Matthew Mosesohn
d487b2f927
Security best practice fixes ( #1783 )
* Disable basic and token auth by default
* Add recommended security params
* allow basic auth to fail in tests
* Enable TLS authentication for kubelet
7 years ago
Matthew Mosesohn
8e731337ba
Enable HA deploy of kubeadm ( #1658 )
* Enable HA deploy of kubeadm
* raise delay to 60s for starting gce hosts
7 years ago
Matthew Mosesohn
0f231f0e76
Improve method to create and wait for gce instances ( #1645 )
7 years ago
Matthew Mosesohn
f29a42721f
Clean up debug in check apiserver test ( #1638 )
* Clean up debug in check apiserver test
* Change password generation for kube_user
Special characters are not allowed in known_users.csv file
7 years ago
Matthew Mosesohn
7117614ee5
Use a generated password for kube user ( #1624 )
Removed unnecessary root user
7 years ago
Sergii Golovatiuk
d31c040dc0
Change kube-api default port from 443 to 6443
Operator can specify any port for kube-api (6443 default) This helps in
case where some pods such as Ingress require 443 exclusively.
Closes: 820
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Smana
0b67c23d42
test the apiserver from the masters instead of the deployment machine
8 years ago
ant31
caa2555b1d
Add complete test integration
8 years ago