Commit graph

  • 6d8c771c08 Add support for PodSecurityPolicies Raj Perera 2017-06-28 11:32:29 -0400
  • 74a47bb1ec Merge f34d953d64 into e6225d70a1 Brad Beam 2017-06-27 15:04:43 +0000
  • f9795696ef Merge 62ef4db61b into e6225d70a1 Seungkyu Ahn 2017-06-27 15:04:41 +0000
  • 161b7d8ada Finish replacing kargo with kubespray Dan Kohn 2017-06-27 10:54:03 -0400
  • c5b351430d mount the etcd data directory in the container with the same path as on the host. gdmelloatpoints 2017-06-27 09:29:47 -0400
  • 649654207f mount the etcd data directory in the container with the same path as on the host. gdmelloatpoints 2017-06-27 09:29:47 -0400
  • 677f6dbb67 basic rbac support jwfang 2017-06-27 12:27:25 +0800
  • 3f7eaf0d9c Merge dd0e03d228 into bddee7c38e David Townshend 2017-06-27 03:11:05 +0000
  • 0ead3610ce Merge 70c909fc3d into bddee7c38e vgkowski 2017-06-27 03:11:04 +0000
  • 23e67f7322 Merge 81f7fc4595 into d2b793057e billy2180 2017-06-26 21:16:27 +0000
  • e3925c5722 Merge 42803a2ade into 5364a10033 Spencer Smith 2017-06-26 18:15:59 +0000
  • 42803a2ade turn off coreos upgrades at first boot Spencer Smith 2017-06-26 13:43:59 -0400
  • 8574a1b517 Merge 19f438fde8 into 5364a10033 Spencer Smith 2017-06-26 17:44:42 +0000
  • 19f438fde8 turn off coreos upgrades at first boot Spencer Smith 2017-06-26 13:43:59 -0400
  • 9c94697c62 Merge 5d02b01da9 into 5364a10033 gdmelloatpoints 2017-06-26 12:58:23 +0000
  • fb8abf7e29 Merge remote-tracking branch 'upstream/master' AtzeDeVries 2017-06-26 11:37:23 +0200
  • f5ef02d4cc Merge remote-tracking branch 'upstream/master' AtzeDeVries 2017-06-26 11:37:23 +0200
  • 321740531a don't delegate_to localhost when upload from localhost jwfang 2017-06-26 17:32:25 +0800
  • a32b9a3c37 Merge 6876f60f4c into 5364a10033 jwfang 2017-06-26 09:10:15 +0000
  • 6876f60f4c merge after rebase jwfang 2017-06-26 16:50:30 +0800
  • 922ae45977 minor tune after merge @rajiteh's work jwfang 2017-06-21 11:30:15 +0800
  • f5c887a338 Whitespace fixes Raj Perera 2017-06-20 13:44:14 -0400
  • ef58242114 Add note about auth modes Raj Perera 2017-06-20 13:31:44 -0400
  • 0816f620b9 Reverted leftover tasks from cert rotation functionality. Raj Perera 2017-06-20 13:29:31 -0400
  • a3760a8b84 Remove cert rotation code. Remove disclaimer for supported auth methods. Raj Perera 2017-06-20 00:49:33 -0400
  • d3ea13b3f0 kube-proxy use kubeconfig on kube-master jwfang 2017-06-20 10:54:02 +0800
  • d742a3953c Make rotate_kubernetes_certs default to false Raj Perera 2017-06-19 13:16:57 -0400
  • a22868e7d1 Extract kubectl commands to resource yaml files and use kube module Raj Perera 2017-06-19 11:00:26 -0400
  • c0db1499fd Update docs. Raj Perera 2017-06-19 10:29:03 -0400
  • 971944ead4 Address PR feedback. Raj Perera 2017-06-19 10:24:56 -0400
  • 5c56085e03 replace insecure port with secure port for apiserver_endpoint on kube-masters jwfang 2017-06-19 12:48:07 +0800
  • 525db1f109 patch system:kube-dns clusterrole for get jwfang 2017-06-17 19:53:29 +0800
  • 442ebce3d8 Use kubectl patch Raj Perera 2017-06-16 12:29:13 -0400
  • 5a86194038 Replace static references to system namespace Raj Perera 2017-06-16 11:21:59 -0400
  • c8a2fe321b Basic RBAC functionality. (Based from work done by @jwfang (#1351)) Raj Perera 2017-06-16 10:28:23 -0400
  • 00e5fc8aa4 add label for kube-dns sa jwfang 2017-06-16 20:08:19 +0800
  • 8e516e7a6c run kubedns as system:serviceaccount:kube-system:kube-dns; but dns does NOT work jwfang 2017-06-16 18:54:18 +0800
  • 4a1a7bd078 node identified as system:node:<node-name> jwfang 2017-06-16 17:15:37 +0800
  • 4fa142be0b certs for system:kube-controller-manager system:kube-scheduler jwfang 2017-06-16 14:21:21 +0800
  • 8ed48f052c seperate kube-proxy certs for each node jwfang 2017-06-15 19:20:58 +0800
  • 27e3998cb6 add kube-node to system:nodes group, add system:kube-proxy cert for kube-proxy jwfang 2017-06-15 18:15:52 +0800
  • 33b5cefad1 Merge 7a173601d3 into 5364a10033 jwfang 2017-06-26 08:32:19 +0000
  • 41cf799980 Merge c2885e97c1 into 5364a10033 jwfang 2017-06-26 08:30:16 +0000
  • 7a173601d3 Merge branch 'sync-fix' of https://github.com/jwfang/kargo into sync-fix jwfang 2017-06-26 16:12:40 +0800
  • b24c9679ec don't delegate_to localhost when upload from localhost jwfang 2017-06-20 20:36:15 +0800
  • c2885e97c1 Merge branch 'max-dns' of https://github.com/jwfang/kargo into max-dns jwfang 2017-06-26 16:10:16 +0800
  • 2adec6cfb7 docker_dns_servers_strict to control docker_dns_servers rtrim jwfang 2017-06-22 10:56:21 +0800
  • 4ebcdfd05b Revert "make max docker dns server configurable" jwfang 2017-06-22 09:56:57 +0800
  • daad366419 make max docker dns server configurable jwfang 2017-06-20 20:06:54 +0800
  • 62ef4db61b Add helm installation option as docker and host type Seungkyu Ahn 2017-06-21 11:30:15 +0900
  • eb15a2b550 Merge branch 'work' of https://github.com/Lendico/kargo into work Anton Nerozya 2017-06-24 11:36:42 +0200
  • 8baef1fc01 Few additional checks for ansible dry-run (--check) mode Anton Nerozya 2017-06-23 17:45:18 +0200
  • da3fbc7753 Added role dependencies Anton Nerozya 2017-06-22 10:46:51 +0200
  • d79e50d003 Additional checks for ansible dry-run (--check) mode Anton Nerozya 2017-06-07 19:31:35 +0200
  • e41e67ea1d typo fix Anton Nerozya 2017-05-27 19:53:00 +0200
  • 12281912a2 Additional checks for ansible dry-run (--check) mode Anton Nerozya 2017-05-29 12:43:26 +0200
  • 5d02b01da9 remove call to delete task. gdmelloatpoints 2017-06-23 17:28:40 -0400
  • 408b78a937 Make etcd_backup_prefix configurable. Ensures that backups can be stored on a different location other than ${HOST}/var/backups, say an EBS volume on AWS. gdmelloatpoints 2017-06-23 15:41:17 -0400
  • cd87e311fc In the etcd container, the etcd data directory is always /var/lib/etcd. Reverting to this value, since etcd_data_dir on the host maps to /var/lib/etcd in the container. gdmelloatpoints 2017-06-23 13:49:31 -0400
  • 5c1891ec9f In the etcd container, the etcd data directory is always /var/lib/etcd. Reverting to this value, since etcd_data_dir on the host maps to /var/lib/etcd in the container. gdmelloatpoints 2017-06-23 13:49:31 -0400
  • c83ca9838e Merge 9b96fd7f5f into 774c4d0d6f eviln1 2017-06-23 15:27:15 +0000
  • 9b96fd7f5f kube-master: Use TLS for scheduler and controllers communications nhaveric 2017-06-23 17:26:22 +0200
  • 4d4d427773 updated to direct control over ipip AtzeDeVries 2017-06-23 09:16:05 +0200
  • 61b74f9a5b updated to direct control over ipip AtzeDeVries 2017-06-23 09:16:05 +0200
  • 9039be12dc Merge 1757c45490 into 774c4d0d6f Anton 2017-06-22 16:24:10 +0000
  • 570a26835b Added role dependencies Anton Nerozya 2017-06-22 10:46:51 +0200
  • 658db71c4b Merge branch 'work' of https://github.com/Lendico/kargo into work Anton Nerozya 2017-06-22 11:05:13 +0200
  • 11477d31b2 Merge remote-tracking branch 'upstream/master' Anton Nerozya 2017-06-22 10:53:40 +0200
  • b48de5bb90 Added role dependencies Anton Nerozya 2017-06-22 10:46:51 +0200
  • a75955d479 fix conflict jwfang 2017-06-22 13:36:37 +0800
  • c96f679e82 docker_dns_servers_strict to control docker_dns_servers rtrim jwfang 2017-06-22 10:56:21 +0800
  • 5fbb684cae Revert "make max docker dns server configurable" jwfang 2017-06-22 09:56:57 +0800
  • 4cfffba749 minor tune after merge @rajiteh's work jwfang 2017-06-21 11:30:15 +0800
  • 27a10c9623 Whitespace fixes Raj Perera 2017-06-20 13:44:14 -0400
  • 33de4def2f Add note about auth modes Raj Perera 2017-06-20 13:31:44 -0400
  • 41298ccea5 Reverted leftover tasks from cert rotation functionality. Raj Perera 2017-06-20 13:29:31 -0400
  • dba7ad82b9 Give more control over IPIP, but with same default behaviour AtzeDeVries 2017-06-20 14:50:08 +0200
  • 7332679678 Give more control over IPIP, but with same default behaviour AtzeDeVries 2017-06-20 14:50:08 +0200
  • 9727a72636 don't delegate_to localhost when upload from localhost jwfang 2017-06-20 20:36:15 +0800
  • 6450b85b83 make max docker dns server configurable jwfang 2017-06-20 20:06:54 +0800
  • e9d05c99b9 Merge branch 'dry-run' into work Anton Nerozya 2017-06-20 11:08:06 +0200
  • d2131a8652 Merge branch 'rbac-kp' into rbac-script-cert Raj Perera 2017-06-20 00:54:43 -0400
  • e58d06ddd1 Remove cert rotation code. Remove disclaimer for supported auth methods. Raj Perera 2017-06-20 00:49:33 -0400
  • ba41d3ee55 kube-proxy use kubeconfig on kube-master jwfang 2017-06-20 10:54:02 +0800
  • 4e95788e17 Make rotate_kubernetes_certs default to false Raj Perera 2017-06-19 13:16:57 -0400
  • cd143109fc Merge branch 'rbac-kp' into rbac-script-cert Raj Perera 2017-06-19 12:12:45 -0400
  • eb91eab39a Extract kubectl commands to resource yaml files and use kube module Raj Perera 2017-06-19 11:00:26 -0400
  • 839b7d4a0f Update docs. Raj Perera 2017-06-19 10:29:03 -0400
  • e663c6b61a Address PR feedback. Raj Perera 2017-06-19 10:24:56 -0400
  • 80244748a6 Update main.yml Seungkyu Ahn 2017-06-19 17:08:30 +0900
  • 7ba11a0152 Merge branch 'master' into fixed_helm_bash_completion Seungkyu Ahn 2017-06-19 17:06:03 +0900
  • 7de04706b7 Fixed helm bash complete Seungkyu Ahn 2017-06-19 15:33:50 +0900
  • c4fbf41220 replace insecure port with secure port for apiserver_endpoint on kube-masters jwfang 2017-06-19 12:48:07 +0800
  • 36e3aae615 patch system:kube-dns clusterrole for get jwfang 2017-06-17 19:53:29 +0800
  • 20cacc09ba fix rename jwfang 2017-06-17 16:22:58 +0800
  • b800f7bb07 Use kubectl patch Raj Perera 2017-06-16 12:29:13 -0400
  • 9924a33d6f Replace static references to system namespace Raj Perera 2017-06-16 11:21:59 -0400
  • 992a974b1e Merge branch 'rbac-kp' into rbac-script-cert Raj Perera 2017-06-16 11:11:12 -0400
  • 0dc38ff9b3 Basic RBAC functionality. (Based from work done by @jwfang (#1351)) Raj Perera 2017-06-16 10:28:23 -0400
  • 7c2816ba73 add label for kube-dns sa jwfang 2017-06-16 20:08:19 +0800