Justin Santa Barbara
09e834849d
Specify storage-backend=etcd2 explicitly
...
The default may change to etcd3, but we want to stick with etcd2 until
upgrade has been fully vetted.
2017-01-04 11:27:31 -05:00
Justin Santa Barbara
5c7a1c7138
Don't specify configure-cidr for k8s >= 1.5
2017-01-03 13:06:08 -05:00
Justin Santa Barbara
9545c5dbd7
Lock down bastion->master/nodes
...
Only open port 22 (SSH)
Fix #1312
2017-01-03 11:20:01 -05:00
Chris Love
99ea01c7f8
Merge pull request #1294 from justinsb/dont_set_master_pod_cidr_in_15
...
Only set PodCIDR on master in <= 1.4
2016-12-28 14:40:02 -07:00
Justin Santa Barbara
d449f40a37
Pre-create DNS records with placeholder values
...
Fixes #928
2016-12-28 13:33:23 -05:00
Justin Santa Barbara
8f9be902ce
Only set PodCIDR on master in <= 1.4
2016-12-28 13:26:45 -05:00
Justin Santa Barbara
3aae164d80
Only specify --configure-cbr0 when running with k8s <= 1.4
2016-12-27 21:09:06 -05:00
Justin Santa Barbara
ef14a1d172
Private DNS initial implementation - via feature flag
2016-12-26 14:03:31 -05:00
Justin Santa Barbara
846b7601db
Configure DockerVersion in Docker Spec
...
And automatically choose 1.12.3 for k8s >= 1.5, 1.11.2 for < 1.5
Fix #849
2016-12-20 00:34:40 -05:00
Justin Santa Barbara
8ce09c65e9
Fixes per code review
2016-12-19 01:18:28 -05:00
Justin Santa Barbara
50296f1a30
Fix file headers
2016-12-19 00:23:20 -05:00
Justin Santa Barbara
a03ea54365
Rename SubnetName -> Name
...
No schema impact
2016-12-19 00:01:38 -05:00
Justin Santa Barbara
91b77ae11e
Multi-version testing; fix few edge cases
...
By testing with data from various schema versions, we effectively check
that they are equivalent.
Also this uncovered a few places where we were not strictly ordering
things - add some sorts in there.
2016-12-18 23:14:29 -05:00
Justin Santa Barbara
4475d68c2e
Remove dead code
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
51a4adb555
Create stub IAM policy for bastions
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
ef6d1fddf5
Update tests for new TF output
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
b7522cea28
Fix API ELB security group rules
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
125b9badd8
Don't name bastion groups 'bastions.bastion...'
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
1ef2c367c1
Reintroduce subnet assignemnt logic
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
fed68310fa
Schema v1alpha2
...
* Zones are now subnets
* Utility subnet is no longer part of Zone
* Bastion InstanceGroup type added instead
* Etcd clusters defined in terms of InstanceGroups, not zones
* AdminAccess split into SSHAccess & APIAccess
* Dropped unused Multizone flag
2016-12-18 21:56:57 -05:00
Justin Santa Barbara
132a001a40
Fixes per code review
2016-12-05 02:30:53 -05:00
Justin Santa Barbara
d1ea4f969a
Make sure we set APIServerCount
...
It looks like it got lost in a refactor. Add a unit test, and move
initialization to code (and have the code self-check as well).
Also we can now have a fairly long code comment about the reasons why
this is such a mess...
Fix #371
2016-12-05 02:30:53 -05:00