- Jan 03, 2023
-
-
Florian Ruynat authored
-
mKlaris authored
-
- Dec 30, 2022
-
-
Shelming.Song authored
* optimize cgroups settings for node reserved * fix * set cgroup slice for multi container engine * set cgroup slice for crio * add reserved cgroups variables to sample files * Compatible with cgroup path for different container managers * add cgroups doc * fix markdown
-
- Dec 28, 2022
-
-
Marijn van der Giesen authored
-
lijin-union authored
-
- Dec 19, 2022
-
-
janaurka authored
* feat(): Add wireguard backend to flannel cni As described in the flannel docs: https://github.com/flannel-io/flannel/blob/master/Documentation/backends.md#wireguard This does not support optional configuration methods like: - setting a psk (will be autogenerated by default) - chang listening ports - change mode (defaults to 'separate') - change PersistentKeepaliveInterval (defaults to 0) * Add supported backends to flannel docs * Fix markdown in docs
-
- Dec 14, 2022
-
-
Hassan Abouelela authored
Fix a broken link to KEP 0030 in the dns-stack docs, which has been merged into KEP 1024.
-
- Dec 02, 2022
-
-
Wojciech Marusiak authored
There is a wrong directory path to all.yml and vsphere.yml. The wrong directory is `inventory/sample/group_vars/all.yml` and `inventory/sample/group_vars/all/vsphere.yml` which should be `inventory/sample/group_vars/all/all.yml` and `inventory/sample/group_vars/all/vsphere.yml`.
-
- Nov 18, 2022
-
-
ERIK authored
Signed-off-by:
bo.jiang <bo.jiang@daocloud.io> Signed-off-by:
bo.jiang <bo.jiang@daocloud.io>
-
- Nov 16, 2022
-
-
ERIK authored
Signed-off-by:
bo.jiang <bo.jiang@daocloud.io> Signed-off-by:
bo.jiang <bo.jiang@daocloud.io>
-
- Nov 14, 2022
-
-
Kenichi Omichi authored
If clicking the links, we faced NotFound page at the time. This fixes the issue by specifying full pathes instead.
-
Kenichi Omichi authored
This makes it more readable by explaining clearly what files are necessary to be downloaded in advance from online environment.
-
- Nov 10, 2022
-
-
cleverhu authored
Signed-off-by:
cleverhu <shouping.hu@daocloud.io> Signed-off-by:
cleverhu <shouping.hu@daocloud.io>
-
- Nov 09, 2022
-
-
Ilya Margolin authored
-
- Nov 08, 2022
-
-
Ilya Margolin authored
by setting a default runtime spec with a patch for RLIMIT_NOFILE. - Introduces containerd_base_runtime_spec_rlimit_nofile. - Generates base_runtime_spec on-the-fly, to use the containerd version of the node.
-
emiran-orange authored
* Ability to define options for DNS upstream servers * Doc and sample inventory vars
-
Olivier Lemasle authored
- Update and re-work the documentation: - Update links - Fix formatting (especially for lists) - Remove documentation about `useAlphaApi`, a flag only for k8s versions < v1.10 - Attempt to clarify the doc - Update to version 1.5.0 - Remove PodSecurityPolicy (deprecated in k8s v1.21+) - Update ClusterRole following upstream (cf https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/pull/292) - Add nodeSelector to DaemonSet (following upstream)
-
- Oct 31, 2022
-
-
lijin-union authored
-
- Oct 28, 2022
-
-
biqiang Wu authored
Signed-off-by:
dcwbq <biqiang.wu@daocloud.io> Signed-off-by:
dcwbq <biqiang.wu@daocloud.io>
-
- Oct 26, 2022
-
-
William Turner authored
* Fix inconsistent handling of admission plugin list * Adjust hardening doc with the normalized admission plugin list * Add pre-check for admission plugins format change * Ignore checking admission plugins value when variable is not defined
-
- Oct 24, 2022
-
-
杨刚 authored
-
- Oct 18, 2022
-
-
Kay Yan authored
-
- Oct 13, 2022
-
-
Kay Yan authored
-
Kenichi Omichi authored
When trying to add a hardening CI job by copying configuration from hardening.md, yamllint CI job deleted invalid format. This fixes it for maintaining the CI job.
-
- Oct 07, 2022
-
-
Kenichi Omichi authored
To block merging pull requests which contain typo automatically.
-
- Sep 30, 2022
-
-
Kenichi Omichi authored
We are maintaining version info on the README.md, and it is not necessary to maintain that on setting-up-your-first-cluster.md
-
- Sep 26, 2022
-
- Sep 25, 2022
-
-
Kevin Huang authored
feat(docs/openstack.md): Put Additional step needed when using calico or kube-router in own section (#9320)
-
- Sep 23, 2022
-
-
Florian Ruynat authored
-
Ilya Margolin authored
and supply a default runtime spec.
-
Emin AKTAS authored
Signed-off-by:
eminaktas <eminaktas34@gmail.com> Signed-off-by:
eminaktas <eminaktas34@gmail.com>
-
- Sep 19, 2022
-
-
Necatican Yıldırım authored
* Drop support for Cilium < 1.10 Signed-off-by:
necatican <necaticanyildirim@gmail.com> * Synchronize Cilium templates for 1.11.7 Signed-off-by:
necatican <contact@necatican.com> * Set Cilium v1.12.1 as the default version Signed-off-by:
necatican <contact@necatican.com> Signed-off-by:
necatican <necaticanyildirim@gmail.com> Signed-off-by:
necatican <contact@necatican.com>
-
- Sep 15, 2022
-
-
Mahdi Abbasi authored
-
lijin-union authored
-
Kay Yan authored
-
- Sep 13, 2022
-
-
Ho Kim authored
* Add optional NAT support in calico router mode * Add a blank line in front of lists * Remove mutual exclusivity: NAT and router mode * Ignore router mode from NAT * Update calico doc
-
- Sep 05, 2022
-
-
Kay Yan authored
-
- Sep 04, 2022
-
-
Michael Schmitz authored
-
- Aug 31, 2022
-
-
Cristian Calin authored
-
- Aug 30, 2022
-
-
Alessio Greggi authored
* feat: add kubelet systemd service hardening option * refactor: move variable name to kubelet_secure_addresses Co-authored-by:
Cristian Calin <6627509+cristicalin@users.noreply.github.com> * docs: add diagram about kubelet_secure_addresses variable Co-authored-by:
Cristian Calin <6627509+cristicalin@users.noreply.github.com>
-