af635ff3ff
[remove-node] add doku for nodeselector
6 years ago
ee8f678010
Addition of the .creds extension to the credentials files generated by password lookup in order for Ansible not to consider them as inventory files with inventory_ignore_extensions set accordingly ( #2446 )
6 years ago
2e0b33f754
Add remove node to getting-started doc
6 years ago
a086686e9f
Support multiple artifacts under individual inventory directory
6 years ago
1a1d154e14
Support multiple inventory files under individual inventory directory
6 years ago
1869aa3985
remove references to deprecated kubespray cli
6 years ago
0c6f172e75
Kubernetes Dashboard v1.7.1 Refactor
This version required changing the previous access model for dashboard completely but it's a change for the better. Docs were updated.
* New login/auth options that use apiserver auth proxying by default
* Requires RBAC in `authorization_modes`
* Only serves over https
* No longer available at https://first_master:6443/ui until apiserver is updated with the https proxy URL:
* Can access from https://first_master:6443/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login you will be prompted for credentials
* Or you can run 'kubectl proxy' from your local machine to access dashboard in your browser from: http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/
* It is recommended to access dashboard from behind a gateway that enforces an authentication token, details and other access options here: https://github.com/kubernetes/dashboard/wiki/Accessing-Dashboard---1.7.X-and-above
7 years ago
a2bda9e5f1
Eliminate jinja2 template expression warning and rename coreos-python var ( #1911 )
* Change deprecated vagrant ansible flag 'sudo' to 'become'
* Emphasize, that the name of the pip_pyton_modules is only considered in coreos
* Remove useless unused variable
* Fix warning when jinja2 template-delimiters used in when statement
There is no need for jinja2 template-delimiters like {{ }} or {% %}
any more. They can just be omitted as described in https://github.com/ansible/ansible/issues/22397
* Fix broken link in getting-started guide
7 years ago
d487b2f927
Security best practice fixes ( #1783 )
* Disable basic and token auth by default
* Add recommended security params
* allow basic auth to fail in tests
* Enable TLS authentication for kubelet
7 years ago
6f17d0817b
Updating getting-started.md ( #1683 )
Signed-off-by: Junaid Ali <junaidali.yahya@gmail.com>
7 years ago
ef8e35e39b
Create admin credential kubeconfig ( #1647 )
New files: /etc/kubernetes/admin.conf
/root/.kube/config
$GITDIR/artifacts/{kubectl,admin.conf}
Optional method to download kubectl and admin.conf if
kubeconfig_lcoalhost is set to true (default false)
7 years ago
943aaf84e5
Update getting-started.md
7 years ago
9fa1873a65
Add kube dashboard, enabled by default ( #1643 )
* Add kube dashboard, enabled by default
Also add rbac role for kube user
* Update main.yml
7 years ago
7117614ee5
Use a generated password for kube user ( #1624 )
Removed unnecessary root user
7 years ago
83265b7f75
renaming kargo-cli to kubespray-cli
7 years ago
8203383c03
rename almost all mentions of kargo
7 years ago
16b10b026b
add scale.yml to do minimum needed for a node bootstrap
7 years ago
18a42e4b38
add scale.yml to do minimum needed for a node bootstrap
7 years ago
9503434d53
Fix IPS array variable expansion
$IPS only expands to the first ip address in the array:
justin@box:~$ declare -a IPS=(10.10.1.3 10.10.1.4 10.10.1.5)
justin@box:~$ echo $IPS
10.10.1.3
justin@box:~$ echo ${IPS[@]}
10.10.1.3 10.10.1.4 10.10.1.5
7 years ago
d197ce230f
Fix cluster.yml file extension in docs
7 years ago
d8f46c4410
Highlight important action
7 years ago
d0757ccc5e
Fix typo
7 years ago
f742fc3dd1
Add scale thresholds to split etcd and k8s-masters
Also adds calico-rr group if there are standalone etcd nodes.
Now if there are 50 or more nodes, 3 etcd nodes will be standalone.
If there are 200 or more nodes, 2 kube-masters will be standalone.
If thresholds are exceeded, kube-node group cannot add nodes that
belong to etcd or kube-master groups (according to above statements).
7 years ago
caab0cdf27
Docs updates
Fix mismatching inventory examples.
Add command examples.
Clarify groups use cases.
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
7 years ago
6fb6947feb
Fix inventory generator link
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
7 years ago
7b86b87dca
Add inventory builder python script
Includes tox support for running unit tests.
Small note added to getting-started guide for using
inventory_builder.py
Also adds manual-only unit test.
8 years ago
585102ee20
add documentation
8 years ago
Mark Eisenblaetter
mirwan
rong.zhang
Wong Hoi Sing Edison
Spencer Smith
Chad Swenson
Günther Grill
Matthew Mosesohn
Junaid Ali
Matthew Mosesohn
Justin
Kopylov German
Hung Nguyen Viet
Bogdan Dobrelya
Smaine Kahlouch