c72849f7e3
document the CSR approve flow
2017-03-24 04:24:53 -07:00
f7532568be
document the RBAC role binding process for TLS bootstrapping
2017-03-24 04:16:29 -07:00
94cbe1e683
add docs on using custom kubeconfigs
2017-03-24 04:08:34 -07:00
99d342cc3c
add authentication lab
2017-03-23 23:08:54 -07:00
5a5314f3c9
clean up pod cidr firewall-rule
2017-03-23 19:51:39 -07:00
c77ad0a6ba
use RBAC authz
2017-03-23 19:48:53 -07:00
3b1700d85e
update to Kubernetes 1.6
2017-03-23 19:48:14 -07:00
b7ae204c86
Make the AWS region configurable
2017-03-23 08:49:54 -07:00
68dc4507c2
adding filter to aws describe-instances command to filter by the vpc-id
2017-03-23 08:48:52 -07:00
4ad918e7c6
FIX #72 for LoadBalancer creation on AWS
...
kube-controller-manager and kube-apiserver service unit files are missing
one option --cloud-provider=aws parameter, which is creating problem while
creating ELB on AWS when type: LoadBalancer is provided in service YAML file.
This commit fixes that, issue
2017-03-23 08:48:23 -07:00
e465ee81f1
Node details to run client commands from
...
docs/06.kubectl.md does not instruct from which node those commands must be run.
The previous modules does explain that. For a newbie its helpful to tell them
from which node they must run commands of doc/06-kubectl.md.
This PR has a minor update about that information.
2017-03-23 08:48:23 -07:00
5c49323835
Add permissions to nonresourcepaths to admin and kubelet
2017-03-23 08:47:49 -07:00
09a5f05eb6
add kubernetes.default to kubernetes-csr.json hosts
2017-03-23 08:44:35 -07:00
d3cd897b08
Add firewall rule to allow pods access to PodCIDR
...
This fixes issue #88 to allow pods access to PodCIDR such as the case of
DNS. When pods come up with an IP address in the cluster CIDR range,
they cannot access kubedns without a firewall rule to enable it. This
would also prevent pods from accessing each other depending on the
application.
2017-03-23 08:44:02 -07:00
a759be0db3
More nuance in etcd isolation recommendation
...
Clarify that while running etcd on a separate set of machine is a good idea, it isn't tested.
2017-03-23 08:43:29 -07:00
cb6564a013
fix kubernetes version number in README
2017-03-23 08:42:42 -07:00
f6e72b50db
Updating instance images for Google Cloud Engine
...
Updating to newer images
2017-03-23 08:42:19 -07:00
d53aca31a5
upgrade to Kubernetes v1.5.1 and ETCD v3.0.15
2017-02-25 09:20:51 -08:00
fa9972740b
FIX #111
...
JQ does not work untill output format is JSON. Docs has been fixed
2017-02-25 09:17:34 -08:00
4d7b87927f
TLC => TLS
2017-02-25 09:16:00 -08:00
753e71bac8
Note that all replicas of a component must share the same certificate.
2016-11-18 18:16:00 -08:00
26ff21f9d0
Replaced deprecated flag --health-check with the new equivalent --http-health-check=kube-apiserver-check
2016-11-18 18:15:33 -08:00
0450e2b3b7
update kube-dns add-on from v19 to v20
2016-10-12 12:29:09 -07:00
e7feed75a3
Update 01-infrastructure-gcp.md
2016-10-03 09:32:17 -04:00
bda65211ee
Update 07-network.md
2016-10-01 08:25:24 -07:00
5d8a0441ac
Add config/zone cmds to the doc
2016-10-01 08:25:11 -07:00
0b5282165a
remove duplication
2016-10-01 08:24:41 -07:00
599f45e2b1
open traffic between same security group
2016-09-27 06:58:21 -07:00
6cfc20e96e
update etcd version
2016-09-27 06:23:14 -07:00
f2370f3578
etcd blocks when using type notify
2016-09-27 05:55:26 -07:00
b748f9d445
install etcd on the controller nodes
2016-09-27 05:50:33 -07:00
6a39adea4e
clean up docs
2016-09-27 05:40:56 -07:00
b3ce3ca14f
streamline deletion of GCE resources
2016-09-27 05:38:09 -07:00
4f3f389468
streamline deletion of GCE resources
2016-09-27 05:37:22 -07:00
f1981dad05
install etcd on the controller nodes
2016-09-27 05:31:57 -07:00
be84590c87
update to Kubernetes 1.4
2016-09-27 05:25:38 -07:00
7fe980da3e
Merge pull request #60 from mydharma/patch-1
...
jq -j is not a valid option. I think the author meant jq -r
2016-09-15 20:25:32 -07:00
90367ed72c
Merge pull request #61 from thejsj/fix-typo
...
Fix typo
2016-09-15 20:25:18 -07:00
720cdab53c
Fix typo
2016-09-14 22:41:42 -07:00
8ec636271d
jq -j is not a valid option. I think the author meant jq -r
2016-09-14 19:37:20 -07:00
5d48fa8132
Merge pull request #54 from watkinsv-hp/clarify_sections
...
Add Platforms Subheading
2016-09-12 17:02:08 -07:00
87dcab3644
Add Platforms Subheading
...
When reading over the Labs subheading, it looked like there were two
parts to the labs. This breaks the Labs subheading up into supported
Platforms and a list of the Labs.
2016-09-12 11:57:12 -06:00
e2587a74c7
add note that EC2 is supported
2016-09-12 07:10:34 -07:00
f7e0aee549
add note regarding production quality
2016-09-11 13:37:41 -07:00
b142aa4550
add note regarding production quality
2016-09-11 13:32:24 -07:00
b239d709f7
clean up docs
2016-09-11 08:22:09 -07:00
87ae2e1578
update ssh login info
2016-09-11 08:20:43 -07:00
7e0087411e
document assumptions
2016-09-11 08:02:52 -07:00
d922910910
document assumptions
2016-09-11 07:59:53 -07:00
3f648ded70
add jq requirement
2016-09-11 07:54:51 -07:00
Kelsey Hightower