432f8e9841
Fix basic auth tokens for kubeadm deployment. ( #3801 )
* Fix basic auth tokens for kubeadm deployment.
* Tokens should be a dependancy on master, not nodes
6 years ago
fcd8d850dc
Fix ansible syntax to avoid ansible warnings (again) ( #3509 )
* Fix ansible syntax to avoid ansible warnings (again)
* warn: false on tar -cfz
* wrong placement of warn:false
6 years ago
a3f568fc64
restart scheduler and controller-manager too
8 years ago
1887e984a0
Change wait for dnsmasq to skip if there are no kube-nodes in play
Also changed unnecessary delay to a max timeout (now defaulting to 1s sleep
between tries)
Also rename play_hosts to ansible_play_hosts
8 years ago
a422ad0d50
More idempotency fixes
Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks
8 years ago
026da060f2
Granular authentication Control
It is now possible to deactivate selected authentication methods
(basic auth, token auth) inside the cluster by adding
removing the required arguments to the Kube API Server and generating
the secrets accordingly.
The x509 authentification is currently not optional because disabling it
would affect the kubectl clients deployed on the master nodes.
8 years ago
0e9d1e09e3
Sync master tokens only with those in play_hosts
8 years ago
ae5ff890d4
fix flannel deployment, remove docker bridge before restarting
9 years ago
4f627baf71
generate secrets on first master
9 years ago
Andreas Krüger
Erwan Miran
Matthew Mosesohn
Vincent Schwarzer
Smana