Sebastiaan van Steenis
51a6b50a84
Revert "Do not rewrite SELinux labels on volume mounts"
2021-07-29 08:59:54 +02:00
Sebastiaan van Steenis
242b106955
Merge pull request #2595 from superseb/dualstack
...
Make it possible to configure dualstack
2021-07-06 19:38:10 +02:00
Sebastiaan van Steenis
c5efcaeb0c
Make it possible to configure dualstack
2021-07-01 19:02:46 +02:00
Faisal Chaudhry
57a2ba00a0
fix custom certs csr generation to do deep compairson for etcd and compare for all nodes and not just first
2021-06-10 15:58:04 -04:00
Sebastiaan van Steenis
9c711e669c
Use golangci-lint v0.40.1
2021-06-06 14:20:54 +02:00
Sebastiaan van Steenis
ca8cc62303
Merge pull request #2541 from superseb/no_selinux_relabel
...
Do not rewrite SELinux labels on volume mounts
2021-05-31 15:06:19 +02:00
Sebastiaan van Steenis
ad0b399a90
Merge pull request #2545 from alexander-hughes/custom_certdir_fix
...
Update cert filename validation to *.pem
2021-05-21 11:10:21 +02:00
Alexander Hughes
9381a255bf
Update cert filename validation to *.pem
...
Users leveraging custom certs directories face errors when deploying
if the directory contains any files that do not end in .pem. This
change adds additional validation to ensure files are *.pem before
attempting further logic.
Signed-off-by: Alexander Hughes <Alexander.Hughes@pm.me>
2021-05-19 08:32:36 -04:00
Sebastiaan van Steenis
9757be753f
Do not rewrite SELinux labels on volume mounts
2021-05-18 22:22:40 +02:00
Sebastiaan van Steenis
2aa4d9534e
Change cert filename to lowercase
2021-05-16 19:15:14 +02:00
Sebastiaan van Steenis
05e002bc08
Write kubeconfig/state with stricter permission
2021-03-07 12:41:31 +01:00
Sebastiaan van Steenis
f885ebbaa1
Improve logging when using custom certs
2021-01-21 23:09:09 +01:00
Sebastiaan van Steenis
a68a64c0ce
Add util command
2021-01-08 18:06:21 +01:00
Sebastiaan van Steenis
56f63df555
Merge pull request #2212 from superseb/basepath_statefile
...
Get base for copied statefile for snapshot
2020-08-21 20:02:14 +02:00
Sebastiaan van Steenis
84374fa51a
Get base for copied statefile for snapshot
2020-08-21 14:10:05 +02:00
Luther Monson
23d2341172
updates for prefix path
2020-08-20 13:40:21 -07:00
Sebastiaan van Steenis
f251e3ca92
Change file copy method for state file
2020-08-14 18:42:37 +02:00
Sebastiaan van Steenis
1883a4c3bf
Merge pull request #2152 from superseb/snapshot_include_state
...
Able to include and extract state file in snapshot
2020-07-24 20:24:28 +02:00
Sebastiaan van Steenis
9bca29befb
Able to include and extract state file in snapshot
2020-07-21 11:09:37 +02:00
Darren Shepherd
c405e6ea1b
Remove references to rancher/types
2020-07-11 23:29:33 -07:00
Sebastiaan van Steenis
b4cf3a01f5
Refactor unused certificate logging
2020-03-08 18:42:15 +01:00
Darren Shepherd
5e5ccacb58
Optimize strings operations
...
At 5000+ nodes these small string optimizations make a difference
2020-03-06 08:52:58 -07:00
Sebastiaan van Steenis
5c7daf4fb1
Add logging structs/file content to trace loglevel
2020-03-05 19:42:05 +01:00
XianglongLuo
329b6b522e
Fix for deleting unused etcd and kubelet certs
2020-02-20 08:21:52 +08:00
Prachi Damle
d56f641cdd
Drop the log level to Debug since rancher can call this everytime worker connects back every ~2 mins
2020-01-15 16:29:38 -08:00
Sebastiaan van Steenis
adc5941fd9
Add per node kubelet server certificate
2019-10-31 15:56:44 -07:00
Dax McDonald
ad678b6a32
Remove dead code
2019-10-04 15:02:14 -07:00
chentanjun
1cb850d7cf
gosimple code
2019-10-03 12:29:56 -07:00
Sebastiaan van Steenis
d6b29c9ccc
Do not fetch kube-admin certificate from host(s)
2019-09-06 13:31:40 -07:00
galal-hussein
798632b3a4
Handle missing request header ca in rotate certificate
2019-08-29 13:42:47 -07:00
Frank Mai
277797df0f
Support to generate Windows worker plan
...
- Put Windows worker plan generating back to reduce the changing from
Windows on rancher/rancher
- Prepare for rke bootstraps Windows cluster
**Issue:**
https://github.com/rancher/rancher/issues/16460
2019-08-21 20:50:31 -07:00
Darren Shepherd
f8bac2c059
Update to new certs package since latest k8s dropped it
2019-08-19 11:02:43 -07:00
Sebastiaan van Steenis
3f94e86706
Revert "Add per node kubelet server certificate"
...
This reverts commit b860e634db
2019-08-08 09:49:47 -07:00
Sebastiaan van Steenis
b860e634db
Add per node kubelet server certificate
2019-07-31 14:54:43 -07:00
moelsayed
688d4aedd7
support etcd custom uid/gid
2019-07-29 17:24:16 -07:00
Murali Paluru
9697b3c452
Adding extensions for extended key usage
2019-07-02 10:22:35 -07:00
Sebastiaan van Steenis
173669c8a5
Add retry logic to Docker interactions
2019-06-26 12:15:32 -07:00
moelsayed
38c31b9766
Add option to pass custom CA certificate for S3 backend
2019-06-20 15:00:00 -07:00
galal-hussein
8816a75b93
Fix for regenerating etcd certs
2019-05-29 15:44:37 -07:00
Erik Wilson
8ccb192aaa
Check for etcd cert DNS or IPs change
2019-05-24 09:12:39 -07:00
galal-hussein
4d47a376ad
Regenerate etcd certificate from legacy cluster
2019-03-19 20:43:29 -07:00
galal-hussein
9fccbfa08e
Prevent panic when ca cert is not found
2019-03-18 14:09:01 -07:00
galal-hussein
c1372bc797
Fetch certificates and state from nodes for legacy cluster
2019-03-18 12:59:52 -07:00
galal-hussein
2aac0e475f
Regenerate requestheader ca for legacy clusters
2019-03-06 11:58:24 -08:00
moelsayed
e3d6fb4db9
Restore backup to a new etcd plane
2019-03-06 09:22:52 -08:00
galal-hussein
556e5bb678
Avoid creating dangling volumes with rke tools
2019-01-21 12:38:58 -08:00
galal-hussein
a905a6df80
Fix rotation for service components
2019-01-21 09:53:36 -08:00
galal-hussein
82fa8d6305
Add restart components to custom certs
2019-01-14 11:51:11 -08:00
galal-hussein
9ee750ec01
Adding csr generation and custom certs
2019-01-09 11:47:53 -08:00
galal-hussein
4d23fb4288
Return api and client certs to rotate certs
2018-12-18 16:35:20 -08:00
