kubernetes/kops - kops - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
Justin SB	68b826328d	Update set-version script to bump tag in Makefile I had forgotten to automatically bump the KUBE_APISERVER_HEALTHCHECK_TAG in the Makefile. Also add pushing the image to the release procedure.	2020-05-31 12:45:36 -04:00
Justin SB	75fd939a62	kube-apiserver: healthcheck via sidecar container kube-apiserver doesn't expose the healthcheck via a dedicated endpoint, instead relying on anonyomous-access being enabled. That has previously forced us to enable the unauthenticated endpoint on 127.0.0.1:8080. Instead we now run a small sidecar container, which proxies /healthz and /readyz requests (only) adding appropriate authentication using a client certificate. This will also enable better load balancer checks in future, as these have previously been hampered by the custom CA certificate. Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>	2020-05-07 08:06:52 -04:00
Justin SB	666f5dfde7	Update release process * We need to publish kops-controller image * Including experimental hack/set-version script that should help with rolling versions	2020-02-27 09:34:26 -05:00

Author

SHA1

Message

Date

Justin SB

68b826328d

Update set-version script to bump tag in Makefile

I had forgotten to automatically bump the
KUBE_APISERVER_HEALTHCHECK_TAG in the Makefile.

Also add pushing the image to the release procedure.

2020-05-31 12:45:36 -04:00

Justin SB

75fd939a62

kube-apiserver: healthcheck via sidecar container

kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>

2020-05-07 08:06:52 -04:00

Justin SB

666f5dfde7

Update release process

* We need to publish kops-controller image
* Including experimental hack/set-version script that should help with rolling versions

2020-02-27 09:34:26 -05:00

3 Commits