mperochon
bb1238d6ac
fixup
2017-06-06 13:42:04 +02:00
mperochon
cd2be581db
fix
2017-06-02 17:48:27 +02:00
mperochon
8d96a6e4e4
fix
2017-06-02 17:31:28 +02:00
mperochon
7ce9d2f24c
fix
2017-06-02 17:09:55 +02:00
mperochon
a96d3a2ebb
fix
2017-06-02 16:10:44 +02:00
mperochon
354f8cf433
fix
2017-06-02 15:36:59 +02:00
mperochon
f98c99b651
fix
2017-06-02 15:09:55 +02:00
Boris Zanetti
cedfd1ca46
add vault debug
2017-06-02 14:01:45 +02:00
mperochon
93eb37cd0f
fix
2017-06-01 16:38:50 +02:00
mperochon
fb9204d59c
fixup
2017-06-01 15:44:54 +02:00
mperochon
70209fbb82
fixup
2017-06-01 15:04:36 +02:00
mperochon
5759a47992
vault: See hashicorp/docker-vault#19
2017-06-01 12:28:18 +02:00
mperochon
638b80d8de
calico/rr: removed dependancy on docker
2017-05-29 16:00:39 +02:00
Boris Zanetti
68bf1f1837
fix OSPF When check
2017-04-27 08:37:24 +02:00
Boris Zanetti
2cee161e67
Revert "docker: updating docker version maps"
...
This reverts commit e9421d983e
2017-04-26 16:47:46 +02:00
Boris Zanetti
f82f822d12
BUGFIX: remove singlequote on --enforce-node-allocatable
2017-04-26 15:18:24 +02:00
nhaveric
e9421d983e
docker: updating docker version maps
2017-04-25 16:11:39 +02:00
nhaveric
45aca56a3a
docker: using dockerd instead of docker daemon
2017-04-25 14:53:35 +02:00
Boris Zanetti
fc68a5b5fd
cleanup rebase from upstream
2017-04-24 20:07:50 +02:00
nhaveric
39915aec55
OSPF fix condition for OSPF export
2017-04-24 15:19:19 +02:00
Boris Zanetti
4aa208d58c
bird: notify restart calico-rr when template change
2017-04-24 15:19:19 +02:00
Boris Zanetti
ce1dad35e4
OSPF remove unexpected : 'strict ptp yes'
2017-04-24 15:19:19 +02:00
Boris Zanetti
4959daefab
OSPF replace file by copy in rr template
2017-04-24 15:19:19 +02:00
Boris Zanetti
77bc915aa1
add OSPF peering support
2017-04-24 15:19:19 +02:00
Boris Zanetti
9bc92320b7
rbac: add vars for system namespace name
2017-04-24 14:24:49 +02:00
Boris Zanetti
906b5546a0
fix of kubedns serviceaccount name for idempotency
2017-04-24 14:24:49 +02:00
Boris Zanetti
a807771d63
corrext idempotency issue with kubedns RBAC
2017-04-24 14:24:49 +02:00
Boris Zanetti
babc372d04
move fluentd rbac to yakow
2017-04-24 14:24:49 +02:00
Boris Zanetti
c1db6da4c1
add custom rbac role local root user
2017-04-24 14:24:49 +02:00
Boris Zanetti
7573181183
add custom rbac role for system:nodes
2017-04-24 14:24:49 +02:00
Boris Zanetti
f1d366779e
move kubedns rbac to specific role
2017-04-24 14:24:49 +02:00
Boris Zanetti
8d898778f5
move to specific role
2017-04-24 14:24:49 +02:00
Boris Zanetti
eb8fc0fe83
first try of root RBAC
2017-04-24 14:24:23 +02:00
nhaveric
fec5bfde1f
calico-node: added NODENAME var
2017-04-24 14:23:33 +02:00
nhaveric
9ca7c89e78
calico/rr: removed dependancy on docker
2017-04-24 14:23:33 +02:00
nhaveric
9ed9365db1
kubelet: added --node-ip option
2017-04-24 14:23:33 +02:00
nhaveric
dcf0360d8f
master: removing agressive jinja newline stripping
2017-04-24 14:23:33 +02:00
nhaveric
043a874e74
make-ssl: fix subject for nodes
2017-04-24 14:22:13 +02:00
nhaveric
7c8be652e7
make-ssl: resolved merge conflict
2017-04-24 14:22:13 +02:00
Boris Zanetti
3843742e30
add system groups to certificates
2017-04-24 14:22:13 +02:00
Boris Zanetti
29d32e4125
kube-apiserver: add block for custom settings and option to remove insecure port
2017-04-24 14:22:13 +02:00
nhaveric
76c92aaa17
Two fixes to be able to deploy in our environment.
2017-04-24 14:22:13 +02:00
Spencer Smith
88b5065e7d
fix stray 'in' and break into multiple lines for clarity
2017-04-20 09:53:01 -04:00
Spencer Smith
b690008192
allow for correct aws default resolver
2017-04-20 09:32:03 -04:00
Matthew Mosesohn
2d6bc9536c
Merge pull request #1246 from holser/disable_dns_for_kube_services
...
Change DNS policy for kubernetes components
2017-04-20 16:12:52 +03:00
Sergii Golovatiuk
01dc6b2f0e
Add aws to default_resolver
...
When VPC is used, external DNS might not be available. This patch change
behavior to use metadata service instead of external DNS when
upstream_dns_servers is not specified.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-20 11:47:19 +02:00
Sergii Golovatiuk
d8aa2d0a9e
Change DNS policy for kubernetes components
...
According to code apiserver, scheduler, controller-manager, proxy don't
use resolution of objects they created. It's not harmful to change
policy to have external resolver.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-04-20 11:22:57 +02:00
Matthew Mosesohn
19bb97d24d
Merge pull request #1238 from Starefossen/fix/namespace-template-file
...
Move namespace file to template directory
2017-04-20 12:19:55 +03:00
Matthew Mosesohn
9f4f168804
Merge pull request #1241 from bradbeam/rktcnidir
...
Explicitly create cni bin dir
2017-04-20 12:19:26 +03:00
Matthew Mosesohn
cf3083d68e
Merge pull request #1239 from mattymo/resettags
...
Add tags to reset playbook and make iptables flush optional
2017-04-20 11:35:08 +03:00
