commit 8b1bfb21d125af104610d2e25e8d6e1c9afbfd4a
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Tue Aug 6 20:08:44 2019 -0500
Add previous stuff
M .gitignore
M .travis.yml
A burnin/._Author.meta
A burnin/._CodeSource.meta
A burnin/._Color.meta
A burnin/._Copyright.meta
A burnin/._Description.meta
A burnin/._DisplayName.meta
A burnin/._DocUrl.meta
A burnin/._Icon.meta
A burnin/._License.meta
A burnin/._Name.meta
A burnin/._Order.meta
A burnin/._Source.meta
A burnin/._Tags.meta
A burnin/params/burnin-cpumem-duration.yml
A burnin/params/burnin-disk-destructive.yml
A burnin/params/burnin-disk-test-ssd.yml
A burnin/params/burnin-reboot-count.yml
A burnin/params/burnin-reboot-progress.yml
A burnin/params/burnin-reboot-skip.yml
A burnin/params/burnin-skip.yml
A burnin/stages/burnin-reboot.yml
A burnin/stages/burnin-reset.yml
A burnin/stages/burnin.yml
A burnin/stages/shred.yml
A burnin/tasks/burnin_complete.yml
A burnin/tasks/burnin_reboot.yml
A burnin/tasks/burnin_reboot_reset.yml
A burnin/tasks/burnin_reset.yml
A burnin/tasks/cpumem_stress.yml
A burnin/tasks/disk_stress.yml
A burnin/tasks/shred.yml
A classify-tests/._Author.meta
A classify-tests/._CodeSource.meta
A classify-tests/._Color.meta
A classify-tests/._Copyright.meta
A classify-tests/._Description.meta
A classify-tests/._DisplayName.meta
A classify-tests/._DocUrl.meta
A classify-tests/._Documentation.meta
A classify-tests/._Icon.meta
A classify-tests/._License.meta
A classify-tests/._Name.meta
A classify-tests/._Order.meta
A classify-tests/._Source.meta
A classify-tests/._Tags.meta
A classify-tests/templates/has_param.sh.tmpl
A classify/._Author.meta
A classify/._CodeSource.meta
A classify/._Color.meta
A classify/._Copyright.meta
A classify/._Description.meta
A classify/._DisplayName.meta
A classify/._DocUrl.meta
A classify/._Documentation.meta
A classify/._Icon.meta
A classify/._License.meta
A classify/._Name.meta
A classify/._Order.meta
A classify/._Source.meta
A classify/._Tags.meta
A classify/templates/classify-custom-functions.tmpl
A classify/templates/classify.sh.tmpl
A classify/templates/has_inventory_value.sh.tmpl
A coreos/._Author.meta
A coreos/._CodeSource.meta
A coreos/._Color.meta
A coreos/._Copyright.meta
A coreos/._Description.meta
A coreos/._DisplayName.meta
A coreos/._DocUrl.meta
A coreos/._Icon.meta
A coreos/._License.meta
A coreos/._Name.meta
A coreos/._Order.meta
A coreos/._Source.meta
A coreos/._Tags.meta
A coreos/templates/basic-ign.tmpl
A coreos/templates/select-ign.tmpl
A dell-support/._Author.meta
A dell-support/._CodeSource.meta
A dell-support/._Color.meta
A dell-support/._Copyright.meta
A dell-support/._Description.meta
A dell-support/._DisplayName.meta
A dell-support/._DocUrl.meta
A dell-support/._Icon.meta
A dell-support/._License.meta
A dell-support/._Name.meta
A dell-support/._Order.meta
A dell-support/._Source.meta
A dell-support/._Tags.meta
A dell-support/params/dell-dsu-base-url.yml
A dell-support/params/dell-dsu-block-release.yml
A dell-support/tasks/dell-dsu-setup.yml
A dell-support/tasks/dell-install-omsa.yml
A dev-library/._Author.meta
A dev-library/._CodeSource.meta
A dev-library/._Color.meta
A dev-library/._Copyright.meta
A dev-library/._Description.meta
A dev-library/._DisplayName.meta
A dev-library/._DocUrl.meta
A dev-library/._Icon.meta
A dev-library/._License.meta
A dev-library/._Name.meta
A dev-library/._Order.meta
A dev-library/._Source.meta
A dev-library/._Tags.meta
A drp-prom-mon/._Author.meta
A drp-prom-mon/._CodeSource.meta
A drp-prom-mon/._Color.meta
A drp-prom-mon/._Copyright.meta
A drp-prom-mon/._Description.meta
A drp-prom-mon/._DisplayName.meta
A drp-prom-mon/._DocUrl.meta
A drp-prom-mon/._Icon.meta
A drp-prom-mon/._License.meta
A drp-prom-mon/._Name.meta
A drp-prom-mon/._Order.meta
A drp-prom-mon/._Source.meta
A drp-prom-mon/._Tags.meta
A drp-prom-mon/params/cluster-profile.yml
A drp-prom-mon/params/drp-prefs-defaultBootenv.yml
A drp-prom-mon/params/drp-prefs-knownTokenTimeout.yml
A drp-prom-mon/params/drp-prefs-unknownBootenv.yml
A drp-prom-mon/params/drp-prefs-unknownStage.yml
A drp-prom-mon/params/drp-prefs-unknownTokenTimeout.yml
A drp-prom-mon/params/drp-version.yml
A drp-prom-mon/params/installer-version.yml
A drp-prom-mon/params/node-exporter.yml
A drp-prom-mon/profiles/install-drp.yml
A drp-prom-mon/profiles/install-grafana.yml
A drp-prom-mon/profiles/install-node-exporter.yml
A drp-prom-mon/profiles/install-prom-mon.yml
A drp-prom-mon/profiles/install-prometheus.yml
A drp-prom-mon/profiles/prom-mon-prep-ubuntu.yml
A drp-prom-mon/profiles/prom-mon-single-node.yml
A drp-prom-mon/stages/install-drp.yml
A drp-prom-mon/stages/install-grafana.yml
A drp-prom-mon/stages/install-node-exporter.yml
A drp-prom-mon/stages/install-prom-mon.yml
A drp-prom-mon/stages/install-prometheus.yml
A drp-prom-mon/stages/prom-mon-single-node.yml
A drp-prom-mon/stages/start-prom-mon.yml
A drp-prom-mon/tasks/add-node-exporter-param.yml
A drp-prom-mon/tasks/cfg-drp-cc.yml
A drp-prom-mon/tasks/cfg-drp-centos7.yml
A drp-prom-mon/tasks/cfg-drp-prefs.yml
A drp-prom-mon/tasks/cfg-drp-sledgehammer.yml
A drp-prom-mon/tasks/cfg-drp-ubuntu1604.yml
A drp-prom-mon/tasks/cfg-grafana.yml
A drp-prom-mon/tasks/install-drp.yml
A drp-prom-mon/tasks/install-grafana.yml
A drp-prom-mon/tasks/install-node-exporter.yml
A drp-prom-mon/tasks/install-prometheus.yml
A drp-prom-mon/templates/add-node-exporter-param.sh.tmpl
A drp-prom-mon/templates/cfg-drp-cc.sh.tmpl
A drp-prom-mon/templates/cfg-drp-centos7.sh.tmpl
A drp-prom-mon/templates/cfg-drp-prefs.sh.tmpl
A drp-prom-mon/templates/cfg-drp-sledgehammer.sh.tmpl
A drp-prom-mon/templates/cfg-drp-ubuntu1604.sh.tmpl
A drp-prom-mon/templates/cfg-grafana.sh.tmpl
A drp-prom-mon/templates/install-drp.sh.tmpl
A drp-prom-mon/templates/install-grafana.sh.tmpl
A drp-prom-mon/templates/install-node-exporter.sh.tmpl
A drp-prom-mon/templates/install-prometheus.sh.tmpl
A flash/._Author.meta
A flash/._CodeSource.meta
A flash/._Color.meta
A flash/._Copyright.meta
A flash/._Description.meta
A flash/._DisplayName.meta
A flash/._DocUrl.meta
A flash/._Icon.meta
A flash/._License.meta
A flash/._Name.meta
A flash/._Order.meta
A flash/._Prerequisites.meta
A flash/._Source.meta
A flash/._Tags.meta
A flash/params/flash-list.yml
A flash/params/skip-flash.yml
A flash/stages/flash.yml
A flash/tasks/dell-firmware-flash.yml
A flash/tasks/flash-discover.yml
A flash/tasks/flash-list.yml
A flash/tasks/hpe-firmware-flash.yml
A flash/tasks/lenovo-firmware-flash.yml
A hardware-tooling/._Author.meta
A hardware-tooling/._CodeSource.meta
A hardware-tooling/._Color.meta
A hardware-tooling/._Copyright.meta
A hardware-tooling/._Description.meta
A hardware-tooling/._DisplayName.meta
A hardware-tooling/._DocUrl.meta
A hardware-tooling/._Icon.meta
A hardware-tooling/._License.meta
A hardware-tooling/._Name.meta
A hardware-tooling/._Order.meta
A hardware-tooling/._Tags.meta
A hardware-tooling/tasks/install-hardware-tools.yml
A hardware-tooling/tasks/reset-bmc.yml
A hpe-support/._Author.meta
A hpe-support/._CodeSource.meta
A hpe-support/._Color.meta
A hpe-support/._Copyright.meta
A hpe-support/._Description.meta
A hpe-support/._DisplayName.meta
A hpe-support/._DocUrl.meta
A hpe-support/._Icon.meta
A hpe-support/._License.meta
A hpe-support/._Name.meta
A hpe-support/._Order.meta
A hpe-support/._Tags.meta
A hpe-support/params/hpe-firmware-token.yml
A hpe-support/params/hpe-ilo-unwedge-count.yml
A hpe-support/params/hpe-repo-urls.yml
A hpe-support/params/hpe-repo-versions.yml
A hpe-support/params/hpe-system-gen.yml
A hpe-support/tasks/hpe-tools-install.yml
A image-builder/._Author.meta
A image-builder/._CodeSource.meta
A image-builder/._Color.meta
A image-builder/._Copyright.meta
A image-builder/._Description.meta
A image-builder/._DisplayName.meta
A image-builder/._DocUrl.meta
A image-builder/._Icon.meta
A image-builder/._License.meta
A image-builder/._Name.meta
A image-builder/._Order.meta
A image-builder/._Source.meta
A image-builder/._Tags.meta
A image-builder/templates/image-builder-cleanup.sh.tmpl
A image-builder/templates/image-builder-stage.sh.tmpl
A image-builder/templates/image-capture.sh.tmpl
A image-builder/templates/image-reset-package-repos.sh.tmpl
A kubespray/._Author.meta
A kubespray/._CodeSource.meta
A kubespray/._Color.meta
A kubespray/._Copyright.meta
A kubespray/._Description.meta
A kubespray/._DisplayName.meta
A kubespray/._DocUrl.meta
A kubespray/._Icon.meta
A kubespray/._License.meta
A kubespray/._Name.meta
A kubespray/._Order.meta
A kubespray/._Source.meta
A kubespray/._Tags.meta
A lenovo-support/._Author.meta
A lenovo-support/._CodeSource.meta
A lenovo-support/._Color.meta
A lenovo-support/._Copyright.meta
A lenovo-support/._Description.meta
A lenovo-support/._DisplayName.meta
A lenovo-support/._DocUrl.meta
A lenovo-support/._Icon.meta
A lenovo-support/._License.meta
A lenovo-support/._Name.meta
A lenovo-support/._Order.meta
A lenovo-support/._Prerequisites.meta
A lenovo-support/._Source.meta
A lenovo-support/._Tags.meta
A opsramp/._Author.meta
A opsramp/._CodeSource.meta
A opsramp/._Color.meta
A opsramp/._Copyright.meta
A opsramp/._Description.meta
A opsramp/._DisplayName.meta
A opsramp/._DocUrl.meta
A opsramp/._Icon.meta
A opsramp/._License.meta
A opsramp/._Name.meta
A opsramp/._Order.meta
A opsramp/._Source.meta
A opsramp/._Tags.meta
A opsramp/templates/deployAgent.py.tmpl
A opsramp/templates/ensure-python.sh.tmpl
A os-other/._Author.meta
A os-other/._CodeSource.meta
A os-other/._Color.meta
A os-other/._Copyright.meta
A os-other/._Description.meta
A os-other/._DisplayName.meta
A os-other/._DocUrl.meta
A os-other/._Icon.meta
A os-other/._License.meta
A os-other/._Name.meta
A os-other/._Order.meta
A os-other/._Source.meta
A os-other/._Tags.meta
A os-other/bootenvs/redhat-6.5.yml
A os-other/bootenvs/redhat-7.0.yml
A os-other/bootenvs/windows-2012r2.yml
A os-other/stages/redhat-6.5.yml
A os-other/stages/redhat-7.0.yml
A os-other/templates/2012r2-unattend.xml.tmpl
A os-other/templates/stage1.cmd.tmpl
A os-other/templates/stage1.ps1.tmpl
A os-other/templates/windows.ipxe.tmpl
A os-other/templates/windows.pxelinux.tmpl
A task-library/._Author.meta
A task-library/._CodeSource.meta
A task-library/._Color.meta
A task-library/._Copyright.meta
A task-library/._Description.meta
A task-library/._DisplayName.meta
A task-library/._DocUrl.meta
A task-library/._Documentation.meta
A task-library/._Icon.meta
A task-library/._License.meta
A task-library/._Name.meta
A task-library/._Order.meta
A task-library/._Source.meta
A task-library/._Tags.meta
A task-library/templates/cluster-shared.tmpl
A task-library/templates/drpcli-init.service.tmpl
A task-library/templates/drpcli-init.sysv.tmpl
A task-library/templates/drpcli-init.unit.tmpl
A task-library/templates/drpcli-install.sh.tmpl
A task-library/templates/drpcli-tar-install.sh.tmpl
A task-library/templates/drpcli.etc.export.tmpl
A task-library/templates/drpcli.etc.tmpl
A task-library/templates/drpcli.service.tmpl
A task-library/templates/drpcli.sysv.tmpl
A task-library/templates/drpcli.unit.tmpl
A task-library/templates/network-lldp-client.sh.tmpl
A task-library/templates/network-lldp-start.sh.tmpl
A task-library/templates/stage-chooser.sh.tmpl
A terraform/._Author.meta
A terraform/._CodeSource.meta
A terraform/._Color.meta
A terraform/._Copyright.meta
A terraform/._Description.meta
A terraform/._DisplayName.meta
A terraform/._DocUrl.meta
A terraform/._Documentation.meta
A terraform/._Icon.meta
A terraform/._License.meta
A terraform/._Name.meta
A terraform/._Order.meta
A terraform/._Source.meta
A terraform/._Tags.meta
A terraform/templates/terraform-enable.sh.tmpl
M tools/package.sh
M tools/pieces.sh
M tools/publish.sh
M tools/version.sh
commit 66848bf5836f34f7bfb8a8d747c1ae0839c892e8
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Aug 6 13:54:09 2019 +1200
Start containerd on boot
M krib/templates/containerd-install.sh.tmpl
commit aaf7b8d1fb2921e6d7e8c097f320f6c0423ac384
Author: Rob Hirschfeld <rob@rackn.com>
Date: Tue Jul 30 23:16:25 2019 -0500
don't hardcode the profile brah
M krib/templates/k3s-config.sh.tmpl
commit bcb43b89394894ca416683682b0779860673922f
Author: Rob Hirschfeld <rob@rackn.com>
Date: Tue Jul 30 22:57:35 2019 -0500
as per @galthaus, use krib/k3s param. this is basic level for now but good pattern
A krib/params/krib-k3s.yaml
M krib/stages/k3s-config.yaml
M krib/templates/k3s-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
commit f231bc8c6cdbe0af09439b2c3e421d0a06c97f90
Author: Rob Hirschfeld <rob@rackn.com>
Date: Tue Jul 30 18:46:26 2019 -0500
as per request by @galthaus
M krib/templates/containerd-install.sh.tmpl
commit 5e45d99bd5a61904b1cba47d8c1ac60672087e16
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 22 10:05:58 2019 -0500
cert plugin does not do secure yet
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
commit 6ebdb40ecda34f235680695fec60cdc271238e67
Author: Rob Hirschfeld <rob@rackn.com>
Date: Fri Jul 19 09:19:05 2019 -0500
move to secure data - most are not passwords. REQUIRES TIP DRP
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
commit 52088df9003ac2d44555fab5bd677a67da302b5e
Author: Rob Hirschfeld <rob@rackn.com>
Date: Tue Jul 30 09:12:19 2019 -0500
missed if
M krib/templates/k3s-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
commit 6060667a77dbbb7e826d96b0f421081728f5f79f
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 29 23:27:22 2019 -0500
minor docs
M krib/tasks/k3s-config.yaml
commit 1b34a656bb38356f7cb29c827a8562905cac7ae0
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 29 23:25:13 2019 -0500
missed one password reset
M rose/params/rose-service-token.yaml
commit 9e5037d021fb65334ab82e3e88c79c13840db82c
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 29 23:22:44 2019 -0500
remove krib/k3s param
M krib/stages/k3s-config.yaml
M krib/templates/containerd-install.sh.tmpl
M krib/templates/k3s-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
commit 0289727e284d275fce14c1f7cf4899843e3ed9e2
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 29 23:11:08 2019 -0500
undo the secure/password mess - it's not good but needs a real test pass to fix
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
M krib/params/consul-controller-client-key.yaml
M krib/params/consul-encryption-key.yaml
M krib/params/consul-server-ca-pw.yaml
M krib/params/etcd-client-ca-pw.yaml
M krib/params/etcd-controller-client-key.yaml
M krib/params/etcd-peer-ca-pw.yaml
M krib/params/etcd-server-ca-pw.yaml
M krib/params/krib-cluster-bootstrap-token.yaml
M krib/params/krib-cluster-join.yaml
M krib/params/krib-cluster-kubeadm-cfg.yaml
M krib/params/krib-cluster-master-certs.yaml
M krib/params/vault-awskms-access-key.yaml
M krib/params/vault-awskms-secret-key.yaml
M krib/params/vault-kms-plugin-token.yaml
M krib/params/vault-root-token.yaml
M krib/params/vault-unseal-key.yaml
M rose/params/rose-default-password.yaml
commit 97ebd6fc3689d48f03f6c0db0de9f02ca0ba6f72
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 29 19:29:27 2019 -0500
more delay, zzzz
M krib/templates/k3s-config.sh.tmpl
commit 8b12041eff950fb21ba8b43684b6fbe813b51795
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 29 19:27:56 2019 -0500
k3s multi-node working
M krib/stages/k3s-config.yaml
M krib/templates/k3s-config.sh.tmpl
M krib/workflows/k3s-cluster.yaml
commit f6ae4518df94343431691ca0cc3cbda4b6141aa9
Author: Rob Hirschfeld <rob@rackn.com>
Date: Sat Jul 27 23:31:34 2019 -0500
containerd install fixes
A krib/params/containerd-version.yaml
M krib/templates/containerd-install.sh.tmpl
commit 4dfe7ac2e8649c3d3fb00be5c7d56213866477ba
Author: Rob Hirschfeld <rob@rackn.com>
Date: Thu Jul 25 15:13:19 2019 -0500
add containerd install
M krib/stages/k3s-config.yaml
M krib/workflows/k3s-cluster.yaml
M krib/workflows/krib-live-cluster.yaml
commit daed03c81db31031fdb45bc0c0a03e7020ece1fc
Author: Rob Hirschfeld <rob@rackn.com>
Date: Thu Jul 25 15:02:12 2019 -0500
WIP k3s config process
M krib/templates/k3s-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
commit 4cc367201219d8156d3d12ae6d7ebe9710ad02be
Author: Rob Hirschfeld <rob@rackn.com>
Date: Wed Jul 24 08:36:01 2019 -0500
respect the k3s param
M krib/templates/k3s-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
M krib/workflows/k3s-cluster.yaml
commit 408a1b5aa5311219505c44244a096e2b2b96cca1
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 22 13:43:31 2019 -0500
improve log messages
M krib/templates/krib-config.sh.tmpl
commit b1418464eab61ed2a6d4c782cdcc7f321e5eb7a0
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 22 10:05:58 2019 -0500
cert plugin does not do secure yet
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
commit 3d6981a964f931d43add7f7fe831140aa6bd73a4
Author: Rob Hirschfeld <rob@rackn.com>
Date: Sat Jul 20 11:30:13 2019 -0500
include feature flag to catch Profile Secure Get/Update requirement
M krib/._RequiredFeatures.meta
commit 9f85fcd5c9b590aa0bd95ba06a203f1cc7acdc33
Author: Rob Hirschfeld <rob@rackn.com>
Date: Fri Jul 19 09:19:05 2019 -0500
move to secure data - most are not passwords. REQUIRES TIP DRP
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
M krib/params/consul-controller-client-key.yaml
M krib/params/consul-encryption-key.yaml
M krib/params/consul-server-ca-pw.yaml
M krib/params/etcd-client-ca-pw.yaml
M krib/params/etcd-controller-client-key.yaml
M krib/params/etcd-peer-ca-pw.yaml
M krib/params/etcd-server-ca-pw.yaml
M krib/params/krib-cluster-bootstrap-token.yaml
M krib/params/krib-cluster-join.yaml
M krib/params/krib-cluster-master-certs.yaml
M krib/params/vault-awskms-access-key.yaml
M krib/params/vault-awskms-secret-key.yaml
M krib/params/vault-kms-plugin-token.yaml
M krib/params/vault-root-token.yaml
M krib/params/vault-unseal-key.yaml
M rose/params/rose-default-password.yaml
M rose/params/rose-service-token.yaml
commit 0e8a5c3d0a0732b54f34c35cd2feb38a898fcabd
Author: Rob Hirschfeld <rob@rackn.com>
Date: Fri Jul 19 01:11:13 2019 -0500
add workflow, stage includes special k3s param
M krib/params/krib-cluster-bootstrap-token.yaml
M krib/params/krib-cluster-kubeadm-cfg.yaml
M krib/stages/k3s-config.yaml
A krib/workflows/k3s-cluster.yaml
commit eb185a01244b4045e7bec335ffc053f2282f3ac3
Author: Rob Hirschfeld <rob@rackn.com>
Date: Thu Jul 18 00:26:00 2019 -0500
WIP krib-get-masters failing
A krib/stages/k3s-config.yaml
A krib/tasks/k3s-config.yaml
A krib/templates/k3s-config.sh.tmpl
commit f6ef035ad41d885d54d36ad963a98cc66f04c869
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Wed Jul 24 00:03:17 2019 -0500
Another place to handle ha
M krib/templates/krib-kubeadm.cfg.tmpl
commit c02fd5cdfb2d1583fafb3cea530b6a3b68d06346
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Tue Jul 23 23:06:22 2019 -0500
Adjust the vip to also watch for master-count > 1
M krib/templates/etcd-config.sh.tmpl
M krib/templates/krib-kubeadm.cfg.tmpl
commit 26fa67d96c2e32e92e3b4ce9013ed727f0ff74f0
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Tue Jul 23 21:05:28 2019 -0500
Fix parameter references to correctly match protections.
M krib/tasks/krib-dev-reset.yaml
commit 1865ba54ca2ca988340bd1865a8b7f1291740b5f
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Tue Jul 23 20:48:35 2019 -0500
Remove some dead spaces
Clearing something that isn't there isn't fatal. Continue if
we don't have that part of the cluster enabled.
M krib/tasks/krib-dev-reset.yaml
commit 480c125266f69422e09cd508b5a4d03b57688d39
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 23 16:02:13 2019 +1200
Add ceph/ceph to private registry
A krib/params/krib-rook-ceph-container-image-ceph.yaml
M krib/templates/krib-config.sh.tmpl
M krib/templates/krib-rook-ceph.sh.tmpl
commit 5fa9e21c269809d7e87fb617869e9e45e38e16f5
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 23 13:24:24 2019 +1200
Update for storing calico images in trusted registry
A krib/params/krib-calico-container-image-cni.yaml
A krib/params/krib-calico-container-image-kube-controllers.yaml
A krib/params/krib-calico-container-image-node.yaml
A krib/params/krib-calico-container-image-pod2daemon-flexvol.yaml
M krib/templates/krib-config.sh.tmpl
commit 3ac8d44f4ffd488c3c0f7b9256024e2c2349aa2e
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 23 10:39:56 2019 +1200
Improve regex
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit 1ff31a174a9e1597725db4314d95bbe60cccd9b4
Author: Rob Hirschfeld <rob@rackn.com>
Date: Mon Jul 22 10:05:58 2019 -0500
cert plugin does not do secure yet
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
commit ac7e74cc4aecf6507b25f8080a903cb1f907f224
Author: Rob Hirschfeld <rob@rackn.com>
Date: Sat Jul 20 11:30:13 2019 -0500
include feature flag to catch Profile Secure Get/Update requirement
M krib/._RequiredFeatures.meta
commit df8150faf0fbc67a14556f916b280b5518c3b8c8
Author: Rob Hirschfeld <rob@rackn.com>
Date: Fri Jul 19 09:19:05 2019 -0500
move to secure data - most are not passwords. REQUIRES TIP DRP
M krib/params/certmanager-cloudflare-api-key.yaml
M krib/params/certmanager-fastdns-access-token.yaml
M krib/params/certmanager-fastdns-client-secret.yaml
M krib/params/certmanager-fastdns-client-token.yaml
M krib/params/certmanager-rfc2136-tsig-key.yaml
M krib/params/certmanager-route53-access-key-id.yaml
M krib/params/certmanager-route53-access-key.yaml
M krib/params/certmanager-route53-secret-access-key.yaml
M krib/params/consul-controller-client-key.yaml
M krib/params/consul-encryption-key.yaml
M krib/params/consul-server-ca-pw.yaml
M krib/params/etcd-client-ca-pw.yaml
M krib/params/etcd-controller-client-key.yaml
M krib/params/etcd-peer-ca-pw.yaml
M krib/params/etcd-server-ca-pw.yaml
M krib/params/krib-cluster-bootstrap-token.yaml
M krib/params/krib-cluster-join.yaml
M krib/params/krib-cluster-master-certs.yaml
M krib/params/vault-awskms-access-key.yaml
M krib/params/vault-awskms-secret-key.yaml
M krib/params/vault-kms-plugin-token.yaml
M krib/params/vault-root-token.yaml
M krib/params/vault-unseal-key.yaml
M rose/params/rose-default-password.yaml
M rose/params/rose-service-token.yaml
commit 914eb7653eca78fe75b6e874cc30b18b2d3d38c1
Author: Rob Hirschfeld <rob@rackn.com>
Date: Fri Jul 19 01:11:13 2019 -0500
add workflow, stage includes special k3s param
M krib/params/krib-cluster-bootstrap-token.yaml
M krib/params/krib-cluster-kubeadm-cfg.yaml
M krib/stages/k3s-config.yaml
A krib/workflows/k3s-cluster.yaml
commit 88d6bffe30ca4cdff45f7e4c9807ddcbfe0aef50
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 19 13:05:02 2019 +1200
Un-dumbassed the sed (only myself to blame)
M krib/params/krib-ingress-nginx-mandatory.yaml
M krib/params/krib-ingress-nginx-publish-ip.yaml
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit e98ccf5c5b1cf8db72fa1c1e124a8b36129b9fc6
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 19 11:39:08 2019 +1200
Make ceph default storageclass
M krib/templates/krib-rook-ceph.sh.tmpl
commit d4a6c423860c7c686be9d15c590d87bed311709f
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 19 10:14:34 2019 +1200
Added further add-on containers
A krib/params/krib-cent-manager-container-image-cainjector.yaml
A krib/params/krib-cent-manager-container-image-controller.yaml
A krib/params/krib-cent-manager-container-image-webhook.yaml
A krib/params/krib-fluent-bit-container-image.yaml
A krib/params/krib-rook-ceph-container-image-daemon-base.yaml
A krib/params/krib-rook-ceph-container-image.yaml
M krib/templates/consul-server-install.sh.tmpl
M krib/templates/etcd-config.sh.tmpl
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
M krib/templates/krib-rook-ceph.sh.tmpl
M krib/templates/logging-fluent-bit.sh.tmpl
commit 492306b8120ee4bff5a8ded355aed2ba11bfa8dd
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jul 18 21:46:51 2019 +1200
Progress pinning containers
A krib/params/krib-externaldns-container-image.yaml
A krib/params/krib-kubelet-rubber-stamp-container_image.yaml
R088 krib/params/metallb-container_image_controller.yaml krib/params/krib-metallb-container-image-controller.yaml
R089 krib/params/metallb-container_image_speaker.yaml krib/params/krib-metallb-container_image_speaker.yaml
A krib/params/krib-nginx-ingress-controller-container-image.yaml
A krib/stages/krib-dev-hard-reset.yaml
A krib/tasks/krib-dev-hard-reset.yaml
M krib/templates/krib-config.sh.tmpl
M krib/templates/krib-external-dns.sh.tmpl
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
M krib/templates/krib-metallb.sh.tmpl
A krib/workflows/krib-reset-cluster-hard.yaml
commit 66a2568a3a775ae7957d7a5b766ff5759dd36ea0
Author: Rob Hirschfeld <rob@rackn.com>
Date: Thu Jul 18 00:26:00 2019 -0500
WIP krib-get-masters failing
A krib/stages/k3s-config.yaml
A krib/tasks/k3s-config.yaml
A krib/templates/k3s-config.sh.tmpl
commit cd31d0c46967c18f529c1faa3a4d43ccd9397632
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jul 18 16:53:41 2019 +1200
Add option to specify metallb container image
A krib/params/metallb-container_image_controller.yaml
A krib/params/metallb-container_image_speaker.yaml
M krib/templates/consul-server-install.sh.tmpl
D krib/templates/krib-consul-install.sh-orig-deleteme.tmpl
M krib/templates/krib-metallb.sh.tmpl
commit 6b3d94365354affe3dee6f54c5c42dfdd012343a
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 16 22:34:04 2019 +1200
!#/bin/bash (my head in)
M krib/templates/vault-config.sh.tmpl
commit ec7d906b8e3e6d78ab2bca26dcbfbad694c037a7
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 16 15:42:58 2019 +1200
Avoid races on vault
M krib/templates/vault-config.sh.tmpl
commit 36d5299e4abc184e7a40fba5edd7c40ab44addd9
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 16 12:14:41 2019 +1200
Prevent races
M krib/tasks/krib-dev-reset.yaml
M krib/templates/vault-config.sh.tmpl
commit c8b8a93f122275483f5bf2496a450ee18b137cb3
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 16 11:30:01 2019 +1200
More backoffs on nginx
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit 1813e44c26879b9a4a0d344eb1901140d2927780
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 16 10:13:25 2019 +1200
Tired of re-trying nginx stage
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit 10ea6a645a3b25d99282f6ea658e9d0eecad33be
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 16 09:33:06 2019 +1200
Implemented (aws only for now)
A krib/stages/krib-external-dns.yaml
A krib/tasks/krib-external-dns.yaml
A krib/templates/krib-external-dns.sh.tmpl
A krib/templates/krib-external-dns.yaml.tmpl
commit 4d0bf22bab5dcc8d440475d8289f2c044caca062
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 15 22:26:44 2019 +1200
Update nginx deployment for mutually exclusive options
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit d98477fc8164d4b2f6fa2ad98bb2e6ff246e1f31
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 15 21:56:04 2019 +1200
Tidy up templates
M krib/templates/krib-rook-ceph.sh.tmpl
M krib/templates/rook-ceph-dashboard-ingress.yaml.tmpl
commit 94661f2671d4ddf4b5797fd9d3592c60bae63284
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 15 21:51:26 2019 +1200
Whitespace fixed
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit aa89156eb191fec1b9b1d4946725fc0370278785
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 15 21:26:13 2019 +1200
Standardize param names
M krib/templates/rook-ceph-override.yaml.tmpl
commit b47a7c0ee39ae2d5c35fb45f3e62e5fa2464ec37
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 15 21:17:56 2019 +1200
Parametize target disk
A krib/params/rook-ceph-target-disk.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/krib-rook-ceph.sh.tmpl
commit 75861014213fc229b61c5a354048ebb4cf6f699c
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 15 21:08:06 2019 +1200
Initial addition of option
M krib/params/krib-ingress-nginx-mandatory.yaml
A krib/params/krib-ingress-nginx-publish-ip.yaml
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit b4b7a4e4d20437445fcd57d5d85382e8708e18db
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jul 14 19:26:27 2019 +1200
Add default issuer to ceph dashboard cert if configured
A krib/params/certmanager-default-issuer-name.yaml
M krib/templates/rook-ceph-dashboard-ingress.yaml.tmpl
commit e7b6ff4c25e6aba96f6952f10971373ae0a54ced
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jul 14 15:20:41 2019 +1200
Fix errant quote
M krib/templates/krib-config.sh.tmpl
commit a2b82850965905e4d49ba71843e678028e9a11f7
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jul 14 14:50:19 2019 +1200
Improve calico behavior in multi-NIC deployments
M krib/params/provider-calico-config.yaml
M krib/templates/krib-config.sh.tmpl
commit 830e83d86649be102618e0433f26781adccc8ea9
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Sat Jul 13 09:40:06 2019 -0400
Add catalog rebuild notify
M .travis.yml
A tools/notify.sh
commit 4b5512212db065d8aa745e1e11a81f99272cf708
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jul 14 00:48:44 2019 +1200
Latest progress
R060 krib/params/rook-ceph-cluster-range.yaml krib/params/rook-ceph-cluster-network.yaml
A krib/params/rook-ceph-public-network.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/rook-ceph-override.yaml.tmpl
commit 355bf3f5b7b6baee5189201968787fce7b910c37
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 21:21:17 2019 +1200
Streamlined installation
A krib/params/certmanager-dns-domain.yaml
A krib/params/rook-ceph-cluster-range.yaml
M krib/tasks/krib-rook-ceph.yaml
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
M krib/templates/krib-rook-ceph.sh.tmpl
A krib/templates/rook-ceph-dashboard-ingress.yaml.tmpl
M krib/templates/rook-ceph-override.yaml.tmpl
A krib/templates/rook-ceph-toolbox.yaml.tmpl
commit a4e070191480626bc1f58b55ed0608dbcfbe51d1
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 19:17:37 2019 +1200
Merged with logging branch
M krib/tasks/krib-dev-reset.yaml
M krib/tasks/krib-rook-ceph.yaml
M krib/templates/krib-rook-ceph.sh.tmpl
A krib/templates/rook-ceph-override.yaml.tmpl
commit b854fff5787ddf3b26b76523cbd2c3aa2a36b0e1
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 11:08:12 2019 +1200
Further genericized
M krib/tasks/krib-logging-fluent-bit.yaml
M krib/templates/logging-fluent-bit.sh.tmpl
M krib/templates/logging-fluent-bit.yaml.tmpl
commit 8be462d43d07b577549734c4b9f6ed27d635e5d6
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 08:32:23 2019 +1200
Add params to genericize graylogging
A krib/params/krib-log-target-gelf.yaml
A krib/params/krib-log-target-syslog.yaml
M krib/templates/logging-fluent-bit.yaml.tmpl
commit a33b45bfd5fdb58797a7a4bd6196a7b25b8e9cbc
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 08:21:38 2019 +1200
Remove local rook files on reset
M krib/tasks/krib-dev-reset.yaml
commit 8348b9b4ba5158e12a33e08abbb0f32817935e20
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 06:46:52 2019 +1200
Added fluent-bit to DRP
A krib/stages/krib-logging.yaml
A krib/tasks/krib-logging-fluent-bit.yaml
A krib/templates/logging-fluent-bit.sh.tmpl
A krib/templates/logging-fluent-bit.yaml.tmpl
commit 8063751e27f3c9a583f46bd2f65b6179330e50c6
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 13 06:32:15 2019 +1200
Zap worker disks (hardcoded to /dev/sda currently)
M krib/templates/krib-rook-ceph.sh.tmpl
commit d464c415c0d02936d9fbe87cf7e3d0ade4fc5c1b
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 12 23:20:16 2019 +1200
Progress thus far - no drives working yet
A krib/stages/krib-rook-ceph.yaml
A krib/tasks/krib-rook-ceph.yaml
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
A krib/templates/krib-rook-ceph.sh.tmpl
M krib/templates/vault-config.sh.tmpl
commit 5aaec8c639fe63497706dc77716781d7fdc82a99
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jul 11 15:16:06 2019 +1200
fail gracefully if namespace already exsits
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit ae0b9fd3cee1fcf3a4ad6946411aca6ac3d42c4a
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jul 11 12:09:35 2019 +1200
By default, avoid buggy IPs
M krib/templates/krib-metallb.sh.tmpl
commit b308dfbcee350a4b16a136c831f901d4ffa19e0d
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jul 10 21:11:19 2019 +1200
Front proxy certs must match on all masters
M krib/templates/etcd-config.sh.tmpl
M krib/templates/krib-config.sh.tmpl
commit 8b078618854d552475a852d79f86674e7ca7dc93
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jul 10 14:37:02 2019 +1200
Slightly less sleepy
M krib/params/certmanager-manifests.yaml
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit 70f9c403a8ca820501ccbf25982b7c9f3614dfc2
Author: Rob Hirschfeld <rob@rackn.com>
Date: Tue Jul 9 21:28:27 2019 -0500
add ability to ignore preflight errors, streamline docs
M krib/._Documentation.meta
A krib/params/krib-ignore-preflight-errors.yaml
M krib/templates/krib-config.sh.tmpl
commit ef9bce841119480e439cb655c3f9f9a465a437c7
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 9 14:36:13 2019 +1200
Fix nginx to v0.24.1
R068 krib/params/krib-ingress-ngnix-config.yaml krib/params/krib-ingress-nginx-config.yaml
R069 krib/params/krib-ingress-ngnix-mandatory.yaml krib/params/krib-ingress-nginx-mandatory.yaml
commit c45ee51875e3a3cb7a36385f353d74038b751c4e
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 9 14:32:36 2019 +1200
Updated for signed kubelets
M krib/params/certmanager-manifests.yaml
M krib/params/krib-ingress-ngnix-mandatory.yaml
commit 66f443ad390b2f9756cb59cf2d6936f73c1bac57
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jul 9 13:47:16 2019 +1200
Add signed kubelet config
A krib/params/certmanager-route53-access-key.yaml
A krib/params/krib-sign-kubelet-server-certs.yaml
M krib/tasks/krib-config.yaml
M krib/templates/krib-config.sh.tmpl
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
M krib/templates/krib-kubeadm.cfg.tmpl
A krib/templates/krib-kubelet-rubber-stamp.yaml.tmpl
commit f16b344f949f646c8a953d5795ab2b9ad7fd2770
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 8 12:11:07 2019 +1200
Restore validating webhook
M krib/params/certmanager-manifests.yaml
commit eed51adf9cfd11cdc5dbcb24b0b30bf31890bfc6
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 8 08:22:18 2019 +1200
Make cleanup.. cleaner
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit 7eb968818f322718b787e11a994e18cd4a275805
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jul 6 11:05:51 2019 +1200
Correct name of AWS secret key param
M krib/templates/certmanager-provider-secret.cfg.tmpl
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit fc34f0c8abb16bc43bb648fc2b2c489150db6e88
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 5 20:52:13 2019 +1200
Working ingress, without admission controller for now
M krib/params/certmanager-manifests.yaml
R075 krib/params/certmanager-route53-access-key.yaml krib/params/certmanager-route53-access-key-id.yaml
A krib/params/certmanager-route53-hosted-zone-id.yaml
A krib/params/certmanager-route53-secret-access-key.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/certmanager-clusterissuer.cfg.tmpl
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
M krib/templates/vault-config.sh.tmpl
commit 496d86b5932fa4dd8e535b0a447409f40d67c40f
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 5 08:28:19 2019 +1200
Tidy up reset to avoid races
M krib/tasks/krib-dev-reset.yaml
M krib/templates/consul-server-install.sh.tmpl
commit 66ed33942fb79b4e655667f2b763ba4d694b1e00
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jul 5 00:18:30 2019 +1200
Ingress working, certs unsure yet
M krib/params/certmanager-crds.yaml
A krib/params/certmanager-manifests.yaml
M krib/templates/certmanager-clusterissuer.cfg.tmpl
M krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
M krib/templates/krib-settings.sh.tmpl
commit f7bbd4b23554ced64b3dbc176eda0073d5118084
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jul 3 21:44:34 2019 +1200
Working with two ingresses, no certs yet
A krib/params/krib-ingress-external-enabled.yaml
A krib/params/krib-ingress-ngnix-config.yaml
A krib/params/krib-ingress-ngnix-mandatory.yaml
A krib/stages/krib-ingress-nginx-tillerless.yaml
M krib/tasks/krib-dev-reset.yaml
A krib/tasks/krib-ingress-nginx-tillerless.yaml
A krib/templates/krib-ingress-nginx-tillerless.sh.tmpl
commit ffe4f42995f0d5d6a196a1d1d5f27b89a5565683
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 1 21:46:37 2019 +1200
Store consul client certs to facilitate backup
A krib/params/consul-controller-client-cert.yaml
A krib/params/consul-controller-client-key.yaml
A krib/params/consul-controller-ip.yaml
A krib/params/consul-server-ca-cert..yaml
A krib/params/etcd-server-ca-cert.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/consul-server-install.sh.tmpl
commit 45df5caa04c1a4f85bf5d1dec8cb57cd18cd2a1b
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 1 20:54:10 2019 +1200
Generate clients certs to backup etcd externally
A krib/params/etcd-controller-client-cert.yaml
A krib/params/etcd-controller-client-key.yaml
A krib/params/etcd-controller-ip.yaml
M krib/templates/etcd-config.sh.tmpl
commit fe3bd6e04d081cc01a7d8d8e7e98990f6b641269
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 1 08:22:25 2019 +1200
Add delay before testing vault status to allow for startup
M krib/templates/vault-config.sh.tmpl
commit 9a2356c666d5030db474d3cf54ca26a7724c80da
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jul 1 08:18:13 2019 +1200
Generate a client cert for controller
M krib/templates/etcd-config.sh.tmpl
commit 89de73d6e3f04c188e35f73185dde86d45bfd53c
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jun 30 14:07:47 2019 +1200
Reduce likelihood of races to init vault
M krib/templates/vault-config.sh.tmpl
commit 3b53295ae1124b5e351c6ed51eeef1d3ef66c624
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 29 22:26:25 2019 +1200
Tidy up certs
M krib/tasks/krib-dev-reset.yaml
M krib/templates/consul-agent-config.sh.tmpl
M krib/templates/consul-server-install.sh.tmpl
M krib/templates/etcd-config.sh.tmpl
M krib/templates/vault-install.sh.tmpl
commit 2e74152f43bc773b60341e5754204682239d4b98
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 29 19:20:44 2019 +1200
Got automated install with vault working
A krib/params/vault-root-token.yaml
A krib/params/vault-unseal-key.yaml
M krib/stages/vault-config.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/tasks/vault-config.yaml
A krib/tasks/vault-kms-plugin.yaml
M krib/templates/consul-agent.json.tmpl
M krib/templates/consul-server-config.sh.tmpl
M krib/templates/consul-server-env.sh.tmpl
M krib/templates/consul-server-install.sh.tmpl
M krib/templates/consul-server.json.tmpl
M krib/templates/krib-vault-kms-plugin.sh.tmpl
M krib/templates/vault-config.sh.tmpl
M krib/templates/vault-install.sh.tmpl
A krib/templates/vault-policy-transit-only.hcl.tmpl
M krib/templates/vault.hcl.tmpl
commit 423fbcf9506e0f8afd6b57c5f98b4010557460f4
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jun 28 21:55:52 2019 +1200
Tidied up some issues discovered on reinstall
M krib/tasks/krib-dev-reset.yaml
M krib/templates/consul-server-install.sh.tmpl
M krib/templates/krib-encryption-config.yaml.tmpl
M krib/templates/krib-vault-kms-plugin.sh.tmpl
M krib/templates/vault-kms-plugin.service.tmpl
commit 8ac963720f25eac626a364eb5199711828ab7bdf
Author: Victor Lowther <victor.lowther@gmail.com>
Date: Thu Jun 27 16:10:08 2019 -0500
Update default installs to generate network configs
M content/stages/centos-7.6.1810.yml
M content/stages/centos-7.yml
M content/stages/ubuntu-18.04-arm64-hwe.yml
M content/stages/ubuntu-18.04.yml
A content/tasks/configure-network.yaml
commit 90153fd6dfc64b9fc348e3a635716379a8c6341a
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 27 23:21:20 2019 +1200
Support vault token as param in DRP
A krib/params/vault-kms-plugin-token.yaml
M krib/tasks/vault-config.yaml
A krib/templates/krib-encryption-config.yaml.tmpl
A krib/templates/krib-vault-kms-plugin.sh.tmpl
A krib/templates/vault-kms-plugin.service.tmpl
commit 4f647f55dbeff838b5ec8fff130344f4c0cca829
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 27 16:44:37 2019 +1200
Add support for auto-unsealing with awskms
A krib/params/vault-seal.yaml
M krib/stages/vault-config.yaml
M krib/templates/vault-config.sh.tmpl
commit 64a3ead8610a2f972e8b0497085d3b805cf8a253
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 27 09:58:19 2019 +1200
Add (untested) KMS auto-unseal
A krib/params/vault-awskms-access-key.yaml
A krib/params/vault-awskms-kms-key-id.yaml
A krib/params/vault-awskms-region.yaml
A krib/params/vault-awskms-secret-key.yaml
M krib/templates/vault-config.sh.tmpl
commit 34815a4d2e0af596d8d1c7e03d8395a102cdb5dc
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 27 09:24:38 2019 +1200
Add TLS to vault
A krib/params/consu-name.yaml
A krib/params/vault-name.yaml
M krib/tasks/vault-install.yaml
M krib/templates/consul-agent-install.sh.tmpl
A krib/templates/vault-env.sh.tmpl
M krib/templates/vault-install.sh.tmpl
M krib/templates/vault.hcl.tmpl
A krib/templates/vault.service.tmpl
commit b9f067e8a93b276e2fe051d64d38d221c497bbfb
Author: Victor Lowther <victor.lowther@gmail.com>
Date: Wed Jun 26 10:21:56 2019 -0500
Add a few examples to the new net/ Params
M content/params/net-interface-config.yaml
M content/params/net-interface-topology.yaml
commit 6a56fb601e0c92f224e9a5518f641a3e909e30c3
Author: Victor Lowther <victor.lowther@gmail.com>
Date: Tue Jun 25 15:24:00 2019 -0500
Add parameters for network interface topology and config
A content/params/net-interface-config.yaml
A content/params/net-interface-topology.yaml
M tools/package.sh
commit e08f83afcce6d6180d08714c75a0475e520b82fa
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 26 22:28:02 2019 +1200
Tweak client params
M krib/templates/consul-agent.json.tmpl
commit a362792955705844f808fb33fa8a27c319ce40f4
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 26 22:16:22 2019 +1200
Works co-locating agent and server on the same host
A krib/params/consul-agent-count.yaml
A krib/params/consul-agents-done.yaml
A krib/params/consul-agents.yaml
A krib/stages/consul-agent.yaml
D krib/stages/consul-config.yaml
A krib/stages/consul-server.yaml
A krib/tasks/consul-agent-config.yaml
A krib/tasks/consul-agent-install.yaml
D krib/tasks/consul-config.yaml
D krib/tasks/consul-install.yaml
A krib/tasks/consul-server-config.yaml
A krib/tasks/consul-server-install.yaml
A krib/templates/consul-agent-config.sh.tmpl
A krib/templates/consul-agent-install.sh.tmpl
A krib/templates/consul-agent.json.tmpl
A krib/templates/consul-agent.service.tmpl
R082 krib/templates/consul-config.sh.tmpl krib/templates/consul-server-config.sh.tmpl
A krib/templates/consul-server-env.sh.tmpl
R082 krib/templates/consul-install.sh.tmpl krib/templates/consul-server-install.sh.tmpl
R078 krib/templates/consul.json.tmpl krib/templates/consul-server.json.tmpl
A krib/templates/consul-server.service.tmpl
commit 69a6d8b1f7c7a775cc1af0da75d429b40df72e80
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 26 18:17:29 2019 +1200
Initial version of vault
A krib/params/vault-cluster-profile.yaml
A krib/params/vault-server-count.yaml
A krib/params/vault-servers-done.yaml
A krib/params/vault-servers.yaml
A krib/params/vault-version.yaml
A krib/stages/vault-config.yaml
A krib/tasks/vault-config.yaml
A krib/tasks/vault-install.yaml
A krib/templates/vault-config.sh.tmpl
A krib/templates/vault-install.sh.tmpl
A krib/templates/vault.hcl.tmpl
commit 3e26d30ae23ea63f2688b5b379710e9c6b631a41
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 26 13:33:53 2019 +1200
Make consul deployment more user-friendly
M krib/templates/consul-config.sh.tmpl
M krib/templates/consul-install.sh.tmpl
M krib/templates/consul.json.tmpl
commit acf6d1c5de36e6ee9941ba57fec3aee630846bfe
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 26 12:59:09 2019 +1200
Add gossip encryption
A krib/params/consul-encryption-key.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/consul-config.sh.tmpl
M krib/templates/consul-install.sh.tmpl
commit 85e1851d52fe29e6812abab15183b8bb0d3d5dc6
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jun 25 21:24:40 2019 +1200
Split consul into install and configure steps
M krib/stages/consul-config.yaml
M krib/tasks/consul-config.yaml
A krib/tasks/consul-install.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/consul-config.sh.tmpl
A krib/templates/consul-install.sh.tmpl
commit 6a7f9f8b8cd836cac00471696a65ff506b43b142
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jun 24 20:38:52 2019 +1200
Make consul work with DRP-generated certs
M krib/templates/consul-config.sh.tmpl
M krib/templates/consul.json.tmpl
commit 5066b1b4baea8d64bb1ec290a6bb397c483fce1b
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jun 24 08:31:45 2019 +1200
Self-assemble TLS-secured consul cluster (WIP)
M krib/tasks/consul-config.yaml
M krib/templates/consul-config.sh.tmpl
M krib/templates/consul.json.tmpl
commit 5f706cf50181b0dbb124591944d294a37b3859a4
Author: David Young <davidy@funkypenguin.co.nz>
Date: Mon Jun 24 07:05:24 2019 +1200
Improve consul workflow
M krib/templates/consul-config.sh.tmpl
A krib/templates/consul.json.tmpl
M krib/templates/krib-consul-install.sh-orig-deleteme.tmpl
D krib/templates/krib-consul.json.tmpl
commit 1112fc05b6a804ac15cdc5367e0daa77454ad0ed
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 22 17:23:01 2019 +1200
Prepare params
A krib/params/consul-cluster-profile.yaml
A krib/params/consul-server-ca-name.yaml
A krib/params/consul-server-ca-pw.yaml
A krib/params/consul-server-count.yaml
A krib/params/consul-servers-done.yaml
A krib/params/consul-servers.yaml
M krib/tasks/consul-config.yaml
commit fd9d446849d74a068418e47679e5f4c9c491f5da
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jun 21 09:08:15 2019 +1200
Progressed up to a point - left notes to followup
A krib/templates/consul-config.sh.tmpl
M krib/templates/etcd-config.sh.tmpl
R073 krib/templates/krib-consul-install.sh.tmpl krib/templates/krib-consul-install.sh-orig-deleteme.tmpl
commit cde33a9dcc2ee54ac823d9e373fbedca2243c900
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 20 21:30:01 2019 +1200
Got initial consul cluster built (the dirty way)
M krib/tasks/consul-config.yaml
M krib/tasks/krib-dev-reset.yaml
M krib/templates/krib-consul-install.sh.tmpl
M krib/templates/krib-consul.json.tmpl
commit edef08515fb365ecfc76f7da81ce5dcc5ef1fff7
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 20 20:54:45 2019 +1200
Installed /usr/local/bin/consul
M krib/params/consul-version.yaml
M krib/tasks/consul-config.yaml
M krib/templates/krib-consul-install.sh.tmpl
commit e577cd116b36c30c7e47bde0225d06b59738d0e1
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 20 19:28:41 2019 +1200
First cut at consul setup
A krib/params/consul-version.yaml
A krib/stages/consul-config.yaml
A krib/tasks/consul-config.yaml
A krib/templates/krib-consul-install.sh.tmpl
A krib/templates/krib-consul.json.tmpl
commit 98e890cd848ab629ca07d92665dda2e0ce61ca23
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Wed Jun 19 17:32:46 2019 -0500
Fix curl for redirects
M tools/package.sh
commit cd6ec449577228ca72223a9625bd83a359f374e8
Author: Greg Althaus <galthaus@austin.rr.com>
Date: Wed Jun 19 17:19:36 2019 -0500
Don't build drp items - just get them
M tools/package.sh
commit a1f1af88e09e1213abb1108f848942859828a9ad
Author: David Young <davidy@funkypenguin.co.nz>
Date: Thu Jun 20 08:30:34 2019 +1200
Improve presentation and docs of krib-container-runtime.yaml
M krib/stages/krib-runtime-install.yaml
commit a17a743f297948903abb809ec8623f0820e8eef9
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 19 22:28:33 2019 +1200
Add option to install files from local repo
M krib/templates/etcd-config.sh.tmpl
M krib/templates/kubernetes-install.sh.tmpl
commit 23e6edf56b4982b289782a88a72088bd455778ab
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 19 22:09:46 2019 +1200
Fix test for local repo
M krib/templates/containerd-install.sh.tmpl
commit 6928940f5baf3ab5aa74dfd2003a8bf74ed883fc
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 19 22:04:50 2019 +1200
Add details on switching to containerd
M krib/params/krib-cluster-cri-socket.yaml
commit 5edf458468ca517052d29762e1298e8e9e3ad5c7
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 19 21:25:52 2019 +1200
Implement containerd, fix bugs
A krib/params/krib-repo.yaml
M krib/templates/containerd-install.sh.tmpl
M krib/templates/krib-kubeadm.cfg.tmpl
M krib/templates/krib-runtime-install.sh.tmpl
commit d91dbe2610a598d8c93d4bc59413c040250b1ba5
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 19 16:59:53 2019 +1200
Make install-containerd agnostic to a local http repo
M krib/templates/containerd-install.sh.tmpl
commit 1372b55b0c3ba9367f6f4bbb7ea4e2241a76b4b8
Author: David Young <davidy@funkypenguin.co.nz>
Date: Wed Jun 19 16:44:52 2019 +1200
Update for generic runtime stage
A krib/params/krib-container-runtime.yaml
A krib/stages/krib-runtime-install.yaml
A krib/tasks/containerd-install.yaml
A krib/tasks/krib-runtime-install.yaml
A krib/templates/containerd-install.sh.tmpl
A krib/templates/krib-runtime-install.sh.tmpl
M krib/workflows/krib-install-cluster.yaml
A krib/workflows/krib-soft-install-cluster.yaml
commit 1f73afb750bd761c88862eecad57ac8db30f70f3
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jun 18 10:11:39 2019 +1200
Applies, waiting validation
M krib/stages/krib-metallb.yaml
M krib/tasks/krib-metallb.yaml
commit e905c401d2942dcb9997a14cfa49bee02b196f9a
Author: David Young <davidy@funkypenguin.co.nz>
Date: Tue Jun 18 08:57:53 2019 +1200
First cut (is the deepest!)
A krib/params/metallb-l3-ip-range.yaml
A krib/params/metallb-l3-peer-address.yaml
M krib/templates/krib-metallb.sh.tmpl
commit 02d3fd880f1e4d190432f52c72962e386497a14d
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jun 16 20:27:48 2019 +1200
Correctly use HA cluster endpoint
M krib/templates/krib-kubeadm.cfg.tmpl
commit 67deaa9ec35e1ca7b49695bff9a9f510fc0afe91
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jun 16 20:21:30 2019 +1200
Increase random sleep from 5 to 25 sec
M krib/tasks/krib-dev-reset.yaml
M krib/templates/krib-config.sh.tmpl
commit 9bdf7cd01431a0e2880d48674efdd3c0dd0fee7b
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jun 16 10:31:55 2019 +1200
Decomposed further
M krib/templates/etcd-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
A krib/templates/krib-skip-if-not-master.tmpl
commit 3cce077c9f7dd35fc3e374ef0bea0db7e60142b6
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sun Jun 16 09:45:34 2019 +1200
Safely introduce optional params for selective mastership
A krib/params/krib-cluster-i-am-master.yaml
A krib/params/krib-cluster-selective-mastership.yaml
M krib/templates/etcd-config.sh.tmpl
M krib/templates/krib-get-masters.sh.tmpl
commit d977eacae892fa1273bc57ab798b88e376cf7282
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 15 11:57:05 2019 +1200
Only use HA etcd master if necessary params are defined
M krib/templates/krib-kubeadm.cfg.tmpl
commit d5318a6e0d3ef014a4920706ad6e7a001028d632
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 15 11:05:33 2019 +1200
Prevent failure if krib/cluster-master-vip is undefined
M krib/templates/etcd-config.sh.tmpl
commit fe6a17de486ab67e4a53da614104eefc76ead7eb
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 15 10:04:50 2019 +1200
Add brutal machine-wiping script
M krib/tasks/krib-dev-reset.yaml
commit 4dc94d0bed531021468da74ab8761fb4f87d839c
Author: David Young <davidy@funkypenguin.co.nz>
Date: Sat Jun 15 09:25:58 2019 +1200
Add etcd/cluster-client-vip-port as optional param
M krib/tasks/etcd-config.yaml
commit 3157c7bb9aa37f80b00f18ff290ddd73e203e6fc
Author: Rob Hirschfeld <rob@rackn.com>
Date: Fri Jun 14 09:46:57 2019 -0500
add prereqs meta to help users know certs is required
A krib/._Prerequisites.meta
commit c9b46d1adbe2bce3043a913a5c053d5e8e88605f
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jun 14 16:01:04 2019 +1200
Update kubeadm.conf
M krib/templates/krib-kubeadm.cfg.tmpl
commit ae67a49d370354ee574bbcb715673a675ec564c5
Author: David Young <davidy@funkypenguin.co.nz>
Date: Fri Jun 14 15:57:12 2019 +1200
Implement load-balanced etcd
A krib/params/etcd-cluster-client-vip-port.yaml
M krib/templates/etcd-config.sh.tmpl
M krib/templates/krib-haproxy.cfg.tmpl
commit 736e0c4bfc379662c049cde55f931b9a533d4510
Author: Victor Lowther <victor.lowther@gmail.com>
Date: Mon Jun 3 15:11:28 2019 -0500
Fix a couple of stupid typos in the runner-tmpdir doc.
M content/params/runner-tmpdir.yaml
commit 4c9f9a21b7e1bd0722128243a12743a33e5ad84e
Author: Victor Lowther <victor.lowther@gmail.com>
Date: Mon Jun 3 14:51:20 2019 -0500
Add a runner-tmpdir param.
This lets the location that the runner will use to store the
scratch files it uses in the case that we cannot rely on the continual
availability of the system default location.
A content/params/runner-tmpdir.yaml
commit b584c3061821ce39af45ec148ca1f68bbc9ae93f
Author: Adam Lemanski <adam.lemanski@make-a-bag.com>
Date: Mon May 27 09:59:23 2019 +0700
fix cni plugin link
M krib/templates/kubernetes-install.sh.tmpl
commit 907e4f551712c6959216ffb2449f70baca2ffbdb
Author: Adam Lemanski <adam.lemanski@make-a-bag.com>
Date: Fri May 24 16:12:06 2019 +0700
update kubernetes to v1.14.2, cni to 0.8.0
M krib/params/krib-cluster-cni-version.yaml
M krib/params/krib-cluster-kubernetes-version.yaml
commit dc3965ef3701f769cabedaaa64a19230fb083874
Author: Victor Lowther <victor.lowther@gmail.com>
Date: Tue May 21 10:36:04 2019 -0500
Add a Param that tracks the most recently detected boot mode.
Every time a system boots into Sledgehammer for whatever reason, the
system will now recored what mode the system firmware appears to be
operating in.
M content/bootenvs/sledgehammer.yml
A content/params/detected-bios-mode.yaml
commit 851190355acda0d6c767414fda460ea3bee444f0
Author: Shane Gibson <shane@rackn.com>
Date: Mon May 20 09:31:04 2019 -0700
update doc on pw hash create
M content/params/provisioner-default-password-hash.yaml
commit bbd16ba67f448f74be2892d95283f98a5dc5d4b0
Author: Shane Gibson <shane@rackn.com>
Date: Wed Apr 17 06:05:30 2019 -0700
Change 'if' to use 'eq ... true' check
M content/tasks/enforce-sledgehammer.yaml
End of Note