kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
6,542 Commits 31 Branches 256 Tags 544 MiB
Commit Graph

1409 Commits

Author SHA1 Message Date
LilyFaFa 59b28164f7 add ALI volume model and apply_cluster codes 2018-06-22 20:28:33 +08:00
k8s-ci-robot 3489ea317e
Merge pull request #5357 from gambol99/docker_userns_remap 
Docker Userspace Remapping Options
 2018-06-22 02:17:05 -07:00
k8s-ci-robot f6f49693ea
Merge pull request #5364 from AliyunContainerService/scalingModel 
add ScalingGroup model for AliCloud
 2018-06-21 19:00:58 -07:00
LilyFaFa cdd8bb6101 add ScalingGroup model 2018-06-22 00:32:20 +08:00
k8s-ci-robot f346efd290
Merge pull request #5240 from nebril/etcd-tls 
Add etcd TLS support for Cilium
 2018-06-21 09:23:37 -07:00
k8s-ci-robot 5313176a9d
Merge pull request #5356 from AliyunContainerService/ramModel 
add RAM model for ALIcloud
 2018-06-21 08:44:50 -07:00
k8s-ci-robot ab0510da81
Merge pull request #5353 from kampka/master 
Fix containerRegistry for Kubernetes < 1.10
 2018-06-21 07:54:35 -07:00
k8s-ci-robot 792f02a5c2
Merge pull request #5245 from justinsb/gc_launchconfigurations 
AWS: Delete old LaunchConfigurations
 2018-06-20 10:33:08 -07:00
Rohith 2c7a4d2d97 Docker Userspace Remapping Options 
- adding the userspace remap options for docker daemon
 2018-06-20 18:13:47 +01:00
LilyFaFa 7db0fe2a39 add RAM model for ALIcloud 2018-06-20 23:46:13 +08:00
k8s-ci-robot 019ecdecae
Merge pull request #5335 from justinsb/gce_etcd_manager 
etcd-manager: GCE support
 2018-06-20 08:45:08 -07:00
Maciej Kwiek e1a0f4a73e Etcd TLS support for Cilium 
Signed-off-by: Maciej Kwiek <maciej@covalent.io>
 2018-06-20 14:27:24 +02:00
k8s-ci-robot a92ee72153
Merge pull request #5349 from gambol99/api_options 
Aggregator Routing Option
 2018-06-20 01:24:08 -07:00
Christian Kampka 921591343a Fix containerRegistry for Kubernetes < 1.10 2018-06-20 09:46:55 +02:00
k8s-ci-robot 9a4c553fde
Merge pull request #5343 from AliyunContainerService/firewallModel 
add firewallModel for ALIcloud
 2018-06-19 18:41:07 -07:00
Rohith 9e7b15d01b Aggregator Routing Option 
- adding the enable-aggregator-routing option to the kube-apiserver
 2018-06-19 23:18:34 +01:00
Haoyun 58e9ba2314
Typo fix 
Typo fix  change defined -> defines
 2018-06-19 10:20:33 +08:00
LilyFaFa a9d0775e2d add firewallModel for ALIcloud 2018-06-19 00:08:02 +08:00
Justin Santa Barbara a9eb6fed2e AWS: Delete old LaunchConfigurations 
We delete old AWS LaunchConfigurations when we see that we have more
than 3.  We add a feature flag KeepLaunchConfigurations to disable this
functionality, for backwards compatability.

Fixes #329
 2018-06-17 23:24:53 -04:00
LilyFaFa 6a83025823 add SSHKey model for AliCloud 2018-06-18 00:15:12 +08:00
k8s-ci-robot cdafebda51
Merge pull request #5320 from nebril/cilium-more-config 
More configuration options for cilium
 2018-06-15 07:02:29 -07:00
Maciej Kwiek a054df4fec Apimachinery for cilium config 
Signed-off-by: Maciej Kwiek <maciej@covalent.io>
 2018-06-15 11:48:18 +02:00
Maciej Kwiek ca52ad5685 More configuration options for cilium 
Signed-off-by: Maciej Kwiek <maciej@covalent.io>
 2018-06-15 11:48:12 +02:00
Justin Santa Barbara 168cf56ebe GCE: storage-rw scope for instances that need it 2018-06-14 17:50:26 -04:00
Justin Santa Barbara ba6d14d1a8 GCE: Grant bucket permissions for etcd-manager 
Unfortunately it has to be bucket level, because that is all that GCS
supports.
 2018-06-14 17:50:16 -04:00
Justin Santa Barbara 5120b913a5 Initial work for etcd-manager on GCE 2018-06-14 17:50:07 -04:00
Justin Santa Barbara 553e519a56 Set log-verbosity for etcd-manager 2018-06-14 17:40:06 -04:00
Eric Herot 2090479da5 Let people know that stopping an instance can sometimes take a while 2018-06-13 18:21:24 -04:00
Eric Herot 0e47086ff5 Communicate that we're going to wait for stabilization after draining 
The wait for this is very long (90s) by default, which is long enough that many users may assume things are hanging if we don't say what they're waiting for.
 2018-06-13 18:18:23 -04:00
k8s-ci-robot 634a76565d
Merge pull request #5307 from justinsb/5253_followup_avoid_iam_change 
Avoid changing IAM policy for users
 2018-06-12 11:08:29 -07:00
Justin Santa Barbara 8064f19fc4 Avoid changing IAM policy for users 
Follow on to #5253, making it so that users that don't adopt bootstrap
kubelet config don't have their IAM policies change.
 2018-06-12 11:58:08 -04:00
Rohith 2f56428aa2 Fix Admission Controller Validation 
- Note sure how I missed this, but the options builder is run before the validation which will always cause and issue (we need to add a warning instead)
- for now, given if the user is already using the AdmissionControllers it's fixed later in the chain we will only check the Disabled plugins for now
 2018-06-12 11:28:21 +01:00
k8s-ci-robot 9b80326129
Merge pull request #5253 from gambol99/bootstrap_tokens 
Node Bootstrap Tokens
 2018-06-11 11:10:29 -07:00
Justin Santa Barbara 89dc7b22f9
Merge branch 'master' into sshkey 2018-06-11 11:23:28 -04:00
Justin Santa Barbara 8681095af4
Merge pull request #4977 from zengchen1024/router_interface 
implement router interface task for OpenStack platform
 2018-06-11 11:17:49 -04:00
Rohith d2bae64dd1 - adding the enable-bootstrap-token-auth to the kubeapi and fixing up the various compoents 2018-06-11 09:57:26 +01:00
Rohith 2d5bd2cfd9 - update the IAM policy to ensure the kubelet permision is skipped 
- update the PKI to ensure on new clusters the certificate it not created
 2018-06-11 09:57:26 +01:00
Rohith 4531384649 This PR attempts to solve two issues 
a) The current implementation use's a static kubelet which doesn't not conform to the Node authorization mode (i.e. system:nodes:<nodename>)
b) As present the kubeconfig is static and reused across all the masters and nodes

The PR firstly introduces the ability for users to use bootstrap tokens and secondly when enabled ensure the kubelets for the masters as have unique usernames.  Note, this PR does not attempt to address the distribution of the bootstrap tokens themselves, that's for cluster admins. One solution for this would be a daemonset on the masters running on hostNetwork and reuse dns-controller to annotated the pods and give as the DNS

Notes:
- the master node do not use bootstrap tokens, instead given they have access to the ca anyhow, we generate certificates for each.
- when bootstrap token is not enabled the behaviour will stay the same; i.e. a kubelet configuration brought down from the store.
- when bootstrap tokens are enabled, the Nodes sit in a timeout loop waiting for the configuration to appear (by third party).
- given the nodeup docker and manifests builders are executed before the kubelet builder, the assumption here is a unit file kicks of a custom container to bootstrap the rest.
- the current firewalls on between the master and nodes are fairly open so no need to open ports between the two
- much of the work was ported from @justinsb PR [here](https://github.com/kubernetes/kops/pull/4134/)
- we add a very presumptuous server and client certificates for use with an authorizer (node-bootstrap-internal.dns_zone)

I do have an additional PR which performs the entire thing. The process being a node_authorizer which runs on the master nodes via a daemonset, the service implements a series of authorizers (i.e. alwaysallow, aws, gce etc). For aws, the process is similar to how vault authorizes nodes [here](https://www.vaultproject.io/docs/auth/aws.html). Nodeup no then calls out to the node_authorizer on bootstrap and provisions the kubelet.
 2018-06-11 09:56:32 +01:00
Jesse Haka ed8d03d402 add keypair role 2018-06-11 09:54:54 +03:00
k8s-ci-robot 02daea62ae
Merge pull request #5119 from ripta/avpc-custom-image 
Amazon VPC CNI: Upgrade to v1.0 and Allow Custom Images
 2018-06-10 22:40:27 -07:00
k8s-ci-robot 8a470580ef
Merge pull request #5250 from gambol99/verify_admissions 
Admission Controller Validation
 2018-06-10 21:54:10 -07:00
k8s-ci-robot 7a004d7c10
Merge pull request #5207 from AliyunContainerService/loadBalancer 
implement LoadBalancer task for ALICloud
 2018-06-10 21:54:00 -07:00
k8s-ci-robot aef1afbc02
Merge pull request #4724 from gambol99/custom_kube_dns 
Customize KubeDNS
 2018-06-10 18:52:01 -07:00
k8s-ci-robot 1b29b54d5b
Merge pull request #4171 from rifelpet/rifelpet_iam 
Add support for external IAM Instance Profiles
 2018-06-10 14:54:00 -07:00
k8s-ci-robot a57a6de4a8
Merge pull request #5139 from justinsb/fix_subnet_egress_indexing 
Fix issue where we assumed that private zone were in order
 2018-06-09 09:27:01 -07:00
Peter Rifel 5f0b63100d Add support for using existing instance profiles 2018-06-08 10:33:09 -07:00
chrislovecnm 9cbc81fe33 adding API for IAM Profile 2018-06-08 09:51:26 -07:00
Andrew Sy Kim 5004652505
Revert "digitalocean: don't set --cloud-provider=external on control plane starting v1.10" 2018-06-08 11:41:07 -04:00
Justin Santa Barbara 2b4888a596 Delay overlay2 to 1.11 
Gives us more time to consider image support.
 2018-06-07 17:11:19 -04:00
Justin Santa Barbara ef5936d8b5 Support overlay2 in docker 
We also have to stop passing the flag on ContainerOS, because it's set
in /etc/docker/default.json and it's now an error to pass the flag.

That in turn means we move those options to code, which are the last of
those legacy config options.  (We still have a few tasks declaratively
defined though)
 2018-06-07 17:11:11 -04:00
Tomas Virgl 6c9a948ebc Enable override bind address for kube-proxy. 
When using kube-proxy in userspace mode, you have to bind to primary ip address of underlying machine.
 2018-06-06 19:46:17 -07:00
Tomas Virgl 874e2a514f Override hostname with '@aws' only if hostname override is not specified. 2018-06-06 13:54:19 -07:00
k8s-ci-robot 1fe29cf962
Merge pull request #5277 from gambol99/misspelling 
Verify Spelling
 2018-06-06 08:57:26 -07:00
Rohith 67296c2db9 - fixing up the spelling mistakes found 2018-06-06 10:03:51 +01:00
LilyFaFa 595aabb355 Modify error handling on loadbalancer task of ALICloud and resolve the conflict with the upstream branch 2018-06-06 09:53:03 +08:00
LilyFaFa a8f91dc3ff implement LoadBalancer task for ALICloud 2018-06-06 09:46:17 +08:00
Ripta Pasay 3610bf20d0 Upgrade default Amazon VPC Networking image to v1.0.0 2018-06-05 15:39:36 -07:00
k8s-ci-robot c3a5477b4a
Merge pull request #5270 from rdrgmnzs/fix_additionalCIDR 
Implement AdditionalCIDR configuration.
 2018-06-05 12:19:56 -07:00
k8s-ci-robot 37f0766e25
Merge pull request #5271 from gambol99/validate_ig_hooks 
Validate InstanceGroup Hooks
 2018-06-05 07:08:55 -07:00
Rohith cae29aaf92 - fixed the error check; should return straight aware 2018-06-05 13:55:51 +01:00
Rohith 1e88487876 Validate FileAssets 
The current implementation doesnt appear to validate the fileAssets on the instanceGroups, just the cluster spec.

- validating the fileAssets per instancegroup
 2018-06-05 11:20:13 +01:00
Rohith 831b2759a0 Validate InstanceGroup Hooks 
- adding the validation code to the instancegroup hooks
- fixes https://github.com/kubernetes/kops/issues/4766
 2018-06-05 11:16:01 +01:00
Rohith 1909210260 Admission Controller Validation 
Since v1.10.0 the --admission-control is being deprecated in favour or --enable-admission-plugin, we should enforce the behaviour in the validation code

I did a fix for this a [moment ago](https://github.com/kubernetes/kops/pull/5248), but yes, enforcement is a better option than trying to support both
 2018-06-05 10:39:03 +01:00
Rodrigo Menezes 4a131f2a50 Implement AdditionalCIDR configuration on non-shared VPCs 2018-06-05 01:12:06 -07:00
Ripta Pasay e87c9c8d6e Regenerate apimachinery 2018-06-04 18:49:54 -07:00
Ripta Pasay ebe8889234 Add ImageName to AmazonVPCNetworkingSpec to allow configurable plugin images 2018-06-04 18:49:22 -07:00
k8s-ci-robot 6741158c97
Merge pull request #5056 from povilasv/gce-ssh 
Add public ssh keys for GCE
 2018-06-03 10:59:53 -07:00
k8s-ci-robot 1157789a63
Merge pull request #4723 from sroylance/testing-windows 
hacks for tests on windows
 2018-06-02 11:22:57 -07:00
k8s-ci-robot 775b877a10
Merge pull request #5197 from rdrgmnzs/heptio_authenticator 
Setup heptio authenticator
 2018-06-01 07:12:55 -07:00
k8s-ci-robot 8f91621687
Merge pull request #5231 from ihoegen/auth-token-webhook 
Add AuthenticationTokenWebhook flag
 2018-05-31 23:56:57 -07:00
Justin Santa Barbara 53bf6ea6ad Replace deprecated flags: address -> insecure-bind-address 2018-05-31 23:23:33 -04:00
Ian Hoegen 1d9c446499 Add AuthenticationTokenWebhook flag 2018-05-31 20:14:56 -07:00
Justin Santa Barbara 9a49ed051a Fix typo: "to user" -> "to use" 2018-05-31 11:58:13 -07:00
Ripta Pasay d9252a1cab Incorporate admission plugin flags when determining whether an admission controller is enabled or not 2018-05-29 16:42:23 -07:00
Ripta Pasay dfa4190cb5 Add --enable-admission-plugins API server flag, deprecating --admission-control in v1.10 2018-05-29 16:42:23 -07:00
k8s-ci-robot 4e26c432ed
Merge pull request #5167 from zachaller/master 
Kuberenets 1.11 has deprecated ExternalID this replaces it with Provi…
 2018-05-26 22:45:31 -07:00
k8s-ci-robot ad60dbd63d
Merge pull request #5178 from dims/patch-1 
Add a FIXME and don't log about insecure ports
 2018-05-26 14:22:41 -07:00
k8s-ci-robot 2bf7b20a9f
Merge pull request #5160 from AdamDang/patch-3 
Typo fix: attatch->attach
 2018-05-26 14:22:31 -07:00
Justin Santa Barbara 73eb8270b7 Create override for etcd-manager image 2018-05-26 12:48:55 -07:00
k8s-ci-robot e323fa918f
Merge pull request #5126 from justinsb/optional_etcd_manager 
Support (optional) etcd-manager
 2018-05-25 15:45:32 -07:00
Justin Santa Barbara ba87c36f73 Support (optional) etcd-manager 2018-05-25 16:01:22 -04:00
Davanum Srinivas 3e075fcab5
Add a FIXME and don't log about insecure ports 
Thanks to @craigtracey for spotting this.
 2018-05-25 09:35:06 -07:00
k8s-ci-robot 382b1ca895
Merge pull request #5155 from aleerizw/expose-streaming-connection-idle-timeout 
Expose streaming connection idle timeout
 2018-05-24 09:46:32 -07:00
Rodrigo Menezes 1fa2ae8d9f Add apimachinery 2018-05-23 18:31:25 -07:00
Rodrigo Menezes 5ce8f9e712 Setup heptio authenticator 2018-05-23 17:48:33 -07:00
k8s-ci-robot f7243a933b
Merge pull request #5123 from justinsb/harmonize_override_and_set_cluster 
Unify create-create overrides and set-cluster fields
 2018-05-19 12:56:50 -07:00
k8s-ci-robot 80c692fa1a
Merge pull request #5143 from rajatjindal/fix-drain 
set default GracePeriodSeconds to -1 when draining nodes
 2018-05-17 04:45:50 -07:00
Zach Aller 40373d983d Update bazel. 2018-05-16 14:33:54 -05:00
Zach Aller 0a456d3101 Fix formating 2018-05-16 14:30:10 -05:00
Zach Aller 4cb92b7c1e Kuberenets 1.11 has deprecated ExternalID this replaces it with ProviderID 
Per https://github.com/kubernetes/kubernetes/pull/61877 ExternalID
is now removed from k8s.
 2018-05-16 13:31:04 -05:00
AdamDang e6c10efafb
Update cluster.go 2018-05-16 00:14:28 +08:00
AdamDang ac6301a531
Update cluster.go 2018-05-16 00:13:19 +08:00
Ali Rizwan 7eeb87512a Added generated file 2018-05-14 11:50:22 +02:00
Ali Rizwan 375a5b03e1 kubelet expose --streaming-connection-idle-timeout 2018-05-14 11:09:44 +02:00
Rohith de977e627e Customize KubeDNS 
This PR adds the ability for users to customize the kubedns upstream nameservers and provider stubdomains, as per [here](https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/)
 2018-05-13 17:08:56 +01:00
k8s-ci-robot a717a035d5
Merge pull request #4990 from andrewsykim/external-cloud-1.10 
digitalocean: don't set --cloud-provider=external on control plane starting v1.10
 2018-05-12 14:36:25 -07:00
k8s-ci-robot 7c90ef0bab
Merge pull request #5142 from justinsb/re_enable_dns_clusterip_validation 
Re-enable validation of DNS ServerIP
 2018-05-12 13:55:34 -07:00
k8s-ci-robot 1e4d7ab6a7
Merge pull request #5138 from justinsb/shared_instance_tags 
Don't tag shared instances at all
 2018-05-12 12:35:35 -07:00
k8s-ci-robot 2644e6c0eb
Merge pull request #4991 from AliyunContainerService/network 
Implement network task for AlibabaCloud
 2018-05-11 10:09:28 -07:00
Rajat Jindal 3961d85e44 set GracePeriodSeconds to -1 2018-05-10 18:33:54 -07:00
Justin Santa Barbara 7d5ad37ee7 Re-enable validation of DNS ServerIP 
Was removed in #4041
 2018-05-10 21:02:39 -04:00
k8s-ci-robot cc25a5a977
Merge pull request #4041 from rajansandeep/corednskops 
CoreDNS in Kops as an addon
 2018-05-10 15:26:54 -07:00
Justin Santa Barbara 26b47d85c1 Fix egress dependency ordering bug 
We assuming that the zone index was the subnet index, which isn't
generally true (but usually is, by luck)
 2018-05-10 13:30:22 -04:00
Justin Santa Barbara bc79f0a69b tests: failing test when multiple egress 
Also requires that the subnets be out of order, which is likely why we
didn't hit it in practice.
 2018-05-10 13:28:05 -04:00
Stephen McQuay (smcquay) 04c11577d4
check in generated code 
I followed instructions found here:

https://github.com/kubernetes/kops/blob/master/docs/development/api_updates.md

updated the previous commit, and am adding the output from:

    make apimachinery

after validating that the project builds as expected.
 2018-05-10 09:06:57 -07:00
Stephen McQuay (smcquay) 83e485ea8d
kublet: expose --experimental-allowed-unsafe-sysctls 
This fixes #2828.
 2018-05-10 09:06:56 -07:00
k8s-ci-robot 8a936243ff
Merge pull request #5088 from chrisz100/feature/kubelet_tlsconfig 
Added tls certificate and private key path flags to kubelet config
 2018-05-10 09:04:53 -07:00
Justin Santa Barbara cd6808d48e Don't tag shared instances at all 
We don't need to (and we can add it later if we do)

Also clean up the Name tag
 2018-05-10 12:03:04 -04:00
k8s-ci-robot 02ab1f90be
Merge pull request #5133 from relu/support-ec2-instance-nat-egresses 
Add ability to use ec2 nat instance as egress
 2018-05-10 08:22:53 -07:00
k8s-ci-robot 64d817aaa0
Merge pull request #5096 from 0mok/fix-validate-hostaddr 
Fix for validating kubeconfig's hosts
 2018-05-09 20:09:53 -07:00
k8s-ci-robot 827357ef0a
Merge pull request #4958 from appvia/iam-remove-sids 
Remove custom Statement IDs from IAM Policy Statements
 2018-05-09 18:37:54 -07:00
Aurel Canciu cc8371cb31
Add ability to use ec2 nat instance as egress 2018-05-09 23:04:54 +03:00
Justin Santa Barbara 81d5f06a58 Unify create-create overrides and set-cluster fields 
Supports e2e upgrade tests
 2018-05-09 11:55:44 -04:00
k8s-ci-robot 7ed7dc21e2
Merge pull request #5067 from AdamDang/patch-33 
Typo fix detaults->defaults
 2018-05-04 05:55:51 -07:00
Brad Kim 967f1e86c6 Fix for validating kubeconfig's hosts 
URL's Host field is "host" or "host:port". (see https://golang.org/pkg/net/url/#URL )
"host:port" can't be used as net.LookupHost's parameter.
I recommend using URL.Hostname() instead of URL.Host.
 2018-05-03 11:48:51 +09:00
AdamDang e38c73ab55
Update cluster.go 2018-05-02 19:04:03 +08:00
AdamDang a33b862ae6
Update cluster.go 2018-05-02 19:03:27 +08:00
Christian Jantz 33845ebd43 Added tls certificate and private key path flags to kubelet config 2018-05-01 17:44:09 +02:00
liang ebfb3c241b change gossip dns conn limit by ENV 2018-04-28 15:50:19 +00:00
Kashif Saadat 0057405d3b Make LogSeveritySys configurable for Canal Networking 2018-04-26 15:47:29 +01:00
AdamDang cb507bc817
Update cluster.go 2018-04-26 20:48:12 +08:00
AdamDang b93f4e6f7e
Update cluster.go 2018-04-26 20:47:11 +08:00
AdamDang 4230115d97
Update cluster.go 2018-04-26 20:45:25 +08:00
AdamDang 7725a7637b
Update cluster.go 2018-04-22 10:17:06 +08:00
AdamDang 3703d1cc86
Update cluster.go 2018-04-22 10:16:22 +08:00
AdamDang 86108f3ce0
Update cluster.go 2018-04-22 10:15:02 +08:00
AdamDang 97fde265ca
Update instancegroup.go 2018-04-22 10:13:53 +08:00
AdamDang b3ee3af4de
Update nodeup.go 2018-04-22 10:12:08 +08:00
AdamDang 06632a71f2
Update instancegroup.go 2018-04-22 10:11:00 +08:00
AdamDang b86e1f860e
Update instancegroup.go 2018-04-22 10:09:42 +08:00
Povilas Versockas 8bfa93c304 Add public ssh keys for GCE 2018-04-21 20:15:29 +03:00
Sandeep Rajan eaac019e34 CoreDNS in kops as an addon 
fix test
 2018-04-20 17:03:17 -04:00
xh4n3 2bdb9ede97 add user-agent for statistic purpose, add dep 2018-04-19 20:57:56 +08:00
LilyFaFa ad9cf7d3e2 init ALICloud and add network Model 2018-04-19 20:48:40 +08:00
Justin Santa Barbara f06fbd0c5a Update apiserver for 1.10 2018-04-18 20:38:44 -04:00
Justin Santa Barbara 88023a3186 Update generated code 2018-04-18 20:38:44 -04:00
Mike Splain 38cd57ddd3 Update bazel configs for bazel 0.12 go_rules 0.11 2018-04-18 14:53:00 -04:00
andrewsykim 2b325be8cf digitalocean: don't set --cloud-provider=external on control plane starting v1.10 2018-04-16 18:19:38 -04:00
k8s-ci-robot 1924ce0d50
Merge pull request #5006 from andrewsykim/do-ns-records 
digitalocean: only delete A DNS records
 2018-04-15 22:01:57 -07:00
andrewsykim da1adfd764 digitalocean: only delete A DNS records 2018-04-15 20:38:58 -04:00
Justin Santa Barbara e158f84e9f Set AWS_REGION into bootstrapscript 
Fix #4451
 2018-04-12 17:39:24 -04:00
zengchen1024 f5f1ae8c3c implement router interface task 2018-04-12 18:01:09 +08:00
k8s-ci-robot 22a34586cc
Merge pull request #3498 from gambol99/psp 
Pod Security Policies
 2018-04-10 07:43:09 -07:00
Kashif Saadat bf30b2559f Update AWS IAM Policy tests following Statement ID removal 2018-04-10 15:33:51 +01:00
Kashif Saadat d665bfdcd4 Remove custom Statement IDs from IAM Policy Statements. 2018-04-10 15:33:08 +01:00
Justin Santa Barbara 7b0ac91cdb Avoid collisions in IAM ids 
Fix #4951
 2018-04-09 23:43:11 -04:00
k8s-ci-robot 5d2e730051
Merge pull request #4919 from jamesmcminn96/feature/dnsmasq-extra-config-options 
Add configurable dnsmasq params to KubeDNS
 2018-04-09 15:01:19 -07:00
k8s-ci-robot 05086c4a57
Merge pull request #4924 from chrisz100/feature/4920-add-authorization-mode-flag 
Feature/4920 add authorization mode flag
 2018-04-09 15:01:09 -07:00
k8s-ci-robot 7b4bef0e8f
Merge pull request #4928 from edmeister/master 
Configurable log level for calico
 2018-04-09 13:46:35 -07:00
k8s-ci-robot 921e9ae3a0
Merge pull request #4945 from zengchen1024/subnet 
implement subnet task for OpenStack platform
 2018-04-09 13:46:19 -07:00