37981f9fb1
* Require Webhook authorization to the Kubelet * Switch apiserver X509 client cert org to systems:masters to grant the apiserver admin and satisfy the authorization requirement. kubectl commands like logs or exec that have the apiserver make requests of a kubelet continue to work as before * https://kubernetes.io/docs/admin/kubelet-authentication-authorization/ * https://github.com/poseidon/typhoon/issues/215 |
||
---|---|---|
.. | ||
cloudinit | ||
workers | ||
LICENSE | ||
README.md | ||
ami.tf | ||
apiserver.tf | ||
bootkube.tf | ||
controllers.tf | ||
network.tf | ||
outputs.tf | ||
require.tf | ||
security.tf | ||
ssh.tf | ||
variables.tf | ||
workers.tf |
README.md
Typhoon
Typhoon is a minimal and free Kubernetes distribution.
- Minimal, stable base Kubernetes distribution
- Declarative infrastructure and configuration
- Free (freedom and cost) and privacy-respecting
- Practical for labs, datacenters, and clouds
Typhoon distributes upstream Kubernetes, architectural conventions, and cluster addons, much like a GNU/Linux distribution provides the Linux kernel and userspace components.
Features
- Kubernetes v1.10.2 (upstream, via kubernetes-incubator/bootkube)
- Single or multi-master, workloads isolated on workers, Calico or flannel networking
- On-cluster etcd with TLS, RBAC-enabled, network policy
- Advanced features like worker pools
- Ready for Ingress, Prometheus, Grafana, and other optional addons
Docs
Please see the official docs and the AWS tutorial.