upstream/kubernetes
1
0
Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-02-18 10:18:14 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
kubernetes/cluster
History
Kubernetes Submit Queue b72e61edaa
Merge pull request #67624 from tallclair/psp-addons 
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Allow adding default capabilities to unprivileged addons

**What this PR does / why we need it**:

Allow adding the default set of capabilities back to unprivileged addons, when using the the default GCE PodSecurityPolicies. This is useful when paired with `drop: [ 'all' ]`

This is not a relaxation of permissions, as a pod that didn't touch capabilities (implicitly has the default set) is already allowed.

**Which issue(s) this PR fixes**:
Fixes https://github.com/kubernetes/dns/issues/254

**Release note**:
```release-note
NONE
```
2018-08-21 19:51:07 -07:00
..
addons Merge pull request #67582 from monotek/kibana 2018-08-20 20:39:13 -07:00
centos Disable initializers by default 2018-07-10 15:14:32 -04:00
gce Allow adding default capabilities to unprivileged addons 2018-08-20 17:28:09 -07:00
images Add Labels to various OWNERS files 2018-08-21 13:59:08 -04:00
juju Merge pull request #66523 from hyperbolic2346/mwilson/ceph 2018-08-21 13:00:05 -07:00
kubemark Adding IKS functionality to kubemark 2018-07-23 11:42:22 -04:00
kubernetes-anywhere Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
local Remove duplicated detect-master for local 2018-08-15 19:04:40 +00:00
log-dump Use gcr.io/k8s-testimages/logexporter:v0.1.2. 2018-08-09 13:23:34 +02:00
pre-existing Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
skeleton Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
BUILD Add unit test for configure-helper. 2018-04-23 12:18:57 -07:00
clientbin.sh enable e2e test on Arm64 2018-08-13 16:34:25 +08:00
common.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
get-kube-binaries.sh Make get-kube.sh work properly the "ci/latest" pointer 2017-04-05 15:02:10 -07:00
get-kube-local.sh fix create-kubelet-kubeconfig. 2018-08-10 16:07:49 +08:00
get-kube.sh Remove salt support for providers that no longer exist. 2018-01-12 15:51:23 -08:00
kube-down.sh Exit gce kube-up.sh early if openssl is LibreSSL 2018-07-26 14:48:51 -07:00
kube-up.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
kube-util.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
kubeadm.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
kubectl.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
OWNERS Add Labels to various OWNERS files 2018-08-21 13:59:08 -04:00
README.md Update docs/ URLs to point to proper locations 2017-06-05 22:13:54 -07:00
restore-from-backup.sh Remove references to the Debian-based Container-VM image 2018-07-03 17:05:31 -07:00
test-e2e.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
test-network.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
test-smoke.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
update-storage-objects.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00
validate-cluster.sh Update all script to use /usr/bin/env bash in shebang 2018-04-19 13:20:13 +02:00

README.md

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.

Analytics