- Nov 06, 2017
-
-
Amit Kumar Jaiswal authored
-
- Nov 03, 2017
-
-
Günther Grill authored
* Change deprecated vagrant ansible flag 'sudo' to 'become' * Emphasize, that the name of the pip_pyton_modules is only considered in coreos * Remove useless unused variable * Fix warning when jinja2 template-delimiters used in when statement There is no need for jinja2 template-delimiters like {{ }} or {% %} any more. They can just be omitted as described in https://github.com/ansible/ansible/issues/22397 * Fix broken link in getting-started guide
-
- Nov 02, 2017
-
-
Fernando Ripoll authored
Typo in apt-get command
-
- Nov 01, 2017
-
-
Matthew Mosesohn authored
-
- Oct 30, 2017
-
-
Fernando Ripoll authored
Typo in the apt-get command
-
- Oct 16, 2017
-
-
Matthew Mosesohn authored
-
neith00 authored
* Revert "Debian jessie docs (#1806)" This reverts commit d78577c8. * Revert "[contrib/network-storage/glusterfs] adds service for glusterfs endpoint (#1800)" This reverts commit 5fb6b2ea. * Revert "[contrib/network-storage/glusterfs] bootstrap for glusterfs nodes (#1799)" This reverts commit 404caa11. * Revert "Fixed kubelet standard log environment (#1780)" This reverts commit b8384685. * Revert "Add support for fedora atomic host (#1779)" This reverts commit f2235be1. * Revert "Update network-plugins to use portmap plugin (#1763)" This reverts commit 6ec45b10. * Revert "Update roadmap (#1795)" This reverts commit d9879d80.
-
Marc Zahn authored
* Add Debian Jessie notes * Add installation notes for Debian Jessie
-
Matthew Mosesohn authored
-
- Oct 15, 2017
-
-
Matthew Mosesohn authored
* Disable basic and token auth by default * Add recommended security params * allow basic auth to fail in tests * Enable TLS authentication for kubelet
-
- Oct 14, 2017
-
-
Matthew Mosesohn authored
In 1.8, the Node authorization mode should be listed first to allow kubelet to access secrets. This seems to only impact environments with cloudprovider enabled.
-
- Oct 11, 2017
-
-
Vijay Katam authored
* Rename dns_server to dnsmasq_dns_server so that it includes role prefix as the var name is generic and conflicts when integrating with existing ansible automation. * Enable selinux state to be configurable with new var preinstall_selinux_state
-
Matthew Mosesohn authored
* Set no_proxy to all local ips * Use proxy settings on all necessary tasks
-
- Oct 05, 2017
-
-
Matthew Mosesohn authored
* Upgrade to kubernetes v1.8.0 hyperkube no longer contains rsync, so now use cp * Enable node authorization mode * change kube-proxy cert group name
-
- Oct 03, 2017
-
-
Maxim Krasilnikov authored
-
- Sep 29, 2017
-
-
shiftky authored
-
- Sep 26, 2017
-
-
Matthew Mosesohn authored
* Enable upgrade to kubeadm * fix kubedns upgrade * try upgrade route * use init/upgrade strategy for kubeadm and ignore kubedns svc * Use bin_dir for kubeadm * delete more secrets * fix waiting for terminating pods * Manually enforce kube-proxy for kubeadm deploy * remove proxy. update to kubeadm 1.8.0rc1
-
- Sep 25, 2017
-
-
Maxim Krasilnikov authored
-
Junaid Ali authored
Signed-off-by:
Junaid Ali <junaidali.yahya@gmail.com>
-
- Sep 22, 2017
-
-
Jiri Stransky authored
This follows pull request #1677, adding the cgroup-driver autodetection also for kubeadm way of deploying. Info about this and the possibility to override is added to the docs.
-
- Sep 18, 2017
-
-
Matthew Mosesohn authored
New files: /etc/kubernetes/admin.conf /root/.kube/config $GITDIR/artifacts/{kubectl,admin.conf} Optional method to download kubectl and admin.conf if kubeconfig_lcoalhost is set to true (default false)
-
- Sep 11, 2017
-
-
Matthew Mosesohn authored
-
- Sep 10, 2017
-
-
Matthew Mosesohn authored
* Add kube dashboard, enabled by default Also add rbac role for kube user * Update main.yml
-
- Sep 06, 2017
-
-
Matthew Mosesohn authored
Removed unnecessary root user
-
- Aug 30, 2017
-
-
Maxim Krasilnikov authored
* Added update CA trust step for etcd and kube/secrets roles * Added load_balancer_domain_name to certificate alt names if defined. Reset CA's in RedHat os. * Rename kube-cluster-ca.crt to vault-ca.crt, we need separated CA`s for vault, etcd and kube. * Vault role refactoring, remove optional cert vault auth because not not used and worked. Create separate CA`s fro vault and etcd. * Fixed different certificates set for vault cert_managment * Update doc/vault.md * Fixed condition create vault CA, wrong group * Fixed missing etcd_cert_path mount for rkt deployment type. Distribute vault roles for all vault hosts * Removed wrong when condition in create etcd role vault tasks.
-
- Aug 25, 2017
-
-
Chad Swenson authored
* Updates Controller Manager/Kubelet with Flannel's required configuration for CNI * Removes old Flannel installation * Install CNI enabled Flannel DaemonSet/ConfigMap/CNI bins and config (with portmap plugin) on host * Uses RBAC if enabled * Fixed an issue that could occur if br_netfilter is not a module and net.bridge.bridge-nf-call-iptables sysctl was not set
-
Hassan Zamani authored
-
- Aug 21, 2017
-
-
Matthew Mosesohn authored
-
- Aug 20, 2017
-
-
Vijay Katam authored
-
- Aug 14, 2017
-
-
Joseph Heck authored
Minor grammar fixes
-
- Aug 01, 2017
- Jul 31, 2017
- Jul 28, 2017
-
-
email authored
-
- Jul 27, 2017