Skip to content
  1. Mar 14, 2017
  2. Mar 06, 2017
    • Vincent Schwarzer's avatar
      Added Support for OpenID Connect Authentication · b075960e
      Vincent Schwarzer authored
      To use OpenID Connect Authentication beside deploying an OpenID Connect
      Identity Provider it is necesarry to pass additional arguments to the Kube API Server.
      These required arguments were added to the kube apiserver manifest.
      b075960e
  3. Feb 28, 2017
  4. Feb 27, 2017
  5. Feb 24, 2017
  6. Feb 23, 2017
  7. Feb 21, 2017
  8. Feb 20, 2017
  9. Feb 15, 2017
  10. Feb 14, 2017
  11. Feb 10, 2017
  12. Feb 09, 2017
  13. Feb 06, 2017
  14. Feb 04, 2017
  15. Jan 23, 2017
  16. Jan 20, 2017
    • Bogdan Dobrelya's avatar
      Drop linux capabilities and rework users/groups · cb2e5ac7
      Bogdan Dobrelya authored
      
      
      * Drop linux capabilities for unprivileged containerized
        worlkoads Kargo configures for deployments.
      * Configure required securityContext/user/group/groups for kube
        components' static manifests, etcd, calico-rr and k8s apps,
        like dnsmasq daemonset.
      * Rework cloud-init (etcd) users creation for CoreOS.
      * Fix nologin paths, adjust defaults for addusers role and ensure
        supplementary groups membership added for users.
      * Add netplug user for network plugins (yet unused by privileged
        networking containers though).
      * Grant the kube and netplug users read access for etcd certs via
        the etcd certs group.
      * Grant group read access to kube certs via the kube cert group.
      * Remove priveleged mode for calico-rr and run it under its uid/gid
        and supplementary etcd_cert group.
      * Adjust docs.
      * Align cpu/memory limits and dropped caps with added rkt support
        for control plane.
      
      Signed-off-by: default avatarBogdan Dobrelya <bogdando@mail.ru>
      cb2e5ac7
  17. Jan 15, 2017
  18. Jan 11, 2017
  19. Jan 06, 2017
  20. Jan 05, 2017
  21. Jan 03, 2017
  22. Jan 02, 2017
  23. Dec 28, 2016
  24. Dec 16, 2016
  25. Dec 14, 2016
  26. Dec 13, 2016
Loading