kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
11,349 Commits 31 Branches 256 Tags 544 MiB
Commit Graph

37 Commits

Author SHA1 Message Date
Ciprian Hacman a7c8d2087c Use github.com/blang/semver/v4 2020-07-01 08:54:42 +03:00
Justin SB 854a4548e3 Refactor kubemanifest to be clearer 
Primarily renaming manifests to objects, which is a more accurate
term.
 2020-06-11 21:40:51 -04:00
John Gardiner Myers e88e0cf7ec Remove code supporting dropped k8s versions 2020-06-04 12:11:51 -07:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container 
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
 2020-05-07 08:06:52 -04:00
Justin SB f348b47332
Don't output empty sections in the manifests 
In our kube-dns manifest for 1.6 we often had an empty section,
normalization converted this to `{}` which causes `kubectl apply` to
fail.

We can simply skip empty objects when outputing.
 2020-01-11 20:58:24 -05:00
tanjunchen f45dba4b62 replace TrimRight with TrimSuffix 2019-12-16 09:45:49 +08:00
Justin SB 6cb341dfeb
Add kops-controller to default adddons 2019-09-25 12:04:37 -04:00
Justin SB cc20210c27
Log more sensibly when we can't get sha256 
Issue #7550
 2019-09-10 10:03:54 -04:00
Justin SB f9bf9bbb9d
Ignore empty hashfiles 
While developing sha256 support, I observed that an empty hash file
caused a panic.
 2019-08-25 16:03:13 -04:00
Justin SB eca2ac6b80
Look for sha256 and sha1 files for artifacts 2019-08-23 18:26:25 -04:00
Justin SB 3e33ac7682
Change code from glog to klog 
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog.  That
will happen when we update to k8s 1.13.
 2019-05-06 12:54:51 -04:00
Justin SB 9360887551
Refactor names of URLs in assets to clarify their purpose 2019-03-14 00:37:25 -04:00
Justin SB 26bd75aecb
Bulk spelling fixes 
Experimenting with my own spelling checker, these are the typos it caught.
 2018-12-20 17:43:56 -05:00
Justin Santa Barbara 0914959ba7 Recognize shasum format for hashes 
The CNI assets have started publishing with shasum files as their
.sha1 files, instead of the bare hashes we use elsewhere.
 2018-10-08 10:24:36 -04:00
Christian Kampka 05af75fac3 ContainerRegistry remapping should be atomic 
Fixes #5061
 2018-07-20 20:56:52 +02:00
Christian Kampka 97c1211338 Finish builder implementation and add tests 2018-07-06 14:32:29 +02:00
Christian Kampka cbcd7d43c0 Run gofmt 2018-07-06 14:32:29 +02:00
Christian Kampka 4d87fb6a74 Destinguish between docker hub and convenience registry domain 2018-07-06 14:32:29 +02:00
Christian Kampka 7e3221a2fb Add pull-through proxy cache for asset docker images 2018-07-06 14:32:29 +02:00
Christian Kampka 921591343a Fix containerRegistry for Kubernetes < 1.10 2018-06-20 09:46:55 +02:00
AdamDang f7b5849266
Typo fix in error message 
an nil URL -> a nil URL
 2018-04-02 20:20:04 +08:00
Justin Santa Barbara df47310e41 Fix comment on RemapFileAndSHA 2018-02-22 21:42:41 -08:00
Justin Santa Barbara e4fafa6065 Use legacy image registry gcr.io/google_containers for <= 1.9 
The k8s.gcr.io prefix is an alias, but for CI builds we run from a
docker load, and we only double-tag from 1.10 onwards.  For versions
prior to 1.10, remap k8s.gcr.io to the old name.  This also means that
we won't start using the aliased names on existing clusters, which could
otherwise be surprising to users.
 2018-02-22 21:42:33 -08:00
k8s-ci-robot 4b8db1eee0
Merge pull request #4137 from thockin-tmp/gcr-vanity 
Convert registry to k8s.gcr.io
 2018-02-20 08:54:39 -08:00
Rohith c8e4a1caf8 Kubernetes Calico TLS 
The current implementation when Etcd TLS was added does not support using calico as the configuration and client certificates are not present. This PR updates the calico manifests and adds the distribution of the client certificate
 2018-02-14 23:41:45 +00:00
Tim Hockin 79d5f793e7 Convert registry to k8s.gcr.io 2018-02-14 10:08:41 -08:00
chrislovecnm 7057aaf1bb Enabling the file assets 
File assets and the SHA files are uploaded to the new location. Files
when are users uses s3 are upload public read only. The copyfile task
uses only the existing SHA value.

This PR include major refactoring of the use of URLs.  Strings are no
longer categnated, but converted into a URL struct and path.Join is
utlilized.

A new values.go file is included so that we can start refactoring more
code out of the "fi" package.

A
 2017-12-17 15:26:57 -07:00
chrislovecnm 2afdb5ab2e mapping-and-uploading-kube-assets 2017-08-21 15:16:56 -06:00
chrislovecnm ee17e6567c starting work on file assets builder 2017-08-18 13:04:12 -06:00
Justin Santa Barbara 0115ece62d Remap pause image through our AssetBuilder 2017-07-22 00:35:37 -04:00
Justin Santa Barbara 76743e64de Copy docker images when they are redirected 2017-07-20 23:40:46 -04:00
Justin Santa Barbara 8b717cfe63 Add a feature flag for formatting assets 
Image rewriting involves a yaml format of the manifests, which makes for
a large and hard to read diff.  Add a feature flag to disable it, along
with a workaround to the release notes.
 2017-07-17 21:44:56 -04:00
Justin Santa Barbara adec498834 Cleaner yaml formatting 
Don't insert an extra blank line before separators, don't insert a
separator at the end.
 2017-07-16 23:59:19 -04:00
chrislovecnm bfc78e18b7 fixing remapping, as it was not returning the remapped data. Code and logging cleanup 2017-07-12 11:36:06 -06:00
Justin Santa Barbara 1965a4be49 Updates to fix unit tests 2017-07-08 18:46:01 -04:00
Justin Santa Barbara 973492b678 Start collecting assets 2017-07-08 18:33:00 -04:00
Justin Santa Barbara 9a8fcd64e4 Simplify how we build addon manifests, support image redirection 2017-07-08 18:33:00 -04:00