kops/pkg/model
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
..
alimodel fix OWNERS labels format 2020-03-10 22:47:50 -05:00
awsmodel Add support for Spot block in launch template 2020-03-31 20:07:01 +05:30
components kube-apiserver: healthcheck via sidecar container 2020-05-07 08:06:52 -04:00
defaults Update copyright notices 2019-09-09 14:47:51 -04:00
domodel fix OWNERS labels format 2020-03-10 22:47:50 -05:00
gcemodel Move GCEServiceAccount into CloudConfig 2020-05-03 20:35:32 -07:00
iam Use etcd-manager for the cilium etcd cluster 2020-04-16 08:42:59 +02:00
openstackmodel Revert "feat(openstack): propagate cloud labels to machines" 2020-05-07 12:06:58 +03:00
resources Remove irrelevant TODO comment from userdata 2020-04-18 08:54:35 -05:00
spotinstmodel feat(spot/ocean): add support for grace period 2020-04-28 19:54:57 +03:00
tests/data Remove irrelevant TODO comment from userdata 2020-04-18 08:54:35 -05:00
vspheremodel fix OWNERS labels format 2020-03-10 22:47:50 -05:00
BUILD.bazel kube-apiserver: healthcheck via sidecar container 2020-05-07 08:06:52 -04:00
bastion.go feat: allow additional security groups on bastion ELB 2020-04-16 12:04:59 -04:00
bootstrapscript.go issue-8330: return empty nodeup template when calculating bastion userdata without additionaluserdata 2020-01-13 14:50:50 -05:00
bootstrapscript_test.go Add tests for manifest normalization 2020-01-11 22:41:18 -05:00
context.go Add CloudLabels tags to additional AWS resources 2020-04-11 13:25:52 -05:00
context_test.go Update copyright notices 2019-09-09 14:47:51 -04:00
convenience.go fix-pkg-staticcheck and remove the repeat code 2019-12-03 10:32:37 +08:00
dns.go fix-pkg-staticcheck and remove the repeat code 2019-12-03 10:32:37 +08:00
external_access.go remove the unnecessary newline and unused vars 2019-10-08 22:43:10 +08:00
firewall.go Apply suggestions from code review 2020-04-16 08:42:59 +02:00
firewall_test.go Add unit test for func JoinSuffixes 2020-04-22 16:37:19 +08:00
iam.go Add External Policies (AWS managed policy attachments) 2020-02-16 21:54:12 -08:00
manifests.go kube-apiserver: healthcheck via sidecar container 2020-05-07 08:06:52 -04:00
master_volumes.go Alicloud: etcd-manager support 2019-11-28 10:00:08 +08:00
names.go Add ability to specify no ssh key by setting sshKeyName to empty 2020-01-15 15:24:32 -05:00
network.go Remove code for unsupported k8s versions from pkg/model 2020-01-12 19:30:37 -08:00
pki.go Change Cilium templates to standalone version 2019-09-12 17:23:50 +02:00
sshkey.go Add ability to specify no ssh key by setting sshKeyName to empty 2020-01-15 15:24:32 -05:00
template_resource.go Update copyright notices 2019-09-09 14:47:51 -04:00