github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/cluster/gce/gci
History
Kubernetes Submit Queue b1279a31b9 Merge pull request #40172 from liggitt/abac-upgrade 
Automatic merge from submit-queue (batch tested with PRs 38739, 40480, 40495, 40172, 40393)

Use existing ABAC policy file when upgrading GCE cluster

When upgrading, continue loading an existing ABAC policy file so that existing system components continue working as-is

```
When upgrading an existing 1.5 GCE cluster using `cluster/gce/upgrade.sh`, an existing ABAC policy file located at /etc/srv/kubernetes/abac-authz-policy.jsonl (the default location in 1.5) will enable the ABAC authorizer in addition to the RBAC authorizer. To switch an upgraded 1.5 cluster completely to RBAC, ensure the control plane components and your superuser have been granted sufficient RBAC permissions, move the legacy ABAC policy file to a backup location, and restart the apiserver.
```
 		2017-01-25 21:20:32 -08:00
..
mounter Remove all MAINTAINER statements in the codebase as they aren't very useful and now deprecated 2016-12-17 20:34:10 +02:00
README.md Update Container-VM Image product name in docs 2016-09-09 10:08:56 -07:00
configure-helper.sh Merge pull request #40172 from liggitt/abac-upgrade 2017-01-25 21:20:32 -08:00
configure.sh Generate a kubelet CA and kube-apiserver cert-pair for kubelet auth. 2017-01-03 14:30:45 -08:00
health-monitor.sh Merge pull request #39691 from yujuhong/bump_timeout 2017-01-10 21:25:16 -08:00
helper.sh Ensure the GCI metadata files do not have whitespace at the end 2016-12-13 13:41:54 -08:00
master-helper.sh Fixed propagation of kube master certs during master replication. 2017-01-20 13:24:09 +01:00
master.yaml Add a bare-bones level of indirection for GCI mounter 2016-10-24 05:50:24 -07:00
node-helper.sh Splitting OS_DISTRIBUTION into NODE_OS_DISTRIBUTION and 2016-07-15 12:02:31 -07:00
node.yaml Add a bare-bones level of indirection for GCI mounter 2016-10-24 05:50:24 -07:00

README.md

Container-VM Image

Container-VM Image is a container-optimized OS image for the Google Cloud Platform (GCP). It is primarily for running Google services on GCP. Unlike the open preview version of container-vm, the new Container-VM Image is based on the open source ChromiumOS project, allowing us greater control over the build management, security compliance, and customizations for GCP.

Analytics