airship
/
promenade
Code Issues Proposed changes
promenade/charts
History
Phil Sphicas fb36579e16 kube-apiserver: use HTTP probes instead of exec 
The existing exec probes for apiserver rely on things that do not exist
in the official kubernetes release images (bash, socat).

This change modifies the apiserver to use HTTP probes of the recommended
liveness and readiness endpoints.[0]

Also sets `--anonymous-auth=true` (the default setting), as kubelet is
unable to provide a client certificate when performing the health check.
RBAC rules apply, but unauthenticated users will be able to access the
following endpoints:

    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRole
    metadata:
      name: system:public-info-viewer
    rules:
    - nonResourceURLs:
      - /healthz
      - /livez
      - /readyz
      - /version
      - /version/
      verbs:
      - get

0: https://v1-18.docs.kubernetes.io/docs/reference/using-api/health-checks/

Change-Id: I06d739c844fe85ec6cbf47d3bb69a39cd008ddd8
 		2020-09-28 03:27:58 +00:00
..
apiserver kube-apiserver: use HTTP probes instead of exec 2020-09-28 03:27:58 +00:00
apiserver-webhook Remove /hyperkube prefix 2020-09-26 07:53:46 +00:00
controller_manager Remove /hyperkube prefix 2020-09-26 07:53:46 +00:00
coredns Change helm-toolkit dependency version to ">= 0.1.0" 2020-09-24 19:43:10 -05:00
etcd Change helm-toolkit dependency version to ">= 0.1.0" 2020-09-24 19:43:10 -05:00
haproxy Change helm-toolkit dependency version to ">= 0.1.0" 2020-09-24 19:43:10 -05:00
promenade Change helm-toolkit dependency version to ">= 0.1.0" 2020-09-24 19:43:10 -05:00
proxy Remove /hyperkube prefix 2020-09-26 07:53:46 +00:00
scheduler Remove /hyperkube prefix 2020-09-26 07:53:46 +00:00
.gitignore Add initial Makefile 2017-10-31 12:46:23 -05:00