9ec8ec4afc
Secure copy etcd TLS credentials to controllers only
...
* Controllers receive etcd TLS credentials
* Controllers and workers receive a kubeconfig
2017-10-14 20:48:02 -07:00
5c1ed37ff5
Add SSH key to user "debug" during disk-install phase
...
* Avoid adding SSH authorized key for user "core" during the disk
install, so that terraform apply cannot SSH until post-install
2017-10-14 20:37:42 -07:00
e765fb310d
Allow setting custom PXE boot kernel_args on bare-metal
2017-10-14 19:39:10 -07:00
1bc25c1036
Update Kubernetes from v1.7.5 to v1.7.7
...
* Update from bootkube v0.6.2 to v0.7.0
* Use renamed terraform-render-bootkube. Renamed from
bootkube-terraform to meet Terraform Module requirements
2017-10-03 21:03:15 -07:00
2d5a4ae1ef
Update kube-dns image to address dnsmasq vulnerability
...
* https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
2017-10-02 10:27:10 -07:00
dd883988bd
Update from Calico v2.5.1 to v2.6.1
...
* Network policy improvements
* Update cni sidecar image from v1.10.0 to v1.11.0
* Lower log level in Calico CNI config from debug to info
2017-09-30 16:16:40 -07:00
e0d8917573
Add LICENSE to top-level of each module
2017-09-28 20:41:19 -07:00
77e387cf83
Add top-level README.md with module overview
2017-09-27 22:09:52 -07:00
f7dd959e9c
bare-metal: Stop including etcd-network-checkpointer
2017-09-27 18:25:20 -07:00
b62a6def23
Merge pull request #26 from poseidon/fix-nfs-issue
...
Add Wants=rpc-statd.service to Kubelet
2017-09-24 20:18:22 -07:00
1b5caef4c1
Add Wants=rpc-statd.service to Kubelet
...
* Mounting NFS exports as volumes from some NFS servers fails because
the kubelet isn't starting rpc-statd as expected. Describing pods
that are stuck creating shows rpc.statd is required for remote locking
* Starting rpc-statd.service resolves the issue and all NFS mounts
seem to be working.
* Recommended approach https://github.com/coreos/bugs/issues/2074
2017-09-24 18:23:55 -07:00
68726a2773
bare-metal: Remove support for experimental_self_hosted_etcd
...
* Transition from discouraging self-hosted etcd for bare-metal,
to removing it as an option
* See #13 and FAQ for self-hosted etcd discussion
2017-09-23 16:49:15 -07:00
777c860b1c
bare-metal: Update to using Kubernetes v1.7.5 control plane manifests
...
* bootkube-terraform module wasn't bumped for bare-metal
2017-09-23 14:04:18 -07:00
bca96bb124
bare-metal: Ues Terraform templating for Container Linux configs
...
* Template bare-metal Container Linux configs with Terraform's
(limited) template_file module. This allows rendering problems
to be identified during `terraform plan` and is favored over
using the Matchbox templating feature when the configs are
served to PXE booting nodes.
* Writes a Matchbox profile for each machine, which will be served
as-is. The effect is the same, each node gets provisioned with its
own Container Linux config.
2017-09-23 11:49:12 -07:00
7c046b6206
*: Fix Terraform fmt and comments
2017-09-17 21:43:00 -07:00
0d6410505d
bare-metal: Update kubelet.service unit to match upstream
...
* Mount host /opt/cni/bin in Kubelet to use host's CNI plugins
* Switch /var/run/kubelet-pod.uuid to /var/cache/kubelet-pod.uuid
to persist between reboots and cleanup old Kubelet pods
* Organize Kubelet flags in alphabetical order
2017-09-14 11:44:02 -07:00
64e8d207b1
Change bare-metal and GCE networking default to calico
...
* Switch networking default from flannel to calico
2017-09-12 09:16:58 -07:00
a441f5c6e0
Update Kubernetes from v1.7.3 to v1.7.5
2017-09-08 13:56:20 -07:00
1efe39d6bc
Allow MTU for bare-metal Calico to be customized
...
* Calico on bare-metal defaults to IP-in-IP encapsulation and MTU 1480
2017-09-05 19:01:18 -07:00
6ef326a872
bare-metal: Add support for Calico networking
...
* Add variable networking with "flannel" or "calico"
2017-09-01 17:52:22 -07:00
dc3ff174ea
Update Kubernetes from v1.7.1 to v1.7.3
2017-08-16 20:12:59 -07:00
fc018ffa28
Rename project and organization
2017-08-14 19:24:04 -07:00
e19517d3df
Fix the terraform fmt of configs
2017-08-12 18:26:05 -07:00
cafc58c610
Update module source from dghubble to purenetes
2017-08-07 19:30:41 -07:00
efff7497eb
digital-ocean: Join name.dns_zone for controller domain
...
* Output the DNS FQDNs, IPv4 addresses, and IPv6 addresses
2017-07-29 12:47:47 -07:00
2d33b9abe2
Update diskless PXE workers to Kubernetes v1.7.1
2017-07-27 23:11:41 -07:00
da596e06bb
Add bare-metal support for Container Linux with Matchbox
2017-07-24 23:24:12 -07:00
386dc49a58
Organize metal-worker-pxe under bare-metal
2017-07-24 21:40:05 -07:00
Dalton Hubble
bzub
Lucas Serven