1
0
mirror of https://github.com/rancher/rke.git synced 2025-07-01 09:42:07 +00:00
Commit Graph

45 Commits

Author SHA1 Message Date
Sebastiaan van Steenis
adc5941fd9 Add per node kubelet server certificate 2019-10-31 15:56:44 -07:00
Sebastiaan van Steenis
3f94e86706 Revert "Add per node kubelet server certificate"
This reverts commit b860e634db.
2019-08-08 09:49:47 -07:00
Sebastiaan van Steenis
b860e634db Add per node kubelet server certificate 2019-07-31 14:54:43 -07:00
galal-hussein
9ee750ec01 Adding csr generation and custom certs 2019-01-09 11:47:53 -08:00
galal-hussein
ff4c93e179 refactor etcd restoration process 2018-11-30 12:48:41 -08:00
galal-hussein
11aa0caabc Fix rotate certificates with new state 2018-11-14 05:15:57 +08:00
galal-hussein
696b61679c Final fixes and cleanup for state management
Fix dind and local and etcd snapshots

add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
galal-hussein
3551e6e4b6 Add Rotate certificates command to rke 2018-10-31 12:08:31 -07:00
galal-hussein
4fb01ab69e Fix scaling problems with cluster state deployer 2018-10-18 10:34:32 -07:00
galal-hussein
5dd253a611 Remove trailing slash from tmp cert path 2018-07-30 16:47:20 -07:00
Massimo Cannavo
7a5d4390d8
Fixed snapshot restore unable to archive pki bundle
Fixed TempCertPath on extract of pki bundle

Fixed Extract & Save of pki bundle by removing PrefixPath
2018-07-30 14:12:22 -07:00
galal-hussein
b71fd3ba35 Fix local port check 2018-07-23 09:10:06 -07:00
Thorsten Schifferdecker
9766b4cbcd fix typo porxy > proxy
Signed-off-by: Thorsten Schifferdecker <ts@systs.org>
2018-07-22 08:36:34 -07:00
galal-hussein
3ce50d28d3 Add etcd snapshot fix and more log messages to certificate bundle
Add function to collect stdout and stderr logs from containers
2018-07-20 14:09:29 -07:00
Massimo Cannavo
6d36c9a73f Fixed ssl directory for rke-bundle-cert container
Replaced temp cert path with var
2018-07-18 13:28:46 -07:00
galal-hussein
8269c3f301 Add metrics-server addon deployment 2018-07-17 16:51:59 -07:00
orangedeng
9f7a37845e Add support for API aggregation layer
Add API server parameters
`requestheader-client-ca-file`,
`requestheader-allowed-names`,
`proxy-client-key-file` and
`proxy-client-cert-file`.
After we added this parameters into API server, the API aggregation
server will be supported when it is deployed in rke cluster.
2018-07-17 16:51:59 -07:00
galal-hussein
8a52e0d8dc make sure tmp dir path exists before saving cert bundle
stop taking bundle certs when the tmp directory is empty
2018-06-26 20:15:57 -07:00
galal-hussein
1f8113428e restore certificates to at least on etcd/control plane 2018-06-20 11:01:07 -07:00
galal-hussein
2da8682463 Add certificate bundle backup with etcd snapshot-save 2018-06-07 16:40:41 -07:00
David Lewis
0efc4fc845 Support additional altnames for PKI certs 2018-03-23 12:39:34 -07:00
David Lewis
34c41c1b05 Add ClusterName support for kube config 2018-03-23 11:28:58 -07:00
galal-hussein
ba7e8bb236 Use k8s datastore with calico and remove ca keys 2018-02-24 01:26:22 +02:00
galal-hussein
11d7aa0e16 Start cluster with only etcd nodes 2018-02-16 03:39:13 +02:00
galal-hussein
c34a5e7632 fix fetcher 2018-02-16 01:23:34 +02:00
galal-hussein
c2c1804500 External etcd 2018-02-14 22:58:35 +02:00
galal-hussein
59182cee62 [RKE Refactor] Generate cluster and node certs 2018-02-08 20:15:36 +02:00
galal-hussein
f8f877ba27 Add nginx ingress controller and labels/taints sync 2018-02-01 23:28:31 +02:00
galal-hussein
0ef0a17010 Add generic generation for pki objects and etcd TLS 2018-01-25 20:38:07 +02:00
moelsayed
4c08db1d53 recoverable provisioning 2018-01-13 05:57:28 +02:00
Darren Shepherd
d8dd29765f Add context.Context to everything and also make logging pluggable 2018-01-09 15:18:01 -07:00
galal-hussein
d1f78f0b40 Refactor reconcilation
Add role based add/delete for services

Use pointers for hosts

Consistent log format
2017-12-02 20:37:04 +02:00
galal-hussein
41c48877ba Structure and config changes 2017-11-28 23:55:43 +02:00
moelsayed
fad6134609 Generate new KubeAPI certificate for new nodes using the same key 2017-11-27 00:36:42 +02:00
galal-hussein
c383436411 Add cluster validation and regenerate kubeapi cert 2017-11-21 21:25:25 +02:00
galal-hussein
8e302c03a4 Add/Remove Cluster plane and Worker hosts 2017-11-18 14:35:10 +02:00
galal-hussein
703a4fd812 Add HA
Add relative path for local kube config

Add default cluster yaml config name
2017-11-16 03:41:22 +02:00
galal-hussein
37b6c8a65e Update rancher types 2017-11-14 20:11:21 +02:00
galal-hussein
40b13446a7 Use rancher/types 2017-11-13 23:28:38 +02:00
moelsayed
33b1c47a43 Refactor PKI ENV 2017-11-10 19:59:52 +02:00
galal-hussein
9974d53e57 Use Cluster structure
Use separate cluster package

Save cluster state and certs to kubernetes

Handle Remove and sync cluster state/crts

Reuse kubernetes client and combine image and version

Separate building functions and small fixes
2017-11-06 19:40:20 +02:00
moelsayed
dbc7dfaafe renamed ControlPlaneIP 2017-11-06 19:40:19 +02:00
galal-hussein
1bb4ab98c3 Deploy kube config file locally for admin 2017-11-06 19:40:19 +02:00
moelsayed
5b730bcf6a add support for specifc control plane IP per host 2017-11-06 19:40:19 +02:00
galal-hussein
ad34392a3c Add default cluster config file and return service container pointer
Add more generic functions to go services

Add x509 authentication
2017-11-06 19:40:15 +02:00