Dalton Hubble 9493ed3b1d Change default iPXE kernel/initrd download from HTTP to HTTPS ... * Require an iPXE-enabled network boot environment with support for TLS downloads. PXE clients must chainload to iPXE firmware compiled with `DOWNLOAD_PROTO_HTTPS` enabled ([crypto](https://ipxe.org/crypto)) * iPXE's pre-compiled firmware binaries do _not_ enable HTTPS. Admins should build iPXE from source with support enabled * Affects the Container Linux and Flatcar Linux install profiles that pull from public downloads. No effect when cached_install=true or using Fedora Atomic, as those download from Matchbox * Add `download_protocol` variable. Recognizing boot firmware TLS support is difficult in some environments, set the protocol to "http" for the old behavior (discouraged)		2019-03-09 23:23:40 -08:00
..
faq.md	Add new tutorial docs and links	2018-08-27 23:30:32 -07:00
hardware.md	Change default iPXE kernel/initrd download from HTTP to HTTPS	2019-03-09 23:23:40 -08:00
maintenance.md	Update Kubernetes from v1.13.3 to v1.13.4	2019-02-28 22:47:43 -08:00
performance.md	Re-measure cluster provision times and document	2019-03-01 01:15:08 -08:00
security.md	Fix Calico network policy docs link	2018-10-07 21:02:16 +02:00