9 commits

Author	SHA1	Message	Date
Rémi de Passmoilesel	356515222a	Add possibility to insert more ip adresses in certificates (#1678) ... * Add possibility to insert more ip adresses in certificates * Add newline at end of files * Move supp ip parameters to k8s-cluster group file * Add supplementary addresses in kubeadm master role * Improve openssl indexes	2017-10-17 11:06:07 +01:00
Matthew Mosesohn	6744726089	kubeadm support (#1631) ... * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml	2017-09-13 19:00:51 +01:00
Dann Bohn	c4894d6092	add newline after expanding user information	2017-07-25 12:59:10 -04:00
Dann Bohn	d1f58fed4c	Template out known_users.csv, optionally add groups	2017-07-14 09:27:20 -04:00
Vladimir Rutsky	a1ec6f401c	fix load balancer DNS name index evaluation in openssl.conf ... Looks like OpenSSL still properly handles it, even with duplicated "DNS.X" items.	2017-02-16 00:16:13 +03:00
Matthew Mosesohn	84052ff0b6	use nginx proxy on non-master nodes to proxy apiserver traffic ... Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works.	2016-10-05 20:09:10 +03:00
Matthew Mosesohn	d9641771ed	add kube-masters to SSL certificate	2016-09-29 15:12:30 +03:00
ant31	7237a925eb	Add kubernetes.default.svc in certs dns	2016-04-01 12:40:01 +02:00
Smana	91fca69aa0	generate secrets on deployment machine ... test travis with sudo=true instead of required	2016-02-13 06:51:54 +01:00