Commit Graph

53 Commits (691467b0c9b271bc55b11487ee54920c8dda6d78)

Author SHA1 Message Date
gjmzj a20c5dcea4 fix: ubuntu 20.04安装集群dns问题 #970 2021-01-23 11:18:39 +08:00
forbxy ce0e0b06a9 kube-proxy的metrics绑定非本地环回 2021-01-23 11:13:56 +08:00
gjmzj 870cc2b04a 更新支持containerd 1.4.3 2020-12-18 10:23:55 +08:00
gjmzj f639c54548 kubelet启动参数修改for debian 10 #912 2020-09-27 19:21:50 +08:00
gjmzj d1b6761f0a revert cgroup driver to 'cgroupfs' #848 2020-05-23 17:58:32 +08:00
gjmzj d3b92464ec 修改kubelet/docker使用Cgroup driver: systemd 2020-05-23 15:16:01 +08:00
gjmzj 5a1f5cda97 关闭kubelet只读端口 2020-02-01 10:06:07 +08:00
gjmzj 347b554c8a add support for k8s v1.16 2019-10-19 14:25:42 +00:00
gjmzj f6cfa297fa fix: heapster无法读取节点度量数据 2019-10-07 23:01:48 +08:00
gjmzj bc16122de6 fix:增加kube-proxy参数--cluster-cidr #663 2019-08-25 23:19:30 +08:00
gjmzj b4c2cae2d6 fix issue #631 2019-07-19 13:47:10 +08:00
gjmzj f87eac6177 fix:ubuntu1804安装集群kubedns/coredns转发到node节点/etc/resolv.conf问题 2019-07-18 10:33:19 +08:00
gjmzj 84c2146c72 fix:/sys/fs/cgroup只读挂载时部分os启用kube-reserved出错 2019-07-16 23:58:50 +08:00
gjmzj 7317a080d7 kubelet分离配置文件至/var/lib/kubelet/config.yaml 2019-07-13 11:01:08 +08:00
gjmzj ccb5686e82 fix: kubelet 1.15 删除参数--allow-privileged 2019-06-30 21:23:38 +08:00
gjmzj 657d2c12d8 增加支持离线安装ex-lb 2019-06-28 21:16:13 +08:00
gjmzj b925682d25 调整kubelet默认禁用system-reserved 2019-06-25 22:55:29 +08:00
gjmzj d4d98ee8ba Add system-reserved in kubelet 2019-06-12 21:31:06 +08:00
gjmzj 78cc26db8c 重构kube-master/kube-node流程 2019-05-28 23:46:22 +08:00
gjmzj b4e373b01e 增加kubelet可选是否开启kube-reserved资源预留,默认开启 2019-05-22 00:06:21 +08:00
gjmzj 5712d6626b integrate kubelet with containerd 2019-05-18 16:48:58 +08:00
gjmzj 0b7c85e72c 增加kubelet资源预留设置 2019-04-10 23:49:49 +08:00
gjmzj 884154bb03 删除cAdvisor 4194端口限制 2019-04-03 23:02:33 +08:00
gjmzj edd68c7f47 增加 pod-infra-container 可选择配置 2019-01-10 23:51:50 +08:00
gjmzj aa869e17ff set kubelet authentication/authorization webhook 2018-10-06 10:21:04 +08:00
gjmzj cdf778b6ab 取消 Node节点 Bootstrap机制 2018-09-11 20:46:46 +08:00
lusyoe 2b4d92a07a 添加kubelet根目录 2018-08-31 23:02:31 +08:00
gjmzj 2a916c0ad1 更新kube-proxy使用ipvs模式 2018-07-09 17:43:12 +08:00
jmgao 931b2cf1b9 用inventory_hostname替换变量NODE_IP 2018-06-09 22:19:20 +08:00
gjmzj 83bdcfd41a 修复kubelet匿名访问漏洞 2018-05-17 22:51:15 +08:00
spirit 6b6de7881e 修复kubelet安全策略 (#192)
https://kubernetes.io/docs/admin/kubelet-authentication-authorization/
By default, requests to the kubelet’s HTTPS endpoint that are not rejected by other configured authentication methods are treated as anonymous requests, and given a username of system:anonymous and a group of system:unauthenticated.

To disable anonymous access and send 401 Unauthorized responses to unauthenticated requests:

start the kubelet with the --anonymous-auth=false flag
2018-05-17 22:31:54 +08:00
gjmzj afd667e2a3 更新pause镜像3.1,kube-dns 1.14.9 2018-04-24 23:06:57 +08:00
gjmzj 11974a4b14 minor fix 2018-04-10 18:58:10 +08:00
gjmzj b176a8761d minor fix 2018-04-10 18:06:12 +08:00
gjmzj b51f722202 优化安装流程,修复多主模式dashboard访问bug 2018-03-16 18:23:34 +08:00
jmgao dfbfaadaa2 minor changes 2018-02-25 12:30:15 +08:00
gjmzj cf7917aa1c
Revert "在k8s中,配置GPU节点" 2018-01-25 19:16:33 +08:00
unknown e7c530db59 add gpu node config 2018-01-22 10:02:13 +08:00
jmgao 31dff09bf5 DaemonSet Flannel 网络插件 2018-01-04 22:50:09 +08:00
jmgao 4c1f7bceed 增加flannel网络支持 2018-01-02 22:12:51 +08:00
gjmzj 331bf56cb6 更新清理网络脚本 2017-12-31 10:25:56 +08:00
gjmzj 3e5b7f4a63 init flannel 2017-12-30 20:19:50 +08:00
DiamondYuan d70a958616 pause镜像地址 可配置 2017-12-19 17:46:34 +08:00
jmgao 6134c1ae2d 更新K8S v1.9.0 2017-12-19 10:27:49 +08:00
jmgao c1b5ac40a8 fix: kubelet启动选取cloud-provider问题 2017-12-12 17:01:11 +08:00
jmgao ec4a07f8ba bugfix: NetworkPolicy 跨节点失效问题 2017-12-06 11:14:22 +08:00
jmgao 9048ef00ba 设置kube-proxy参数--masquerade-all=false 2017-12-05 21:31:28 +08:00
jmgao 429bed5ce9 修改calico与访问etcd的证书 2017-12-04 20:20:17 +08:00
jmgao 22d95cd779 修正一些 kubelet/apiserver启动参数 2017-11-21 11:27:06 +08:00
jmgao 0685f87fc1 fix bug in 95.clean.yml: cannot remove‘/var/run/docker/netns/default’: Device or resource busy 2017-11-12 16:17:50 +08:00