- Sep 08, 2017
-
-
Matthew Mosesohn authored
* Clean up debug in check apiserver test * Change password generation for kube_user Special characters are not allowed in known_users.csv file
-
- Sep 06, 2017
-
-
Matthew Mosesohn authored
Removed unnecessary root user
-
Maxim Krasilnikov authored
-
- Aug 21, 2017
-
-
Matthew Mosesohn authored
Change kubelet deploy mode to host Enable cri and qos per cgroup for kubelet Update CoreOS images Add upgrade hook for switching from kubelet deployment from docker to host. Bump machine type for ubuntu-rkt-sep
-
- Aug 20, 2017
-
-
Kevin Lefevre authored
-
- Jul 31, 2017
-
-
nico authored
Closes #1228 pods is default enforcement see https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ add update
-
- Jul 26, 2017
-
-
timtoum authored
* Enable weave seed mode for kubespray * fix task Weave seed | Set peers if existing peers * fix mac address variabilisation * fix default values * fix include seed condition * change weave var to default values * fix Set peers if existing peers
-
- Jul 25, 2017
-
-
Hassan Zamani authored
-
- Jul 14, 2017
-
-
Dann Bohn authored
-
- Jul 11, 2017
-
-
Delfer authored
-
- Jul 07, 2017
-
-
Julian Poschmann authored
-
- Jul 06, 2017
-
-
Vladimir Kozyrev authored
-
- Jun 27, 2017
-
-
gdmelloatpoints authored
-
- Jun 26, 2017
-
-
gdmelloatpoints authored
Make etcd_backup_prefix configurable. Ensures that backups can be stored on a different location other than ${HOST}/var/backups, say an EBS volume on AWS.
-
jwfang authored
-
- Jun 23, 2017
-
-
AtzeDeVries authored
-
- Jun 20, 2017
-
-
AtzeDeVries authored
-
- Jun 14, 2017
-
-
Gregory Storme authored
-
- May 23, 2017
-
-
zouyee authored
-
- May 12, 2017
-
-
Spencer Smith authored
-
- Apr 12, 2017
-
-
Vincent Schwarzer authored
-
- Apr 05, 2017
-
-
Matthew Mosesohn authored
-
- Mar 17, 2017
-
-
Matthew Mosesohn authored
-
Aleksandr Didenko authored
By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
-
- Mar 14, 2017
-
-
Sergii Golovatiuk authored
Closes: #1135 Closes: #1026 Signed-off-by:
Sergii Golovatiuk <sgolovatiuk@mirantis.com>
-
Vincent Schwarzer authored
It is now possible to deactivate selected authentication methods (basic auth, token auth) inside the cluster by adding removing the required arguments to the Kube API Server and generating the secrets accordingly. The x509 authentification is currently not optional because disabling it would affect the kubectl clients deployed on the master nodes.
-
- Mar 06, 2017
-
-
Vincent Schwarzer authored
To use OpenID Connect Authentication beside deploying an OpenID Connect Identity Provider it is necesarry to pass additional arguments to the Kube API Server. These required arguments were added to the kube apiserver manifest.
-
- Feb 28, 2017
-
-
Sergii Golovatiuk authored
Operator can specify any port for kube-api (6443 default) This helps in case where some pods such as Ingress require 443 exclusively. Closes: 820 Signed-off-by:
Sergii Golovatiuk <sgolovatiuk@mirantis.com>
-
Sergii Golovatiuk authored
Closes: #1073 Signed-off-by:
Sergii Golovatiuk <sgolovatiuk@mirantis.com>
-
- Feb 27, 2017
-
-
Jan Jungnickel authored
-
- Feb 24, 2017
-
-
Sergii Golovatiuk authored
all.yaml shouldn't be empty otherwise ansible won't be able to merge 2 dicts. Related bug: ansible/issues/21889
-
Antoine Legrand authored
-
- Feb 23, 2017
-
-
Antoine Legrand authored
-
Antoine Legrand authored
-
Bogdan Dobrelya authored
* Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by:
Bogdan Dobrelya <bogdando@mail.ru>
-
- Feb 21, 2017
-
-
Sergii Golovatiuk authored
Docker 1.13 changes the behaviour of iptables defaults from allow to drop. This patch disables docker's iptables management as it was in Docker 1.12 [1] [1] https://github.com/docker/docker/pull/28257 Signed-off-by:
Sergii Golovatiuk <sgolovatiuk@mirantis.com>
-
- Feb 20, 2017
-
-
Matthew Mosesohn authored
-
- Feb 15, 2017
-
-
Matthew Mosesohn authored
-
- Feb 14, 2017
-
-
Hung Nguyen Viet authored
-
- Feb 10, 2017
-
-
Alexander Block authored
-