kubespray

81 Tags

147 MiB

Tree: 36b62b7270

Author	SHA1	Message	Date
Greg Althaus	95bf380d07	If the inventory name of the host exceeds 63 characters, the openssl tools will fail to create signing requests because the CN is too long. This is mainly a problem when FQDNs are used in the inventory file. THis will truncate the hostname for the CN field only at the first dot. This should handle the issue for most cases.	7 years ago
Matthew Mosesohn	f0c0390646	Fix creation and sync of etcd certs Admin certs only go to etcd nodes Only generate cert-data for nodes that need sync	7 years ago
Matthew Mosesohn	ad796d188d	Individual etcd ssl certs Includes hooks for triggering calico, kubelet, and kube-apiserver restarts if etcd certs changed.	8 years ago
Matthew Mosesohn	a32cd85eb7	Add etcd TLS support	8 years ago
Matthew Mosesohn	84052ff0b6	use nginx proxy on non-master nodes to proxy apiserver traffic Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works.	8 years ago
Smana	4f627baf71	generate secrets on first master	8 years ago
Spencer Smith	20adb604cc	confirmed working change to mktemp command	8 years ago
Smana	91fca69aa0	generate secrets on deployment machine test travis with sudo=true instead of required	8 years ago
Smaine Kahlouch	d1e19563b0	Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs	9 years ago