summary refs log tree commit diff
path: root/nixos/modules/services/cluster
Commit message (Collapse)AuthorAge
* kubernetes: 1.11.3 -> 1.12.0Johan Thomsen2018-09-30
| | | | - kubelet CAdvisor port has been removed
* nixos/kubernetes: fix kubelet cgroup statsJean-Philippe Braun2018-07-31
| | | | https://github.com/kubernetes/kubernetes/issues/56850
* [bot]: remove unreferenced codevolth2018-07-20
|
* Merge pull request #43728 from srhb/k8srbacfixSarah Brofeldt2018-07-18
|\ | | | | nixos/kubernetes: Don't lose rbac submodule with no explicit options
| * nixos/kubernetes: Don't lose rbac submodule with no explicit optionsSarah Brofeldt2018-07-18
| |
* | nixos/kubernetes: Added missing dependency, awk, to kube-addon-manager path ↵Johan Thomsen2018-07-18
|/ | | | (#43708)
* nixos/hadoop: Replace users.extra{Users,Groups}aszlig2018-07-02
| | | | | | | | | | | | | | In fff5923686c21dd147bde62d08e9f1042deadb4f all occurences of users.extraUsers and users.extraGroups have been changed tree-wide to users.users and users.group. In the meantime the hadoop modules were introduced via #41381 (060a98e9f4ad879492e48d63e887b0b6db26299e). Unfortunately those modules still use users.extraUsers, which has been renamed a long time ago (14321ae2431e33f5ed81f1ee43eddd29c7e9d01d, about three years from now), so let's actually rename it accordingly as well. Signed-off-by: aszlig <aszlig@nix.build> Cc: @matthewbauer, @aespinosa
* Merge pull request #42798 from flokli/users-usersMichael Raskin2018-07-02
|\ | | | | tree-wide: users.extraUsers -> users.users, users.extraGroups -> users.groups
| * nixos/modules: users.(extraUsers|extraGroup->users|group)Florian Klink2018-06-30
| |
* | nixos/hadoop: add hadoop module (hdfs, yarn)Allan Espinosa2018-06-29
|/
* add missing k8s Webhook authorization modeThomas Kim Pham2018-06-19
|
* nixos/kubernetes: dashboard lockdownJohan Thomsen2018-06-19
| | | | | | | | | | Kubernetes dashboard currently has cluster admin permissions, which is not recommended. - Renamed option "services.kubernetes.addons.dashboard.enableRBAC" to "services.kubernetes.addons.dashboard.rbac.enable" - Added option "services.kubernetes.addons.dashboard.rbac.clusterAdmin", default = false. - Setting recommended minimal permissions for the dashboard in accordance with https://github.com/kubernetes/dashboard/wiki/Installation - Updated release note for 18.09.
* nixos/kubernetes: improvementsJohan Thomsen2018-06-12
| | | | | | | | | | | | | | | - Added option 'cni.configDir' to allow for having CNI config outside of nix-store Existing behavior (writing verbatim CNI conf-files to nix-store) is still available. - Removed unused option 'apiserver.publicAddress' and changed 'apiserver.address' to 'bindAddress' This conforms better to k8s docs and removes existing --bind-address hardcoding to 0.0.0.0 - Fixed c/p mistake in apiserver systemd unit description - Updated 18.09 release notes to reflect changes to existing options And fixed some typos from previous PR - Make docker images for Kubernetes Dashboard and kube-dns configurable
* kubernetes: corrected spelling mistake in docs (#41439)Geoffrey Huntley2018-06-04
|
* fix: connect the --bind-address arg to the cfg.apiserver.address optionGeoffrey Huntley2018-05-28
|
* Kuberetes Dashboard addon 1.8.2 -> 1.8.3Alberto Berti2018-05-25
| | | | | | | | | As shipped with k8s 1.10.3. Also: - updated the definition jsons as they are distributed in k8s. - updated the image uris as they are renamed in k8s - added imageDigest param as per 736848723e5aefa5d24396c58dc6de603399efde
* Kuberbetes DNS addon 1.14.4 -> 1.14.10Alberto Berti2018-05-25
| | | | | | | | | As shipped with k8s 1.10.3. Also: - updated the definition jsons as they are distributed in k8s. - updated the image uris as they are renamed in k8s - added imageDigest param as per 736848723e5aefa5d24396c58dc6de603399efde
* kubernetes: update to 1.10Charles Strahan2018-05-25
|
* Merge pull request #40665 from seppeljordan/fix-kubernetes-moduleslewo2018-05-24
|\ | | | | nixos/kubernetes: Update kube-dns and kube-dashbashboard docker image…
| * nixos/kubernetes: Update kube-dns and kube-dashbashboard docker image ↵Sebastian Jordan2018-05-16
| | | | | | | | derivations to new pullImage function signature
* | kubernetes: fix 404 links to documentationGeoffrey Huntley2018-05-24
| |
* | kubernetes-dashboard: raise memory limit to 250MBKevin Liu2018-05-21
|/ | | On my cluster, I often get OOM errors that cause the dashboard to crash just by going over 50MB.
* fleet: remove package, module, testUli Baum2018-05-05
| | | | deprecated and unmaintained upstream
* panamax: remove packages, module and testUli Baum2018-05-05
| | | | | was broken and depends on (deprecated) fleet packages: panamax_api, panamax_ui
* nixos: kubernetes fixesCharles Strahan2018-03-30
| | | | | | | | | | | | | | | | | | * Fix reference CNI plugins * The plugins were split out of the upstream cni repo around version 0.6.0 * Fix RBAC and DNS tests * Fix broken apiVersion fields * Change plugin linking to look in ${package}/bin rather than ${package.plugins} * Initial work towards a working e2e test * Test still fails, but at least the expression evaluates now Continues @srhb's work in #37199 Fixes #37199
* treewide: use more HTTPS URLsRyan Mulligan2018-03-24
| | | | | | | | Uses the HTTPS url for cases where the existing URL has a permanent redirect. For each domain, at least one fixed derivation URL was downloaded to test the domain is properly serving downloads. Also fixes jbake source URL, which was broken.
* nixos/k8s: Enable Node authorizer and NodeRestriction by defaultSarah Brofeldt2018-02-04
|
* kubernetes-dashboard (module): 1.6.3 -> 1.8.2Roman Kuznetsov2018-01-17
|
* Revert "kubernetes: fix hashes after dockerTools change"Robin Gloster2017-09-28
| | | | This reverts commit 9ba024f6d85cc9adfac9ceb58f3eed231feb2d62.
* kubernetes: fix hashes after dockerTools changeRobin Gloster2017-09-24
|
* kubernetes: fix dns addon hashes, fix clusterDns, enable proxy on masterMatej Cotman2017-09-24
|
* kubernetes module: refactor module system, kube-dns as moduleJaka Hudoklin2017-09-24
|
* kubernetes module: seedDockerImages option for seeding docker images built ↵Jaka Hudoklin2017-09-24
| | | | with nix
* kubernetes module: webhook authorization for kubeletJaka Hudoklin2017-09-24
|
* kubernetes module: fix documentation linksJaka Hudoklin2017-09-24
|
* kubernetes module: add featureGates optionJaka Hudoklin2017-09-24
|
* kubernetes module: kubelet, add socat to path for kubectl portforwardJaka Hudoklin2017-09-24
|
* kubernetes module: enable leader elect by defaultJaka Hudoklin2017-09-24
|
* kubernetes module: add storage and tolerations addmission controllersJaka Hudoklin2017-09-24
|
* kubernetes module: fix cidr rangesJaka Hudoklin2017-09-24
|
* kubernetes module: default auth mode to only RBACJaka Hudoklin2017-09-24
|
* kubernetes module: add support for common CA fileJaka Hudoklin2017-09-24
|
* kubernetes module: per service kubeconfig supportJaka Hudoklin2017-09-24
|
* kubernetes module: flannel support, minor fixesJaka Hudoklin2017-09-24
| | | | | | | | | | | | | | | - add flannel support - remove deprecated authorizationRBACSuperAdmin option - rename from deprecated poratalNet to serviceClusterIpRange - add nodeIp option for kubelet - kubelet, add br_netfilter to kernelModules - enable firewall by default - enable dns by default on node and on master - disable iptables for docker by default on nodes - dns, restart on failure - update tests and other minor changes
* kubernetes: fix minor issuesMatej Cotman2017-09-24
|
* kubernetes: update serviceMatej Cotman2017-09-24
|
* kubernetes module: authorization improvementsJaka Hudoklin2017-09-24
|
* kubernetes: 1.5.6 -> 1.6.4Matej Cotman2017-09-24
|
* lib: introduce imap0, imap1 (#25543)zimbatm2017-07-04
| | | | | | | | | | | | | | | | * lib: introduce imap0, imap1 For historical reasons, imap starts counting at 1 and it's not consistent with the rest of the lib. So for now we split imap into imap0 that starts counting at zero and imap1 that starts counting at 1. And imap is marked as deprecated. See https://github.com/NixOS/nixpkgs/commit/c71e2d42359f9900ea2c290d141c0d606471da16#commitcomment-21873221 * replace uses of lib.imap * lib: move imap to deprecated.nix
* Kubernetes ABAC policy file fix (#26499)Taylor "Nekroze" Lawson2017-06-13
| | | Fix the incorrect nix map that generates the Kubernetes policy file
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-04 10:45:25 +0000