2d09444809
fixes #158 : remove redundant --api-servers argument in systemd config
2017-04-27 15:49:32 +05:30
77cc14e86a
Add Authentication to etcd configuration
...
Added two flags needed to activate client and peer authentication in etcd
2017-04-12 05:51:53 -04:00
d81abdbcf1
Move certificate and private-key away from /var/run
...
It is cleared out at reboot.
It appears that only the file-name part of --tls-cert-file /
--tls-private-key-file is used and that the path is taken from
--cert-dir (which defaults to /var/run/kubernetes) so to make the path
stick we also add a --cert-dir
2017-04-12 05:51:28 -04:00
c32977f361
Update kubectl to 1.6.0 release
...
Kubectl 1.6.0 has now been fully released https://github.com/kubernetes/kubernetes/releases/tag/v1.6.0
2017-03-31 16:21:40 +02:00
450709e996
fix formatting of bootstrap token generation
2017-03-29 23:38:45 +02:00
610099af09
Remove quotes from audit log, signing key args
2017-03-26 21:08:01 -07:00
e6459ccbd5
Fix typo
2017-03-26 19:34:43 -07:00
69f4ecfa82
clean up formatting
2017-03-25 20:23:14 -07:00
180596398e
clean up docs
2017-03-25 19:27:49 -07:00
aba8471494
fix logging link
2017-03-25 19:22:31 -07:00
4d0647851a
fix broken link
2017-03-25 19:06:38 -07:00
f49493d286
doc clean up and basic formatting improvements
2017-03-25 18:52:58 -07:00
8022f4077b
remove AWS support
2017-03-25 18:06:03 -07:00
333aefba3f
remove AWS support
2017-03-25 14:22:39 -07:00
4989117cf2
remove AWS support
2017-03-25 14:20:31 -07:00
818501707e
update to Kubernetes 1.6
2017-03-25 12:07:21 -07:00
2d5f895aac
update to Kubernetes 1.6
2017-03-25 12:04:05 -07:00
81cc65cc27
update to Kubernetes 1.6
2017-03-25 11:53:08 -07:00
ebe2845c17
update to Kubernetes 1.6
2017-03-25 11:50:26 -07:00
c01f16bc3e
update to Kubernetes 1.6
2017-03-25 11:45:32 -07:00
f62e9c9777
update to Kubernetes 1.6
2017-03-25 11:41:26 -07:00
e9c25522a4
update to Kubernetes 1.6
2017-03-25 10:07:48 -07:00
53ee78b73e
update to Kubernetes 1.6
2017-03-25 09:58:47 -07:00
7e009610b2
update for 1.6
2017-03-25 09:44:23 -07:00
6827ce575e
make kube-dns work again
2017-03-24 08:31:17 -07:00
c72849f7e3
document the CSR approve flow
2017-03-24 04:24:53 -07:00
f7532568be
document the RBAC role binding process for TLS bootstrapping
2017-03-24 04:16:29 -07:00
94cbe1e683
add docs on using custom kubeconfigs
2017-03-24 04:08:34 -07:00
99d342cc3c
add authentication lab
2017-03-23 23:08:54 -07:00
5a5314f3c9
clean up pod cidr firewall-rule
2017-03-23 19:51:39 -07:00
c77ad0a6ba
use RBAC authz
2017-03-23 19:48:53 -07:00
3b1700d85e
update to Kubernetes 1.6
2017-03-23 19:48:14 -07:00
b7ae204c86
Make the AWS region configurable
2017-03-23 08:49:54 -07:00
68dc4507c2
adding filter to aws describe-instances command to filter by the vpc-id
2017-03-23 08:48:52 -07:00
4ad918e7c6
FIX #72 for LoadBalancer creation on AWS
...
kube-controller-manager and kube-apiserver service unit files are missing
one option --cloud-provider=aws parameter, which is creating problem while
creating ELB on AWS when type: LoadBalancer is provided in service YAML file.
This commit fixes that, issue
2017-03-23 08:48:23 -07:00
e465ee81f1
Node details to run client commands from
...
docs/06.kubectl.md does not instruct from which node those commands must be run.
The previous modules does explain that. For a newbie its helpful to tell them
from which node they must run commands of doc/06-kubectl.md.
This PR has a minor update about that information.
2017-03-23 08:48:23 -07:00
5c49323835
Add permissions to nonresourcepaths to admin and kubelet
2017-03-23 08:47:49 -07:00
09a5f05eb6
add kubernetes.default to kubernetes-csr.json hosts
2017-03-23 08:44:35 -07:00
d3cd897b08
Add firewall rule to allow pods access to PodCIDR
...
This fixes issue #88 to allow pods access to PodCIDR such as the case of
DNS. When pods come up with an IP address in the cluster CIDR range,
they cannot access kubedns without a firewall rule to enable it. This
would also prevent pods from accessing each other depending on the
application.
2017-03-23 08:44:02 -07:00
a759be0db3
More nuance in etcd isolation recommendation
...
Clarify that while running etcd on a separate set of machine is a good idea, it isn't tested.
2017-03-23 08:43:29 -07:00
cb6564a013
fix kubernetes version number in README
2017-03-23 08:42:42 -07:00
f6e72b50db
Updating instance images for Google Cloud Engine
...
Updating to newer images
2017-03-23 08:42:19 -07:00
d53aca31a5
upgrade to Kubernetes v1.5.1 and ETCD v3.0.15
2017-02-25 09:20:51 -08:00
fa9972740b
FIX #111
...
JQ does not work untill output format is JSON. Docs has been fixed
2017-02-25 09:17:34 -08:00
4d7b87927f
TLC => TLS
2017-02-25 09:16:00 -08:00
753e71bac8
Note that all replicas of a component must share the same certificate.
2016-11-18 18:16:00 -08:00
26ff21f9d0
Replaced deprecated flag --health-check with the new equivalent --http-health-check=kube-apiserver-check
2016-11-18 18:15:33 -08:00
0450e2b3b7
update kube-dns add-on from v19 to v20
2016-10-12 12:29:09 -07:00
e7feed75a3
Update 01-infrastructure-gcp.md
2016-10-03 09:32:17 -04:00
bda65211ee
Update 07-network.md
2016-10-01 08:25:24 -07:00
Prasanna Santhanam