Jake Sanders
2576713a40
when disabled, don't create the API server's insecure port mapping
2019-05-09 11:50:59 -07:00
Kubernetes Prow Robot
0befec7fb6
Merge pull request #77447 from dekkagaijin/mip
...
disable the apiserver's insecure port by default
2019-05-07 22:14:32 -07:00
Kubernetes Prow Robot
b34d7ac0ce
Merge pull request #77458 from grayluck/agent-v2.3.0
...
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
2019-05-07 17:52:58 -07:00
yankaiz
1059a71973
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
...
Added the non-masq ranges to configure-helper.sh so that GCE clusters
will have the non-masq IP ranges aligned with GKE clusters.
2019-05-06 22:32:34 -07:00
Jake Sanders
e4d521e825
disable the apiserver insecure port by default in configure-helper
2019-05-06 19:26:57 -07:00
Jake Sanders
ff4c372eaa
ensure that kubectl works when the master insecure port is disabled
2019-05-06 19:25:41 -07:00
Yuwen Ma
b8a8bdb127
[Distroless] Convert the GCE manifests for master containers.
...
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-05-06 08:04:06 -07:00
Mark Wolters
1456979e93
Added function to create kubeconfig for addon-manager
2019-05-03 15:12:16 -07:00
Kubernetes Prow Robot
0b10d1b830
Merge pull request #77140 from dekkagaijin/glbc
...
use static token to authenticate glbc
2019-05-02 16:22:30 -07:00
Jake Sanders
8bd0b45eae
use static token to authenticate glbc
2019-05-01 22:24:48 -07:00
Ling Huang
d3fb7115ab
Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8.
2019-04-29 15:07:10 -04:00
Wojciech Tyczynski
0d77f62c02
Revert "override ETCD_SERVER with https instead http when mTLS is enabled"
2019-04-27 06:50:20 +02:00
Kubernetes Prow Robot
2c2e7a01bb
Merge pull request #76655 from SataQiu/fix-shell-cluster-20190417
...
Fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-23 23:50:04 -07:00
Kubernetes Prow Robot
06bc7e3e00
Merge pull request #76792 from dekkagaijin/insecure-port
...
add option to disable the apiserver's insecure port via env var
2019-04-23 14:02:35 -07:00
SataQiu
903c5a53b3
fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-22 11:46:45 +08:00
Jake Sanders
42fcd5eb63
remove erroneous kube-apiserver.manifest sed line
2019-04-19 17:40:28 +00:00
Kubernetes Prow Robot
e4f9d8fe3f
Merge pull request #76331 from xichengliudui/fixshellcheckfailures-17
...
Fix shellcheck failures in stage-upload.sh
2019-04-19 09:47:55 -07:00
Jake Sanders
113ab741e6
add option to set the value of the apiserver's insecure port
2019-04-18 20:35:08 +00:00
Kubernetes Prow Robot
dc2c9e8bd5
Merge pull request #74690 from wenjiaswe/etcdserverhttp
...
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-15 16:45:07 -07:00
Wenjia Zhang
80c4bccf0f
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-14 22:11:37 -07:00
Kubernetes Prow Robot
ae8a4fcb0d
Merge pull request #76352 from jpbetz/reapply-72062
...
[reapply] Perform GCE log rotation check every 5 minutes
2019-04-12 00:41:14 -07:00
aaa
9768ba9eb3
Fix shellcheck failures in stage-upload.sh
...
update pull request
update pull request
update pull request
update pull request
2019-04-12 02:42:48 -04:00
Kubernetes Prow Robot
39073f0b9f
Merge pull request #74268 from wenjiaswe/fixingNitforetcdapiservertlspath
...
fix nit for etcd_apiserver TLS path
2019-04-11 01:22:11 -07:00
Kubernetes Prow Robot
134ed2e703
Merge pull request #76353 from Random-Liu/add-cni-version-env
...
Add envs for CNI version.
2019-04-10 18:46:22 -07:00
Lantao Liu
ad5b64ca10
Add envs for CNI version.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-09 16:38:53 -07:00
Joe Betz
6297c4f750
Perform GCE log rotation check every 5 minutes
2019-04-09 16:37:38 -07:00
Pengfei Ni
1406e2b70f
Update cri-tools to v1.14.0
2019-04-08 10:59:18 +08:00
Zhen Wang
953677d7a5
Use Node-Problem-Detector v0.6.3 on GCI
2019-04-05 11:08:24 -07:00
Maciej Borsz
a0b51681c4
Revert "[Distroless] Convert the GCE manifests for master containers."
2019-04-05 12:55:14 +02:00
Kubernetes Prow Robot
1c105e1629
Merge pull request #75624 from yuwenma/gce-manifest
...
[Distroless] Convert the GCE manifests for master containers.
2019-04-04 16:21:19 -07:00
Yuwen Ma
af2659527f
[Distroless] Convert the GCE manifests for master containers.
...
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-04-04 11:16:23 -07:00
Michelle Au
d2aa8178f2
Remove alpha CRD install
2019-04-02 10:59:11 -07:00
Kubernetes Prow Robot
aa5fda22f2
Merge pull request #75269 from javier-b-perez/gce-configure
...
gce: configure: validate SA has storage scope
2019-03-19 11:06:22 -07:00
Dan Williams
bfd8ad3268
build/gci: bump CNI version to 0.7.5
2019-03-18 17:16:42 -05:00
Kubernetes Prow Robot
a213886f9c
Merge pull request #74502 from Random-Liu/collect-pod-log
...
Collect pod log in fluentd-gcp
2019-03-12 01:34:37 -07:00
Javier Pérez Hernández
e783f0bcd4
gce: configure: validate SA has storage scope
...
If the VM SA doesn't have storage scope associated, don't use the
token in the curl request or the request will fail with 403.
2019-03-11 12:04:01 -07:00
Lantao Liu
7ffa7da112
Configure logrotate for pod logs.
2019-03-08 16:45:41 -08:00
Tim Allclair
63f61a6714
Migrate RuntimeClass to internal API
2019-03-07 11:07:54 -08:00
Kubernetes Prow Robot
ab7a48d796
Merge pull request #70036 from pbarker/audit-etoe
...
dynamic audit e2e test
2019-03-06 17:58:58 -08:00
Kubernetes Prow Robot
45e5f6053b
Merge pull request #74424 from liggitt/drop-k8s-io-node-labels
...
Clean up self-set node labels
2019-03-06 08:24:26 -08:00
Patrick Barker
67a245ae61
remove unneeded println
2019-03-05 14:38:58 -07:00
Patrick Barker
45d715cdc6
adds dynamic audit e2e test
2019-03-05 14:38:58 -07:00
Joe Betz
add956f00f
Revert "Perform GCE log rotation check every 5 minutes"
...
This reverts commit 1ba05d51a6
.
2019-03-04 14:10:20 -08:00
Zhen Wang
efa96f7eb8
allows configuring NPD release and flags on GCI and add cluster e2e test
2019-02-26 21:21:54 -08:00
Jordan Liggitt
e1db43ad1b
Label old nodes with legacy addon labels
2019-02-26 11:43:10 -05:00
SataQiu
9cda80e836
fix shellcheck lint errors in cluster and hack scripts
2019-02-24 11:15:35 +08:00
Xiang Dai
36065c6dd7
delete all duplicate empty blanks
...
Signed-off-by: Xiang Dai <764524258@qq.com>
2019-02-23 10:28:04 +08:00
Wenjia Zhang
b9af5b5112
fix nit for etcd_apiserver TLS path
2019-02-19 11:19:49 -08:00
Javier Pérez Hernández
708d7df561
k8s: gci: configure: add token to curl calls
...
Modify script to use curl to get metadata and Service Account token.
When the SA doesn't have 'Storage Read' scope, it can only read
public files.
2019-02-15 11:00:35 -08:00
Jeff Grafton
e216995ef1
Update repo-infra, bazel-skylib, rules_docker, and rules_go dependencies
...
Also require bazel 0.18.0+
2019-02-12 17:55:10 -08:00