kubeadm Kubernetes on DigitalOcean

Read references/configuration.md before changing desired state or running a lifecycle command.

Safety

• Keep secrets out of colors.yml; use ignored COLORS_PAR_* exports.
• Never set COLORS_PAR_PROFILE and never edit generated .colors/ files.
• Default to build and create --dry-run; real create/delete needs explicit authorization.
• Keep compute-prevent-destroy: true. Lift it for one authorized delete with COLORS_PAR_COMPUTE_PREVENT_DESTROY=false.
• Restrict digitalocean-ssh-sources and digitalocean-api-sources; do not use 0.0.0.0/0 for administrative access.
• Do not copy /etc/kubernetes/admin.conf. ./green kubectl uses it over SSH.

Commands