kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
2,650 Commits
29 Branches
81 Tags
160 MiB
Commit Graph

22 Commits (0b1200bb4967ead9ab74c025e82395a1c99d3bbe)

Author SHA1 Message Date
Wong Hoi Sing Edison 1a1d154e14 Support multiple inventory files under individual inventory directory 2018-02-08 08:08:15 +08:00
Spencer Smith 1869aa3985 remove references to deprecated kubespray cli 2018-02-05 10:00:21 -05:00
Chad Swenson 0c6f172e75 Kubernetes Dashboard v1.7.1 Refactor 
This version required changing the previous access model for dashboard completely but it's a change for the better. Docs were updated.

* New login/auth options that use apiserver auth proxying by default
* Requires RBAC in `authorization_modes`
* Only serves over https
* No longer available at https://first_master:6443/ui until apiserver is updated with the https proxy URL:
* Can access from https://first_master:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login you will be prompted for credentials
* Or you can run 'kubectl proxy' from your local machine to access dashboard in your browser from: http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/
* It is recommended to access dashboard from behind a gateway that enforces an authentication token, details and other access options here: https://github.com/kubernetes/dashboard/wiki/Accessing-Dashboard---1.7.X-and-above
 2017-11-15 10:05:48 -06:00
Günther Grill a2bda9e5f1 Eliminate jinja2 template expression warning and rename coreos-python var (#1911) 
* Change deprecated vagrant ansible flag 'sudo' to 'become'

* Emphasize, that the name of the pip_pyton_modules is only considered in coreos

* Remove useless unused variable

* Fix warning when jinja2 template-delimiters used in when statement

There is no need for jinja2 template-delimiters like {{ }} or {% %}
any more. They can just be omitted as described in https://github.com/ansible/ansible/issues/22397

* Fix broken link in getting-started guide
 2017-11-03 07:11:36 +00:00
Matthew Mosesohn d487b2f927 Security best practice fixes (#1783) 
* Disable basic and token auth by default

* Add recommended security params

* allow basic auth to fail in tests

* Enable TLS authentication for kubelet
 2017-10-15 20:41:17 +01:00
Junaid Ali 6f17d0817b Updating getting-started.md (#1683) 
Signed-off-by: Junaid Ali <junaidali.yahya@gmail.com>
 2017-09-25 12:19:38 +01:00
Matthew Mosesohn ef8e35e39b Create admin credential kubeconfig (#1647) 
New files: /etc/kubernetes/admin.conf
           /root/.kube/config
           $GITDIR/artifacts/{kubectl,admin.conf}

Optional method to download kubectl and admin.conf if
kubeconfig_lcoalhost is set to true (default false)
 2017-09-18 13:30:57 +01:00
Matthew Mosesohn 943aaf84e5 Update getting-started.md 2017-09-11 12:47:04 +03:00
Matthew Mosesohn 9fa1873a65 Add kube dashboard, enabled by default (#1643) 
* Add kube dashboard, enabled by default

Also add rbac role for kube user

* Update main.yml
 2017-09-09 23:38:03 +03:00
Matthew Mosesohn 7117614ee5 Use a generated password for kube user (#1624) 
Removed unnecessary root user
 2017-09-06 20:20:25 +03:00
Spencer Smith 83265b7f75 renaming kargo-cli to kubespray-cli 2017-06-23 12:35:10 -04:00
Spencer Smith 8203383c03 rename almost all mentions of kargo 2017-06-16 13:25:46 -04:00
Spencer Smith 18a42e4b38 add scale.yml to do minimum needed for a node bootstrap 2017-05-24 15:49:21 -04:00
Justin 9503434d53 Fix IPS array variable expansion 
$IPS only expands to the first ip address in the array:

justin@box:~$ declare -a IPS=(10.10.1.3 10.10.1.4 10.10.1.5)
justin@box:~$ echo $IPS
10.10.1.3
justin@box:~$ echo ${IPS[@]}
10.10.1.3 10.10.1.4 10.10.1.5
 2017-04-17 20:56:52 -04:00
Kopylov German d197ce230f Fix cluster.yml file extension in docs 2017-02-26 13:42:52 +03:00
Hung Nguyen Viet d8f46c4410 Highlight important action 2017-02-14 17:18:25 +07:00
Hung Nguyen Viet d0757ccc5e Fix typo 2017-02-14 17:18:22 +07:00
Matthew Mosesohn f742fc3dd1 Add scale thresholds to split etcd and k8s-masters 
Also adds calico-rr group if there are standalone etcd nodes.
Now if there are 50 or more nodes, 3 etcd nodes will be standalone.
If there are 200 or more nodes, 2 kube-masters will be standalone.
If thresholds are exceeded, kube-node group cannot add nodes that
belong to etcd or kube-master groups (according to above statements).
 2017-01-19 17:30:56 +03:00
Bogdan Dobrelya caab0cdf27 Docs updates 
Fix mismatching inventory examples.
Add command examples.
Clarify groups use cases.

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
 2017-01-11 15:39:35 +01:00
Bogdan Dobrelya 6fb6947feb Fix inventory generator link 
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
 2017-01-10 17:02:28 +01:00
Matthew Mosesohn 7b86b87dca Add inventory builder python script 
Includes tox support for running unit tests.
Small note added to getting-started guide for using
inventory_builder.py

Also adds manual-only unit test.
 2016-12-23 13:00:56 +03:00
Smaine Kahlouch 585102ee20 add documentation 2016-07-04 14:37:30 +02:00