Erik Wilson
e04b7d4413
Add support for Kubernetes API Authn Webhook
...
Allow multiple authn strategies to be defined, including new 'webhook'
strategy. Webhook strategy configuration contains the contents of the
authentication webhook file as well as the cache timeout period.
This change allows a Kubernetes API Auth service to authenticate
user requests without proxying through the Rancher server.
2019-01-03 17:15:23 -07:00
galal-hussein
696b61679c
Final fixes and cleanup for state management
...
Fix dind and local and etcd snapshots
add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
moelsayed
6da35256a8
handle upgrade cases
...
backup state to kubernetes
2018-11-09 11:16:17 -08:00
galal-hussein
8b8870311b
refactor the build state
...
remove extra cert generation for etcd in reconcile
fix reconcile and etcd add and remove cluster state with rke remove
fix add/remove issues
Fix the up command
Fix default paths for kubeconfig and rkestate
2018-11-09 11:16:17 -08:00
moelsayed
90fd13db65
Update main code path to use new state
2018-11-09 11:16:17 -08:00
galal-hussein
f48da22d8e
init commit for refactor state
...
add init test
use rkeconfig for init
reconcile old state file
2018-11-09 11:16:17 -08:00
galal-hussein
3551e6e4b6
Add Rotate certificates command to rke
2018-10-31 12:08:31 -07:00
moelsayed
90c426d73e
Switch all concurrent tasks to use worker pool
2018-10-18 13:24:59 -07:00
moelsayed
9c85b5b451
Refactor taints and labels sync to improve performance
2018-10-18 09:25:27 -07:00
galal-hussein
ce62c898bb
Handle deleting all controlplane nodes when nodes are unreachable
2018-09-26 17:03:53 -07:00
Sebastiaan van Steenis
4f0a191e44
Typo valid
2018-08-14 21:57:31 +03:00
Sebastiaan van Steenis
c4f12c8b0d
Better error when ssh_key_path can't be opened
2018-06-29 11:27:56 -07:00
galal-hussein
2142661ea7
Refactor cloud provider support
2018-06-06 10:22:50 -07:00
galal-hussein
4b4ec352ae
Change backup to snapshot in etcd
2018-05-18 00:34:12 +02:00
galal-hussein
aff01a9267
Bastion host
2018-05-10 00:16:04 +02:00
moelsayed
9addf796a2
Critical and non-critical addons
...
Configurable addon job timeout
2018-05-09 23:44:19 +02:00
galal-hussein
a3416e6b92
Etcd Backup/restore
2018-05-09 19:39:19 +02:00
galal-hussein
35624c98a1
Fix healthcheck when RBAC is disabled
2018-05-01 02:25:52 +02:00
moelsayed
fb1fd833ce
Deploy backup certificates on full plane instead of single node
2018-04-20 15:46:32 -07:00
Darren Shepherd
9ab1035852
Always try to pull
2018-04-17 23:43:06 -07:00
galal-hussein
b3f457426c
Fix multiple etcd add at runtime
2018-04-14 22:59:33 -07:00
Darren Shepherd
829afa1084
Fix missing image for etcd only nodes
2018-04-14 10:25:50 -07:00
galal-hussein
825bbbdf71
Add prefix path to services and generate plan
2018-04-12 00:54:47 +02:00
galal-hussein
7c0f3f6e57
Add get node for delete and cordon
2018-04-03 00:34:15 +02:00
galal-hussein
79eaedfa26
Update cluster network and cloud provider options
2018-04-02 23:28:40 +02:00
Darren Shepherd
b841604933
Revert "Make etcd provisioning a public API"
...
This reverts commit d2c58fb8e6
2018-04-02 04:03:43 -07:00
Darren Shepherd
d2c58fb8e6
Make etcd provisioning a public API
2018-03-31 04:00:50 -07:00
galal-hussein
b431a22a9c
Add cloud and network provider types
2018-03-29 22:58:46 +02:00
galal-hussein
5b848a2b45
Set node-ip and addresses annotations
2018-03-27 00:53:28 +02:00
moelsayed
69b629c115
Update only for pre-pull and log cleanup
2018-03-24 01:47:44 +02:00
David Lewis
34c41c1b05
Add ClusterName support for kube config
2018-03-23 11:28:58 -07:00
moelsayed
ef7b997e2a
Log RKE components to a specific location
2018-03-21 22:29:09 +02:00
galal-hussein
6e7e18ad1e
Update workers only option
...
Disable port check
2018-03-20 15:17:35 +02:00
galal-hussein
fcefbf7016
Secure kubelet port access
2018-03-12 21:04:28 +02:00
Darren Shepherd
c3d3d013dc
Add option to use kubectl to deploy
2018-03-01 14:35:58 -07:00
Darren Shepherd
fce6b15f18
Add ability to deploy jobs with kubectl and not job task
...
This API is used solely in rancher local clusters.
2018-02-26 16:31:34 -07:00
galal-hussein
bfa51fd41c
extract apply authz resource function
2018-02-26 16:04:19 -07:00
galal-hussein
c02873b8e9
Ignore inactive hosts
2018-02-22 02:16:51 +02:00
moelsayed
03673b8f22
Add support for custom WrapTransport for Kubernetes Client
2018-02-20 20:45:32 +02:00
galal-hussein
b1c2a5d153
Fix etcd issue with reloading cluster
2018-02-16 16:03:00 -08:00
galal-hussein
11d7aa0e16
Start cluster with only etcd nodes
2018-02-16 03:39:13 +02:00
galal-hussein
c2c1804500
External etcd
2018-02-14 22:58:35 +02:00
moelsayed
169ac106a5
Add GenetatePlan() and use it internally
2018-02-13 03:33:29 +02:00
galal-hussein
59182cee62
[RKE Refactor] Generate cluster and node certs
2018-02-08 20:15:36 +02:00
galal-hussein
d99efdc60f
rke refactoring - configure cluster method
2018-02-08 05:13:06 +02:00
moelsayed
9320a57949
Pre-pull k8s images
2018-02-02 00:05:15 +02:00
galal-hussein
f8f877ba27
Add nginx ingress controller and labels/taints sync
2018-02-01 23:28:31 +02:00
moelsayed
3f3275da6d
Fix panic on empty k8s version
2018-02-01 13:31:33 +02:00
Alena Prokharchyk
cd83583815
Merge pull request #289 from moelsayed/k8s_version
...
Use cluster level k8s version
2018-01-31 11:43:26 -08:00
moelsayed
6c45779abc
Use cluster level k8s version
2018-01-31 19:56:33 +02:00
