github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
92a3364410
kubernetes/cluster
History
Kubernetes Submit Queue be4452cfce Merge pull request #42994 from Shawyeok/features/full-tls-etcd-cluster 
Automatic merge from submit-queue

Centos provider: generate SSL certificates for etcd cluster.

**What this PR does / why we need it**:
Support secure etcd cluster for centos provider, generate SSL certificates for etcd in default. Running it w/o SSL is exposing cluster data to everyone and is not recommended. [#39462](https://github.com/kubernetes/kubernetes/pull/39462#issuecomment-271601547)

/cc @jszczepkowski @zmerlynn 

**Release note**:
```release-note
Support secure etcd cluster for centos provider.
```
2017-03-28 09:02:26 -07:00
..
addons Add stackdriver monitoring option 2017-03-27 12:10:04 +02:00
aws AWS: Kill bash deployment 2017-02-27 14:39:25 -08:00
centos Centos provider: generate SSL certificates for etcd cluster. 2017-03-24 09:15:57 +08:00
gce Merge pull request #42994 from Shawyeok/features/full-tls-etcd-cluster 2017-03-28 09:02:26 -07:00
gke GCE will properly regenerate basic_auth.csv on kube-apiserver start. 2017-02-25 11:31:59 -08:00
images Bump CNI consumers to latest version 2017-03-22 16:03:13 -07:00
juju Merge pull request #42903 from krousey/owners 2017-03-24 10:26:40 -07:00
kubemark Correct CIDR range for kubemark 2017-02-28 19:26:32 +01:00
lib Add test shell stack traces 2017-01-25 13:34:16 -05:00
libvirt-coreos Keep ResourceQuota admission at the end of the chain 2017-03-21 01:53:11 -04:00
local Merge pull request #28469 from asalkeld/local-e2e 2016-09-11 05:44:47 -07:00
openstack-heat Merge pull request #42638 from jamiehannaford/minion-fip 2017-03-25 18:15:21 -07:00
ovirt
photon-controller Keep ResourceQuota admission at the end of the chain 2017-03-21 01:53:11 -04:00
rackspace Keep ResourceQuota admission at the end of the chain 2017-03-21 01:53:11 -04:00
saltbase Bump cluster autoscaler to 0.5.1 2017-03-28 13:17:47 +02:00
skeleton Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
ubuntu Keep ResourceQuota admission at the end of the chain 2017-03-21 01:53:11 -04:00
vagrant Keep ResourceQuota admission at the end of the chain 2017-03-21 01:53:11 -04:00
vsphere Update generated for 2017 2017-01-01 23:11:09 -08:00
windows Fixed the issue with log rotation 2016-12-12 11:08:41 -05:00
BUILD Build release tarballs in bazel and add make bazel-release rule 2017-01-13 16:17:44 -08:00
clientbin.sh Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script. 2017-01-26 21:29:49 -08:00
common.sh Merge pull request #42994 from Shawyeok/features/full-tls-etcd-cluster 2017-03-28 09:02:26 -07:00
get-kube-binaries.sh Do not override KUBERNETES_RELEASE if already set 2017-03-17 15:29:21 -07:00
get-kube-local.sh Replace uses of --config with --pod-manifest-path 2017-02-07 14:32:37 -08:00
get-kube.sh Update a few regex patterns to support release candidates 2017-03-24 14:38:04 -07:00
kube-down.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-push.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-up.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-util.sh Split federation-{up,down} from e2e-{up,down}. 2017-02-24 14:27:31 -08:00
kubeadm.sh Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script. 2017-01-26 21:29:49 -08:00
kubectl.sh Fix failing kubectl skew tests 2017-03-08 16:08:47 -03:00
log-dump.sh Collect npd log in cluster e2e test. 2017-02-23 01:16:39 -08:00
options.md
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00
README.md Fix typos and linted_packages sorting 2016-10-31 18:31:08 +01:00
restore-from-backup.sh Fix restore-from-backup.sh script 2017-03-21 11:58:13 +01:00
test-e2e.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-network.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-smoke.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
update-storage-objects.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
validate-cluster.sh Fixed cluster validation: added -q and project flags to gcloud. 2016-12-21 14:13:14 +01:00

README.md

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.

Analytics