Commit Graph

71 Commits (master)

Author SHA1 Message Date
gjmzj 6adb335993 adjust scripts to support recreating CA and certs 2022-11-27 20:42:58 +08:00
gjmzj ebf4f1e507 #1183 add 96.update-certs.yml 2022-11-26 10:56:52 +08:00
李金菱 4910805e1b
修改默认配置的 Kubernetes CA 证书 (#1197) 2022-11-24 18:51:21 +08:00
jin.gjm 9983ec1ab7 remove kubectl admin kubeconfig to improve security 2022-10-09 19:24:44 +08:00
jin.gjm 41c047b3f0 fix: ca-config.json by libinglong 2022-09-17 21:52:48 +08:00
jin.gjm 885c28dcac update k8s binary & calico version 2022-09-08 21:10:33 +08:00
jin.gjm 435e44caae fix custom PATH settings 2022-07-10 10:09:07 +08:00
jin.gjm 42952eb72e minor fixes 2022-06-13 19:03:45 +08:00
jin.gjm abfadf011f minor fix: add cmd alias 2022-06-11 10:48:55 +08:00
jin.gjm 16b98e41ff update kube-prometheus-stack-35.5.1 2022-06-05 15:49:48 +08:00
gjmzj 2ea25dd600 feat:add configurable apiserver secure-port 2021-04-02 18:53:46 +08:00
gjmzj 7dd8fd9fbb remove dependency: netaddr 2021-01-22 23:54:12 +08:00
gjmzj 63a7e6d7ee 修复ansible group命名不规范问题 2021-01-19 17:41:00 +08:00
gjmzj e97c65ce5f feat: add client kubeconfig management in 'ezctl' 2021-01-17 23:59:40 +08:00
gjmzj d5c0873daf update kube-prometheus-stack-12.10.6 2021-01-11 11:12:14 +08:00
gjmzj a85c649805 重写安装流程 2021-01-07 09:30:50 +08:00
gjmzj 524e2390fa dev-3.0 mainline fixes 2020-12-30 11:25:54 +08:00
gjmzj c69be3f0da init commit for dev-3.0 2020-12-25 11:53:00 +08:00
gjmzj 7916344997 modify kubectl-kubeconfig creating for bogeit 2020-03-29 10:52:46 +08:00
gjmzj 4a56116b19 修改kube-controller-manager和kube-scheduler使用证书访问kube-apiserver 2020-01-29 18:05:58 +08:00
gjmzj b16520704a 创建kube-controller-manager.kubeconfig和kube-scheduler.kubeconfig 2020-01-29 10:40:27 +08:00
gjmzj faf78af62a 分离生成read权限kubeconfig #727 2019-11-17 01:51:29 +00:00
gjmzj ca501796c4 v1.16: networkpolicies under networking.k8s.io/v1 2019-11-03 10:44:58 +00:00
gjmzj 2582e119b7 update rbac role: read 2019-10-27 13:40:43 +00:00
gjmzj ae9060aa06 fix #658 仅非容器化运行ansible需要安装 2019-09-08 16:58:30 +08:00
jiang_gw d7b0212f4d role deploy use pip install package netaddr 2019-09-08 16:48:22 +08:00
gjmzj 2830a3587b 调整修复删除master/node/etcd节点的脚本 2019-07-24 10:19:31 +08:00
gjmzj f0212fe1d6 fix:清理脚本,提示清理后重启节点 2019-07-19 10:47:38 +08:00
gjmzj 2a35d3e7ac 调整集群备份/恢复脚本及文档 2019-07-03 17:50:25 +08:00
gjmzj 846f81668e role deploy: 增加是否容器化运行ansible脚本判断 2019-06-30 20:11:42 +08:00
gjmzj 7736893e03 fix: 容器化运行deploy任务时删除kubeconfig报错 2019-06-24 22:12:27 +08:00
gjmzj 6882a795ef minor fix 2019-06-24 00:05:25 +08:00
gjmzj 89663aef21 docs: minor fix 2019-06-17 22:34:02 +08:00
gjmzj 80217dc1cd docs: update setup guide 2019-06-09 10:58:01 +08:00
gjmzj d0a481cd09 fix easzctl脚本适应新流程 2019-06-04 23:46:12 +08:00
gjmzj 78cc26db8c 重构kube-master/kube-node流程 2019-05-28 23:46:22 +08:00
gjmzj 05d5288d5c 安装流程重构之优化prepare/etcd/containerd/docker等阶段 2019-05-27 21:28:36 +08:00
gjmzj 8712819a9c 安装流程重构之优化prepare阶段 2019-05-27 20:02:02 +08:00
gjmzj 881a43ab26 优化只读kubectl配置的创建流程 #537 2019-05-01 17:20:20 +08:00
gjmzj 92ea99e677 调整ca证书有效期等配置 2019-03-30 11:57:52 +08:00
gjmzj 047a0488e5 修复centos日志优化配置等 2019-03-28 18:44:10 +08:00
gjmzj b88d352ad7 增加kubectl使用可选参数配置kubeconfig 2019-03-28 09:18:00 +08:00
gjmzj 75defebbf5 废弃ansible hosts中basic_auth相关配置 2019-03-14 14:00:28 +08:00
gjmzj 64350c4b5c 优化脚本以兼容docker运行kubeasz 2019-02-28 18:27:57 +08:00
gjmzj 224125c4a0 安装流程修改以适应容器化运行kubeasz 2019-02-28 16:06:26 +08:00
gjmzj 4c6ec53cda 增加随机basic auth密码等脚本优化 2019-02-25 23:11:08 +08:00
gjmzj f19339d7f1 调整prepare tasks,避免把证书和kubeconfig分发到不需要的节点 2019-02-01 13:45:46 +08:00
gjmzj 43de866aa5 更新生成kubeconfig脚本与文档 2018-11-30 15:18:17 +08:00
gjmzj d803579000 增加只读权限kubeconfig脚本与文档 2018-11-27 14:21:42 +08:00
gjmzj 68029132d6 fix: 在本地目录检查离线镜像下载情况 2018-10-14 10:17:20 +08:00