
+Description=Kubernetes API Server
+Documentation=https://github.com/GoogleCloudPlatform/kubernetes
+After=network.target
+After=etcd.service
+
+[Service]
+EnvironmentFile=-/etc/kubernetes/config
+EnvironmentFile=-/etc/kubernetes/apiserver
+#User=kube
+ExecStart=/usr/local/bin/kube-apiserver \
+            $KUBE_LOGTOSTDERR \
+            $KUBE_LOG_LEVEL \
+            $KUBE_ETCD_SERVERS \
+            $KUBE_API_ADDRESS \
+            $KUBE_API_PORT \
+            $KUBELET_PORT \
+            $KUBE_ALLOW_PRIV \
+            $KUBE_SERVICE_ADDRESSES \
+            $KUBE_ADMISSION_CONTROL \
+            $KUBE_API_ARGS
+Restart=on-failure
+Type=notify
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-1/kube-apiserver_rbac.yaml
+++ b/controller-1/kube-apiserver_rbac.yaml
@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: system:kube-apiserver
+  namespace: ""
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:kube-apiserver-to-kubelet
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: User
+    name: kubernetes
--- a/controller-1/kube-controller-manager.service
+++ b/controller-1/kube-controller-manager.service
@ -0,0 +1,18 @@
+[Unit]
+Description=Kubernetes Controller Manager
+Documentation=https://github.com/GoogleCloudPlatform/kubernetes
+
+[Service]
+EnvironmentFile=-/etc/kubernetes/config
+EnvironmentFile=-/etc/kubernetes/controller-manager
+#User=kube
+ExecStart=/usr/local/bin/kube-controller-manager \
+            $KUBE_LOGTOSTDERR \
+            $KUBE_LOG_LEVEL \
+            $KUBE_MASTER \
+            $KUBE_CONTROLLER_MANAGER_ARGS
+Restart=on-failure
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-1/kube-scheduler.service
+++ b/controller-1/kube-scheduler.service
@ -0,0 +1,13 @@
+[Unit]
+Description=Kubernetes Scheduler
+Documentation=https://github.com/kubernetes/kubernetes
+
+[Service]
+ExecStart=/usr/local/bin/kube-scheduler \
+  --config=/etc/kubernetes/kube-scheduler.yaml \
+  --v=2
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
--- a/controller-1/kube-scheduler.yaml
+++ b/controller-1/kube-scheduler.yaml
@ -0,0 +1,6 @@
+apiVersion: componentconfig/v1alpha1
+kind: KubeSchedulerConfiguration
+clientConnection:
+  kubeconfig: "/var/lib/kubernetes/kube-scheduler.kubeconfig"
+leaderElection:
+  leaderElect: true
--- a/controller-1/kubernetes.default.svc.cluster.local.conf
+++ b/controller-1/kubernetes.default.svc.cluster.local.conf
@ -0,0 +1,9 @@
+server {
+  listen      80;
+  server_name kubernetes.default.svc.cluster.local;
+
+  location /healthz {
+     proxy_pass                    https://127.0.0.1:6443/healthz;
+     proxy_ssl_trusted_certificate /var/lib/kubernetes/ca.pem;
+  }
+}
--- a/controller-1/kubernetes.repo
+++ b/controller-1/kubernetes.repo
@ -0,0 +1,8 @@
+[kubernetes]
+name=Kubernetes
+baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg
+       https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
--- a/controller-1/rbac_authorizations.yaml
+++ b/controller-1/rbac_authorizations.yaml
@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  annotations:
+    rbac.authorization.kubernetes.io/autoupdate: "true"
+  labels:
+    kubernetes.io/bootstrapping: rbac-defaults
+  name: system:kube-apiserver-to-kubelet
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - nodes/proxy
+      - nodes/stats
+      - nodes/log
+      - nodes/spec
+      - nodes/metrics
+    verbs:
+      - "*"
--- a/controller-1/scheduler
+++ b/controller-1/scheduler
@ -0,0 +1,7 @@
+###
+# kubernetes scheduler config
+
+# default config should be adequate
+
+# Add your own!
+KUBE_SCHEDULER_ARGS="--config=/etc/kubernetes/kube-scheduler.yaml --v=2"
--- a/controller_manager_setup.sh
+++ b/controller_manager_setup.sh
@ -0,0 +1,19 @@
+#!/bin/bash
+##
+## Script to automate the Kubernetes CentOS client side pieces
+##
+
+sudo curl https://storage.googleapis.com/kubernetes-release/release/v1.10.3/bin/linux/amd64/kube-controller-manager -o /usr/local/bin/kube-controller-manager
+sudo chmod 755 /usr/local/bin/kube-controller-manager
+
+sudo mkdir -p /var/lib/kubernetes
+
+sudo mv kube-controller-manager.kubeconfig /var/lib/kubernetes/
+sudo mv kube-controller-manager.service /etc/systemd/system/
+sudo mv controller-manager /etc/kubernetes/
+
+sudo systemctl daemon-reload
+sudo systemctl start kube-controller-manager 
+sudo systemctl enable kube-controller-manager
+
+echo "The next step is to create the Kubernetes Scheduler"
--- a/controller_setup.sh
+++ b/controller_setup.sh
@ -0,0 +1,56 @@
+#!/bin/bash
+##
+## Script to automate the Kubernetes CentOS client side pieces
+##
+sudo mv kubernetes.repo /etc/yum.d.repos/
+sudo yum install -y docker etcd kubectl
+sudo systemctl start docker && sudo systemctl enable docker
+
+sudo setenforce 0
+sudo mv config /etc/selinux/
+sudo mkdir -p /etc/kubernetes
+
+sudo cp ca.pem kubernetes-key.pem kubernetes.pem /etc/etcd/
+sudo mv etcd.conf /etc/etcd/
+sudo chown etcd:etcd /etc/etcd/*.pem
+sudo rm -rf /var/lib/etcd/default.etcd
+sudo systemctl start etcd
+sudo systemctl enable etcd
+sudo etcdctl --ca-file /etc/etcd/ca.pem --cert-file /etc/etcd/kubernetes.pem --key-file /etc/etcd/kubernetes-key.pem --endpoints https://127.0.0.1:2379 member list
+
+sudo curl https://storage.googleapis.com/kubernetes-release/release/v1.10.3/bin/linux/amd64/kube-apiserver -o /usr/local/bin/kube-apiserver
+sudo curl https://storage.googleapis.com/kubernetes-release/release/v1.10.3/bin/linux/amd64/kube-controller-manager -o /usr/local/bin/kube-controller-manager
+sudo curl https://storage.googleapis.com/kubernetes-release/release/v1.10.3/bin/linux/amd64/kube-scheduler -o /usr/local/bin/kube-scheduler
+sudo chmod 755 /usr/local/bin/kub*
+
+sudo mkdir -p /var/lib/kubernetes
+sudo mv ca.pem ca-key.pem kubernetes.pem kubernetes-key.pem service-account.pem service-account-key.pem encryption-config.yaml /var/lib/kubernetes/
+
+sudo mv kube-apiserver.service /etc/systemd/system/
+sudo mv apiserver /etc/kubernetes/
+
+sudo mv kube-controller-manager.kubeconfig /var/lib/kubernetes/
+sudo mv kube-controller-manager.service /etc/systemd/system/
+sudo mv controller-manager /etc/kubernetes/
+
+sudo mv kube-scheduler.kubeconfig /var/lib/kubernetes/
+sudo mv kube-scheduler.service /etc/systemd/system/
+sudo mv scheduler /etc/kubernetes/
+
+sudo systemctl daemon-reload
+sudo systemctl start kube-apiserver kube-controller-manager kube-scheduler
+sudo systemctl enable kube-apiserver kube-controller kube-scheduler
+
+sudo yum install -y nginx
+
+sudo mv kubernetes.default.svc.cluster.local.conf /etc/nginx/conf.d/kubernetes.default.svc.cluster.local.conf
+sudo systemctl start nginx && sudo systemctl enable nginx
+
+kubectl get componentstatuses --kubeconfig admin.kubeconfig
+
+curl -H "Host: kubernetes.default.svc.cluster.local" -i http://127.0.0.1/healthz
+
+kubectl apply -f rbac_authorizations.yaml --kubeconfig admin.kubeconfig
+kubectl apply -f kube-apiserver_rbac.yaml --kubeconfig admin.kubeconfig
+
+echo "The next step is to create the Load Balancer"
--- a/controller_uninstall.sh
+++ b/controller_uninstall.sh
@ -0,0 +1,19 @@
+#!/bin/bash
+##
+## Script to uninstall Kubernetes from the controllers
+##
+sudo rm /etc/nginx/conf.d/kubernetes.default.svc.cluster.local.conf
+sudo yum remove -y nginx
+
+sudo systemctl stop kube-scheduler kube-controller-manager kube-apiserver && sudo systemctl disable kube-scheduler kube-controller-manager kube-apiserver
+
+sudo rm -f /etc/kubernetes/scheduler /etc/systemd/system/kube-scheduler.service /var/lib/kubernetes/kube-scheduler.kubeconfig
+sudo rm -f /etc/kubernetes/controller-manager /etc/systemd/system/kube-controller-manager.service /var/lib/kubernetes/kube-controller-manager.kubeconfig
+sudo rm -f /etc/kubernetes/apiserver /etc/systemd/system/kube-apiserver.service 
+sudo rm -rf /var/lib/kubernetes
+sudo rm -f /usr/local/bin/kub*
+
+sudo systemctl stop etcd && sudo systemctl disable etcd
+sudo yum remove -y etcd kubectl
+sudo rm -rf /etc/etcd /var/lib/etcd
+
--- a/1
+++ b/1
@ -0,0 +1 @@
+hello
--- a/Show More
+++ b/Show More