{"push_id":1170231211,"size":26,"distinct_size":1,"ref":"refs/heads/fuze-configs","head":"420c364ae999eb6a22aeb7a143c814d18ad1c973","before":"8164f6d3bc4bfe046b409382fae53078248301c2","commits":[{"sha":"5d138935e95999149603705c5cf8cd13ae26ce51","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"examples: Use coreos-install baseurl\n\n* Examples which install CoreOS to disk should reference\na CoreOS install image from bootcfg assets to speed up\ninstalls and improve the offline use-case\n* Update scripts/get-coreos to download and verify the\nCoreOS install image","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/5d138935e95999149603705c5cf8cd13ae26ce51"},{"sha":"f561b83647d1dc7b8cc75d5844b16812b4c7498a","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Merge pull request #228 from coreos/baseurl\n\nexamples: Use coreos-install baseurl","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/f561b83647d1dc7b8cc75d5844b16812b4c7498a"},{"sha":"368ff381fec7cec05a82c4fee669123046d21e1d","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"examples: Add Torus cluster on etcd3","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/368ff381fec7cec05a82c4fee669123046d21e1d"},{"sha":"98c6c26e26684af1888c2c67785811d7a680d5c8","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Documentation/torus.md: Add Torus cluster tutorial\n\n* Add a tutorial to network boot and provision a Torus\nCoreOS cluster for libvirt VMs or physical machines","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/98c6c26e26684af1888c2c67785811d7a680d5c8"},{"sha":"84e0272f10b97d33471ed67e4ec63057ef3d46a5","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Documentation: Minor fixes and tweaks","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/84e0272f10b97d33471ed67e4ec63057ef3d46a5"},{"sha":"af76aa695118e87d829be50b379c3240b07dcaeb","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"bootcfg:/*: Add gRPC client-to-server TLS and verify\n\n* A CA certificate (e.g. ca.crt) should be used to sign a server\ncertificate (server.crt for a private key server.key)\n* gRPC API server requires a server certificate and key to be enabled\n(passed via -cert-file and -key-file)\n* gRPC client bootcmd tool must verify the server identity using a\nknown CA (passed to bootcmd via -ca-file)\n* This provides transport security, it does not provide client\nauthentication","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/af76aa695118e87d829be50b379c3240b07dcaeb"},{"sha":"baa7f5e02538ebfc30a3557b44b25dc6026f508c","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"bootcfg/*: Require TLS client auth for gRPC API\n\n* gRPC API server requires a CA certificate to verify\nand authenticate clients (passed via -ca-file)\n* gRPC clients must authenticate with a client certificate\nand key (passed via -cert-file and -key-file)","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/baa7f5e02538ebfc30a3557b44b25dc6026f508c"},{"sha":"45622cb34694eb289cf18e85f463c55591f81cd1","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"bootcfg/cmd: Log gRPC TLS filenames or missing flags\n\n* Log which TLS files are being used and why\n* Log missing required gRPC TLS flags","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/45622cb34694eb289cf18e85f463c55591f81cd1"},{"sha":"c0d679ac4463c167533fcc8f609df2b632ba6ae9","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"bootcfg/examples: Add example gRPC TLS generation\n\n* Add script to create fake TLS credentials for running the\nbootcfg gRPC API examples","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/c0d679ac4463c167533fcc8f609df2b632ba6ae9"},{"sha":"d738880a466d16a98119f7aedfb59fe6f6bddc2d","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"*: Read-only TLS credentials and limit CipherSuites\n\n* Group changelog bullet points for readability","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/d738880a466d16a98119f7aedfb59fe6f6bddc2d"},{"sha":"d5fef3f9a7696673364630639e35c7d66a79ff37","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Merge pull request #231 from coreos/grpc-tls\n\nRequire gRPC TLS transport security, server verification, client authentication","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/d5fef3f9a7696673364630639e35c7d66a79ff37"},{"sha":"4672903c2aaf55ce663b8a913579649b832ec849","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"docs: Add network setup guide and flow diagram","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/4672903c2aaf55ce663b8a913579649b832ec849"},{"sha":"4dc6bbe29cfe56eae3b77f38dd014f466498de1c","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Merge pull request #159 from coreos/network-docs-wip\n\ndocs: Add network setup guide and flow diagram","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/4dc6bbe29cfe56eae3b77f38dd014f466498de1c"},{"sha":"285127daefa3b2c855196c29a1378dd659f311c8","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"examples/bootkube: Update self-hosted Kubernetes deployment\n\n* scp kubeconfig to hosts rather than insecurely distributing\ncredentials within Ignition configs. This is also easier than\ncopy-pasting k8s secrets into machine metadata (slow).\n* Self-hosted Kubernetes machine configurations can be versioned\nwithout containing Kubernetes credentials\n* Use path-based activiation for the host kubelet\n* Update from Kubernetes v1.2.2 to v1.3.0-alpha.5_coreos.0.\n* Update host kubelet flags accordingly","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/285127daefa3b2c855196c29a1378dd659f311c8"},{"sha":"f70cbe431f44cb6e9f9dcd84e6a8547a7dcddb06","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"examples/bootkube: Mount /etc/resolv.conf into host kubelet\n\n* Containers must be able to resolve network DNS names,\ncannot default to 8.8.8.8","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/f70cbe431f44cb6e9f9dcd84e6a8547a7dcddb06"},{"sha":"f6440db0d00502e481e02085113988b25767ef20","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Merge pull request #237 from coreos/bootkube-update\n\nexamples/bootkube: Update self-hosted Kubernetes deploy","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/f6440db0d00502e481e02085113988b25767ef20"},{"sha":"d49d9f25b44d558b02d2c18c4da7b26cbbe0b197","author":{"name":"Adam Schaub","email":"d088314fc96e5c68e8291303c0bd2e2295f31729@gmail.com"},"message":"bootcfg/{storage,server}: Added function GetGeneric to storage interface and implementations. Added GenericID to Profile protobuf.\n\nProfiles now have GenericId which can be used to render a \"generic\" go template file (neither ignition nor cloud-init) using group metadata and selectors. The storage interface and it's implementations use GetGeneric to retrieve this template.\n\nPartially addresses #224","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/d49d9f25b44d558b02d2c18c4da7b26cbbe0b197"},{"sha":"95db4cba6108625d703a7bb7fa0b359cc3bbc88a","author":{"name":"Adam Schaub","email":"d088314fc96e5c68e8291303c0bd2e2295f31729@gmail.com"},"message":"bootcfg/http: Added genericHandler + tests to the http server\n\ngenericHandler uses a Profile.GenericId to locate and render a \"generic\" go template using group metadata and selectors.\n\nPartially addresses #224","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/95db4cba6108625d703a7bb7fa0b359cc3bbc88a"},{"sha":"5bac35cc549aef2c907ec5ad319498ee7b04cf8a","author":{"name":"Adam Schaub","email":"d088314fc96e5c68e8291303c0bd2e2295f31729@gmail.com"},"message":"*: Add /generic docs and revert NetBoot protobuf id\n\n* Revert NetBoot id in storage.proto for compatibility\n* Add URL.RawQuery to data for generic templates\n* Add generic directory to scripts/setup-data-dir\n* Add documentation for generic templates.","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/5bac35cc549aef2c907ec5ad319498ee7b04cf8a"},{"sha":"25cde007406fdb1a0e30bb971905e21f829ade37","author":{"name":"Dalton Hubble","email":"eeb8cc79e437123ffa671685c84ad6d27568680a@gmail.com"},"message":"Merge pull request #239 from branch 'adamschaub:generic_endpoint'","distinct":false,"url":"https://api.github.com/repos/coreos/coreos-baremetal/commits/25cde007406fdb1a0e30bb971905e21f829ade37"}]}
{"actor":{"display_login":"dghubble"}}