John Gardiner Myers
62c4ce4d93
Move bootstrap RBAC from protokube to core bootstrap addon
2021-08-29 12:36:21 -07:00
John Gardiner Myers
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
John Gardiner Myers
226380bf5b
Refactor legacy etcd manager etcd-client keypair
2021-07-17 14:25:19 -07:00
John Gardiner Myers
c35d101a89
Refactor keysets for etcd-manager
2021-07-08 18:46:03 -07:00
John Gardiner Myers
e0915887ed
Move asset copying out of apply_cluster
2021-06-05 21:17:50 -07:00
Peter Rifel
e2ea5f8a95
Update protokube systemd unit docs link
2021-03-24 20:57:00 -05:00
Bharath Vedartham
26319c6e96
Remove dbus dependency
2021-03-20 15:06:10 +05:30
Peter Rifel
b57318fc3d
Download kubectl to /opt/kops/bin on Flatcar OS
...
Also add it to protokube's PATH.
Our flatcar job is currently failing because channels arent being applied.
A newly added error log reports that kubectl isn't in protokube's PATH.
This adds the kubectl's location (/opt/bin) to protokube's PATH.
See https://storage.googleapis.com/kubernetes-jenkins/logs/e2e-kops-aws-distro-imageflatcar/1371379886664454144/artifacts/54.206.100.130/protokube.log
2021-03-18 22:26:38 -05:00
Ciprian Hacman
77b72efe1d
Fix various nits when changing Protokube to run as service
2021-03-08 07:19:48 +02:00
Bharath Vedartham
d45514cff3
Make protokube a systemd process
2021-03-06 00:32:44 +05:30
Justin SB
23646b6546
Install dbus if needed for protokube with kope.io
2021-01-21 18:17:35 +02:00
Kenji Kaneda
a61caea8d2
Add Azure support
...
This commit contains all changes required to support Azure
(https://github.com/kubernetes/kops/issues/3957 ).
2020-12-21 08:27:54 -08:00
Ciprian Hacman
416fd15e3c
Mount /lib64 for Protokube only on AMD64
2020-12-09 18:58:18 +02:00
Ciprian Hacman
f267c54b9a
Stop trying to pull the Protokube image
2020-08-25 09:04:45 +03:00
Peter Rifel
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
John Gardiner Myers
321035f460
Allow cert/key file tasks to specify owner
2020-08-15 10:30:20 -07:00
Ciprian Hacman
331d223043
ARM64 support - Side-load multi-arch images
2020-08-10 13:47:07 +03:00
Ole Markus With
a708a96c05
Adds support for using OS application credentials
...
Application credentials allows you to export a purpose-specific set of
credentials for a user instead of exposing user login credentials.
Especially useful when using LDAP or similar for Openstack users.
Also lets you rotate credentials more easily since multiple application
credentials can be provisioned per user.
Update pkg/model/bootstrapscript.go
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-08-07 14:26:47 +02:00
Ciprian Hacman
64fff220c9
Mount host bin dirs for "utils/nsenter" and "utils/mount"
2020-07-05 14:41:29 +03:00
Ciprian Hacman
3a057aa27c
Use distroless image as base for protokube
2020-07-05 14:41:29 +03:00
Ciprian Hacman
a7c8d2087c
Use github.com/blang/semver/v4
2020-07-01 08:54:42 +03:00
John Gardiner Myers
0f77055f63
Issue kops cert in nodeup
2020-06-11 23:54:59 -07:00
Ole Markus With
7342525872
Remove vsphere from kops files
2020-05-30 13:36:55 +02:00
Ciprian Hacman
7114c475ff
Fix containerd image side-loading
2020-05-08 23:47:09 +03:00
Thomas Jackson
328f261f34
Include secondary protocol flag always
...
This way if you have the value set in config (even as "") it'll get
passed down to allow you to override the default config
Related to #9006
2020-04-27 17:03:54 -07:00
John Gardiner Myers
6e9dc8fc0f
Remove code for unsupported k8s versions from nodeup
2020-01-12 19:30:34 -08:00
Justin Santa Barbara
e4ed13ed57
Move protokube image task to ProtokubeBuilder
...
More logically consistent, and allows us to be lazier about loading
it when not needed.
2020-01-04 17:46:16 -05:00
Ciprian Hacman
b563e4e815
Run Protokube in the "default" container namespace
2019-12-29 05:42:29 +02:00
Ciprian Hacman
b234d0687a
Add back Protokube image pull during service start
2019-12-16 00:59:19 +02:00
Ciprian Hacman
f401342d8f
Update Protokube tests
2019-12-15 22:31:52 +02:00
Ciprian Hacman
bdb395f722
Fix container remove command on failed start
2019-12-15 21:37:57 +02:00
Ciprian Hacman
42b73b877d
Add support for containerd container runtime
2019-12-15 21:37:57 +02:00
Srikanth
afe59ba7cc
Remove clusterID to be passed as a parameter for protokube
2019-10-29 09:40:38 +05:30
Srikanth
cb4a8ef6fc
Rebase with latest master
2019-10-29 09:40:38 +05:30
tanjunchen
6a01525de5
fix-up bug in nodeup/pkg/model
2019-10-16 00:35:26 +08:00
Thomas Jackson
cfcb93e822
Misc fixes
2019-10-10 13:09:22 -07:00
Thomas Jackson
f8c416d6ce
Add configs for gossip dns
2019-10-10 13:09:22 -07:00
Jesse Haka
4ccad007ce
mountcerts -> usehostcerts
2019-09-30 11:36:32 +03:00
Jesse Haka
352bc1eaa2
Allow to use custom rootCAs
2019-09-30 11:35:58 +03:00
yuxiaobo
0bd700781e
Correct word misspelling
2019-09-29 22:23:07 +08:00
mikesplain
9e55b8230a
Update copyright notices
...
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Justin SB
8e2dbb6a99
Bootstrap: protokube labels its own node with node-role label
...
As of k8s 1.16, the node-role label is protected for security reasons.
We will introduce a controller to set those labels generically.
However, we need these labels to run the controller (only) on master
nodes.
To solve this bootstrapping problem, we use protokube to apply the
master role node labels to the master node only. This isn't a
security problem because we assume that protokube on the master is
highly trusted - we are still administering labels centrally.
Then kops-controller can use this label to target the master nodes,
and run a central label controller.
2019-09-08 20:51:00 -04:00
Kashif Saadat
2b61ace49c
goimports update
2019-07-03 16:43:20 +01:00
Austin Moore
67d9f5f190
Move getProxyEnvVars into a util package
2019-06-05 15:59:19 -04:00
Justin SB
3e33ac7682
Change code from glog to klog
...
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog. That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Justin SB
7bd4a7e262
Support download protokube from mirror
2019-03-26 00:45:54 -04:00
Kubernetes Prow Robot
93988d8fdd
Merge pull request #6359 from justinsb/integration_etcd
...
Enable etcd-manager / etcd3 / etcd-tls in kops 1.12
2019-03-19 10:28:23 -07:00
LilyFaFa
12d54b6a1f
support gossip for AliCloud
2019-03-15 15:26:12 +08:00
Justin SB
31f408c978
Support etcd-manager in kops 1.12
...
In 1.12 (kops & kubenetes):
* We default etcd-manager on
* We default to etcd3
* We default to full TLS for etcd (client and peer)
* We stop allowing external access to etcd
2019-03-14 23:13:06 -04:00
Kubernetes Prow Robot
ea420dac78
Merge pull request #6351 from cisco-sso/os_full
...
Kops for Openstack
2019-01-23 10:35:20 -08:00