Sebastiaan van Steenis
ac16bd8b33
Configure MCS labels if selinux is enabled
2019-08-22 13:45:04 -07:00
Frank Mai
277797df0f
Support to generate Windows worker plan
...
- Put Windows worker plan generating back to reduce the changing from
Windows on rancher/rancher
- Prepare for rke bootstraps Windows cluster
**Issue:**
https://github.com/rancher/rancher/issues/16460
2019-08-21 20:50:31 -07:00
Sebastiaan van Steenis
3f94e86706
Revert "Add per node kubelet server certificate"
...
This reverts commit b860e634db
.
2019-08-08 09:49:47 -07:00
Sebastiaan van Steenis
b860e634db
Add per node kubelet server certificate
2019-07-31 14:54:43 -07:00
moelsayed
688d4aedd7
support etcd custom uid/gid
2019-07-29 17:24:16 -07:00
kinarashah
b018c756b1
read serviceOptions from minor version first
2019-07-19 13:25:42 -07:00
galal-hussein
55b1b4db7c
use healthz endpoint for kubelet healthcheck
2019-07-18 14:22:07 -07:00
kinarashah
116b47b025
rancher pass serviceoptions and addon templates to rke
2019-07-03 10:04:27 -07:00
kinarashah
c191ed6202
use k8s version info from kontainer-driver-metadata
2019-07-03 10:04:27 -07:00
Sebastiaan van Steenis
9985bc8bae
Add k8s 1.15
2019-06-25 10:41:27 -07:00
galal-hussein
870c073c10
Use Internal Addresses to sort the etcd connection string
2019-05-31 09:48:35 -07:00
Erik Wilson
581e3389c4
Reorder etcd servers list
2019-05-28 09:50:29 -07:00
kinarashah
5f4cff3f4c
remove PersistentVolumeLabel controller
...
deprecated post 1.11
2019-05-08 12:11:44 -07:00
Sebastiaan van Steenis
1127a90a9c
Add correct env vars if etcd 3.3 is used
2019-05-02 09:46:26 -07:00
Jan B
9679aca20c
Fix: kube-proxy not mounting /run/xtables.lock leading to racy iptables access
...
kube-proxy and other processes invoking iptables (e.g. flannel, weave) must share the host fs `/run/xtables.lock` to prevent concurrent access to iptables resulting in errors like "iptables: Resource temporarily unavailable".
2019-04-17 11:20:04 -07:00
Sebastiaan van Steenis
21f3a3eff9
Add k8s 1.14
2019-04-05 15:45:19 -07:00
Frank Mai
d2783a9298
Change controllerMgr & scheduler listening address
...
**Problem:**
For now, Monitoring cannot scrape metrics from controllerMgr & scheduler
**Solution:**
Change listening address to `0.0.0.0`
**Issue:**
https://github.com/rancher/rancher/issues/17922
2019-03-19 21:00:09 -07:00
jianghang8421
b6d90f4110
Convert aarch64 to arm64 for ETCD_UNSUPPORTED_ARCH env var
2019-03-11 16:20:41 -06:00
loganhz
efab83d804
Always set ETCD_UNSUPPORTED_ARCH
2019-03-08 14:09:39 -07:00
jianghang8421
8a219b5c50
Support deploying arm64 k8s and modify cross build script
2019-03-08 14:09:39 -07:00
moelsayed
eb6116dded
Fix versioned templates version check
2019-02-26 15:26:16 -08:00
Sebastiaan van Steenis
23aebac488
Add AWS cloudprovider config
2019-02-12 09:10:55 -08:00
Mark Lee
c0ee3327ba
advertise address on kube-apiserver by internal_address
2019-01-25 11:23:14 -08:00
galal-hussein
556e5bb678
Avoid creating dangling volumes with rke tools
2019-01-21 12:38:58 -08:00
Jason Greathouse
6d36ba86e9
AlwaysPullImages admission plugin option
2019-01-09 11:49:33 -08:00
Jason Greathouse
7afa6e927e
update k8s defaults, CIS recommendations
2019-01-07 12:07:46 -08:00
Erik Wilson
e04b7d4413
Add support for Kubernetes API Authn Webhook
...
Allow multiple authn strategies to be defined, including new 'webhook'
strategy. Webhook strategy configuration contains the contents of the
authentication webhook file as well as the cache timeout period.
This change allows a Kubernetes API Auth service to authenticate
user requests without proxying through the Rancher server.
2019-01-03 17:15:23 -07:00
galal-hussein
66fb2c4ac0
Get checksum of the cloud file content
2018-12-06 16:23:20 -08:00
galal-hussein
696b61679c
Final fixes and cleanup for state management
...
Fix dind and local and etcd snapshots
add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
galal-hussein
8b8870311b
refactor the build state
...
remove extra cert generation for etcd in reconcile
fix reconcile and etcd add and remove cluster state with rke remove
fix add/remove issues
Fix the up command
Fix default paths for kubeconfig and rkestate
2018-11-09 11:16:17 -08:00
galal-hussein
3551e6e4b6
Add Rotate certificates command to rke
2018-10-31 12:08:31 -07:00
Sebastiaan van Steenis
22a339ea33
Update to Golang 1.11
2018-10-18 09:27:46 -07:00
Sebastiaan van Steenis
12559a21c7
Use clusterversion to check supported Docker versions
2018-10-04 11:31:35 -07:00
moelsayed
d4759bcc4f
Remove ServiceOption if empty
2018-10-02 12:58:21 -07:00
moelsayed
6b6a7803a7
Move admission controller options to ServiceOptions
2018-08-30 14:52:30 -07:00
moelsayed
d451683abb
Add docker config file environment variables for kubelet
2018-08-30 10:00:28 -07:00
Sebastiaan van Steenis
bff7e0a2c3
Avoid panic in rke-tools entrypoint detection
2018-08-09 09:25:25 -07:00
moelsayed
de617da470
Fix entrypoint bug
2018-08-05 19:57:52 -07:00
moelsayed
4357da7742
handle entrypoint upgrade across versions
2018-08-04 04:30:54 -07:00
moelsayed
010a7977ff
Change entrypoint to fix multiple mount problem
2018-08-02 02:33:46 +02:00
moelsayed
28db358ebd
Fix nested mounts issue when using default host prefix
2018-08-01 11:26:42 -07:00
Chase Bolt
82af829b8c
adjust volumeplugins to a non-persistent path that will work oob with default configs
2018-07-20 13:21:36 -07:00
moelsayed
2eeb5cac00
Make sure Binds are unique
2018-07-19 15:12:09 -07:00
galal-hussein
8269c3f301
Add metrics-server addon deployment
2018-07-17 16:51:59 -07:00
orangedeng
9f7a37845e
Add support for API aggregation layer
...
Add API server parameters
`requestheader-client-ca-file`,
`requestheader-allowed-names`,
`proxy-client-key-file` and
`proxy-client-cert-file`.
After we added this parameters into API server, the API aggregation
server will be supported when it is deployed in rke cluster.
2018-07-17 16:51:59 -07:00
Chase Bolt
f9ecba0ab2
adjust kubelet volume-plugin-dir to match root-dir
2018-07-11 12:55:46 -07:00
moelsayed
d155cc8e76
Allow etcd parameters to be overridden
2018-07-06 13:32:08 -07:00
Sebastiaan van Steenis
f7814a5e8a
Set cluster-cidr on kube-proxy
2018-06-29 13:19:38 -07:00
Sebastiaan van Steenis
1da390d846
Add hostname-override to kube-proxy
2018-06-29 11:31:58 -07:00
moelsayed
39e846442b
Fix container log location for ros
2018-06-29 10:49:49 -07:00