Gaurav Mehta
b1137253e4
Changed Credential Helper to a predefined type ECRCredentialHelper and associated changes for the same
2021-08-19 19:30:48 +10:00
rawmind0
3f1a6a636d
Updated nginx ingress addon to remove admission batch jobs if they exist
2021-08-18 12:50:37 +02:00
Sebastiaan van Steenis
8c7d8d8570
Merge pull request #2624 from rancher/revert-2541-no_selinux_relabel
...
Revert "Do not rewrite SELinux labels on volume mounts"
2021-08-02 18:19:42 +02:00
Sebastiaan van Steenis
0f9d7911b1
Set ingress to hostport in k8s 1.21 and up
2021-07-30 20:15:07 +02:00
Sebastiaan van Steenis
51a6b50a84
Revert "Do not rewrite SELinux labels on volume mounts"
2021-07-29 08:59:54 +02:00
Sebastiaan van Steenis
22b82828ff
Merge pull request #2599 from superseb/ingress_webhook
...
Validate Ingress Webhook and pass to template
2021-07-06 22:53:46 +02:00
Sebastiaan van Steenis
963f59b009
Merge pull request #2262 from ibrokethecloud/ecr-helper
...
ecr credential plugin
2021-07-06 22:35:03 +02:00
Sebastiaan van Steenis
0650395889
Merge pull request #2596 from chaudhryfaisal/CustomCertsEncryptionConfig
...
set EncryptionConfig on DesiredState when using CustomCerts
2021-07-06 22:27:29 +02:00
Sebastiaan van Steenis
97c4b102ce
Validate Ingress Webhook and pass to template
2021-07-06 12:11:59 +02:00
Gaurav Mehta
723dd7c670
Initial commit for adding ecr credential plugin
2021-07-05 10:16:44 +10:00
Faisal Chaudhry
441d06df32
set EncryptionConfig on DesiredState when using CustomCerts
2021-07-02 10:01:32 -04:00
Sebastiaan van Steenis
c5efcaeb0c
Make it possible to configure dualstack
2021-07-01 19:02:46 +02:00
Sebastiaan van Steenis
a4bebdb8bb
Add support for enabling cri-dockerd
2021-06-08 19:05:54 +02:00
Sebastiaan van Steenis
ff49352399
Merge pull request #2564 from superseb/golangcilint_v0401
...
Use golangci-lint v1.40.1
2021-06-08 18:28:53 +02:00
Sebastiaan van Steenis
a58605612e
Merge pull request #2520 from pmorillon/unset_proxy_env_vars_when_using_bastion
...
Unset proxy env vars when using bastion
2021-06-07 14:55:43 +02:00
Sebastiaan van Steenis
9c711e669c
Use golangci-lint v0.40.1
2021-06-06 14:20:54 +02:00
Pascal Morillon
8b9385040f
Unset proxy env vars when ssh bastion is configured with option ignore_proxy_env_vars
2021-05-31 16:49:01 +02:00
Sebastiaan van Steenis
ca8cc62303
Merge pull request #2541 from superseb/no_selinux_relabel
...
Do not rewrite SELinux labels on volume mounts
2021-05-31 15:06:19 +02:00
Sebastiaan van Steenis
88a4d73e79
Merge pull request #1372 from zhaofengli/mixed-arch-etcd-cluster
...
Use the node's architecture to build etcd process
2021-05-31 10:44:31 +02:00
Kinara Shah
bb0d38e303
Merge pull request #2536 from kinarashah/defaultbackend
...
set ingress default backend to false for k8s 1.21+
2021-05-21 09:57:17 -07:00
Sebastiaan van Steenis
04b71a9fd9
Merge pull request #2537 from superseb/etcdsave_statefile
...
Dont deploy statefile if its not readable
2021-05-21 11:06:48 +02:00
Sebastiaan van Steenis
9757be753f
Do not rewrite SELinux labels on volume mounts
2021-05-18 22:22:40 +02:00
Sebastiaan van Steenis
738bda5fb6
Dont deploy statefile if its not readable
2021-05-18 07:24:57 +02:00
Kinara Shah
b2a9ebee75
set ingress default backend to false for k8s 1.21+
2021-05-14 16:58:25 -07:00
Dan Ramich
d07658cf9b
Encryption update
2021-05-14 10:11:17 -06:00
Sebastiaan van Steenis
b9a126c067
Merge pull request #2504 from superseb/etcd_v3415_ciphers
...
Add stricter TLS cipher for etcd v3.4.15 and up
2021-04-06 21:40:05 +02:00
Sebastiaan van Steenis
56b1c16e9f
Add stricter TLS cipher for etcd v3.4.15 and up
2021-04-05 13:21:55 +02:00
Sebastiaan van Steenis
05e002bc08
Write kubeconfig/state with stricter permission
2021-03-07 12:41:31 +01:00
Steven Crespo
68453acb6e
Add priority class name to addons
2021-02-06 16:46:39 -08:00
Kinara Shah
8c0a4d7f31
Merge pull request #2376 from superseb/add_auditlog_checksum
...
Add auditlog checksum to trigger restart on update
2021-01-27 15:00:35 -08:00
Sebastiaan van Steenis
5e50b51b13
Add auditlog checksum to trigger restart on update
2021-01-27 10:32:57 +01:00
rawmind0
1880404fc3
Added etcd snapshot timeout parameter
2021-01-22 18:35:13 +01:00
Sebastiaan van Steenis
e395badf82
Merge pull request #2412 from superseb/critical_addons
...
Mark all default addons as critical
2021-01-19 15:49:35 +01:00
Sebastiaan van Steenis
49a794c2de
Mark all default addons as critical
2021-01-13 14:29:59 +01:00
Sebastiaan van Steenis
a68a64c0ce
Add util command
2021-01-08 18:06:21 +01:00
Ryan Sanna
c14c39f8c5
reduce rewrite workers, add additional logging around secrets retrieval
2020-12-22 12:40:17 -07:00
Ryan Sanna
49e158a974
Revert "Revert "Encryption Key Rotation Changes""
2020-12-14 11:51:46 -07:00
Ryan Sanna
92573270c7
Revert "Encryption Key Rotation Changes"
2020-12-09 13:49:27 -07:00
Ryan Sanna
e42ff49fec
key rotation as part of ClusterUp, more robust secrets rewrite, improved logging
2020-12-08 12:00:32 -07:00
Nick Gerace
da6d9dcf9e
Set default http backend to be optional
...
Set default http backend to be optional for ingress nginx. It will be
enabled by default.
2020-12-03 14:53:51 -05:00
Sebastiaan van Steenis
99af2bdf95
Merge pull request #2355 from superseb/add_tolerations
...
Add tolerations option to addons
2020-12-03 19:20:54 +01:00
Sebastiaan van Steenis
a1eaee0312
Merge pull request #2322 from superseb/retry_tcpportcheck
...
Add retry to TCP port check
2020-12-02 21:39:31 +01:00
Sebastiaan van Steenis
4e31add8fe
Add tolerations option to addons
2020-11-26 17:29:46 +01:00
Kiran Shastri
4f062997bb
Introduce ACI CNI network provider
...
ACI CNI supports k8s versions 1.18+
Added template and arguments for ACI CNI
Disable cloud options for ACI.
Separate generated code into another commit
Signed-off-by: Kiran Shastri <shastrinator@gmail.com>
(cherry picked from commit e94c54005e
)
2020-11-17 15:29:03 -05:00
Sebastiaan van Steenis
a252645797
Add retry to TCP port check
2020-11-09 18:35:58 +01:00
Jacob Payne
04ea70ee3b
updated NodeUpgradeStrategy.Drain to use pointer
2020-10-26 09:59:49 -07:00
kinarashah
8c3c618b63
set default ingress network mode for both rancher and rke
...
Problem:
Setting defaults for ingress in parse logic works only for
rke standalone but not when rancher calls rke using ClusterUp.
Solution:
Setting them during the cluster defaults logic
2020-10-24 13:09:38 +02:00
Sebastiaan van Steenis
16f3089220
Merge pull request #1911 from ibrokethecloud/master
...
Allow addons.go to parse http and https ports for ingress controller
2020-10-22 20:54:09 +02:00
Gaurav Mehta
5a63de09bc
Updated cluster/addons.go to allow it to parse and send new http_port and https_ports to the ingress template
...
Fixed up yaml import package
Updated rke ingress addon to support a new field hostNetwork. Users can use this now to run ingress controller on overlay network only
Ported additional ingress types changes into types/rke_types
Fixed linting errors related to variable names in addons.go and rke_types
Changed types for hostNetwork and http/https ports
Added validation to check http/https ports are different
Changed rke_types for additional spec in ingressConfig. Changed validation and default logic accordingly
2020-10-21 19:00:04 +11:00
Sebastiaan van Steenis
422dfff0fd
Check etcd cluster health after member delete
2020-09-29 13:53:45 +02:00