Ben Hu
624b214481
Configure --tls-cipher-suites on kube-apiserver.
2021-01-06 00:31:39 +00:00
Jordan Liggitt
8820dc4522
Revert "iAdd host IP to etcd listen client URLs."
...
This reverts commit 8b4e164a78
2020-12-08 11:37:13 -05:00
Ben Hu
8416c5cc51
Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck.
2020-10-27 16:25:27 +00:00
Jefftree
0e5d057755
Rename flags
2020-10-22 08:43:28 -07:00
Jefftree
ed52ad3f25
Add SETUP_KONNECTIVITY_SERVICE flag
2020-10-22 08:43:28 -07:00
Jefftree
7820b05467
Separate network proxy flag for apiserver egress and starting pods
2020-10-22 08:43:27 -07:00
Ben Hu
8b4e164a78
iAdd host IP to etcd listen client URLs.
...
Allow kube-apiserver to use host IP to connect to etcd.
Update etcd/migrate to allow additional client listening URLs.
2020-10-20 16:43:52 +00:00
Joseph Anttila Hall
2f318bdd57
API server: fix default_konnectivity_socket_path typo.
...
Make it consistent with configure-helper.sh
2020-10-08 13:19:05 -07:00
Jordan Liggitt
a36aa9c31e
Stop enabling alpha runtimeclass API
2020-06-25 20:29:11 -04:00
Samuel Davidson
31ae200ebf
fix for missing kube-env var in SNI config
2020-06-22 13:33:42 -07:00
Samuel Davidson
3958ecb5c7
Fix to configure-kubeapiserver.sh error.
...
It no no longer errors and exits if
env-var OLD_LOAD_BALANCER_IP is undefined.
2020-06-15 11:42:05 -07:00
Kubernetes Prow Robot
52358fe010
Merge pull request #91228 from sambdavidson/iprotflags
...
Add SNI flags usage to configure-*.sh
2020-05-20 19:41:30 -07:00
Samuel Davidson
20b37d6c5a
Add IP rotation flags and env-vars to configure-*.sh
2020-05-20 13:07:37 -07:00
Jacek Kaniuk
57caa27b8d
Do not add kube-apiserver performance flags if already set
2020-05-20 19:05:16 +02:00
Yuwen Ma
1aa67fc525
Switch core master base images from debian to distroless
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-09 06:55:00 -04:00
Samuel Davidson
c70cd1e82f
Changed readonly to true and type to File for authn/authz config.
2020-03-25 17:45:27 -07:00
Monis Khan
df292749c9
Remove support for basic authentication
...
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag. This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.
Similar functionality is available via the --token-auth-file flag
for development purposes.
Signed-off-by: Monis Khan <mok@vmware.com>
2020-03-11 20:55:47 -04:00
Jefftree
725d2b6a8f
Network Proxy: GRPC + HTTP Connect with UDS
2020-02-20 10:19:37 -08:00
immutablet
f7bd5455fe
Isolate configuration of etcd related parameters into a separate function.
2019-11-04 13:55:31 -08:00
immutablet
b6b55519ca
Isolate the logic related to the configuration of kube-apiserver into a separate script.
2019-10-11 11:34:09 -07:00
