github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
122bf004bf
kubernetes/cluster
History
Kubernetes Submit Queue b1279a31b9 Merge pull request #40172 from liggitt/abac-upgrade 
Automatic merge from submit-queue (batch tested with PRs 38739, 40480, 40495, 40172, 40393)

Use existing ABAC policy file when upgrading GCE cluster

When upgrading, continue loading an existing ABAC policy file so that existing system components continue working as-is

```
When upgrading an existing 1.5 GCE cluster using `cluster/gce/upgrade.sh`, an existing ABAC policy file located at /etc/srv/kubernetes/abac-authz-policy.jsonl (the default location in 1.5) will enable the ABAC authorizer in addition to the RBAC authorizer. To switch an upgraded 1.5 cluster completely to RBAC, ensure the control plane components and your superuser have been granted sufficient RBAC permissions, move the legacy ABAC policy file to a backup location, and restart the apiserver.
```
2017-01-25 21:20:32 -08:00
..
addons refactor: move ListOptions references to metav1 2017-01-23 17:52:46 -05:00
aws cluster: update default rkt version to 1.23.0 2017-01-23 15:22:33 +00:00
azure azure kube-up respects AZURE_RESOURCE_GROUP 2016-07-08 11:59:32 -07:00
azure-legacy Use ensure-temp-dir in the common.sh script 2017-01-19 09:30:50 -05:00
centos Merge pull request #39462 from Shawyeok/master 2017-01-25 16:40:57 -08:00
gce Merge pull request #40172 from liggitt/abac-upgrade 2017-01-25 21:20:32 -08:00
gke Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
images Make CACHEBUST for hyperkube build optional 2017-01-17 12:41:26 +01:00
juju Splitting master/node services into separate charm layers 2017-01-24 09:42:25 -06:00
kubemark Added OWNERS to kubemark subdirectories 2017-01-25 14:37:57 +01:00
lib Add test shell stack traces 2017-01-25 13:34:16 -05:00
libvirt-coreos adding local registry to libvirt_coreos 2016-12-19 07:51:46 +01:00
local Merge pull request #28469 from asalkeld/local-e2e 2016-09-11 05:44:47 -07:00
openstack-heat Merge pull request #39784 from micmro/keystone-v3-support-for-openstack-heat 2017-01-25 19:30:32 -08:00
ovirt
photon-controller Use ensure-temp-dir in the common.sh script 2017-01-19 09:30:50 -05:00
rackspace Migrates addons from using ReplicationControllers to Deployments 2016-11-09 09:17:05 -08:00
saltbase OWNERS: Update latest OWNERS files 2017-01-23 10:05:48 -08:00
skeleton Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
ubuntu fix typo for cluster/* 2016-12-20 04:56:45 -08:00
vagrant Use ensure-temp-dir in the common.sh script 2017-01-19 09:30:50 -05:00
vsphere Update generated for 2017 2017-01-01 23:11:09 -08:00
windows Fixed the issue with log rotation 2016-12-12 11:08:41 -05:00
BUILD Build release tarballs in bazel and add make bazel-release rule 2017-01-13 16:17:44 -08:00
common.sh Only run gcloud as root if we plan to change something. 2017-01-20 17:18:05 -08:00
get-kube-binaries.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
get-kube-local.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
get-kube.sh Remove kube-up for vsphere 2016-12-22 20:15:37 +00:00
kube-down.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-push.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-up.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-util.sh Use the e2e zone name as the cluster name. 2017-01-24 10:50:51 -08:00
kubeadm.sh Update scripts to look for binary artifacts in bazel-bin/ 2017-01-13 16:17:48 -08:00
kubectl.sh Update scripts to look for binary artifacts in bazel-bin/ 2017-01-13 16:17:48 -08:00
log-dump.sh Added etcd-events to cluster logging 2017-01-06 10:28:48 +01:00
options.md
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00
README.md Fix typos and linted_packages sorting 2016-10-31 18:31:08 +01:00
restore-from-backup.sh Extend logging in restore-from-backup script 2016-12-21 15:10:47 +01:00
test-e2e.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-network.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-smoke.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
update-storage-objects.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
validate-cluster.sh Fixed cluster validation: added -q and project flags to gcloud. 2016-12-21 14:13:14 +01:00

README.md

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.

Analytics