6 Commits

Author	SHA1	Message	Date
Dalton Hubble	38a6bddd06	Update Calico from v3.13.1 to v3.13.3 ... * https://docs.projectcalico.org/v3.13/release-notes/	2020-04-23 23:58:02 -07:00
Dalton Hubble	d8966afdda	Remove extraneous sudo from layout asset unpacking	2020-04-22 20:28:01 -07:00
Dalton Hubble	feac94605a	Fix bootstrap mount to use shared volume SELinux label ... * Race: During initial bootstrap, static control plane pods could hang with Permission denied to bootstrap secrets. A manual fix involved restarting Kubelet, which relabeled mounts The race had no effect on subsequent reboots. * bootstrap.service runs podman with a private unshared mount of /etc/kubernetes/bootstrap-secrets which uses an SELinux MCS label with a category pair. However, bootstrap-secrets should be shared as its mounted by Docker pods kube-apiserver, kube-scheduler, and kube-controller-manager. Restarting Kubelet was a manual fix because Kubelet relabels all /etc/kubernetes * Fix bootstrap Pod to use the shared volume label, which leaves bootstrap-secrets files with SELinux level s0 without MCS * Also allow failed bootstrap.service to be re-applied. This was missing on bare-metal and AWS	2020-04-19 16:31:32 -07:00
Dalton Hubble	671eacb86e	Update Kubernetes from v1.18.1 to v1.18.2 ... * https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.18.md#changelog-since-v1181	2020-04-16 23:40:52 -07:00
Dalton Hubble	e2d4af43be	Fix Fedora CoreOS Azure MTU with Calico ... * With Calico VXLAN on Fedora CoreOS the 1450 MTU should be used	2020-04-12 23:20:04 -07:00
Dalton Hubble	5c4a3f73d5	Add support for Fedora CoreOS on Azure ... * Add `azure/fedora-coreos/kubernetes` module	2020-04-12 16:35:49 -07:00