1
0
mirror of https://github.com/rancher/rke.git synced 2025-08-01 15:19:09 +00:00
Commit Graph

159 Commits

Author SHA1 Message Date
rajashree
b0db0a64a8 Validate kube-ca cert before rotating certs 2020-03-19 11:12:45 -07:00
rmweir
4b5d4cbf6c No longer add first errors twice 2020-03-18 16:52:19 -07:00
Sebastiaan van Steenis
d65d72ae6d Enable kube-api audit log for new k8s versions 2020-03-15 13:55:47 +01:00
rmweir
746e9a1c21 Skip restore if no valid certs 2020-03-14 18:58:32 -07:00
rajashree
b2a71ce067 Use non-zero downtime upgrade logic during restore
If restore flag is set to true on RKEConfig, the reconcileCluster flag in
ClusterUp should not be set to true, so that DeployControlPlane and DeployWorkerPlane
call the non-zero downtime upgrade functions RunControlPlane and RunWorkerPlane respectively
2020-03-13 09:09:30 -07:00
rajashree
6b25bcf3e0 Remove ignore-upgrade label from zero downtime upgrade 2020-03-10 23:36:17 -07:00
rajashree
d420881c41 Check role before including host in inactive host list 2020-03-01 19:03:07 -08:00
rajashree
e27a05f8b1 Attempt upgrade on NotReady hosts 2020-02-26 14:14:42 -08:00
rajashree
968a399f26 Accept label to ignore nodes during upgrade
RKE does a cluster scan to find the unreachable hosts, and if that number
is same as or exceeds maxUnavailable, upgrade won't proceed.
This commit introduces a label users can provide for their nodes so they
don't get counted as unavailable and are excluded from upgrade.
This commit also includes a couple of bug fixes
2020-02-22 14:23:47 -08:00
rajashree
11678a3f98 Change RKE upgrade logic for zero downtime 2020-02-05 16:19:47 -08:00
Alena Prokharchyk
34c63f5e45 Address panic in cert rotation code 2019-12-04 11:30:30 -08:00
Alena Prokharchyk
72fd42b8d2 Save cluster state to k8s on cert rotation
In addition to storing it on the disk
2019-11-11 15:12:55 -08:00
moelsayed
372393ac1b Add Secret Encryption Provider Support 2019-10-29 14:10:32 -07:00
kinarashah
c706efdfe0 initialize metadata start of cluster config action 2019-10-22 21:48:23 -07:00
Dax McDonald
ad678b6a32 Remove dead code 2019-10-04 15:02:14 -07:00
Rowan James
3ac2ef216d Sprintf consistency when handling API URL 2019-10-03 12:30:04 -07:00
Rowan James
9873b5f57a security: don't pass arbitrary configuration data to format string
This could just use concatenation, but consistency is key.
2019-10-03 12:30:04 -07:00
kinarashah
4b96098db0 remove windows image from rkesystemimages for rke cli 2019-09-20 10:09:46 -07:00
kinarashah
9411027476 consider service options based on hostOS info 2019-09-09 11:12:33 -07:00
Frank Mai
0a170b22b7 Support to accpet new Windows service options
**Issue:**
https://github.com/rancher/rancher/issues/22470
2019-09-05 17:05:34 -07:00
Murali Paluru
c69d971962 print version 2019-09-03 13:13:34 -07:00
galal-hussein
798632b3a4 Handle missing request header ca in rotate certificate 2019-08-29 13:42:47 -07:00
Luther Monson
3d73507880 added rke --quiet and config --list-version, linting refactor 2019-08-27 13:07:48 -07:00
Luther Monson
0a92b0604f changed to Debugf, removed unneeded grep 2019-08-22 16:36:15 -07:00
Sebastiaan van Steenis
65df510251 Improve etcd snapshot logging 2019-08-21 20:40:40 -07:00
Darren Shepherd
f8bac2c059 Update to new certs package since latest k8s dropped it 2019-08-19 11:02:43 -07:00
Sebastiaan van Steenis
0eccf512be Make commonflags work with rke cert commands 2019-08-08 20:28:02 +02:00
Sebastiaan van Steenis
3f94e86706 Revert "Add per node kubelet server certificate"
This reverts commit b860e634db.
2019-08-08 09:49:47 -07:00
Sebastiaan van Steenis
b860e634db Add per node kubelet server certificate 2019-07-31 14:54:43 -07:00
Sebastiaan van Steenis
2b53fefbee Add parameter for s3 folder 2019-07-19 13:25:32 -07:00
kinarashah
f360207416 move metadata init to InitClusterObject 2019-07-08 15:40:31 -07:00
kinarashah
dc6f397f78 fix rke cluster delete from cli 2019-07-08 15:08:57 -07:00
kinarashah
116b47b025 rancher pass serviceoptions and addon templates to rke 2019-07-03 10:04:27 -07:00
kinarashah
c191ed6202 use k8s version info from kontainer-driver-metadata 2019-07-03 10:04:27 -07:00
moelsayed
2c907f9f21 rename EndpointCA 2019-06-25 14:17:53 -07:00
moelsayed
38c31b9766 Add option to pass custom CA certificate for S3 backend 2019-06-20 15:00:00 -07:00
Alex Seymour
ad415059cb Log error message on failure to get legacy cluster state from k8s 2019-06-17 14:55:50 -07:00
galal-hussein
22f261daf7 fix upgrade path for clusters created before 0.1.10 2019-05-29 15:44:37 -07:00
galal-hussein
7a0406c44f Check legacy state if kubeconfig doesnt exist 2019-04-23 16:43:07 -07:00
moelsayed
06b709e888 Add RemoveEtcdSnapshot 2019-04-05 13:51:08 -07:00
galal-hussein
3bc6b0a18f Fix desired state in rke rotate 2019-04-03 16:39:21 -07:00
galal-hussein
c1372bc797 Fetch certificates and state from nodes for legacy cluster 2019-03-18 12:59:52 -07:00
moelsayed
64fed4bd9b Change RestoreEtcdSnapshot to return updated cluster information 2019-03-09 08:52:26 -08:00
galal-hussein
2696b88dfc Upgrade legacy kubeapi service 2019-03-08 19:42:39 -08:00
moelsayed
1e34a7c5fa Add BackupConfig Enabled flag 2019-03-08 14:22:10 -08:00
moelsayed
e3d6fb4db9 Restore backup to a new etcd plane 2019-03-06 09:22:52 -08:00
moelsayed
b80785e75e Ensure certs are availaible for restore 2019-03-03 09:14:36 -08:00
galal-hussein
9d85116568 Modify kubernetes version check to allow upgrade 2019-03-01 11:11:16 -08:00
moelsayed
8304b99180 Continue restore on when nodes are off 2019-03-01 09:39:14 -08:00
moelsayed
1aa6057cb3 Fix command help message 2019-02-21 10:47:46 -08:00