d487b2f927
Security best practice fixes ( #1783 )
...
* Disable basic and token auth by default
* Add recommended security params
* allow basic auth to fail in tests
* Enable TLS authentication for kubelet
2017-10-15 20:41:17 +01:00
8e731337ba
Enable HA deploy of kubeadm ( #1658 )
...
* Enable HA deploy of kubeadm
* raise delay to 60s for starting gce hosts
2017-09-15 22:28:15 +01:00
0f231f0e76
Improve method to create and wait for gce instances ( #1645 )
2017-09-09 23:41:31 +03:00
f29a42721f
Clean up debug in check apiserver test ( #1638 )
...
* Clean up debug in check apiserver test
* Change password generation for kube_user
Special characters are not allowed in known_users.csv file
2017-09-08 15:47:13 +03:00
7117614ee5
Use a generated password for kube user ( #1624 )
...
Removed unnecessary root user
2017-09-06 20:20:25 +03:00
d31c040dc0
Change kube-api default port from 443 to 6443
...
Operator can specify any port for kube-api (6443 default) This helps in
case where some pods such as Ingress require 443 exclusively.
Closes: 820
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-28 15:45:35 +01:00
0b67c23d42
test the apiserver from the masters instead of the deployment machine
2016-07-03 16:18:04 +02:00
caa2555b1d
Add complete test integration
2016-02-10 22:58:57 +01:00
Matthew Mosesohn
Matthew Mosesohn
Sergii Golovatiuk
Smana
ant31