a644b7c267
Introducing credentials_dir in order to be able to override it
6 years ago
ee8f678010
Addition of the .creds extension to the credentials files generated by password lookup in order for Ansible not to consider them as inventory files with inventory_ignore_extensions set accordingly ( #2446 )
6 years ago
1a1d154e14
Support multiple inventory files under individual inventory directory
6 years ago
d487b2f927
Security best practice fixes ( #1783 )
* Disable basic and token auth by default
* Add recommended security params
* allow basic auth to fail in tests
* Enable TLS authentication for kubelet
7 years ago
8e731337ba
Enable HA deploy of kubeadm ( #1658 )
* Enable HA deploy of kubeadm
* raise delay to 60s for starting gce hosts
7 years ago
0f231f0e76
Improve method to create and wait for gce instances ( #1645 )
7 years ago
f29a42721f
Clean up debug in check apiserver test ( #1638 )
* Clean up debug in check apiserver test
* Change password generation for kube_user
Special characters are not allowed in known_users.csv file
7 years ago
7117614ee5
Use a generated password for kube user ( #1624 )
Removed unnecessary root user
7 years ago
d31c040dc0
Change kube-api default port from 443 to 6443
Operator can specify any port for kube-api (6443 default) This helps in
case where some pods such as Ingress require 443 exclusively.
Closes: 820
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
0b67c23d42
test the apiserver from the masters instead of the deployment machine
8 years ago
caa2555b1d
Add complete test integration
8 years ago
Erwan Miran
mirwan
Wong Hoi Sing Edison
Matthew Mosesohn
Matthew Mosesohn
Sergii Golovatiuk
Smana
ant31