Dalton Hubble 51cee6d5a4 Change Container Linux etcd-member to fetch with docker:// ... * Quay has historically generated ACI signatures for images to facilitate rkt's notions of verification (it allowed authors to actually sign images, though `--trust-keys-from-https` is in use since etcd and most authors don't sign images). OCI standardization didn't adopt verification ideas and checking signatures has fallen out of favor. * Fix an issue where Quay no longer seems to be generating ACI signatures for new images (e.g. quay.io/coreos/etcd:v.3.4.4) * Don't be alarmed by rkt `--insecure-options=image`. It refers to disabling image signature checking (i.e. docker pull doesn't check signatures either) * System containers for Kubelet and bootstrap have transitioned to the docker:// transport, so there is precedent and this brings all the system containers on Container Linux controllers into alignment		2020-03-02 19:57:45 -08:00
..
controller.yaml	Change Container Linux etcd-member to fetch with docker://	2020-03-02 19:57:45 -08:00
worker.yaml	Change Kubelet /var/lib/calico mount to read-only (#643)	2020-02-18 21:40:58 -08:00