57 Commits (6349aed8e8ec1ce01f2c38393c9c60023812c5b4)

Author	SHA1	Message	Date
Brad Davidson	dc556cbb72	Set controller authn/authz kubeconfigs ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Brad Davidson	a5355f0827	Replace dropped v1beta1 APIs with v1 ... Requires updating traefik as well to drop deprecated types. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Jiaqi Luo	3b01157a3a	Use New Image Names (#3749) ... * switch image names to the ones with the prefix mirrored * bump rancher/mirrored-coredns-coredns to 1.8.4 Signed-off-by: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>	3 years ago
Ryan Sanna	429af17e4d	update rancher/local-path-provisioner to v0.0.20 ... Signed-off-by: Ryan Sanna <ryansann@umich.edu>	3 years ago
Derek Nola	a1d7a62493	Fix to allow non-root users access to storage volumes. (#3714) ... * Fix to prevent non-root users from accessing storage directory, while allowing non-root users access to subdirectories. Signed-off-by: dereknola <derek.nola@suse.com> * Added integration test Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Derek Nola	3e1693bc97	Changes local storage pods to have 700 permissions (#3537) ... * Changes local storage pods to have 700 permissions Signed-off-by: dereknola <derek.nola@suse.com>	3 years ago
Derek Nola	664a98919b	Fix RBAC cloud-controller-manager name 3308 (#3388) ... * Changed cloud-controller-manager user name in ccm.yaml Signed-off-by: dereknola <derek.nola@suse.com> * Changed RBAC name in server.go Signed-off-by: dereknola <derek.nola@suse.com> * Changed "k3s" string prefix to version.Program to prevent static hardcoding Signed-off-by: dereknola <derek.nola@suse.com> * Changed user in ccm.yaml to k3s-cloud-controller-manager Signed-off-by: dereknola <derek.nola@suse.com>	4 years ago
Brad Davidson	02a5bee62f	Add system-default-registry support and remove shared code (#3285) ... * Move registries.yaml handling out to rancher/wharfie * Add system-default-registry support * Add CLI support for kubelet image credential providers Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brian Downs	693c5290b1	Update CoreDNS to version 1.8.3. (#3168) ... * update CoreDNS to 1.8.3 Rerun go generate and update the CoreDNS RBAC	4 years ago
Erik Wilson	9a53fca872	Bump traefik to v2.4.8 ... Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>	4 years ago
Erik Wilson	4aac6b6bd0	Update to Traefik 2.4.2 and combine manifests	4 years ago
Chin-Ya Huang	10e0328977	Traefik v2 integration ... K3s upgrade via watch over file change of static file and manifest and triggers helm-controller for change. It seems reasonable to only allow upgrade traefik v1->v2 when there is no existing custom traefik HelmChartConfig in the cluster to avoid any incompatibility. Here also separate the CRDs and put them into a different chart to support CRD upgrade. Signed-off-by: Chin-Ya Huang <chin-ya.huang@suse.com>	4 years ago
Brad Davidson	c5e2676d5c	Update local-path-provisioner and helper busybox (#2885) ... * Update local-path-provisioner and helper busybox Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brad Davidson	8936cf577f	Bump coredns to 1.8.0 ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brad Davidson	63f2211b31	deprecate the "node-role.kubernetes.io/master" label / taint ... Related to https://github.com/kubernetes/kubernetes/pull/95382 Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brad Davidson	cd27c6fcbe	Bump coredns to 1.7.1 ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
transhapHigsn	87a43c69e1	Problem: CoreDNS getting preempted by other pods ... Solution: Set priorityClassName to system-node-critical of traefik, metrics-server, local storage and coredns deployment Signed-off-by: transhapHigsn <fet.prashantsingh@gmail.com>	4 years ago
Brad Davidson	58b5b21f0d	Don't pass cloud-provider flag to controller-manager ... As per documentation, the cloud-provider flag should not be passed to controller-manager when using cloud-controller. However, the legacy cloud-related controllers still need to be explicitly disabled to prevent errors from being logged. Fixing this also prevents controller-manager from creating the cloud-controller-manager service account that needed extra RBAC. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brad Davidson	31575e407a	Add Cluster ID support to k3s stub cloud controller ... Resolves warning 2 from #2471. As per https://github.com/kubernetes/cloud-provider/issues/12 the ClusterID requirement was never really followed through on, so the flag is probably going to be removed in the future. One side-effect of this is that the core k8s cloud-controller-manager also wants to watch nodes, and needs RBAC to do so. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brad Davidson	ae5519c047	Use rancher-mirrored busybox for local-path-provisioner (#2257) ... Related to #1908 Will be fixed upstream by https://github.com/rancher/local-path-provisioner/pull/135/ but we're not going to update the LPP image right now since it's undergoing some changes that we don't want to pick up at the moment. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Brad Davidson	9da8dc4f61	Update coredns version to 1.6.9 for master ... Needed for #1844 Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago
Taeho Kim	3d59a85dae	Upgrade local-path-storage to v0.0.14	5 years ago
Erik Sundell	03bb1b9770	coredns: readiness- and livenessProbe tweaks ... The readinessProbe was delaying the startup of coredns greatly. This change brings startup times from ~15s to ~2-3s when testing locally. A reduction of ~80%. The livenessProbe would also take potentially more than a minute to be declared unhealthy and restarted which is now tweaked down to about 30 seconds For more information about the probes, see: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes	5 years ago
louis	f2a4e1d57d	feat: add master taint toleration to klipper, coredns, metrics-server, traefik and local-storage	5 years ago
galal-hussein	2b6faa925f	use mirrored images for traefik and coredns	5 years ago
galal-hussein	3f927d8006	Revert "Replace traefik with nginx" ... This reverts commit 9a17033095.	5 years ago
galal-hussein	c4f18227fc	default backend multiarch	5 years ago
galal-hussein	717b5a765e	use multiarch image for nginx	5 years ago
galal-hussein	9a17033095	Replace traefik with nginx	5 years ago
galal-hussein	07d4c1510d	Add lease permissions to ccm cluster role	5 years ago
Damien Duportal	16a6ad1aeb	Bump Traefik to 1.7.19	5 years ago
Erik Wilson	47a94637dc	Move metrics-server manifests to sub-directory	5 years ago
Erik Wilson	0fef39de65	Add default multi-arch metrics-server deployment	5 years ago
Erik Wilson	931f63073f	Merge pull request #899 from mrueg/coredns-ready ... coredns: Add readinessProbe	5 years ago
Darren Shepherd	ba240d0611	Refactor tokens, bootstrap, and cli args	5 years ago
Manuel Rüger	e8ca18ab2b	coredns: Add readinessProbe	5 years ago
Erik Wilson	700ee966e5	Remove namespace from local storage ClusterRole	5 years ago
galal-hussein	d2c1f66496	Add k3s cloud provider	5 years ago
galal-hussein	56e0e5ad7e	Add default local storage provisioner	5 years ago
Darren Shepherd	fae0405c00	Switch coredns to apps/v1	5 years ago
Erik Wilson	db9540aa10	Bump CoreDNS to v1.6.3	5 years ago
Manuel Zapf	50227ff894	bump traefik version to 1.7.14 (#769) ... * bump traefik version	5 years ago
Carlos Eduardo	993e6a1950	Enable metrics endpoint to Traefik	5 years ago
William Zhang	458cea6633	Update traefik to 1.7.12 ... Signed-off-by: William Zhang <warmchang@outlook.com>	5 years ago
Erik Wilson	2c9444399b	Refactor certs	6 years ago
Fabian Stegemann	ec3375c5c2	feat: expose Traefik LoadBalancer IP on Ingresses ... Configure Traefik to update the Ingress Resources `loadBalancer` status. This would provide users with at least following benefits: 1. It drastically simplifies the way one can quickly determine the relevant IP for a certain Ingress Resource, without the person deploying that Ingress needing to know how or where the LoadBalancer comes from. 2. Let's assume a User that has only permission to work in one specific namespace and is not allowed to *list* or *read* services from the `kube-system` namespace, for such a User this change would basically empower them to access the relevant information without being bottlenecked by another. 3. Allow tools like [external-dns](https://github.com/kubernetes-incubator/external-dns) to dynamically register all the available Ingress Resources with one of the Supported DNS Providers such as a local [CoreDNS](https://coredns.io).	6 years ago
Darren Shepherd	d94a346a1e	Switch to wrangler-api and helm-controller	6 years ago
Erik Wilson	31cf2bc9ee	Add coredns entries for nodes	6 years ago
Marco Mancini	b445bad171	Add --cluster-domain option	6 years ago
Erik Wilson	a4df9f4ab1	Kubelet resolv.conf DNS update ... Allow the kubelet resolv-conf flag to be set, or automatically discovered from /etc/resolv.conf & /run/systemd/resolve/resolv.conf if no loopback devices are present, or create our own which points to nameserver 8.8.8.8	6 years ago