Boris Zanetti
906b5546a0
fix of kubedns serviceaccount name for idempotency
2017-04-24 14:24:49 +02:00
Boris Zanetti
a807771d63
corrext idempotency issue with kubedns RBAC
2017-04-24 14:24:49 +02:00
Boris Zanetti
babc372d04
move fluentd rbac to yakow
2017-04-24 14:24:49 +02:00
Boris Zanetti
c1db6da4c1
add custom rbac role local root user
2017-04-24 14:24:49 +02:00
Boris Zanetti
7573181183
add custom rbac role for system:nodes
2017-04-24 14:24:49 +02:00
Boris Zanetti
f1d366779e
move kubedns rbac to specific role
2017-04-24 14:24:49 +02:00
Boris Zanetti
8d898778f5
move to specific role
2017-04-24 14:24:49 +02:00
Boris Zanetti
eb8fc0fe83
first try of root RBAC
2017-04-24 14:24:23 +02:00
nhaveric
fec5bfde1f
calico-node: added NODENAME var
2017-04-24 14:23:33 +02:00
nhaveric
9ca7c89e78
calico/rr: removed dependancy on docker
2017-04-24 14:23:33 +02:00
nhaveric
9ed9365db1
kubelet: added --node-ip option
2017-04-24 14:23:33 +02:00
nhaveric
dcf0360d8f
master: removing agressive jinja newline stripping
2017-04-24 14:23:33 +02:00
nhaveric
043a874e74
make-ssl: fix subject for nodes
2017-04-24 14:22:13 +02:00
nhaveric
7c8be652e7
make-ssl: resolved merge conflict
2017-04-24 14:22:13 +02:00
Boris Zanetti
3843742e30
add system groups to certificates
2017-04-24 14:22:13 +02:00
Boris Zanetti
29d32e4125
kube-apiserver: add block for custom settings and option to remove insecure port
2017-04-24 14:22:13 +02:00
nhaveric
76c92aaa17
Two fixes to be able to deploy in our environment.
2017-04-24 14:22:13 +02:00
Spencer Smith
502f2f040d
Merge pull request #1249 from rsmitty/master
...
add some known tweaks that need to be made for coreos to docs
2017-04-20 18:40:25 -04:00
Spencer Smith
c0c10a97e7
Merge pull request #1248 from rsmitty/aws-resolver
...
allow for correct aws default resolver
2017-04-20 11:25:40 -04:00
Spencer Smith
5a7c50027f
add some known tweaks that need to be made for coreos
2017-04-20 11:14:41 -04:00
Spencer Smith
88b5065e7d
fix stray 'in' and break into multiple lines for clarity
2017-04-20 09:53:01 -04:00
Spencer Smith
b690008192
allow for correct aws default resolver
2017-04-20 09:32:03 -04:00
Matthew Mosesohn
2d6bc9536c
Merge pull request #1246 from holser/disable_dns_for_kube_services
...
Change DNS policy for kubernetes components
2017-04-20 16:12:52 +03:00
Sergii Golovatiuk
01dc6b2f0e
Add aws to default_resolver
...
When VPC is used, external DNS might not be available. This patch change
behavior to use metadata service instead of external DNS when
upstream_dns_servers is not specified.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-20 11:47:19 +02:00
Sergii Golovatiuk
d8aa2d0a9e
Change DNS policy for kubernetes components
...
According to code apiserver, scheduler, controller-manager, proxy don't
use resolution of objects they created. It's not harmful to change
policy to have external resolver.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-20 11:22:57 +02:00
Matthew Mosesohn
19bb97d24d
Merge pull request #1238 from Starefossen/fix/namespace-template-file
...
Move namespace file to template directory
2017-04-20 12:19:55 +03:00
Matthew Mosesohn
9f4f168804
Merge pull request #1241 from bradbeam/rktcnidir
...
Explicitly create cni bin dir
2017-04-20 12:19:26 +03:00
Matthew Mosesohn
82e133b382
Merge pull request #1235 from JustinAzoff/patch-1
...
Fix IPS array variable expansion
2017-04-20 12:08:49 +03:00
Matthew Mosesohn
cf3083d68e
Merge pull request #1239 from mattymo/resettags
...
Add tags to reset playbook and make iptables flush optional
2017-04-20 11:35:08 +03:00
Sergii Golovatiuk
e796cdbb27
Fix restart kube-controller ( #1242 )
...
kubernetesUnitPrefix was changed to k8s_* in 1.5. This patch reflects
this change in kargo
2017-04-20 11:26:01 +03:00
Matthew Mosesohn
2d44582f88
Add tags to reset playbook and make iptables flush optional
...
Fixes #1229
2017-04-19 19:32:18 +03:00
Spencer Smith
2a61344c03
Merge pull request #1236 from mattymo/minupgrade
...
Add minimal k8s upgrade playbook
2017-04-19 12:05:39 -04:00
Spencer Smith
77c6aad1b5
Merge pull request #1237 from Starefossen/chore/remove-dot-bak
...
Remove and ignore .bak files
2017-04-19 12:03:41 -04:00
Brad Beam
b60a897265
Explicitly create cni bin dir
...
If this path doesnt exist, it will cause kubelet to fail to start when
using rkt
2017-04-19 16:00:44 +00:00
Hans Kristian Flaatten
fdd41c706a
Remove and ignore .bak files
2017-04-19 13:37:23 +02:00
Hans Kristian Flaatten
d68cfeed6e
Move namespace file to template directory
2017-04-19 13:37:02 +02:00
Matthew Mosesohn
14911e0d22
Add minimal k8s upgrade playbook
2017-04-18 13:28:36 +03:00
Justin
9503434d53
Fix IPS array variable expansion
...
$IPS only expands to the first ip address in the array:
justin@box:~$ declare -a IPS=(10.10.1.3 10.10.1.4 10.10.1.5)
justin@box:~$ echo $IPS
10.10.1.3
justin@box:~$ echo ${IPS[@]}
10.10.1.3 10.10.1.4 10.10.1.5
2017-04-17 20:56:52 -04:00
Spencer Smith
c3c9e955e5
Merge pull request #1232 from rsmitty/custom-flags
...
add ability for custom flags
2017-04-17 14:01:32 -04:00
Spencer Smith
72d5db92a8
remove stray spaces in templating
2017-04-17 12:24:24 -04:00
Spencer Smith
3f302c8d47
ensure spacing on string of flags
2017-04-17 12:13:39 -04:00
Spencer Smith
04a769bb37
ensure spacing on string of flags
2017-04-17 11:11:10 -04:00
Spencer Smith
f9d4a1c1d8
update to safeguard against accidentally passing string instead of list
2017-04-17 11:09:34 -04:00
Matthew Mosesohn
3e7db46195
Merge pull request #1233 from gbolo/master
...
allow admission control plug-ins to be easily customized
2017-04-17 12:59:49 +03:00
Matthew Mosesohn
e52aca4837
Merge pull request #1223 from mattymo/vault_cert_skip
...
Skip vault cert task evaluation when using script certs
2017-04-17 12:52:42 +03:00
Matthew Mosesohn
5ec503bd6f
Merge pull request #1222 from bradbeam/calico
...
Updating calico versions
2017-04-17 12:52:20 +03:00
gbolo
49be805001
allow admission control plug-ins to be easily customized
2017-04-16 22:03:45 -04:00
Spencer Smith
94596388f7
add ability for custom flags
2017-04-14 17:33:04 -04:00
Spencer Smith
5c4980c6e0
Merge pull request #1231 from holser/fix_netchecker-server
...
Reschedule netchecker-server in case of HW failure.
2017-04-14 10:50:07 -04:00
Spencer Smith
6d157f0b3e
Merge pull request #1225 from VincentS/aws_fixes
...
Fixes for AWS Terraform Deployment and Updated Readme
2017-04-14 10:47:25 -04:00
