Erik Wilson
98254a3412
Change load balancer logging to debug
2019-08-08 10:48:11 -07:00
Erik Wilson
30e050a692
Cleanup logging
2019-08-07 22:45:54 -07:00
Erik Wilson
3c342e22a6
Fix panic in node controller
2019-08-06 10:42:42 -07:00
YAMAMOTO Takashi
fc8eddae29
Appease kubelet warnings on docker for mac
...
On my environment, the name=systemd entry in /proc/self/cgroup
looks like:
13:name=systemd:/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499
Kubelet periodically complains like:
E0802 06:42:52.667123 1 summary_sys_containers.go:47] Failed to get system container stats for "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy": failed to get cgroup stats for "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy": failed to get container info for "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy": unknown container "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy"
2019-08-02 16:22:51 +09:00
Erik Wilson
c170115c54
Merge pull request #676 from erikwilson/go-proxy
...
Add go load-balancing proxy
2019-08-01 16:03:41 -07:00
Erik Wilson
5deef13086
Merge pull request #687 from yamt/cacerts
...
Simplify startWrangler a bit
2019-08-01 16:01:42 -07:00
Erik Wilson
be0cc6e943
Merge pull request #690 from erikwilson/regenerate-certs-on-ca-change
...
Regenerate server certs if CA changed
2019-08-01 15:59:54 -07:00
Erik Wilson
739e4214bd
Merge pull request #693 from yamt/insecure-bootstrap
...
Fix bootstrap with non-tls etcd
2019-07-31 14:18:35 -07:00
Erik Wilson
506d8cdcc3
Merge pull request #691 from erikwilson/early-return-routes
...
Fix missing early returns on routes
2019-07-31 14:12:09 -07:00
YAMAMOTO Takashi
d78701acb1
Fix bootstrap with non-tls etcd
2019-07-31 16:14:13 +09:00
Erik Wilson
fdb997b4ee
Fix missing early returns on routes
2019-07-30 15:44:34 -07:00
Erik Wilson
a74d9e5282
Regenerate server certs if CA changed
2019-07-30 14:55:25 -07:00
Erik Wilson
a17e336993
Use go tcpproxy
2019-07-30 09:53:15 -07:00
YAMAMOTO Takashi
88e668cf6f
Simplify startWrangler a bit
...
We no longer make dynamiclistener generate CA certs.
2019-07-30 10:16:45 +09:00
YAMAMOTO Takashi
07eeb56d81
Remove pkg/proxy which is no longer used
2019-07-29 12:49:13 +09:00
YAMAMOTO Takashi
35d972fd72
Sort args to make log outputs a bit more deterministic
2019-07-24 13:16:41 +09:00
Erik Wilson
1833b65fcd
Merge pull request #647 from yamt/remove-proxy-port
...
Remove agent proxy config which is no longer used
2019-07-23 15:51:51 -07:00
Erik Wilson
e1162c7cfa
Update agent to notify systemd
2019-07-18 06:40:39 -07:00
Erik Wilson
8ce509ee6b
Cleanup tunnel logs
2019-07-18 05:00:07 -07:00
Erik Wilson
23b0797578
Add context to tunnel connect
2019-07-17 18:15:15 -07:00
Erik Wilson
b93b4732eb
Start endpoint tunnel watch before waiting
2019-07-17 17:13:40 -07:00
Erik Wilson
2d32337334
Merge pull request #650 from erikwilson/update-bootstrap
...
Bootstrap node key files & fix permissions
2019-07-17 14:22:05 -07:00
Erik Wilson
2f4d2838ea
Bootstrap node key files & fix permissions
2019-07-17 13:57:33 -07:00
YAMAMOTO Takashi
dc4ebd4c67
Remove agent proxy config which is no longer used
2019-07-17 18:05:16 +09:00
YAMAMOTO Takashi
f6a04ea995
Add a few comments in bootstrap.go
2019-07-17 16:25:34 +09:00
Erik Wilson
f6701bbe99
Merge pull request #634 from erikwilson/enforce-type-on-bootstrap
...
Enforce explicit read or write for bootstrap
2019-07-14 00:52:37 -07:00
Erik Wilson
fdc1427317
Add more logs for bootstrap
2019-07-14 00:49:08 -07:00
Erik Wilson
e77dc568bb
Cleanup tunnel
2019-07-14 00:29:21 -07:00
Erik Wilson
34fc4d0336
Merge pull request #629 from erikwilson/update-remotedialer
...
Update remotedialer & tunnel logs
2019-07-12 16:22:10 -07:00
Erik Wilson
131f3bec44
Merge pull request #619 from erikwilson/node-ip-from-flannel-iface
...
Default node-ip from flannel-iface
2019-07-12 16:21:05 -07:00
Erik Wilson
e79fda96d2
Enforce explicit read or write for bootstrap
2019-07-12 16:18:53 -07:00
Erik Wilson
a1ce08d4f1
Default node-ip from flannel-iface
2019-07-12 15:46:36 -07:00
Erik Wilson
7e6664b684
Add resource version to tunnel endpoint watch
2019-07-12 15:38:49 -07:00
Erik Wilson
034a863696
Cleanup remotedialer tunnel logs
2019-07-12 15:38:49 -07:00
Erik Wilson
403e73ab1c
Merge pull request #633 from ibuildthecloud/wrangler
...
Update wrangler
2019-07-12 11:11:36 -07:00
Darren Shepherd
37a60b18ca
Update wrangler
2019-07-12 10:21:15 -07:00
Darren Shepherd
dbb7b04c3d
Add option to disable scheduler
2019-07-12 09:59:03 -07:00
Erik Wilson
185a8dca13
Merge pull request #615 from erikwilson/master
...
Use watch-cache for kvsql
2019-07-07 14:46:08 -07:00
Erik Wilson
ad11ba583f
Use watch-cache for kvsql
2019-07-07 14:43:43 -07:00
Erik Wilson
c32e6469a8
Revert "Merge pull request #607 from dramich/mockgen"
...
This reverts commit cb306b9378
, reversing
changes made to ebb12c74c6
.
2019-07-07 14:41:19 -07:00
Erik Wilson
e0212144e8
Tunnel agent to all servers
...
Watch the kubernetes endpoints to create a tunnel to all servers.
2019-07-03 13:11:54 -07:00
Dan Ramich
3d50502cae
Generated changes
2019-07-02 15:52:42 -07:00
Dan Ramich
760dd6b655
Disable mock generation
2019-07-02 15:36:43 -07:00
Erik Wilson
11a4c71f28
Use watch-cache for etcd3 backend
2019-07-01 14:09:25 -07:00
Erik Wilson
853708c8ba
Merge pull request #591 from erikwilson/add-ctr
...
Build & enable ctr with k3s server
2019-06-30 13:06:00 -07:00
Erik Wilson
24b73403c7
Cleanup bootstrap
2019-06-30 12:39:54 -07:00
Erik Wilson
ed72856d27
Build & enable ctr with k3s server
2019-06-30 09:30:25 -07:00
Erik Wilson
8d979d675e
Add tls support for etcd cert storage backend
2019-06-30 08:28:42 -07:00
Erik Wilson
4b540f8d94
Cleanup command help text
2019-06-28 18:18:03 -07:00
galal-hussein
37582b6fac
Add cert storage backend flag
2019-06-28 20:47:21 +02:00
galal-hussein
28d9d83be2
Add k3s HA bootstrap
2019-06-27 21:00:43 +02:00
Erik Wilson
7090a7d551
Move node password to separate file
2019-06-25 15:04:04 -07:00
Erik Wilson
29865fd9c9
Remove agent proxy
2019-06-25 15:04:04 -07:00
Erik Wilson
c9b62c9a90
Remove CA Certs/Key from listenerconfig storage
2019-06-25 15:04:04 -07:00
Erik Wilson
93f6690f26
Graceful upgrade token to server CA
2019-06-25 15:04:04 -07:00
Erik Wilson
1e035820bf
Generated data
2019-06-25 15:04:04 -07:00
Erik Wilson
2c9444399b
Refactor certs
2019-06-25 15:04:04 -07:00
Darren Shepherd
30c3c42f93
Add missing ConfigMap cache to helm apply
2019-06-19 13:32:14 -07:00
galal-hussein
94b5a22dda
Disable the svclb controller nodeploy for svclb is passed
2019-06-18 23:05:16 +02:00
Darren Shepherd
e0d2bd3e2d
Merge branch 'pr505'
2019-06-14 13:28:19 -07:00
Darren Shepherd
9f4e43fea6
Merge pull request #506 from AkihiroSuda/bump-up-rootlesskit
...
rootless: use built-in port driver
2019-06-14 13:23:14 -07:00
Erik Wilson
2b44679352
Generated data
2019-06-14 09:37:59 -07:00
galal-hussein
17d8708ca5
Add storage backend flags
2019-06-12 00:48:47 +02:00
Akihiro Suda
5a51a8de45
rootless: use built-in port driver
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-05-29 15:01:38 +09:00
Akihiro Suda
490d6aefe0
rootless: fix mounting /var/lib/cni
...
k3s was unable to start up when /var/lib/cni is missing on the host.
Fix https://github.com/rancher/k3s/issues/470
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-05-29 14:04:28 +09:00
Erik Wilson
199f673676
Merge pull request #479 from galal-hussein/add_storage_backend_options
...
Add MySQL and Postgress support
2019-05-28 16:57:38 -07:00
Darren Shepherd
7ee554013a
Update generated code
2019-05-26 22:35:57 -07:00
Darren Shepherd
d94a346a1e
Switch to wrangler-api and helm-controller
2019-05-26 22:32:24 -07:00
Darren Shepherd
c0702b0492
Port to wrangler
2019-05-26 22:28:50 -07:00
Darren Shepherd
16f7aaab66
Update vendor
2019-05-25 23:44:33 -07:00
Darren Shepherd
4b4dd1b59b
Merge pull request #454 from galal-hussein/node_labels_taints
...
Expose node labels and taints and add node roles
2019-05-25 00:39:55 +02:00
Darren Shepherd
a999cd43aa
Merge pull request #459 from galal-hussein/check_time
...
Check if server time before 1/1/1970
2019-05-25 00:38:53 +02:00
Darren Shepherd
0c18c5a92a
Merge pull request #461 from galal-hussein/fix_alternate_kubeconfig
...
Create symlink for kubeconfig when --write-kubeconfig is selected
2019-05-25 00:38:18 +02:00
Darren Shepherd
06b1acb324
Merge pull request #460 from galal-hussein/kubeconfig_readable
...
change permissions of kubeconfig and issue warning with kubectl wrapper
2019-05-25 00:36:30 +02:00
galal-hussein
e9cd8adbf6
Add Storage endpoint option
2019-05-16 01:05:24 +02:00
galal-hussein
4c6cf29e02
Create symlink for kubeconfig when --write-kubeconfig is selected
2019-05-10 21:08:28 +02:00
galal-hussein
483df6fd82
Check if server time before 1/1/1980
...
Check
2019-05-10 20:29:42 +02:00
Wenxuan Zhao
f0f57c1e44
Allow using built-in modules
...
Signed-off-by: Wenxuan Zhao <viz@linux.com>
2019-05-09 12:23:33 -07:00
galal-hussein
36bab003a3
Make kubeconfig not world readable and issue warning with kubectl wrapper
2019-05-09 00:54:52 +02:00
galal-hussein
930093dfe9
Expose node labels and taints and add node roles
2019-05-08 01:47:07 +02:00
Erik Wilson
b0e4228609
Merge pull request #434 from galal-hussein/add_no_proxy
...
Add no_proxy env to server
2019-05-03 15:20:13 -07:00
Erik Wilson
f7376ad979
Update proxy environment for helm controller
...
Add lowercase no_proxy and all_proxy/ALL_PROXY to environment for helm
2019-05-03 11:10:42 -07:00
galal-hussein
d9f958ceeb
Add no_proxy environment to server
2019-05-03 19:44:30 +02:00
haokang.ke
52f845ec84
Make pause image configurable ( #345 )
2019-05-03 10:36:12 -07:00
Darren Shepherd
ea94b1af77
Merge pull request #433 from erikwilson/fix-0.5.0-cert-upgrade-bug
...
Force upgrade of token node cert
2019-05-03 10:35:36 -07:00
Darren Shepherd
5c62dcbb4b
Merge pull request #435 from galal-hussein/svclb_upgrade
...
handle old service lb deployments
2019-05-03 10:34:12 -07:00
galal-hussein
1e33142f29
handle old service lb deployments
2019-05-03 14:51:02 +02:00
galal-hussein
5d8d9e610b
Add timeout to hostname check
2019-05-03 14:41:08 +02:00
Erik Wilson
d5ce19caae
Force upgrade of token node cert
2019-05-02 16:22:42 -07:00
Darren Shepherd
4ec051d032
Merge pull request #422 from galal-hussein/use_cni_with_docker
...
Add cni plugin to kubelet if docker is used
2019-05-02 10:45:34 -07:00
Darren Shepherd
9005fd5176
Merge pull request #423 from galal-hussein/change_threshold
...
Change the stderr threshold for cli
2019-05-02 10:45:21 -07:00
galal-hussein
7e1699cda0
Check if hostname is resolvable before running agent
2019-05-01 22:54:05 +02:00
galal-hussein
fae6df0df0
Change the stderr threshold for cli
2019-05-01 05:23:32 +02:00
galal-hussein
191ac9371a
Add cni plugin to kubelet if docker is used
2019-04-30 22:12:02 +02:00
Darren Shepherd
2950e81c23
Merge pull request #371 from warmchang/nf_conntrack
...
🔧 modprobe nf_conntrack
2019-04-26 16:01:13 -07:00
Darren Shepherd
9db91d7de3
Merge pull request #369 from erikwilson/node-dns
...
Node DNS & cert registration
2019-04-26 16:00:31 -07:00
Darren Shepherd
875ba289de
Merge pull request #375 from galal-hussein/schedule_svclb
...
Add node selector to service loadbalancer controller
2019-04-26 15:58:33 -07:00
Darren Shepherd
50f405ddfd
Merge pull request #376 from galal-hussein/fix_kubeletarg
...
Fix extra argument with multiple =
2019-04-26 15:57:16 -07:00
Erik Wilson
c9941895d6
Bind kubelet to all interfaces and use webhook auth
2019-04-26 15:02:30 -07:00
galal-hussein
f293e14645
Use NodeSelector when node label is enabled
2019-04-26 20:20:11 +02:00
Erik Wilson
305b596745
Remove node OnCreate
2019-04-26 10:50:33 -07:00
William Zhang
22bd3a3ce7
🔧 nf_conntrack module
...
Signed-off-by: William Zhang <zhang.wanmin@zte.com.cn>
2019-04-26 08:55:48 +08:00
galal-hussein
72d2edc0cb
Fix extra argument with multiple =
2019-04-25 22:49:03 +02:00
Darren Shepherd
9376c39adf
Merge pull request #381 from galal-hussein/containerd_tmpl
...
Add containerd config go template
2019-04-25 13:36:30 -07:00
galal-hussein
bdf8a355e1
Add containerd config go template
2019-04-25 22:17:34 +02:00
Darren Shepherd
6a43f63c70
Merge pull request #388 from galal-hussein/pass_proxy_variable_to_helm
...
Add proxy env to helm controller
2019-04-25 11:33:26 -07:00
Erik Wilson
f584197bba
Save password as text file
2019-04-25 10:53:21 -07:00
galal-hussein
b87684fcb9
Add proxy env to helm controller
2019-04-24 04:27:52 +02:00
Erik Wilson
e64c0298f2
Add cert per-node password authentication
2019-04-23 11:02:35 -07:00
Erik Wilson
055a574fee
Simplify DNS hosts creation
2019-04-22 16:13:16 -07:00
Erik Wilson
1b2db423de
Add node name to node cert generation
2019-04-19 18:20:34 +00:00
Erik Wilson
37dd5cbfd2
Generated data
2019-04-17 22:44:46 +00:00
Erik Wilson
31cf2bc9ee
Add coredns entries for nodes
2019-04-17 22:44:46 +00:00
galal-hussein
c42ea5ec89
Skip any file with no yaml yml or json suffix
2019-04-18 00:13:11 +02:00
Darren Shepherd
be24f837bb
Merge pull request #349 from erikwilson/missing-cgroup-pids-fix
...
Check for cgroup pids support
2019-04-15 15:52:07 -07:00
Erik Wilson
4bba04023d
Check for cgroup pids support
...
If cgroup pids are not supported add a feature-gates flag
SupportPodPidsLimit=false for kubelet.
2019-04-15 22:26:50 +00:00
Darren Shepherd
0e3711b8b7
Merge pull request #339 from km4rcus/cluster-domain-option
...
Add --cluster-domain option
2019-04-15 10:06:07 -07:00
Darren Shepherd
08c3d0d4ef
Merge pull request #250 from yoink00/master
...
Allow flannel interface to be specified on the command line
2019-04-15 10:01:22 -07:00
Stuart Wallace
2268e028a2
Add ability to override flannel interface
2019-04-12 21:06:43 +01:00
Marco Mancini
b445bad171
Add --cluster-domain option
2019-04-12 08:06:35 +02:00
galal-hussein
e5d8d72e59
Fix comment of bind address
2019-04-12 02:30:49 +02:00
Erik Wilson
c48739206a
Enable aggregation layer
...
Configure kube-apiserver, kubelets, and kube-proxy for use with
aggregation layer in order for metrics-server deployment to function
correctly.
2019-04-11 22:43:31 +00:00
Darren Shepherd
046a817818
Add rootless support
2019-04-09 10:38:04 -07:00
galal-hussein
7794528aa1
Add extra flags for server and agent components
2019-04-09 08:20:38 +02:00
Darren Shepherd
a11ac8cc40
Pull in parallel for CRI
2019-04-08 22:50:59 -07:00
Darren Shepherd
8010a24c91
Update generated code for k8s 1.14
2019-04-08 22:50:59 -07:00
Darren Shepherd
841f8d29e6
Ensure CSI is initialized properly when running agent and server combined
2019-04-08 22:50:59 -07:00
Darren Shepherd
3c7e103085
Updates for k8s 1.14
2019-04-08 22:50:59 -07:00
Darren Shepherd
9e80177443
Merge pull request #289 from galal-hussein/add_bind_address
...
Add bind address server config
2019-04-08 22:36:58 -07:00
galal-hussein
e8c5b2498c
Change address to bind-address for scheduler and api
2019-03-31 14:55:56 +02:00
galal-hussein
d255574150
Add bind address server config
2019-03-31 02:10:23 +02:00
Erik Wilson
bb14bcb595
Update generated data
2019-03-26 23:13:54 +00:00
Erik Wilson
a4df9f4ab1
Kubelet resolv.conf DNS update
...
Allow the kubelet resolv-conf flag to be set, or automatically
discovered from /etc/resolv.conf & /run/systemd/resolve/resolv.conf if
no loopback devices are present, or create our own which points to
nameserver 8.8.8.8
2019-03-26 23:13:54 +00:00
Erik Wilson
1d61576e54
Fix linting issues
2019-03-25 16:04:29 -07:00
Darren Shepherd
4463408819
Merge pull request #239 from takmatsu/add-hosts
...
Add tls-san flag
2019-03-25 09:54:21 -07:00
Darren Shepherd
9a57e6fd0f
Merge pull request #257 from mortenlj/master
...
Skip writing manifest when using `--no-deploy`
2019-03-25 09:51:16 -07:00
Erik Wilson
2768f559c1
Fix go fmt error
2019-03-24 12:19:05 -07:00
Morten Lied Johansen
9033891f88
Skip writing manifest when using `--no-deploy`
...
Instead of skipping the manifest when listing the directory, we now skip
creating it in the first place. This allows users to deploy manifests
that replaces the ones bundled, without having to come up with a new
name.
Fixes #230 .
2019-03-23 22:22:58 +01:00
Takeaki Matsumoto
3a6b305455
Change flag name and type
2019-03-23 17:34:55 +00:00
Erik Wilson
9645048a57
Update klipper-helm version
2019-03-22 06:05:26 +00:00
Erik Wilson
8d57fbd430
Change klipper-helm to PullIfNotPresent
...
PullAlways ImagePullPolicy causes issues with offline/airgap support,
so only pull if image is not already present.
2019-03-22 00:10:29 +00:00
Erik Wilson
e75e5171af
Generated bin data
2019-03-20 18:35:25 +00:00
Erik Wilson
ffcc9c0c9c
Package static assets
...
Include static Helm assets in the build process needed for air-gap
2019-03-20 18:35:25 +00:00
Erik Wilson
608f3a4e80
Serve static assets
...
Provide a static assets route for use with helm or other air-gap needs.
2019-03-20 00:24:27 +00:00
Takeaki Matsumoto
9551e1db21
Add advertise-address flag
...
In NAT or LB environment,
we need not just the certs for local ip, but also additional ips.
advertise-address flag enables to add optional ips.
2019-03-18 08:26:23 +00:00
Darren Shepherd
8649243d34
Merge pull request #229 from epicfilemcnulty/Skip-empty-yaml-objects
...
Do not process empty yaml objects (fixes #222 )
2019-03-17 13:01:40 -07:00
Erik Wilson
7e1abf28f1
Short port names for service load balancer
...
If a port name is longer than 15 characters we are unable to create
the associated service load balancer containers. Use our own short
name of `lb-port-{port}` to avoid naming issues.
For rancher/k3s/issues/90
2019-03-14 18:53:00 +00:00
Vladimir Zorin
d1348b9898
Trim whitespaces before checking if line is empty or comment
2019-03-14 14:12:02 +02:00
Vladimir Zorin
567532d74d
Do not process empty yaml objects ( fixes #222 )
2019-03-14 13:36:26 +02:00
Darren Shepherd
2771ae1ba9
Merge pull request #184 from ibuildthecloud/default-ns
...
Assign default namespace if not set in manifests
2019-03-07 13:04:50 -07:00