Files

Kubernetes Submit Queue b799bbf0a8 Merge pull request #38816 from deads2k/rbac-23-switch-kubedns-sa

Automatic merge from submit-queue

move kube-dns to a separate service account

Switches the kubedns addon to run as a separate service account so that we can subdivide RBAC permission for it.  The RBAC permissions will need a little more refinement which I'm expecting to find in https://github.com/kubernetes/kubernetes/pull/38626 .

@cjcullen @kubernetes/sig-auth since this is directly related to enabling RBAC with subdivided permissions
 @thockin @kubernetes/sig-network since this directly affects now kubedns is added.  


```release-note
`kube-dns` now runs using a separate `system:serviceaccount:kube-system:kube-dns` service account which is automatically bound to the correct RBAC permissions.
```

2017-02-23 12:06:13 -08:00

addons

Merge pull request #38816 from deads2k/rbac-23-switch-kubedns-sa

2017-02-23 12:06:13 -08:00

aws

Merge pull request #38772 from zmerlynn/kube-up-aws-dead

2017-01-31 11:00:44 -08:00

azure

azure kube-up respects AZURE_RESOURCE_GROUP

2016-07-08 11:59:32 -07:00

azure-legacy

Use ensure-temp-dir in the common.sh script

2017-01-19 09:30:50 -05:00

centos

move kube-dns to a separate service account

2017-02-20 07:35:08 -05:00

gce

Update clusters to use 3.0.17 etcd

2017-02-23 10:08:50 +01:00

gke

Rename build-tools/ back to build/

2016-12-14 13:42:15 -08:00

images

Update clusters to use 3.0.17 etcd

2017-02-23 10:08:50 +01:00

juju

Lint fixes for the master and worker Python code.

2017-02-16 14:01:30 -06:00

kubemark

Update clusters to use 3.0.17 etcd

2017-02-23 10:08:50 +01:00

lib

Add test shell stack traces

2017-01-25 13:34:16 -05:00

libvirt-coreos

move kube-dns to a separate service account

2017-02-20 07:35:08 -05:00

local

Merge pull request #28469 from asalkeld/local-e2e

2016-09-11 05:44:47 -07:00

openstack-heat

#40721 openstack-heat: salt-minion not daemonize

2017-02-15 17:51:07 +09:00

ovirt

…

photon-controller

Use ensure-temp-dir in the common.sh script

2017-01-19 09:30:50 -05:00

rackspace

When calling chown, use : instead of . to separate the user and

2017-01-26 13:39:06 -08:00

saltbase

Update clusters to use 3.0.17 etcd

2017-02-23 10:08:50 +01:00

skeleton

2016-06-29 17:47:36 -07:00

ubuntu

move kube-dns to a separate service account

2017-02-20 07:35:08 -05:00

vagrant

Remove spxtr from several owners files, add rmmh as test reviewer.

2017-01-30 13:45:21 -08:00

vsphere

Update generated for 2017

2017-01-01 23:11:09 -08:00

windows

Fixed the issue with log rotation

2016-12-12 11:08:41 -05:00

BUILD

Build release tarballs in bazel and add make bazel-release rule

2017-01-13 16:17:44 -08:00

clientbin.sh

Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script.

2017-01-26 21:29:49 -08:00

common.sh

Merge pull request #41326 from ncdc/ci-cache-mutation

2017-02-21 07:45:42 -08:00

get-kube-binaries.sh

Automatically download missing kube binaries in kube-up/kube-down.

2016-12-13 14:59:13 -08:00

get-kube-local.sh

Replace uses of --config with --pod-manifest-path

2017-02-07 14:32:37 -08:00

get-kube.sh

Remove kube-up for vsphere

2016-12-22 20:15:37 +00:00

kube-down.sh

Automatically download missing kube binaries in kube-up/kube-down.

2016-12-13 14:59:13 -08:00

kube-push.sh

Automatically download missing kube binaries in kube-up/kube-down.

2016-12-13 14:59:13 -08:00

kube-up.sh

Automatically download missing kube binaries in kube-up/kube-down.

2016-12-13 14:59:13 -08:00

kube-util.sh

Move kube-dns ConfigMap creation/deletion out of federated services e2e tests to federation-up.sh/federation-down.sh where the clusters are joined/unjoined.

2017-02-21 10:27:31 -08:00

kubeadm.sh

Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script.

2017-01-26 21:29:49 -08:00

kubectl.sh

Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script.

2017-01-26 21:29:49 -08:00

log-dump.sh

Whitelist kubemark in node_ssh_supported_providers for log dump

2017-02-21 14:02:17 +01:00

options.md

…

OWNERS

Updated top level owners file to match new format

2017-01-19 11:29:16 -08:00

README.md

Fix typos and linted_packages sorting

2016-10-31 18:31:08 +01:00

restore-from-backup.sh

Extend logging in restore-from-backup script

2016-12-21 15:10:47 +01:00

test-e2e.sh

2016-06-29 17:47:36 -07:00

test-network.sh

2016-06-29 17:47:36 -07:00

test-smoke.sh

2016-06-29 17:47:36 -07:00

update-storage-objects.sh

2016-06-29 17:47:36 -07:00

validate-cluster.sh

Fixed cluster validation: added -q and project flags to gcloud.

2016-12-21 14:13:14 +01:00

README.md

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.