Justin Santa Barbara
d7639691e9
Call /bin/systemd-machine-id-setup as part of init
...
Just in case nobody else sets it!
2016-09-24 10:18:30 -04:00
Justin Santa Barbara
6d139d06d1
Support labels on k8s nodes and AWS instances
...
A lot of supporting work was needed, including improvements to the model
and model generation logic.
2016-09-13 12:47:16 -04:00
Justin Santa Barbara
9ee663764f
Merge pull request #378 from justinsb/reapply_365
...
Reapply #365
2016-09-09 10:04:55 -04:00
Justin Santa Barbara
62d5451b25
Initial (experimental) Ubuntu 16.04 support
2016-09-08 10:20:42 -04:00
Justin Santa Barbara
d3ab070b0d
Use go-bindata to embed our models
...
This allows us to have single-file deployment
2016-09-07 11:56:03 -04:00
Justin Santa Barbara
1b91f417e5
Build IAM policy in code
...
Easier to get right than relying on string manipulation, but we're still
doing the same policies, with the improvements as done by @weargoogles.
2016-08-27 21:18:23 -04:00
Justin Santa Barbara
a3eda654db
Revert "Revert "include change to node policy to cover #363""
...
This reverts commit ca1a52ff3e
.
2016-08-27 17:38:01 -04:00
Justin Santa Barbara
4df50773c1
Revert "Revert "Restrict master access to state store bucket""
...
This reverts commit c11a370c9a
.
2016-08-27 17:37:55 -04:00
Justin Santa Barbara
c11a370c9a
Revert "Restrict master access to state store bucket"
...
This reverts commit 369a6ea1db
.
2016-08-27 16:31:53 -04:00
Justin Santa Barbara
ca1a52ff3e
Revert "include change to node policy to cover #363"
...
This reverts commit 969af97b60
.
2016-08-27 16:31:38 -04:00
Pete Wildsmith
969af97b60
include change to node policy to cover #363
2016-08-24 17:19:54 +01:00
Pete Wildsmith
369a6ea1db
Restrict master access to state store bucket
...
This change increases the specificity of the master's state store bucket contents permission to only the top-level folder named after the cluster.
Fixes #365
2016-08-24 17:03:10 +01:00
Justin Santa Barbara
8fb4215e17
Run CI versions of k8s
...
CI versions are not pushed to gcr.io, so we need to preload the images
by downloading them and doing a docker load.
2016-08-11 01:32:42 -04:00
Fotios Lindiakos
be2fcca933
Remove trimming in AWS templates
2016-07-26 11:14:55 -04:00
Justin Santa Barbara
11d51b04a9
Adapt IAM policies when running in cn-north-1
...
Fix #27
2016-07-21 22:19:43 -04:00
Justin Santa Barbara
a0d8302255
Merge pull request #156 from slack/protokube-dns
...
upup/protokube: tell protokube to use --dns-zone-name
2016-06-27 00:41:11 -04:00
Justin Santa Barbara
ee325435e6
Rationalize properties to the minimal set
2016-06-26 09:45:05 -04:00
Jason Hansen
0d276591d5
upup/cloudup: use configured URL for nodeup location
2016-06-26 04:26:37 +00:00
Justin Santa Barbara
93f634b428
upup: use vfs for secretstore/keystore
...
This is needed so that we can have encrypted storage and complex keys
(e.g. multiple CA certs). Multiple CA certs are needed for an in-place
upgrade from kube-up v1.
2016-06-23 08:58:54 -04:00
Justin Santa Barbara
6cf5cd423e
upup: apply IAM changes
...
We now apply changes to IAM policies, and print the diffs.
2016-06-07 15:17:59 -04:00
Justin Santa Barbara
caccb8953f
UpUp: AWS support
...
Adds AWS support for both cloudup & nodeup.
Also cleaning up things found along the way!
2016-05-09 13:08:27 -04:00