typhoon/docs/topics
Dalton Hubble 9493ed3b1d Change default iPXE kernel/initrd download from HTTP to HTTPS
* Require an iPXE-enabled network boot environment with support for
TLS downloads. PXE clients must chainload to iPXE firmware compiled
with `DOWNLOAD_PROTO_HTTPS` enabled ([crypto](https://ipxe.org/crypto))
* iPXE's pre-compiled firmware binaries do _not_ enable HTTPS. Admins
should build iPXE from source with support enabled
* Affects the Container Linux and Flatcar Linux install profiles that
pull from public downloads. No effect when cached_install=true
or using Fedora Atomic, as those download from Matchbox
* Add `download_protocol` variable. Recognizing boot firmware TLS
support is difficult in some environments, set the protocol to "http"
for the old behavior (discouraged)
2019-03-09 23:23:40 -08:00
..
faq.md Add new tutorial docs and links 2018-08-27 23:30:32 -07:00
hardware.md Change default iPXE kernel/initrd download from HTTP to HTTPS 2019-03-09 23:23:40 -08:00
maintenance.md Update Kubernetes from v1.13.3 to v1.13.4 2019-02-28 22:47:43 -08:00
performance.md Re-measure cluster provision times and document 2019-03-01 01:15:08 -08:00
security.md Fix Calico network policy docs link 2018-10-07 21:02:16 +02:00