1
0
mirror of https://github.com/rancher/rke.git synced 2025-07-13 23:26:02 +00:00
Commit Graph

612 Commits

Author SHA1 Message Date
Kinara Shah
f7b293b7ae update scheduler healthcheck port for k8s 1.23 2022-03-03 10:25:05 -08:00
Kinara Shah
eb8b278bcd delete hostname-override for aws cloud provider
aws cloud provider assigns private dns as the node name,
don't override it since it cannot be changed.
2022-01-10 09:35:26 -08:00
Sebastiaan van Steenis
6833df8631 Set 'watch-ingress-without-class: true' as default 2021-12-10 20:12:30 +01:00
Kinara Shah
5ac34a1f41 pass authorization-kubeconfig and authentication-kubeconfig for 1.22
controller manager must start with proper authorization and
authentication kubeconfig in args starting 1.22. k8s 1.22 has
disabled insecure serving for kube controller manager.
2021-12-03 17:19:47 -08:00
Sebastiaan van Steenis
0cea67e9ff Do not rewrite SELinux labels on volume mounts 2021-11-19 22:39:56 +01:00
Raúl Sánchez
1ae89e56c3
Merge pull request #2701 from rawmind0/encryption13
Update cluster.parseCustomConfig function to proper decode custom EncryptionConfiguration
2021-11-11 22:40:56 +01:00
Sebastiaan van Steenis
69dbe30b46
Merge pull request #2729 from superseb/v13_v122
[release/v1.3] Add compatibility with k8s v1.22
2021-11-11 17:55:35 +01:00
Kinara Shah
594296bb10 update etcd client to use both v3 and v2
v3 for >=1.22, v2 otherwise
2021-11-08 09:50:17 -08:00
Sebastiaan van Steenis
546a61b24a Add compatibility with k8s v1.22 2021-11-04 16:50:58 +01:00
rawmind0
0404dba56d Update cluster.parseCustomConfig function to proper decode custom EncryptionConfiguration 2021-09-21 23:33:20 +02:00
Gaurav Mehta
a618da802b Changed Credential Helper to a predefined type ECRCredentialHelper and associated changes for the same 2021-08-19 15:21:10 -07:00
rawmind0
12c1a8b260 Updated nginx ingress addon to remove admission batch jobs if they exist 2021-08-16 14:29:00 +02:00
Sebastiaan van Steenis
8c7d8d8570
Merge pull request #2624 from rancher/revert-2541-no_selinux_relabel
Revert "Do not rewrite SELinux labels on volume mounts"
2021-08-02 18:19:42 +02:00
Sebastiaan van Steenis
0f9d7911b1 Set ingress to hostport in k8s 1.21 and up 2021-07-30 20:15:07 +02:00
Sebastiaan van Steenis
51a6b50a84
Revert "Do not rewrite SELinux labels on volume mounts" 2021-07-29 08:59:54 +02:00
Sebastiaan van Steenis
22b82828ff
Merge pull request #2599 from superseb/ingress_webhook
Validate Ingress Webhook and pass to template
2021-07-06 22:53:46 +02:00
Sebastiaan van Steenis
963f59b009
Merge pull request #2262 from ibrokethecloud/ecr-helper
ecr credential plugin
2021-07-06 22:35:03 +02:00
Sebastiaan van Steenis
0650395889
Merge pull request #2596 from chaudhryfaisal/CustomCertsEncryptionConfig
set EncryptionConfig on DesiredState when using CustomCerts
2021-07-06 22:27:29 +02:00
Sebastiaan van Steenis
97c4b102ce Validate Ingress Webhook and pass to template 2021-07-06 12:11:59 +02:00
Gaurav Mehta
723dd7c670 Initial commit for adding ecr credential plugin 2021-07-05 10:16:44 +10:00
Faisal Chaudhry
441d06df32 set EncryptionConfig on DesiredState when using CustomCerts 2021-07-02 10:01:32 -04:00
Sebastiaan van Steenis
c5efcaeb0c Make it possible to configure dualstack 2021-07-01 19:02:46 +02:00
Sebastiaan van Steenis
a4bebdb8bb Add support for enabling cri-dockerd 2021-06-08 19:05:54 +02:00
Sebastiaan van Steenis
ff49352399
Merge pull request #2564 from superseb/golangcilint_v0401
Use golangci-lint v1.40.1
2021-06-08 18:28:53 +02:00
Sebastiaan van Steenis
a58605612e
Merge pull request #2520 from pmorillon/unset_proxy_env_vars_when_using_bastion
Unset proxy env vars when using bastion
2021-06-07 14:55:43 +02:00
Sebastiaan van Steenis
9c711e669c Use golangci-lint v0.40.1 2021-06-06 14:20:54 +02:00
Pascal Morillon
8b9385040f Unset proxy env vars when ssh bastion is configured with option ignore_proxy_env_vars 2021-05-31 16:49:01 +02:00
Sebastiaan van Steenis
ca8cc62303
Merge pull request #2541 from superseb/no_selinux_relabel
Do not rewrite SELinux labels on volume mounts
2021-05-31 15:06:19 +02:00
Sebastiaan van Steenis
88a4d73e79
Merge pull request #1372 from zhaofengli/mixed-arch-etcd-cluster
Use the node's architecture to build etcd process
2021-05-31 10:44:31 +02:00
Kinara Shah
bb0d38e303
Merge pull request #2536 from kinarashah/defaultbackend
set ingress default backend to false for k8s 1.21+
2021-05-21 09:57:17 -07:00
Sebastiaan van Steenis
04b71a9fd9
Merge pull request #2537 from superseb/etcdsave_statefile
Dont deploy statefile if its not readable
2021-05-21 11:06:48 +02:00
Sebastiaan van Steenis
9757be753f Do not rewrite SELinux labels on volume mounts 2021-05-18 22:22:40 +02:00
Sebastiaan van Steenis
738bda5fb6 Dont deploy statefile if its not readable 2021-05-18 07:24:57 +02:00
Kinara Shah
b2a9ebee75 set ingress default backend to false for k8s 1.21+ 2021-05-14 16:58:25 -07:00
Dan Ramich
d07658cf9b Encryption update 2021-05-14 10:11:17 -06:00
Sebastiaan van Steenis
b9a126c067
Merge pull request #2504 from superseb/etcd_v3415_ciphers
Add stricter TLS cipher for etcd v3.4.15 and up
2021-04-06 21:40:05 +02:00
Sebastiaan van Steenis
56b1c16e9f Add stricter TLS cipher for etcd v3.4.15 and up 2021-04-05 13:21:55 +02:00
Sebastiaan van Steenis
05e002bc08 Write kubeconfig/state with stricter permission 2021-03-07 12:41:31 +01:00
Steven Crespo
68453acb6e Add priority class name to addons 2021-02-06 16:46:39 -08:00
Kinara Shah
8c0a4d7f31
Merge pull request #2376 from superseb/add_auditlog_checksum
Add auditlog checksum to trigger restart on update
2021-01-27 15:00:35 -08:00
Sebastiaan van Steenis
5e50b51b13 Add auditlog checksum to trigger restart on update 2021-01-27 10:32:57 +01:00
rawmind0
1880404fc3 Added etcd snapshot timeout parameter 2021-01-22 18:35:13 +01:00
Sebastiaan van Steenis
e395badf82
Merge pull request #2412 from superseb/critical_addons
Mark all default addons as critical
2021-01-19 15:49:35 +01:00
Sebastiaan van Steenis
49a794c2de Mark all default addons as critical 2021-01-13 14:29:59 +01:00
Sebastiaan van Steenis
a68a64c0ce Add util command 2021-01-08 18:06:21 +01:00
Ryan Sanna
c14c39f8c5 reduce rewrite workers, add additional logging around secrets retrieval 2020-12-22 12:40:17 -07:00
Ryan Sanna
49e158a974
Revert "Revert "Encryption Key Rotation Changes"" 2020-12-14 11:51:46 -07:00
Ryan Sanna
92573270c7
Revert "Encryption Key Rotation Changes" 2020-12-09 13:49:27 -07:00
Ryan Sanna
e42ff49fec key rotation as part of ClusterUp, more robust secrets rewrite, improved logging 2020-12-08 12:00:32 -07:00
Nick Gerace
da6d9dcf9e Set default http backend to be optional
Set default http backend to be optional for ingress nginx. It will be
enabled by default.
2020-12-03 14:53:51 -05:00