6609858e67
Enable kubectl portfw on workers, fixes #78
2017-07-12 05:56:57 -06:00
4d442675ba
Update 05-kubernetes-controller.md
...
there is a bug in Kubernetes 1.6.1 that causes an error when validating the kubernetes environment and etcd. (https://github.com/kubernetes/kubernetes/pull/39716 ) I found that using the 1.7.0 version I did not get this error. Affects the README, this file and the client configuration (moving to 1.7.0 to match)
2017-07-12 05:55:20 -06:00
0f826cf436
Update 07-kubectl.md
...
as per my other pull request, using 1.7.0 fixes an error with etcd configuration on the Kubernetes cluster.
2017-07-12 05:54:56 -06:00
87c0662652
Grammar fix for 06-kubernetes-worker.md
2017-07-12 05:54:19 -06:00
bdeab26587
Add missing additional IP range in firewall validation output
2017-06-30 22:30:22 -04:00
4749e604a3
Update range for health check
...
This new IP range is listed on the following docs:
https://cloud.google.com/compute/docs/load-balancing/health-checks
https://cloud.google.com/compute/docs/load-balancing/http/
2017-06-02 07:57:17 -07:00
bf66a60585
Update 05-kubernetes-controller.md
...
Unless the region is explicitly passed, I get the error:
```
ERROR: (gcloud.compute.target-pools.create) Some requests did not succeed:
- Invalid value for field 'region': 'us-central1-b'. Unknown region.
```
2017-06-02 07:56:58 -07:00
2983b28f13
Use gcloud compute scp instead of copy-files
2017-06-02 07:56:05 -07:00
1c53942442
Bump kubernetes to v1.6.1
2017-05-01 21:59:56 -07:00
0c37c60b72
Add missing backslash
2017-05-01 21:59:33 -07:00
8ce3a545c4
Update 01-infrastructure-gcp.md, fix #153
2017-05-01 21:59:33 -07:00
980059abab
Fix typo in 03-auth-configs.md
2017-05-01 21:59:16 -07:00
77cc14e86a
Add Authentication to etcd configuration
...
Added two flags needed to activate client and peer authentication in etcd
2017-04-12 05:51:53 -04:00
d81abdbcf1
Move certificate and private-key away from /var/run
...
It is cleared out at reboot.
It appears that only the file-name part of --tls-cert-file /
--tls-private-key-file is used and that the path is taken from
--cert-dir (which defaults to /var/run/kubernetes) so to make the path
stick we also add a --cert-dir
2017-04-12 05:51:28 -04:00
c32977f361
Update kubectl to 1.6.0 release
...
Kubectl 1.6.0 has now been fully released https://github.com/kubernetes/kubernetes/releases/tag/v1.6.0
2017-03-31 16:21:40 +02:00
450709e996
fix formatting of bootstrap token generation
2017-03-29 23:38:45 +02:00
610099af09
Remove quotes from audit log, signing key args
2017-03-26 21:08:01 -07:00
e6459ccbd5
Fix typo
2017-03-26 19:34:43 -07:00
69f4ecfa82
clean up formatting
2017-03-25 20:23:14 -07:00
180596398e
clean up docs
2017-03-25 19:27:49 -07:00
f49493d286
doc clean up and basic formatting improvements
2017-03-25 18:52:58 -07:00
8022f4077b
remove AWS support
2017-03-25 18:06:03 -07:00
4989117cf2
remove AWS support
2017-03-25 14:20:31 -07:00
2d5f895aac
update to Kubernetes 1.6
2017-03-25 12:04:05 -07:00
81cc65cc27
update to Kubernetes 1.6
2017-03-25 11:53:08 -07:00
ebe2845c17
update to Kubernetes 1.6
2017-03-25 11:50:26 -07:00
c01f16bc3e
update to Kubernetes 1.6
2017-03-25 11:45:32 -07:00
f62e9c9777
update to Kubernetes 1.6
2017-03-25 11:41:26 -07:00
e9c25522a4
update to Kubernetes 1.6
2017-03-25 10:07:48 -07:00
53ee78b73e
update to Kubernetes 1.6
2017-03-25 09:58:47 -07:00
7e009610b2
update for 1.6
2017-03-25 09:44:23 -07:00
6827ce575e
make kube-dns work again
2017-03-24 08:31:17 -07:00
c72849f7e3
document the CSR approve flow
2017-03-24 04:24:53 -07:00
f7532568be
document the RBAC role binding process for TLS bootstrapping
2017-03-24 04:16:29 -07:00
94cbe1e683
add docs on using custom kubeconfigs
2017-03-24 04:08:34 -07:00
99d342cc3c
add authentication lab
2017-03-23 23:08:54 -07:00
5a5314f3c9
clean up pod cidr firewall-rule
2017-03-23 19:51:39 -07:00
3b1700d85e
update to Kubernetes 1.6
2017-03-23 19:48:14 -07:00
b7ae204c86
Make the AWS region configurable
2017-03-23 08:49:54 -07:00
68dc4507c2
adding filter to aws describe-instances command to filter by the vpc-id
2017-03-23 08:48:52 -07:00
4ad918e7c6
FIX #72 for LoadBalancer creation on AWS
...
kube-controller-manager and kube-apiserver service unit files are missing
one option --cloud-provider=aws parameter, which is creating problem while
creating ELB on AWS when type: LoadBalancer is provided in service YAML file.
This commit fixes that, issue
2017-03-23 08:48:23 -07:00
e465ee81f1
Node details to run client commands from
...
docs/06.kubectl.md does not instruct from which node those commands must be run.
The previous modules does explain that. For a newbie its helpful to tell them
from which node they must run commands of doc/06-kubectl.md.
This PR has a minor update about that information.
2017-03-23 08:48:23 -07:00
09a5f05eb6
add kubernetes.default to kubernetes-csr.json hosts
2017-03-23 08:44:35 -07:00
d3cd897b08
Add firewall rule to allow pods access to PodCIDR
...
This fixes issue #88 to allow pods access to PodCIDR such as the case of
DNS. When pods come up with an IP address in the cluster CIDR range,
they cannot access kubedns without a firewall rule to enable it. This
would also prevent pods from accessing each other depending on the
application.
2017-03-23 08:44:02 -07:00
a759be0db3
More nuance in etcd isolation recommendation
...
Clarify that while running etcd on a separate set of machine is a good idea, it isn't tested.
2017-03-23 08:43:29 -07:00
f6e72b50db
Updating instance images for Google Cloud Engine
...
Updating to newer images
2017-03-23 08:42:19 -07:00
d53aca31a5
upgrade to Kubernetes v1.5.1 and ETCD v3.0.15
2017-02-25 09:20:51 -08:00
4d7b87927f
TLC => TLS
2017-02-25 09:16:00 -08:00
753e71bac8
Note that all replicas of a component must share the same certificate.
2016-11-18 18:16:00 -08:00
26ff21f9d0
Replaced deprecated flag --health-check with the new equivalent --http-health-check=kube-apiserver-check
2016-11-18 18:15:33 -08:00
Abraham Ingersoll