Kubernetes Prow Robot
28c877dcb6
Merge pull request #101043 from benhxy/tls-2
...
Use GKE specific configuration for kubeconfig file generation
2021-04-16 11:54:51 -07:00
Kubernetes Prow Robot
7ecd93ea1e
Merge pull request #100764 from benhxy/tls
...
Use GKE specific configuration for kube-apiserver SNI cert
2021-04-15 19:52:22 -07:00
Kubernetes Prow Robot
24350a922e
Merge pull request #101086 from enj/enj/i/auth_owners_gen
...
Prune stale entries from OWNERS files
2021-04-15 08:27:50 -07:00
Maciej Borsz
493adbada9
Do not grep for curl --help for --retry-connrefused
2021-04-14 08:32:21 +02:00
Kubernetes Prow Robot
f1c037889d
Merge pull request #100770 from avrittrohwer/configure-script-logging
...
Add configure script logging instrumentation
2021-04-13 18:06:42 -07:00
Monis Khan
91241eac9b
Prune stale entries from OWNERS files
...
Signed-off-by: Monis Khan <mok@vmware.com>
2021-04-13 20:54:50 -04:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd
...
Change file owner of /mnt/disks/master-pd/var/etcd instead of /var/etcd
2021-04-13 12:09:47 -07:00
Avritt Rohwer
d4495183c9
Add configure script logging instrumentation.
...
- Add log functions to facilitate debug logging.
- Wrap commands called in main with debug logging.
- Configure a systemd service to forward the logs to the serial port.
- Add a 'retry-forever' function to harden download steps.
- Add default value support to 'get-metadata-value' function.
- Fix some spellcheck lints.
2021-04-13 09:30:49 -07:00
Ben Hu
e3270e532c
GKE specific kubeconfig
2021-04-12 22:47:39 +00:00
Ben Hu
ccb742c43c
Resolve comments. Remove kubeconfig changes.
2021-04-12 22:39:53 +00:00
Cindy Guo
03f60f4b60
chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd
2021-04-12 08:21:01 +00:00
Kubernetes Prow Robot
a96000311f
Merge pull request #100956 from saschagrunert/cri-tools
...
Update cri-tools to v1.21.0
2021-04-12 00:35:59 -07:00
Kubernetes Prow Robot
99301e672b
Merge pull request #100436 from vinayakankugoyal/apiservernonroot
...
Fix kube-apiserver manifest.
2021-04-10 20:29:35 -07:00
Antonio Ojea
93f4727aab
gce configure containerd default_runtime_name
...
move config to v2
2021-04-11 00:48:22 +02:00
Kubernetes Prow Robot
5b038e6cff
Merge pull request #100635 from cindy52/etcd/rootless
...
Run the etcd as non-root
2021-04-09 05:19:37 -07:00
Sascha Grunert
33e0e035ea
Update cri-tools to v1.21.0
...
This updates crictl to the latest available release.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-04-09 11:05:13 +02:00
Kubernetes Prow Robot
96db2323a4
Merge pull request #100041 from vteratipally/update_npd_version
...
bump npd version to latest v0.8.7
2021-04-08 17:10:55 -07:00
Cindy Guo
9f058079d2
run etcd as nonroot
...
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
2021-04-08 20:51:45 +00:00
Ben Hu
a2d094797d
Use GKE specific configuration in startup scripts in GKE deployment.
2021-04-02 00:10:53 +00:00
Vinayak Goyal
4b3271a542
Fix kube-apiserver manifest.
2021-03-21 16:24:56 -07:00
Maciej Szulik
a3a26171d1
Run GCE unit tests as non-root
2021-03-18 12:14:24 +01:00
varsha teratipally
90983f66e4
Moving docker options to daemon.json
...
As per the new docker guidelines about customizing the options
like adding registry-mirrors, moving the options to daemon.json
2021-03-10 19:14:48 +00:00
Varsha Teratipally
82434ec818
bump npd version to latest v0.8.7
2021-03-09 22:48:27 +00:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
Vinayak Goyal
c63ff05e6d
Run kube-apiserver as non-root.
2021-02-22 20:48:16 -08:00
Kubernetes Prow Robot
874877fa44
Merge pull request #99216 from ruiwen-zhao/remove_modprobe
...
Remove modprobe configs from configure-helper
2021-02-22 17:24:32 -08:00
Cong Liu
03709c0ece
Add arm64 support for GCE node configuration
...
Fix typo
Add TODO
2021-02-19 14:22:26 -08:00
ruiwen-zhao
c053b232ba
Remove modprobe configs from configure-helper
2021-02-18 22:57:44 +00:00
Benjamin Elder
299c561b10
portably configure tempdir in configure-helper.sh
...
fixes a `make test` failure on macOS
2021-02-12 01:15:14 -08:00
Joakim Roubert
3dd3211c81
Fix shellcheck failures in cluster/gce/gci/configure.sh
...
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2021-02-10 19:23:31 +01:00
Kubernetes Prow Robot
b87ae556b3
Merge pull request #95865 from joakimr-axis/joakimr-axis_master-helper.sh
...
Fix shellcheck issues in cluster/gce/gci/master-helper.sh
2021-02-09 17:43:00 -08:00
Matthew Cary
9a7dcd36c1
Disallow local loopback for volume hosts
...
Change-Id: Ic356c3f859057153cfad97327f1938792a1a512c
2021-01-26 17:12:51 -08:00
Kubernetes Prow Robot
1a67280508
Merge pull request #98037 from vinayakankugoyal/kube-controller-manager-crp
...
Update configure-helper.sh to early exit from start-kube-controller-m…
2021-01-25 12:38:59 -08:00
Vinayak Goyal
31807032e0
Update configure-helper.sh to early exit from start-kube-controller-manager if kube-controller-manager is deployed through CRP.
2021-01-20 16:22:46 -08:00
Kubernetes Prow Robot
1bfa1d4619
Merge pull request #98055 from qingsenLi/20210114
...
fix typo and decs in apiserver_etcd_test.go
2021-01-19 18:49:58 -08:00
Kubernetes Prow Robot
176c4c7916
Merge pull request #96823 from hasheddan/cleanup-cos-doc
...
Cleanup GCI / COS README.md
2021-01-19 17:07:59 -08:00
Kubernetes Prow Robot
9da11e294f
Merge pull request #97868 from mtaufen/pki-tmpfs
...
Mount /var/lib/kubelet/pki on tmpfs
2021-01-14 10:47:04 -08:00
10177505
deb509a068
fix typo and decs
2021-01-14 16:55:45 +08:00
rajibmitra
69aae7aa6c
Update cri-tools to v1.20.0
...
Signed-off-by: rajibmitra <rajib.jolite@gmail.com>
2021-01-12 19:02:51 +05:30
Michael Taufen
9f9e235b9d
Mount /var/lib/kubelet/pki on tmpfs
...
This helps avoid some rare instances of corrupt cert files
that cause Kubelet to crash-loop after node reboots, e.g.
if Kubelet opens the file during the shutdown but is unable
to write it.
2021-01-08 18:04:35 -08:00
Kubernetes Prow Robot
8b5aeeedb4
Merge pull request #97742 from benhxy/apiserver-cipher
...
Configure --tls-cipher-suites on kube-apiserver
2021-01-08 13:44:29 -08:00
Jian Zeng
8c1971e17c
chore(gce): pass auth flags to KCM and KS
...
Pass flags `--authentication-kubeconfig` and
`--authorization-kubeconfig` to controller-manager and scheduler,
so that we could grab metrics from their secure ports in tests.
2021-01-06 12:56:39 +08:00
Ben Hu
624b214481
Configure --tls-cipher-suites on kube-apiserver.
2021-01-06 00:31:39 +00:00
Sergey Kanzhelev
d78db9f161
configure docker on containerd nodes so it wouldn't reserver 172.17 subnet
2020-12-23 18:49:57 +00:00
Ben Hu
9581c40887
Revert "Use host IP instead of localhost for control plane component kubeconfig files."
...
This reverts commit 49afcfa5f2
.
2020-12-11 22:36:39 +00:00
Maciej Borsz
7f09d59215
Migrate etcd's livenessProbe to etcdctl endpoint health.
...
Change-Id: Ie19c844050c75e3d1c4b431d09ba0ac851c5317b
2020-12-11 12:43:02 +01:00
Kubernetes Prow Robot
ee8983705a
Merge pull request #96679 from stmcginnis/appspot-cleanup
...
Remove stale analytics links from docs
2020-12-10 23:17:22 -08:00
Kubernetes Prow Robot
cad9a8277d
Merge pull request #97127 from liggitt/revert-etcd-host-ip
...
Revert "iAdd host IP to etcd listen client URLs."
2020-12-08 22:01:52 -08:00
Kubernetes Prow Robot
d2e7abb153
Merge pull request #96839 from vinayakankugoyal/crp
...
Update configure-helper.sh to early exit from start-kube-scheduler if…
2020-12-08 20:03:51 -08:00
Kubernetes Prow Robot
56d7f138de
Merge pull request #96622 from vinayakankugoyal/groupfix
...
If the file already exists we need to grant group read permissions ex…
2020-12-08 17:29:59 -08:00