5 Commits

Author	SHA1	Message	Date
Dalton Hubble	5eb4078d68	Add docker/default seccomp to control plane and addons ... * Annotate pods, deployments, and daemonsets to start containers with the Docker runtime's default seccomp profile * Overrides Kubernetes default behavior which started containers with seccomp=unconfined * https://docs.docker.com/engine/security/seccomp/#pass-a-profile-for-a-container	2018-10-16 20:07:29 -07:00
Dalton Hubble	2c10d24113	addons: Switch to apps/v1 workload APIs ... * Deployments now belong to the apps/v1 API group * DaemonSets now belong to the apps/v1 API group * RBAC types now belong to the rbac.authorization.k8s.io/v1 API group	2018-02-10 23:56:31 -08:00
Dalton Hubble	064ce83f25	addons: Update Prometheus to v2.1.0 ... * Change service discovery to relabel jobs to align with rule expressions in upstream examples * Use a separate service account for prometheus instead of granting roles to the namespace's default * Use a separate service account for node-exporter * Update node-exporter and kube-state-metrics exporters	2018-01-27 21:00:15 -08:00
Dalton Hubble	b608f9c615	addons: Use service endpoints to scrape node-exporter	2017-10-24 22:59:00 -07:00
Dalton Hubble	d046d45769	addons: Include Prometheus and node-exporter manifests	2017-10-24 22:58:59 -07:00