Justin SB
a61ecf4c58
Refactor to use interface for iam Subjects
...
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
Justin SB
8498ac9dbb
Create PublicJWKS feature flag
...
This should be much easier to start and to get under testing; it only
works with a load balancer, it sets the apiserver into anonymous-auth
allowed, it grants the anonymous auth user permission to read our jwks
tokens. But it shouldn't need a second bucket or anything of that
nature.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:06 -04:00
Peter Rifel
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
John Gardiner Myers
013f9bf914
Create bootstrap script in a Task
2020-06-26 19:11:40 -07:00
John Gardiner Myers
cef5b175c7
Rename BootstrapScript to BootstrapScriptBuilder
2020-06-26 10:57:36 -07:00
John Gardiner Myers
843e5b9b16
Move GCEServiceAccount into CloudConfig
2020-05-03 20:35:32 -07:00
eric-hole
c59314a799
Adds some initial tests. Fixes some logic
...
Need to fix service account implementation first
Fixing tests and iterating on the serviceaccount logic
Run the gce_byo_sa test
2020-04-04 21:20:31 -07:00
eric-hole
b3d65ffce0
Adds a gce-service-account flag so you BYO service-account
...
Generated code and some cleanup
Not sure where that code went
Tests for service account
fixes case on gceserviceaccount
2020-04-04 21:15:56 -07:00
hwdef
b0c63b4cd9
pkg: fix static check
2019-10-24 14:16:41 +08:00
Justin SB
728e582360
Fill out kops controller functionality
...
k8s 1.16 requires that we move label setting away from the kubelet, to
a central controller. kops-controller is that controller.
2019-09-25 12:04:34 -04:00
mikesplain
9e55b8230a
Update copyright notices
...
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Justin SB
62f7c26f98
Support "gce" networking mode, which uses ip aliases
2019-07-19 07:54:13 -04:00
Justin SB
3e33ac7682
Change code from glog to klog
...
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog. That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Justin Santa Barbara
168cf56ebe
GCE: storage-rw scope for instances that need it
2018-06-14 17:50:26 -04:00
Povilas Versockas
8bfa93c304
Add public ssh keys for GCE
2018-04-21 20:15:29 +03:00
Justin Santa Barbara
e158f84e9f
Set AWS_REGION into bootstrapscript
...
Fix #4451
2018-04-12 17:39:24 -04:00
Justin Santa Barbara
d71bd09a6c
GCE: Limit length of InstanceTemplate
...
We explicitly set a separate prefix for the names, and we ensure it is
not too long
2017-10-10 09:48:38 -04:00
Kubernetes Submit Queue
48e61b9523
Merge pull request #3507 from justinsb/gce_rolling_update
...
Automatic merge from submit-queue.
rolling-update - initial GCE support
2017-10-03 00:05:03 -07:00
Justin Santa Barbara
737f2fcd80
rolling-update - initial GCE support
2017-10-02 23:07:35 -04:00
Justin Santa Barbara
66b174321f
Cleanup signature of default volume-size method
...
Because the default doesn't depend on the user-specified value, it's
misleading to pass it in.
2017-09-30 21:24:51 -04:00
Justin Santa Barbara
7fd1196708
Add Zones field to InstanceGroup
...
The Zones field can specify zones where they are not specified on a
Subnet, for example on GCE where we have regional subnets.
2017-09-30 19:44:35 -04:00
chrislovecnm
c4c63b2b0c
using same disk sizes for gce
2017-09-29 16:07:38 -06:00
Kashif Saadat
e0461b92a9
Add ability to store partial cluster and instancegroup spec in userdata,
...
so component config changes are detected and causes nodes to be updated
2017-08-09 14:15:02 +01:00
Derek VerLee
ffa95b8112
Add support for cluster using http forward proxy
2017-08-07 14:30:42 -04:00
Justin Santa Barbara
3dfe48e5ae
Wiring up lifecycle
2017-07-15 22:03:54 -04:00
Justin Santa Barbara
c9ac0cdbd8
Support GCE ForwardingRule (LoadBalancer) for API
...
Also lots of GCE cleanup
2017-03-28 00:00:20 -04:00
Justin Santa Barbara
cb4641fea3
Code updates
2017-03-16 02:40:50 -04:00
Justin Santa Barbara
645f330dad
Re-enable GCE support
...
We move everything to the models. We feature-flag it, because we
probably want to change the names etc, and we aren't going to be able to
offer smooth upgrades until that is done.
2017-02-28 20:08:03 -05:00