|
c902d08f
|
no longer in use.
|
Xueshan Feng <x****g@s****u>
|
over 7 years ago
|
|
|
e99a3565
|
these are moved to vault-provision/common/scripts repo.
|
Xueshan Feng <x****g@s****u>
|
almost 8 years ago
|
|
|
d08eadc9
|
added VAULT_USER; default is sfeng; fix 0.10.x vault login crash issue.
|
Xueshan Feng <x****g@s****u>
|
almost 8 years ago
|
|
|
ccb5a3b5
|
kv2 update need .data.data for jq.
|
Xueshan Feng <x****g@s****u>
|
almost 8 years ago
|
|
|
a8f5c719
|
Added vault-list-trees.sh
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
15495867
|
fix file name checking.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
b03fe074
|
use grafana/config.yaml to set persistent disks.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
f2b7e292
|
removed some verbose output.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
9d5d9886
|
test empty port string.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
705567c8
|
replaced kill-ui target with kill-port.sh script; added grafana,prometheus.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
8db751b9
|
added kill-port.sh.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
c42dc438
|
added --recreate-pods.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
1f24ad00
|
added reboot-node target.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
90de4b8d
|
Do not use sub-shell in getting NODES so we can have the correct KUBECONFIG c...
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
e3653271
|
update with vault operator seal.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
db5ccba4
|
added vault-seal: target.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
2453af46
|
added vault-seal.sh command.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
49238e6b
|
Use vault cli for status check instead of curl.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
c0d7bd91
|
use vault cli kc commmand to get duo ikey etc. no longer use curl_vault.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
c743cbc0
|
fine tunning to make it work for both sealed-unsealed servers.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
e37b52b8
|
only override etcd endpoint when the cluster is up and running.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
734449a7
|
if etcd endpoint is provided, use that to check status.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
e221930b
|
format output.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
32850bc6
|
added code to find out vault cluster leader.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
d8bae071
|
added verbose for systemctl.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
cccd9058
|
Added /fluentd-cloudwatch/configmap.yml to override default fluentd conf.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
9ac59411
|
added vault-upgrade.sh.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
49f0696d
|
commented out echo vault command.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
aa71c3a6
|
update vault-token-inventory.sh.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
9abdae7e
|
Added service accouont name (SA_NAME) for admin-token target.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
3fab7ba7
|
Added CONTEXT_NAME env.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
74ee2eab
|
if target it help, don't run kube-config.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
b2860e2d
|
Cleanup TMPDIR.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
d9777ad4
|
added get-unseal-key.sh
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
d85a97b3
|
Added fluentd-cloudwatch with proper kubernetes secret for AWS cloudwatch.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
abc8970a
|
added fluentd-cloudwatch.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
abeea288
|
added cluster-info target and update eks GA cli.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
ddc1448c
|
Updated with last pv,pvc.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
edbb9f27
|
make config-kube always run.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
afd06aec
|
clean up code. just use kubectx to switch to aws.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
c94784ed
|
no longer needed.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
6fe088fa
|
added nginx-ingress addon.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
9cf4fe13
|
when delete kube let's encrypt cert, delete secret as well.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
c1541ccd
|
Script to upload let's encrypt cert stored in kube secret to AWS, configure E...
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
ad927c71
|
AWS_PROFILE, AWS_REGION, and ASG are required.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
888a143b
|
update recycle-node target.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
33497f1c
|
Update recyle-node to use kubectl get node to get instance_id.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
95a7fe96
|
added cert-manager-helm.mk.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
4d40ddb8
|
added external-dns.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
2f47ed4b
|
Update to reverse makefiles display so the current directory's makefile is sh...
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
c6d06cb3
|
kill previous proxy when start ui.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
3acf8551
|
added sub-project.mk, update-repos. docker-registery.mk
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
1616123d
|
put back TILLER_IMAGE. Needed by check-images.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
44c2cc4e
|
Create kube-addons.mk. Moved addons to this file.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
544bb4fe
|
tidy up format.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
3f024dae
|
Typo.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
af7bb844
|
quote input string.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
727c2e0c
|
upgrade server side helm version to 2.9.1.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
cdcdf7b8
|
tidy up approle creation.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
720e5d44
|
removed heptio-authenticator-aws.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
460df185
|
insert data previs if the api path is serect/.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
866b09b8
|
revert secret/data.. change. The data prefix is now inserted in provision() c...
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
17038334
|
change vault write to vault kv put.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
7355d105
|
KV2 data json output format change to use .data.data.value.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
feceb8b5
|
replace vault read with vault kv get.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
dfa23076
|
replace vault-read with vault-get.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
2f710855
|
Update provision secret path to use kv2.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
bada3ecd
|
Added vault-get.sh vault-put.sh
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
244bbbab
|
fix server list typo.
|
Xueshan Feng <x****g@s****u>
|
about 8 years ago
|
|
|
ee34e03c
|
update to make it work with heptio auth until kubectl can merge its kubeconfig.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
062896d2
|
do nothing for now. it breaks heptio.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
65606553
|
update vault mount-* to vault vault secretes (v0.10.1).
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
9fa01fb8
|
Normalize VAULT_SERVERS format.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
e1ff9858
|
added heptio-aws-auth checking.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
23e1bf74
|
merged kube-cluster and node-cluster.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
cf299c6f
|
report on images and tags.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
a9521692
|
adopted for AWS.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
e41f29da
|
added echo commandline input.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
8127cafd
|
Renamed cordon-node to cordon, uncordon-node to uncordon.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
f40707cc
|
Added confirm script.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
a4a04a87
|
added node cordon, uncordon, recycle.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
28e87305
|
correct cert-manager TEMPLATES.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
70913c81
|
added kube_*
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
1792b364
|
added more makefile_parts to share cross projects.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
84a492da
|
added logic to require CN as parameter
|
Ian Douglas <i****s@s****u>
|
over 8 years ago
|
|
|
234e8799
|
Update README.md
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
673566d7
|
Added config-aws-kube.sh to configure AWS EKS kubeconfig.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
5a6f9d27
|
need go to install heptio-authenticator-aws
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
4dd22005
|
add script to for target provision-ca-roles (wip)
|
Ian Douglas <i****s@s****u>
|
over 8 years ago
|
|
|
637d85e8
|
new script to create vault CA, iterated from create_ca.sh, updated with newer...
|
Ian Douglas <i****s@s****u>
|
over 8 years ago
|
|
|
6503c134
|
fix create-duo.sh mode.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
4e30bd3b
|
removed drone and gloud requirement.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
636aaa29
|
better feedback if input is not uuid format.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
3b5ce3b7
|
auth/token/lookup-self has not /* path.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
8e84457f
|
added --timestamp.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
7e35b1c5
|
added utc-to-local.sh
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
7a906731
|
mention default start time.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
d056a96e
|
added awslogs.sh to tail aws cloudwatch logs.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
cf06d6d0
|
vault-token-inventory.sh -> vault-token-audit.sh
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|
|
c55d1377
|
added vault-token-inventory.sh.
|
Xueshan Feng <x****g@s****u>
|
over 8 years ago
|
|