gjmzj
9150e54352
fix : #1281 kebelet failed when systemReserved was enabled
2023-06-10 21:18:19 +08:00
gjmzj
9acff29630
rewrite kubelet installation for different systems
2023-05-02 18:26:06 +08:00
gjmzj
7a2311cffd
feat: add support to set nodenaem
2023-01-15 21:41:45 +08:00
jin.gjm
bd0a8e8487
adjust to remove docker support
2022-05-30 11:08:15 +08:00
gjmzj
e97c65ce5f
feat: add client kubeconfig management in 'ezctl'
2021-01-17 23:59:40 +08:00
gjmzj
f639c54548
kubelet启动参数修改for debian 10 #912
2020-09-27 19:21:50 +08:00
gjmzj
d3b92464ec
修改kubelet/docker使用Cgroup driver: systemd
2020-05-23 15:16:01 +08:00
gjmzj
b4c2cae2d6
fix issue #631
2019-07-19 13:47:10 +08:00
gjmzj
84c2146c72
fix:/sys/fs/cgroup只读挂载时部分os启用kube-reserved出错
2019-07-16 23:58:50 +08:00
gjmzj
7317a080d7
kubelet分离配置文件至/var/lib/kubelet/config.yaml
2019-07-13 11:01:08 +08:00
gjmzj
ccb5686e82
fix: kubelet 1.15 删除参数--allow-privileged
2019-06-30 21:23:38 +08:00
gjmzj
b925682d25
调整kubelet默认禁用system-reserved
2019-06-25 22:55:29 +08:00
gjmzj
d4d98ee8ba
Add system-reserved in kubelet
2019-06-12 21:31:06 +08:00
gjmzj
b4e373b01e
增加kubelet可选是否开启kube-reserved资源预留,默认开启
2019-05-22 00:06:21 +08:00
gjmzj
5712d6626b
integrate kubelet with containerd
2019-05-18 16:48:58 +08:00
gjmzj
0b7c85e72c
增加kubelet资源预留设置
2019-04-10 23:49:49 +08:00
gjmzj
884154bb03
删除cAdvisor 4194端口限制
2019-04-03 23:02:33 +08:00
gjmzj
edd68c7f47
增加 pod-infra-container 可选择配置
2019-01-10 23:51:50 +08:00
gjmzj
aa869e17ff
set kubelet authentication/authorization webhook
2018-10-06 10:21:04 +08:00
gjmzj
cdf778b6ab
取消 Node节点 Bootstrap机制
2018-09-11 20:46:46 +08:00
lusyoe
2b4d92a07a
添加kubelet根目录
2018-08-31 23:02:31 +08:00
jmgao
931b2cf1b9
用inventory_hostname替换变量NODE_IP
2018-06-09 22:19:20 +08:00
gjmzj
83bdcfd41a
修复kubelet匿名访问漏洞
2018-05-17 22:51:15 +08:00
spirit
6b6de7881e
修复kubelet安全策略 ( #192 )
...
https://kubernetes.io/docs/admin/kubelet-authentication-authorization/
By default, requests to the kubelet’s HTTPS endpoint that are not rejected by other configured authentication methods are treated as anonymous requests, and given a username of system:anonymous and a group of system:unauthenticated.
To disable anonymous access and send 401 Unauthorized responses to unauthenticated requests:
start the kubelet with the --anonymous-auth=false flag
2018-05-17 22:31:54 +08:00
gjmzj
afd667e2a3
更新pause镜像3.1,kube-dns 1.14.9
2018-04-24 23:06:57 +08:00
gjmzj
11974a4b14
minor fix
2018-04-10 18:58:10 +08:00
gjmzj
b176a8761d
minor fix
2018-04-10 18:06:12 +08:00
jmgao
dfbfaadaa2
minor changes
2018-02-25 12:30:15 +08:00
gjmzj
cf7917aa1c
Revert "在k8s中,配置GPU节点"
2018-01-25 19:16:33 +08:00
unknown
e7c530db59
add gpu node config
2018-01-22 10:02:13 +08:00
gjmzj
331bf56cb6
更新清理网络脚本
2017-12-31 10:25:56 +08:00
gjmzj
3e5b7f4a63
init flannel
2017-12-30 20:19:50 +08:00
DiamondYuan
d70a958616
pause镜像地址 可配置
2017-12-19 17:46:34 +08:00
jmgao
c1b5ac40a8
fix: kubelet启动选取cloud-provider问题
2017-12-12 17:01:11 +08:00
jmgao
429bed5ce9
修改calico与访问etcd的证书
2017-12-04 20:20:17 +08:00
jmgao
22d95cd779
修正一些 kubelet/apiserver启动参数
2017-11-21 11:27:06 +08:00
jmgao
0685f87fc1
fix bug in 95.clean.yml: cannot remove‘/var/run/docker/netns/default’: Device or resource busy
2017-11-12 16:17:50 +08:00
jmgao
253f109e47
更新90.setup.yml 95.clean.yml
2017-11-12 14:54:20 +08:00
jmgao
3367d512ad
k8s-calico initial commit
2017-11-11 19:14:21 +08:00