ee8f678010
Addition of the .creds extension to the credentials files generated by password lookup in order for Ansible not to consider them as inventory files with inventory_ignore_extensions set accordingly ( #2446 )
6 years ago
2e0b33f754
Add remove node to getting-started doc
6 years ago
a086686e9f
Support multiple artifacts under individual inventory directory
6 years ago
1a1d154e14
Support multiple inventory files under individual inventory directory
6 years ago
1869aa3985
remove references to deprecated kubespray cli
6 years ago
0c6f172e75
Kubernetes Dashboard v1.7.1 Refactor
This version required changing the previous access model for dashboard completely but it's a change for the better. Docs were updated.
* New login/auth options that use apiserver auth proxying by default
* Requires RBAC in `authorization_modes`
* Only serves over https
* No longer available at https://first_master:6443/ui until apiserver is updated with the https proxy URL:
* Can access from https://first_master:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login you will be prompted for credentials
* Or you can run 'kubectl proxy' from your local machine to access dashboard in your browser from: http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/
* It is recommended to access dashboard from behind a gateway that enforces an authentication token, details and other access options here: https://github.com/kubernetes/dashboard/wiki/Accessing-Dashboard---1.7.X-and-above
7 years ago
a2bda9e5f1
Eliminate jinja2 template expression warning and rename coreos-python var ( #1911 )
* Change deprecated vagrant ansible flag 'sudo' to 'become'
* Emphasize, that the name of the pip_pyton_modules is only considered in coreos
* Remove useless unused variable
* Fix warning when jinja2 template-delimiters used in when statement
There is no need for jinja2 template-delimiters like {{ }} or {% %}
any more. They can just be omitted as described in https://github.com/ansible/ansible/issues/22397
* Fix broken link in getting-started guide
7 years ago
d487b2f927
Security best practice fixes ( #1783 )
* Disable basic and token auth by default
* Add recommended security params
* allow basic auth to fail in tests
* Enable TLS authentication for kubelet
7 years ago
6f17d0817b
Updating getting-started.md ( #1683 )
Signed-off-by: Junaid Ali <junaidali.yahya@gmail.com>
7 years ago
ef8e35e39b
Create admin credential kubeconfig ( #1647 )
New files: /etc/kubernetes/admin.conf
/root/.kube/config
$GITDIR/artifacts/{kubectl,admin.conf}
Optional method to download kubectl and admin.conf if
kubeconfig_lcoalhost is set to true (default false)
7 years ago
943aaf84e5
Update getting-started.md
7 years ago
9fa1873a65
Add kube dashboard, enabled by default ( #1643 )
* Add kube dashboard, enabled by default
Also add rbac role for kube user
* Update main.yml
7 years ago
7117614ee5
Use a generated password for kube user ( #1624 )
Removed unnecessary root user
7 years ago
83265b7f75
renaming kargo-cli to kubespray-cli
7 years ago
8203383c03
rename almost all mentions of kargo
7 years ago
16b10b026b
add scale.yml to do minimum needed for a node bootstrap
7 years ago
18a42e4b38
add scale.yml to do minimum needed for a node bootstrap
7 years ago
9503434d53
Fix IPS array variable expansion
$IPS only expands to the first ip address in the array:
justin@box:~$ declare -a IPS=(10.10.1.3 10.10.1.4 10.10.1.5)
justin@box:~$ echo $IPS
10.10.1.3
justin@box:~$ echo ${IPS[@]}
10.10.1.3 10.10.1.4 10.10.1.5
7 years ago
d197ce230f
Fix cluster.yml file extension in docs
7 years ago
d8f46c4410
Highlight important action
7 years ago
d0757ccc5e
Fix typo
7 years ago
f742fc3dd1
Add scale thresholds to split etcd and k8s-masters
Also adds calico-rr group if there are standalone etcd nodes.
Now if there are 50 or more nodes, 3 etcd nodes will be standalone.
If there are 200 or more nodes, 2 kube-masters will be standalone.
If thresholds are exceeded, kube-node group cannot add nodes that
belong to etcd or kube-master groups (according to above statements).
7 years ago
caab0cdf27
Docs updates
Fix mismatching inventory examples.
Add command examples.
Clarify groups use cases.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
7 years ago
6fb6947feb
Fix inventory generator link
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
7 years ago
7b86b87dca
Add inventory builder python script
Includes tox support for running unit tests.
Small note added to getting-started guide for using
inventory_builder.py
Also adds manual-only unit test.
8 years ago
585102ee20
add documentation
8 years ago
mirwan
rong.zhang
Wong Hoi Sing Edison
Spencer Smith
Chad Swenson
Günther Grill
Matthew Mosesohn
Junaid Ali
Matthew Mosesohn
Justin
Kopylov German
Hung Nguyen Viet
Bogdan Dobrelya
Smaine Kahlouch