Jason Greathouse
6d36ba86e9
AlwaysPullImages admission plugin option
2019-01-09 11:49:33 -08:00
Jason Greathouse
7afa6e927e
update k8s defaults, CIS recommendations
2019-01-07 12:07:46 -08:00
Erik Wilson
e04b7d4413
Add support for Kubernetes API Authn Webhook
...
Allow multiple authn strategies to be defined, including new 'webhook'
strategy. Webhook strategy configuration contains the contents of the
authentication webhook file as well as the cache timeout period.
This change allows a Kubernetes API Auth service to authenticate
user requests without proxying through the Rancher server.
2019-01-03 17:15:23 -07:00
galal-hussein
66fb2c4ac0
Get checksum of the cloud file content
2018-12-06 16:23:20 -08:00
galal-hussein
696b61679c
Final fixes and cleanup for state management
...
Fix dind and local and etcd snapshots
add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
galal-hussein
8b8870311b
refactor the build state
...
remove extra cert generation for etcd in reconcile
fix reconcile and etcd add and remove cluster state with rke remove
fix add/remove issues
Fix the up command
Fix default paths for kubeconfig and rkestate
2018-11-09 11:16:17 -08:00
galal-hussein
3551e6e4b6
Add Rotate certificates command to rke
2018-10-31 12:08:31 -07:00
Sebastiaan van Steenis
22a339ea33
Update to Golang 1.11
2018-10-18 09:27:46 -07:00
Sebastiaan van Steenis
12559a21c7
Use clusterversion to check supported Docker versions
2018-10-04 11:31:35 -07:00
moelsayed
d4759bcc4f
Remove ServiceOption if empty
2018-10-02 12:58:21 -07:00
moelsayed
6b6a7803a7
Move admission controller options to ServiceOptions
2018-08-30 14:52:30 -07:00
moelsayed
d451683abb
Add docker config file environment variables for kubelet
2018-08-30 10:00:28 -07:00
Sebastiaan van Steenis
bff7e0a2c3
Avoid panic in rke-tools entrypoint detection
2018-08-09 09:25:25 -07:00
moelsayed
de617da470
Fix entrypoint bug
2018-08-05 19:57:52 -07:00
moelsayed
4357da7742
handle entrypoint upgrade across versions
2018-08-04 04:30:54 -07:00
moelsayed
010a7977ff
Change entrypoint to fix multiple mount problem
2018-08-02 02:33:46 +02:00
moelsayed
28db358ebd
Fix nested mounts issue when using default host prefix
2018-08-01 11:26:42 -07:00
Chase Bolt
82af829b8c
adjust volumeplugins to a non-persistent path that will work oob with default configs
2018-07-20 13:21:36 -07:00
moelsayed
2eeb5cac00
Make sure Binds are unique
2018-07-19 15:12:09 -07:00
galal-hussein
8269c3f301
Add metrics-server addon deployment
2018-07-17 16:51:59 -07:00
orangedeng
9f7a37845e
Add support for API aggregation layer
...
Add API server parameters
`requestheader-client-ca-file`,
`requestheader-allowed-names`,
`proxy-client-key-file` and
`proxy-client-cert-file`.
After we added this parameters into API server, the API aggregation
server will be supported when it is deployed in rke cluster.
2018-07-17 16:51:59 -07:00
Chase Bolt
f9ecba0ab2
adjust kubelet volume-plugin-dir to match root-dir
2018-07-11 12:55:46 -07:00
moelsayed
d155cc8e76
Allow etcd parameters to be overridden
2018-07-06 13:32:08 -07:00
Sebastiaan van Steenis
f7814a5e8a
Set cluster-cidr on kube-proxy
2018-06-29 13:19:38 -07:00
Sebastiaan van Steenis
1da390d846
Add hostname-override to kube-proxy
2018-06-29 11:31:58 -07:00
moelsayed
39e846442b
Fix container log location for ros
2018-06-29 10:49:49 -07:00
moelsayed
fdba4f86e5
Fix reconcile for ros prefix
2018-06-25 17:22:32 -07:00
galal-hussein
a75e3d693c
Register controlplane node with taint
2018-06-21 23:41:52 -07:00
moelsayed
4c30f1a28d
restart related k8s services when cloud provider config is updated
2018-06-13 09:21:58 -07:00
moelsayed
af9ab4fb94
Add endpoint-reconciler support
2018-06-13 09:19:39 -07:00
Sebastiaan van Steenis
b72f4b2c70
Ability to add extra environment variables to services
2018-06-08 09:45:45 -07:00
moelsayed
716a776d42
Add service-node-port-range for kube-api
2018-06-06 14:27:06 -07:00
galal-hussein
2142661ea7
Refactor cloud provider support
2018-06-06 10:22:50 -07:00
galal-hussein
db3bda1191
fix rhel and centos regression
2018-05-15 14:08:29 -07:00
galal-hussein
21ee619645
Fix override prefix path for ROS, B2D, and CoreOS
2018-05-14 21:14:28 -07:00
galal-hussein
2c64afeb3e
Add prefix path for CoreOS
2018-05-10 18:24:57 -07:00
galal-hussein
a3416e6b92
Etcd Backup/restore
2018-05-09 19:39:19 +02:00
moelsayed
d42ead8e11
Add container name labels
2018-05-08 19:47:12 +02:00
Hussein Galal
1bfd18e0e2
Merge pull request #573 from galal-hussein/add_api_servercount
...
Add api server count flag to kube-apiserver
2018-05-03 23:11:20 +02:00
galal-hussein
28e167aa5d
Add api server count flag to kube api
2018-05-03 21:37:44 +02:00
Sebastiaan van Steenis
9498c80cc7
Add etcd env vars for etcdctl
2018-05-02 13:47:53 +02:00
galal-hussein
7cbc978489
Skip cloud config parameter with aws cloud provider
2018-04-27 09:58:27 -07:00
galal-hussein
657f38b9f0
Update canal and calico to 3.1.1
2018-04-26 05:10:53 +02:00
galal-hussein
cefe16eb78
Pass docker info to host in generate plan
2018-04-25 16:28:29 -07:00
Sebastiaan van Steenis
6431e8495d
Add /usr and /etc readonly to kubelet for os-release
2018-04-24 15:27:16 -07:00
moelsayed
4508d11401
Make cni directories rw
2018-04-24 15:23:39 -07:00
moelsayed
e5c2c86b65
Ensure nginx proxy is upgradable if control hosts change
2018-04-22 14:29:13 -07:00
moelsayed
0069872976
Fix etcd client endpoint address
2018-04-20 15:46:32 -07:00
moelsayed
f1e39f9b10
Fix etcd listen address edge case when public address is DNATed
2018-04-20 15:46:32 -07:00
Alena Prokharchyk
71bafd1f08
Merge pull request #505 from superseb/etcd_listenaddress
...
Let etcd only listen on advertised url
2018-04-19 13:37:07 -07:00
