Commit Graph

160 Commits

Author SHA1 Message Date
pgdagenais 78a4021719 Add cluster signing duration flag 2019-02-24 16:35:27 +00:00
Eric Greer 31a4c40131 merge conflict resolution 2019-02-21 15:20:05 -08:00
Eric Greer 8362b1260e etcd memory requests can now be specified 2019-02-21 15:14:51 -08:00
Jeremy Mathevet 893742fb32
kube-apiserver: Add oidc-required-claim flag 2019-02-08 17:45:32 +00:00
Moustafa Baiou cd95ebc11c
add documentation for external egress management 2019-01-27 15:53:22 -05:00
Josh Branham c9371add5c Add comment for resetting autoscaling 2019-01-17 11:52:23 -05:00
Josh Branham 30e35a293e Refactor 2019-01-15 18:39:36 -05:00
Josh Branham f1e62c3cc7 Add note regarding upgrading to CoreDNS 2019-01-15 15:54:53 -05:00
Aaron Walker 37d1070e26
Included type in SSL certificate documentation 2019-01-02 16:16:19 -08:00
Rich Lees 15f0fb7187 Enable HPA tolerance configuration pass 1 2018-11-29 15:59:57 +00:00
k8s-ci-robot 67f1cc8aba
Merge pull request #5586 from fernandocarletti/feature/flags
Add flag to disable Basic Auth.
2018-11-18 18:01:05 -08:00
Vlad Ionescu b2b07cf045
Document etcd volume options
This commit adds documentation around the options for the etcd volumes:
volumeType and volumeIops, in addition to the already existing documentation for
volumeSize

Fixes https://github.com/kubernetes/kops/issues/4557
2018-11-02 16:01:30 +02:00
fernando.carletti 4b27e6c8ee
Add flag to disable Basic Auth. 2018-10-16 19:04:38 -05:00
Justin Santa Barbara 26ed46e0be
Merge pull request #5890 from captainkerk/add-target-ram-mb-option
add targetRamMb to kubeAPIServer spec
2018-10-09 00:45:36 -04:00
k8s-ci-robot 5c5ed1da6f
Merge pull request #5888 from posquit0/patch-3
Fix mis-typings in docs
2018-10-08 20:02:26 -07:00
captainkerk d132577e21 add targetRamMb to kubeAPIServer spec 2018-10-09 01:46:18 +00:00
Byungjin Park d7cab40f3d
Fix mis-typings in docs 2018-10-07 17:33:28 +09:00
captainkerk beb8aebe06 add support for max-mutating-requests-inflight parameter 2018-10-04 05:40:28 +00:00
k8s-ci-robot a300c2aa4c
Merge pull request #5106 from ExtraHop/hook-raw-manifest
Add `useRawManifest` hook option to install `manifest` as a hook unmodified
2018-09-21 09:23:00 -07:00
Fernando Carletti a8185a91fd
Added documentation for Api server LB Certificate
This feature was added by the PR #5414 and it is available at release 1.10.0 but there's no related documentation yet available.
2018-09-16 13:35:02 -05:00
sunlintong 2cba1ef69e specificied--specified 2018-09-03 10:42:03 +08:00
sunlintong 5cb854fee2 desiginated-->designated 2018-09-03 10:38:10 +08:00
Mike Splain efe5f8862f Add etcd volumeSize docs 2018-08-23 09:59:35 -04:00
Andrea Sosso 30f23e29f5
Fix cpu unit measurement 2018-08-09 16:03:24 +02:00
Rajat Sharma b97c1bcbb4
Spell Fix: Fixing spelling of "Kubernetes" in doc 2018-07-30 12:21:13 +05:30
k8s-ci-robot c342df1392
Merge pull request #5390 from kampka/add-container-proxy
Add pull-through proxy cache for asset docker images
2018-07-19 11:55:16 -07:00
k8s-ci-robot 56ccfac26d
Merge pull request #5317 from gambol99/node_registration
Node Authorization Service
2018-07-19 05:17:41 -07:00
Julien Senon 880f1c718b
Update Audit file example
Update Audit file example
2018-07-12 11:55:28 +02:00
Rohith 52fbbe13fc - adding documentation for bootstrap tokens and node authorizer 2018-07-06 20:15:18 +01:00
Christian Kampka f422e660eb Add documentation for containerRegisty and containerProxy spec 2018-07-06 14:56:05 +02:00
kimxogus 641b3d226d fix broken compute resource reservation docs for storage 2018-07-03 19:07:42 +09:00
Justin Santa Barbara e05dbb3177
Merge pull request #5146 from kaspernissen/master
fix broken link to example policy file in the cluster_spec docs
2018-06-11 10:42:26 -04:00
Kasper Nissen 9e18a95dd2 fix broken link to example policy file in the cluster_spec docs 2018-06-11 07:10:42 +02:00
k8s-ci-robot f470e77139
Merge pull request #5072 from bhack/patch-2
Add hooks example for cachefiled
2018-06-10 20:25:00 -07:00
Federico Hernandez 626a7360c5 cloudProvider required in kubelet spec with Amazon VPC backend 2018-05-18 13:33:26 +02:00
Matt Dougherty ff17e6f556 Add useRawManifest option to hook spec
When "useRawManifest" is set to true in the hook spec, the contents of
the "manifest" field are used unmodified as a systemd unit. The
"before" and "requires" fields are ignored, kops will not construct
the "[Unit]" section of the systemd unit file, and kops will not add a
"[Service]" header.

This gives operators access to the full suite of options available in
the "[Unit]" section, and also allows creation of unit files which
don't contain a "[Service]" section (for example, .swap units; see
https://www.freedesktop.org/software/systemd/man/systemd.swap.html).

Because this functionality is gated behind a new option, backwards
compatibility is preserved for hooks currently being created using the
old style.
2018-05-02 16:31:05 -07:00
Matt Dougherty 68f50ec106 Fix indentation in hook example in cluster_spec doc 2018-05-02 16:31:05 -07:00
bhack b94b740789
Add hooks example for cachefiled 2018-04-27 16:25:59 +02:00
Sandeep Rajan eaac019e34 CoreDNS in kops as an addon
fix test
2018-04-20 17:03:17 -04:00
Tom Bull 6b4c3dcba1
Add warning about google cloud repository versions
I spent nearly a day trying to figure out what had gone wrong with repeated installations. Turns out google doesn't build and release every version of etcd to gcr - just random ones that they feel like. The documentation is updated to reflect that kops uses gcr for its etcd images and to check the gcr before just putting any version number.
2018-04-09 15:41:02 +08:00
sunlintong 140a56ee93 fix spell mistakes in cluster_spec.md 2018-04-03 16:23:55 +08:00
k8s-ci-robot 2b4af48489
Merge pull request #4576 from AdamDang/patch-1
Typo fix "NAT Gateways" -> "NAT gateways"
2018-03-06 19:42:54 -08:00
King'ori Maina c41b30e487
Add link to HPA docs in cluster spec docs 2018-03-05 18:43:47 +02:00
AdamDang 6682eae771
Typo fix "NAT Gateways" -> "NAT gateways"
"NAT gateway" appears 3 times in this doc. Two are "NAT gateway" ,while one is "NAT Gateway" . They should be kept consistency.
2018-03-05 14:04:05 +08:00
k8s-ci-robot 3b78618327
Merge pull request #4302 from sethpollack/eip
Add option for using existing EIP's
2018-02-27 22:27:46 -08:00
Seth Pollack 3ae8ac1329 add option for BYOEIP 2018-02-16 12:08:05 -05:00
k8s-ci-robot 2b1ecba8e1
Merge pull request #4395 from ihoegen/master
Add max-requests-inflight parameter
2018-02-13 22:59:51 -08:00
Ian Hoegen 37c3ac3784 Add max-requests-inflight flag, along with docs 2018-02-13 13:34:48 -08:00
shane lee 343a8da823 API audit doc changes 2018-02-13 00:22:36 +11:00
Martyn Ranyard e0200fbe95 Add TerraformProviderExtraConfig to cluster spec 2018-01-31 11:33:49 +01:00
Steve Ruckdashel ce63762d8f
fixing some wording 2018-01-08 15:27:05 -06:00
Steve Ruckdashel ddefd889b8
cloudConfig.elbSecurityGroup under wrong L3 heading
elbSecurityGroup is under the docker L3 heading and should be under cloudConfig.
2018-01-08 12:54:41 -06:00
Peter Rifel aeb1f9d206 Add storage driver and options to cluster spec docs 2017-12-28 14:53:22 -08:00
Steve Ruckdashel 8da42b7ce7
Moved paragraph relating to runtimeConfig
This paragraph makes more sense under the runtimeConfig section than under the serviceNodePortRange section
2017-12-20 14:54:48 -06:00
Aldo "xoen" Giambelluca 9e30999d06 Support for OIDC 'username-prefix' and 'groups-prefix' flags
See: https://kubernetes.io/docs/admin/authentication/#configuring-the-api-server

This is very similar to this other PR: https://github.com/kubernetes/kops/pull/1438/files

I also updated the format of the documentation for the OIDC API Server fields
to follow the Go Style guide: https://blog.golang.org/godoc-documenting-go-code

Fixes: https://github.com/kubernetes/kops/issues/4007
2017-12-18 15:34:37 +00:00
Kubernetes Submit Queue d533714aa8
Merge pull request #4036 from almariah/feature-api-elb-security-groups
Automatic merge from submit-queue.

Allow additional SGs to be added to API loadbalancer

Allow adding precreated additional security groups to the API loadbalancer using cluster spec:
```yaml
spec:
  api:
    loadBalancer:
      type: Public
      additionalSecurityGroups:
      - sg-exampleid3
      - sg-exampleid4
```

- [x] Adding additionalSecurityGroups cluster spec
- [x] Adding validation for repeated security groups
- [x] Adding validation for API loadbalancer security groups
- [x] Integration test for API loadbalancer and its security groups
- [x] Update API docs and cluster.spec docs
2017-12-14 02:25:40 -08:00
Abdullah Almariah 2746b88808 Update cluster.spec docs 2017-12-13 02:05:42 +01:00
krogon-dp f248a3b2fe Documentation fix for watchIngress flag in externalDns ClusterSpec 2017-12-12 15:52:50 +01:00
Johannes 'fish' Ziemke 917e9dec38 Add HPA up/downscale delay 2017-11-13 15:50:37 +01:00
Rohith b3d4dd9911 Audit Policy Docs
- adding some documentation on the audit policy
2017-10-31 22:57:23 +00:00
Manatsawin Hanmongkolchai 170bf5200e Updated docs for UsePolicyConfigMap 2017-10-27 08:56:08 +07:00
Mike Splain 8549e8e7ff Add HorizontalPodAutoscalerSyncPeriod for kubeControllerManager 2017-10-19 17:57:33 -04:00
Justin Santa Barbara 08dc649fde Docs tweak - specify flag, not kube-up env var
ENABLE_CUSTOM_METRICS is a kube-up artifact; the flags are the truth.
2017-10-10 06:23:09 -04:00
Rahul Mahale bb017bc33f Merge branch 'master' into update-cluster-spec-document-with-custom-metrics-flag 2017-10-10 14:09:30 +05:30
Rahul Mahale b0bb54a08b Add link to kubernetes documentation 2017-10-10 14:07:43 +05:30
Manatsawin Hanmongkolchai a06fbbac79 Added documentation that PolicyConfigMap should not be used during cluster creation 2017-10-10 09:33:48 +07:00
Manatsawin Hanmongkolchai be8aa9fecc Added docs on policyConfigMap 2017-10-10 09:10:05 +07:00
Rahul Mahale 5d3adf0164 Document enabling custom metrics using kops
- Tested it with kops version 1.7 and k8s v1.7.2
2017-10-09 13:43:24 +05:30
Rohith 7c2ce19196 Etcd V3 & TLS Support
- adding documentation for the etcd v3 and tls options
2017-10-03 10:10:56 +01:00
Kubernetes Submit Queue fc3716677a Merge pull request #3345 from andreychernih/enable-critical-feature-gate
Automatic merge from submit-queue. .

Enable ExperimentalCriticalPodAnnotation feature gate

Otherwise, it is possible that critical system components will be evicted

https://github.com/kubernetes/kops/issues/3194
https://github.com/kubernetes/kubernetes/issues/51432
2017-09-24 21:59:49 -07:00
Julian Simioni 57e9a24c34
Fix a few typos and clean up hooks section
The hooks section in the cluster spec documentation had a few typos and other rough spots. This should make it read a little more smoothly.
2017-09-23 17:13:42 -04:00
Kubernetes Submit Queue 66b9838a8c Merge pull request #3215 from johnzeringue/specify-ssh-key-name
Automatic merge from submit-queue. .

Allow specifying a SSH key name for AWS

Related to #2309, this allows naming an existing key pair using the
cluster spec field `sshKeyName`.

In our use case, kops can now be used without providing the ability to
create EC2 key pairs.
2017-09-20 21:15:43 -07:00
Andrey Chernih b3acc4b5f8 Merge branch 'master' into enable-critical-feature-gate 2017-09-18 20:05:22 -07:00
Kashif Saadat 058fb1e93f Correct typo in Hooks Spec examples 2017-09-15 08:29:05 +01:00
Robin Percy e1b20c0217 Added ability to set --service-node-port-range on kube-apiserver 2017-09-07 17:01:15 -07:00
John Zeringue 13d22fdd1a Allow specifying a SSH key name for AWS
Related to #2309, this allows naming an existing key pair using the
cluster spec field `sshKeyName`.

In our use case, kops can now be used without providing the ability to
create EC2 key pairs.
2017-09-07 08:24:13 -04:00
Andrey Chernih fcf78ebcd2 Document that ExperimentalCriticalPodAnnotation is enabled by default 2017-09-05 22:04:04 -07:00
Eric Hole 673cdf6b5f Fixes merge conflicts 2017-08-28 19:10:21 -07:00
Rohith 494671eaaf Request Changes - File Assets
- removed the Mode field from the FileAsset spec
- removed the ability to template the content
- removed the need to specify the Path and instead default to /srv/kubernetes/assets/<name>
- change the FileAssets from []*FileAssets to []FileAssets
2017-08-18 18:06:45 +01:00
Rohith c15221c872 - adding a Roles filter to the file assets to choose who gets the asset 2017-08-18 18:06:44 +01:00
Rohith aa1a92c60e Cluster / InstanceGroup File Assets
The current implementation does not make it ease to fully customize nodes before kube install. This PR adds the ability to include file assets in the cluster and instaneGroup spec which can be consumed by nodeup. Allowing those whom need (i.e. me :-)) greater flexibilty around their nodes. @Note, nothing is enforced, so unless you've specified anything everything is as the same

- updated the cluster_spec.md to reflect the changes
- permit users to place inline files into the cluster and instance group specs
- added the ability to template the files, the Cluster and InstanceGroup specs are passed into context
- cleaned up and missed comment, unordered imports etc along the journey
2017-08-18 18:06:44 +01:00
Kubernetes Submit Queue 52e004710d Merge pull request #3113 from justinsb/docs_api_access
Automatic merge from submit-queue

Fix docs to reference kubernetesApiAccess, not apiAccess
2017-08-16 10:56:03 -07:00
Rohith 7f5c83e417 Requests Changes - Hooks Enhancement
- switched to using an array of roles rather than boolean flags for node selection
- fixed up the README to reflect the changes
- added the docker.service as a Requires to all docker exec hooks
2017-08-11 12:41:08 +01:00
Rohith 0bfc2f1b24 Hooks in InstanceGroups
- extending the hooks to permit adding hooks per instancegroup as well
- @note, instanceGroup are permitted to override the cluster wide one for ease of testing
- updated the documentation to reflect the changes
- on the journey tried to fix an go idioms such as import ordering, comments for global export etc
- @question: v1alpha1 doesn't appear to have Subnet fields, are these different version being used anywhere?
2017-08-11 12:40:10 +01:00
Rohith 153db84df1 Custom Manifests via Hooks
The present implementation of hooks only perform for docker exec, which isn't that flexible. This PR permits the user to greater customize systemd units on the instances

- cleaned up the manifest code, added tests and permit setting a section raw
- added the ability to filter hooks via master and node roles
- updated the documentation to reflect the changes
- cleaned up some of the vetting issues
2017-08-11 12:40:10 +01:00
Rohith fe3dd9815c Cluster Hook Ordering
The current implementation does not permit the user to order the hooks. This PR adds optional Requires, Before and Documentation to the HookSpec which is added the systemd unit if specified.
2017-08-11 12:40:10 +01:00
Justin Santa Barbara f9fbe718c5 Fix docs to reference kubernetesApiAccess, not apiAccess 2017-08-01 19:40:21 -04:00
King'ori Maina 38c4d2af5c
Update cluster spec documentation with node reservation flags 2017-07-17 23:36:53 +02:00
Eric Hole ff3ef87f51 Merge branch 'master' into flag-watch-ingress 2017-07-13 17:54:32 -06:00
Eric Hole 66bf3b6de5 Fixes imports && Updates for review 2017-07-13 16:20:47 -06:00
Hanfei Shen fee673592c add registryMirrors 2017-07-13 10:26:32 +08:00
Eric Hole f5b99da033 Docs for watchIngress 2017-07-04 10:35:41 -07:00
Eric Hole 4468c6b2db Adds ExternalDNS config to cluster_spec with watchIngress flag 2017-07-04 10:34:50 -07:00
alexandrst88 6b81385584 Add SG parameter into AWS cloud-config 2017-07-04 15:44:21 +03:00
chrislovecnm bbcc0f36c3 Documentation updates 2017-06-30 15:33:37 -06:00
Justin Santa Barbara 7fd55796c3 Tweaks to docs for fields that can be empty
Follow up to #2662
2017-06-16 10:15:16 -04:00
Austin Moore 119a0801c9 Add support for setting the kubelet's --resolv-conf flag to an empty string 2017-06-12 15:53:52 -04:00
Patrick Barker 6052d7097b Update cluster_spec docs with audit logging 2017-05-21 09:59:47 -06:00
chrislovecnm beca9822a5 docs 2017-04-03 11:13:21 -06:00
Zac Blazic 7eee6f22c8
Update docs to reflect correct AWS ELB idle timeout 2017-02-15 18:07:55 +02:00