Kinara Shah
f7b293b7ae
update scheduler healthcheck port for k8s 1.23
2022-03-03 10:25:05 -08:00
Kinara Shah
eb8b278bcd
delete hostname-override for aws cloud provider
...
aws cloud provider assigns private dns as the node name,
don't override it since it cannot be changed.
2022-01-10 09:35:26 -08:00
Sebastiaan van Steenis
6833df8631
Set 'watch-ingress-without-class: true' as default
2021-12-10 20:12:30 +01:00
Kinara Shah
5ac34a1f41
pass authorization-kubeconfig and authentication-kubeconfig for 1.22
...
controller manager must start with proper authorization and
authentication kubeconfig in args starting 1.22. k8s 1.22 has
disabled insecure serving for kube controller manager.
2021-12-03 17:19:47 -08:00
Sebastiaan van Steenis
0cea67e9ff
Do not rewrite SELinux labels on volume mounts
2021-11-19 22:39:56 +01:00
Raúl Sánchez
1ae89e56c3
Merge pull request #2701 from rawmind0/encryption13
...
Update cluster.parseCustomConfig function to proper decode custom EncryptionConfiguration
2021-11-11 22:40:56 +01:00
Sebastiaan van Steenis
69dbe30b46
Merge pull request #2729 from superseb/v13_v122
...
[release/v1.3] Add compatibility with k8s v1.22
2021-11-11 17:55:35 +01:00
Kinara Shah
594296bb10
update etcd client to use both v3 and v2
...
v3 for >=1.22, v2 otherwise
2021-11-08 09:50:17 -08:00
Sebastiaan van Steenis
546a61b24a
Add compatibility with k8s v1.22
2021-11-04 16:50:58 +01:00
rawmind0
0404dba56d
Update cluster.parseCustomConfig function to proper decode custom EncryptionConfiguration
2021-09-21 23:33:20 +02:00
Gaurav Mehta
a618da802b
Changed Credential Helper to a predefined type ECRCredentialHelper and associated changes for the same
2021-08-19 15:21:10 -07:00
rawmind0
12c1a8b260
Updated nginx ingress addon to remove admission batch jobs if they exist
2021-08-16 14:29:00 +02:00
Sebastiaan van Steenis
8c7d8d8570
Merge pull request #2624 from rancher/revert-2541-no_selinux_relabel
...
Revert "Do not rewrite SELinux labels on volume mounts"
2021-08-02 18:19:42 +02:00
Sebastiaan van Steenis
0f9d7911b1
Set ingress to hostport in k8s 1.21 and up
2021-07-30 20:15:07 +02:00
Sebastiaan van Steenis
51a6b50a84
Revert "Do not rewrite SELinux labels on volume mounts"
2021-07-29 08:59:54 +02:00
Sebastiaan van Steenis
22b82828ff
Merge pull request #2599 from superseb/ingress_webhook
...
Validate Ingress Webhook and pass to template
2021-07-06 22:53:46 +02:00
Sebastiaan van Steenis
963f59b009
Merge pull request #2262 from ibrokethecloud/ecr-helper
...
ecr credential plugin
2021-07-06 22:35:03 +02:00
Sebastiaan van Steenis
0650395889
Merge pull request #2596 from chaudhryfaisal/CustomCertsEncryptionConfig
...
set EncryptionConfig on DesiredState when using CustomCerts
2021-07-06 22:27:29 +02:00
Sebastiaan van Steenis
97c4b102ce
Validate Ingress Webhook and pass to template
2021-07-06 12:11:59 +02:00
Gaurav Mehta
723dd7c670
Initial commit for adding ecr credential plugin
2021-07-05 10:16:44 +10:00
Faisal Chaudhry
441d06df32
set EncryptionConfig on DesiredState when using CustomCerts
2021-07-02 10:01:32 -04:00
Sebastiaan van Steenis
c5efcaeb0c
Make it possible to configure dualstack
2021-07-01 19:02:46 +02:00
Sebastiaan van Steenis
a4bebdb8bb
Add support for enabling cri-dockerd
2021-06-08 19:05:54 +02:00
Sebastiaan van Steenis
ff49352399
Merge pull request #2564 from superseb/golangcilint_v0401
...
Use golangci-lint v1.40.1
2021-06-08 18:28:53 +02:00
Sebastiaan van Steenis
a58605612e
Merge pull request #2520 from pmorillon/unset_proxy_env_vars_when_using_bastion
...
Unset proxy env vars when using bastion
2021-06-07 14:55:43 +02:00
Sebastiaan van Steenis
9c711e669c
Use golangci-lint v0.40.1
2021-06-06 14:20:54 +02:00
Pascal Morillon
8b9385040f
Unset proxy env vars when ssh bastion is configured with option ignore_proxy_env_vars
2021-05-31 16:49:01 +02:00
Sebastiaan van Steenis
ca8cc62303
Merge pull request #2541 from superseb/no_selinux_relabel
...
Do not rewrite SELinux labels on volume mounts
2021-05-31 15:06:19 +02:00
Sebastiaan van Steenis
88a4d73e79
Merge pull request #1372 from zhaofengli/mixed-arch-etcd-cluster
...
Use the node's architecture to build etcd process
2021-05-31 10:44:31 +02:00
Kinara Shah
bb0d38e303
Merge pull request #2536 from kinarashah/defaultbackend
...
set ingress default backend to false for k8s 1.21+
2021-05-21 09:57:17 -07:00
Sebastiaan van Steenis
04b71a9fd9
Merge pull request #2537 from superseb/etcdsave_statefile
...
Dont deploy statefile if its not readable
2021-05-21 11:06:48 +02:00
Sebastiaan van Steenis
9757be753f
Do not rewrite SELinux labels on volume mounts
2021-05-18 22:22:40 +02:00
Sebastiaan van Steenis
738bda5fb6
Dont deploy statefile if its not readable
2021-05-18 07:24:57 +02:00
Kinara Shah
b2a9ebee75
set ingress default backend to false for k8s 1.21+
2021-05-14 16:58:25 -07:00
Dan Ramich
d07658cf9b
Encryption update
2021-05-14 10:11:17 -06:00
Sebastiaan van Steenis
b9a126c067
Merge pull request #2504 from superseb/etcd_v3415_ciphers
...
Add stricter TLS cipher for etcd v3.4.15 and up
2021-04-06 21:40:05 +02:00
Sebastiaan van Steenis
56b1c16e9f
Add stricter TLS cipher for etcd v3.4.15 and up
2021-04-05 13:21:55 +02:00
Sebastiaan van Steenis
05e002bc08
Write kubeconfig/state with stricter permission
2021-03-07 12:41:31 +01:00
Steven Crespo
68453acb6e
Add priority class name to addons
2021-02-06 16:46:39 -08:00
Kinara Shah
8c0a4d7f31
Merge pull request #2376 from superseb/add_auditlog_checksum
...
Add auditlog checksum to trigger restart on update
2021-01-27 15:00:35 -08:00
Sebastiaan van Steenis
5e50b51b13
Add auditlog checksum to trigger restart on update
2021-01-27 10:32:57 +01:00
rawmind0
1880404fc3
Added etcd snapshot timeout parameter
2021-01-22 18:35:13 +01:00
Sebastiaan van Steenis
e395badf82
Merge pull request #2412 from superseb/critical_addons
...
Mark all default addons as critical
2021-01-19 15:49:35 +01:00
Sebastiaan van Steenis
49a794c2de
Mark all default addons as critical
2021-01-13 14:29:59 +01:00
Sebastiaan van Steenis
a68a64c0ce
Add util command
2021-01-08 18:06:21 +01:00
Ryan Sanna
c14c39f8c5
reduce rewrite workers, add additional logging around secrets retrieval
2020-12-22 12:40:17 -07:00
Ryan Sanna
49e158a974
Revert "Revert "Encryption Key Rotation Changes""
2020-12-14 11:51:46 -07:00
Ryan Sanna
92573270c7
Revert "Encryption Key Rotation Changes"
2020-12-09 13:49:27 -07:00
Ryan Sanna
e42ff49fec
key rotation as part of ClusterUp, more robust secrets rewrite, improved logging
2020-12-08 12:00:32 -07:00
Nick Gerace
da6d9dcf9e
Set default http backend to be optional
...
Set default http backend to be optional for ingress nginx. It will be
enabled by default.
2020-12-03 14:53:51 -05:00