Zach Loafman
86468cd29d
Revert "Added kube-proxy token."
2015-04-22 10:55:08 -07:00
Zach Loafman
b98f93bb4b
Merge pull request #7112 from erictune/kubeconfig-secrets
...
Extend PR#5470 for AWS and Vagrant
2015-04-22 09:25:53 -07:00
Eric Tune
2ca8a9d15d
Added kube-proxy token.
...
Generates the new token on AWS, GCE, Vagrant.
Renames instance metadata from "kube-token" to "kubelet-token".
(Is this okay for GKE?)
Having separate tokens for kubelet and kube-proxy permits
using principle of least privilege, makes it easy to
rate limit the clients separately, allows annotation
of apiserver logs with the client identity at a finer grain
than just source-ip.
2015-04-21 09:21:31 -07:00
Eric Tune
7475efbcfb
Extend PR#5470 for AWS and Vagrant
2015-04-21 08:22:31 -07:00
derekwaynecarr
468bf1da75
Enable common set of admission controllers across salt providers
2015-03-11 11:06:00 -04:00
Satnam Singh
19b927ea57
Name a cluster and use it to make forwarding rules for GCE
2015-02-23 17:04:33 -08:00
Justin Santa Barbara
3fb61912aa
Quote args in /srv/salt-overlay/pillar, add new vars
2015-01-29 20:35:36 -05:00
Justin Santa Barbara
d20188c6d4
Create shared secret in AWS scripts
2015-01-29 20:35:35 -05:00
Tim Hockin
59164ca844
Make DNS an option for cluster turnup
2014-12-29 09:18:12 -08:00
Tim Hockin
47141f05c7
standard config opt names: logging
2014-11-25 17:41:53 -08:00
Tim Hockin
52ad94d766
standard config opt names: node monitoring
2014-11-25 17:39:28 -08:00
Brendan Burns
62bd634c07
Update the AWS config.
2014-11-10 13:33:43 -08:00
