Matthew Mosesohn d487b2f927 Security best practice fixes (#1783) ...

* Disable basic and token auth by default

* Add recommended security params

* allow basic auth to fail in tests

* Enable TLS authentication for kubelet

2017-10-15 20:41:17 +01:00

..

manifests

Adding in certificate serial numbers to manifests (#1392)

2017-09-01 09:02:23 +03:00

http-proxy.conf.j2

Adding support for proxy w/ rkt kubelet

2017-02-14 08:09:49 -06:00

kube-proxy-kubeconfig.yaml.j2

basic rbac support

2017-07-17 19:29:59 +08:00

kubelet-container.j2

ensure the /etc/os-release is mounted read only

2017-05-01 14:51:40 -04:00

kubelet.docker.service.j2

Move calico to daemonset (#1605)

2017-09-04 11:29:51 +03:00

kubelet.host.service.j2

kubeadm support (#1631)

2017-09-13 19:00:51 +01:00

kubelet.kubeadm.env.j2

add possibility to disable fail with swap (#1773)

2017-10-11 19:49:31 +01:00

kubelet.rkt.service.j2

add /etc/hosts volume to rkt templates

2017-10-09 16:41:51 +02:00

kubelet.standard.env.j2

Security best practice fixes (#1783)

2017-10-15 20:41:17 +01:00

nginx.conf.j2

Rework inventory all by real groups' vars

2017-02-23 09:43:42 +01:00

node-kubeconfig.yaml.j2

Generate individual certificates for k8s hosts

2017-01-11 12:58:07 +03:00