Maciej Szulik
a3a26171d1
Run GCE unit tests as non-root
2021-03-18 12:14:24 +01:00
varsha teratipally
90983f66e4
Moving docker options to daemon.json
...
As per the new docker guidelines about customizing the options
like adding registry-mirrors, moving the options to daemon.json
2021-03-10 19:14:48 +00:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
Vinayak Goyal
c63ff05e6d
Run kube-apiserver as non-root.
2021-02-22 20:48:16 -08:00
Kubernetes Prow Robot
874877fa44
Merge pull request #99216 from ruiwen-zhao/remove_modprobe
...
Remove modprobe configs from configure-helper
2021-02-22 17:24:32 -08:00
Cong Liu
03709c0ece
Add arm64 support for GCE node configuration
...
Fix typo
Add TODO
2021-02-19 14:22:26 -08:00
ruiwen-zhao
c053b232ba
Remove modprobe configs from configure-helper
2021-02-18 22:57:44 +00:00
Benjamin Elder
299c561b10
portably configure tempdir in configure-helper.sh
...
fixes a `make test` failure on macOS
2021-02-12 01:15:14 -08:00
Joakim Roubert
3dd3211c81
Fix shellcheck failures in cluster/gce/gci/configure.sh
...
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2021-02-10 19:23:31 +01:00
Kubernetes Prow Robot
b87ae556b3
Merge pull request #95865 from joakimr-axis/joakimr-axis_master-helper.sh
...
Fix shellcheck issues in cluster/gce/gci/master-helper.sh
2021-02-09 17:43:00 -08:00
Matthew Cary
9a7dcd36c1
Disallow local loopback for volume hosts
...
Change-Id: Ic356c3f859057153cfad97327f1938792a1a512c
2021-01-26 17:12:51 -08:00
Kubernetes Prow Robot
1a67280508
Merge pull request #98037 from vinayakankugoyal/kube-controller-manager-crp
...
Update configure-helper.sh to early exit from start-kube-controller-m…
2021-01-25 12:38:59 -08:00
Vinayak Goyal
31807032e0
Update configure-helper.sh to early exit from start-kube-controller-manager if kube-controller-manager is deployed through CRP.
2021-01-20 16:22:46 -08:00
Kubernetes Prow Robot
1bfa1d4619
Merge pull request #98055 from qingsenLi/20210114
...
fix typo and decs in apiserver_etcd_test.go
2021-01-19 18:49:58 -08:00
Kubernetes Prow Robot
176c4c7916
Merge pull request #96823 from hasheddan/cleanup-cos-doc
...
Cleanup GCI / COS README.md
2021-01-19 17:07:59 -08:00
Kubernetes Prow Robot
9da11e294f
Merge pull request #97868 from mtaufen/pki-tmpfs
...
Mount /var/lib/kubelet/pki on tmpfs
2021-01-14 10:47:04 -08:00
10177505
deb509a068
fix typo and decs
2021-01-14 16:55:45 +08:00
rajibmitra
69aae7aa6c
Update cri-tools to v1.20.0
...
Signed-off-by: rajibmitra <rajib.jolite@gmail.com>
2021-01-12 19:02:51 +05:30
Michael Taufen
9f9e235b9d
Mount /var/lib/kubelet/pki on tmpfs
...
This helps avoid some rare instances of corrupt cert files
that cause Kubelet to crash-loop after node reboots, e.g.
if Kubelet opens the file during the shutdown but is unable
to write it.
2021-01-08 18:04:35 -08:00
Kubernetes Prow Robot
8b5aeeedb4
Merge pull request #97742 from benhxy/apiserver-cipher
...
Configure --tls-cipher-suites on kube-apiserver
2021-01-08 13:44:29 -08:00
Jian Zeng
8c1971e17c
chore(gce): pass auth flags to KCM and KS
...
Pass flags `--authentication-kubeconfig` and
`--authorization-kubeconfig` to controller-manager and scheduler,
so that we could grab metrics from their secure ports in tests.
2021-01-06 12:56:39 +08:00
Ben Hu
624b214481
Configure --tls-cipher-suites on kube-apiserver.
2021-01-06 00:31:39 +00:00
Sergey Kanzhelev
d78db9f161
configure docker on containerd nodes so it wouldn't reserver 172.17 subnet
2020-12-23 18:49:57 +00:00
Ben Hu
9581c40887
Revert "Use host IP instead of localhost for control plane component kubeconfig files."
...
This reverts commit 49afcfa5f2
.
2020-12-11 22:36:39 +00:00
Maciej Borsz
7f09d59215
Migrate etcd's livenessProbe to etcdctl endpoint health.
...
Change-Id: Ie19c844050c75e3d1c4b431d09ba0ac851c5317b
2020-12-11 12:43:02 +01:00
Kubernetes Prow Robot
ee8983705a
Merge pull request #96679 from stmcginnis/appspot-cleanup
...
Remove stale analytics links from docs
2020-12-10 23:17:22 -08:00
Kubernetes Prow Robot
cad9a8277d
Merge pull request #97127 from liggitt/revert-etcd-host-ip
...
Revert "iAdd host IP to etcd listen client URLs."
2020-12-08 22:01:52 -08:00
Kubernetes Prow Robot
d2e7abb153
Merge pull request #96839 from vinayakankugoyal/crp
...
Update configure-helper.sh to early exit from start-kube-scheduler if…
2020-12-08 20:03:51 -08:00
Kubernetes Prow Robot
56d7f138de
Merge pull request #96622 from vinayakankugoyal/groupfix
...
If the file already exists we need to grant group read permissions ex…
2020-12-08 17:29:59 -08:00
Jordan Liggitt
8820dc4522
Revert "iAdd host IP to etcd listen client URLs."
...
This reverts commit 8b4e164a78
.
2020-12-08 11:37:13 -05:00
Vinayak Goyal
18644cb1b2
Update configure-helper.sh to early exit from start-kube-scheduler if kube-scheduler is deployed through CRP.
2020-11-24 12:01:22 -08:00
hasheddan
1bf7de6239
Remove broken analytics tracking link
...
Removes embedded tracking pixel which appears to be broken.
Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2020-11-23 18:05:10 -06:00
hasheddan
b24f224ff2
Fix formatting in GCI / COS docs
...
Fixes a few formatting issues in GCI / COS README.md.
Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2020-11-23 18:01:30 -06:00
Kubernetes Prow Robot
b2ecd1b3a3
Merge pull request #96716 from tosi3k/bump-npd-to-v0.8.5
...
Bump node-problem-detector to v0.8.5
2020-11-21 06:33:33 -08:00
Antoni Zawodny
8f2dd3aaab
Bump node-problem-detector to v0.8.5
2020-11-20 20:00:25 +01:00
Mike Danese
7fc57a207e
gce: move iptables rule to mangle
...
This avoids a conflict with rules that calico installs. Also, acquire
the lock everywhere.
2020-11-18 11:28:03 -08:00
Sean McGinnis
be131457ef
Remove stale analytics links from docs
...
Many README files and other docs contained a link to a an appspot
tracking app that is no longer active. Following the links leads to an
error about Go 1.9 no longer being supported. Go 1.9 support was dropped
in appspot in 2019 and disabled June 2020.
This also resulted in a broken image link displaying when viewing these
files on GitHub. Since the app is no longer functioning, and since it
causes a potentially (but granted, minor) confusing error to display,
this just removes those links as I don't believe they are needed
anymore.
Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
2020-11-18 07:04:48 -06:00
vinayak goyal
c2ea6842a7
If the file already exists we need to grant group read permissions explicitly.
2020-11-16 22:59:30 +00:00
wojtekt
eb63da77ea
Allow for configuring etcd progress notify interval on GCE
2020-10-29 15:43:51 +01:00
Kubernetes Prow Robot
1a645c2135
Merge pull request #95743 from benhxy/apiserver-health
...
Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck.
2020-10-28 04:03:56 -07:00
Kubernetes Prow Robot
3523555aab
Merge pull request #95771 from vinayakankugoyal/fluentbit
...
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke…
2020-10-27 10:36:48 -07:00
Ben Hu
8416c5cc51
Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck.
2020-10-27 16:25:27 +00:00
Joakim Roubert
434611b3fb
Fix shellcheck issues in cluster/gce/gci/master-helper.sh
...
Based on PR 88582 by gavinfish that was closed due to inactivity.
Contains a few updates.
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-10-27 08:58:48 +01:00
Kubernetes Prow Robot
557885d5d7
Merge pull request #91788 from rahulkjoshi/detect-local-mode
...
Add option to specify detect-local-mode during cluster configuration
2020-10-26 10:25:02 -07:00
Kubernetes Prow Robot
5935fcd704
Merge pull request #95766 from towca/jtuznik/ca-params-fix
...
Properly quote flags passed to Cluster Autoscaler
2020-10-23 20:47:00 -07:00
Kubernetes Prow Robot
1f756e4a37
Merge pull request #92669 from Jefftree/netproxy-configure-helper
...
Separate network proxy flag for apiserver egress and starting pods
2020-10-23 16:47:00 -07:00
Vinayak Goyal
83c1ce0225
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane.
2020-10-23 12:14:26 -07:00
Rahul Joshi
889446810c
Add configuration options to specify --detect-local-mode on kube-proxy.
2020-10-23 12:12:59 -07:00
Kubernetes Prow Robot
1257bc5acb
Merge pull request #91474 from cici37/pkgController
...
Cleanup CCM dependencies
2020-10-22 23:17:45 -07:00
Kubernetes Prow Robot
e850fa6a6c
Merge pull request #95209 from benhxy/gke/kubeconfig
...
Use host IP instead of localhost for GKE control plane kubeconfig
2020-10-22 22:15:49 -07:00