k3s/cluster/gce/trusty
k8s-merge-robot 1eb221e96f Merge pull request #25561 from andyzheng0831/webhook
Automatic merge from submit-queue

Configuration for GCP webhook authentication and authorization

This PR adds configuration for GCP webhook authentication and authorization in ContainerVM and GCI. The change of configure-vm.sh and kube-apiserver.manifest is directly copied from @cjcullen's PR #25380 and #25296. The change in GCI script configure-helper.sh includes the support for webhook authentication and authorization, and also some code refactor to improve readability.

@cjcullen @roberthbailey @zmerlynn please review it. The original PRs are P1, please mark this as P1.

cc/ @fabioy @kubernetes/goog-image FYI.

I verified it by running e2e tests on GCI cluster. Without the GCI side change, cluster creation fails as being capture by GKE Jenkins tests. I don't test when the two env GCP_AUTHN_URL and GCP_AUTHZ_URL are set, because they are only set in GKE. After this PR is merged, @cjcullen will test in GKE.
2016-05-21 22:30:14 -07:00
..
configure-helper.sh Merge pull request #25561 from andyzheng0831/webhook 2016-05-21 22:30:14 -07:00
configure.sh Revert "Add support for running GCI on the GCE cloud provider" 2016-05-18 21:31:28 -07:00
helper.sh Make bigger master root disks in GCE for large clusters 2016-05-16 15:57:56 +02:00
master.yaml GCI: Enable logs for upstart jobs 2016-05-13 22:29:24 -07:00
node.yaml GCI: Enable logs for upstart jobs 2016-05-13 22:29:24 -07:00