Robert Bailey
c47b9178b4
Replace the auth config file with a kubeconfig file when
...
starting the kubelet on GCE.
2015-05-13 01:03:28 -07:00
Quinton Hoole
de0d59be05
Merge pull request #8096 from saad-ali/fixTemplateUpDown
...
Make MIG deletion during GCE kube down blocking, so that subsequent template deletion doesn't fail.
2015-05-12 17:05:13 -07:00
saadali
932cdd954d
Clean up GCE kube-down script by using set e
2015-05-12 16:58:22 -07:00
Clayton Coleman
7d620c20b9
Merge pull request #8105 from thockin/dns-domain
...
Rename default DNS domain to cluster.local
2015-05-12 17:18:45 -04:00
Zach Loafman
0b0bace006
Merge pull request #8009 from mbforbes/refactorEnv
...
Refactor master vs node kube-env and salt auth
2015-05-12 13:37:54 -07:00
Max Forbes
76c89db5a8
Master vs node salt auth refactor in configure-vm.sh
2015-05-12 13:26:11 -07:00
Max Forbes
0acf8f9a00
Refactor GCE kube-env for both OSes.
2015-05-12 13:26:10 -07:00
Tim Hockin
e83e49b076
rename default DNS domain to cluster.local
2015-05-11 23:00:43 -07:00
saadali
c5b1508774
Make MIG deletion during GCE kube down blocking, so that subseqent template deletion doesn't fail.
2015-05-11 18:51:59 -07:00
Jordan Liggitt
7e14a80f63
ServiceAccount admission plugin
2015-05-11 17:18:06 -04:00
Nikhil Jindal
72ac82eba9
Merge pull request #8005 from lavalamp/kubectlFix
...
Don't print debugging things on every run of kubectl.sh
2015-05-11 10:19:37 -07:00
Filip Grzadkowski
26d14300e9
Increase disk size for kubernetes master.
...
Signed-off-by: Filip Grzadkowski <filipg@google.com>
2015-05-11 15:35:38 +02:00
Daniel Smith
ccecb115ed
Don't print debugging things on every run of kubectl.sh
2015-05-08 15:55:28 -07:00
Wojciech Tyczynski
ca0f678b9a
Merge pull request #7792 from pweil-/security-context-types
...
SecurityContext admission clean up
2015-05-07 10:43:43 +02:00
Maxwell Forbes
7426b533df
Merge pull request #7862 from cjcullen/cbr0
...
Remove restriction that cluster-cidr be a class-b
2015-05-06 15:46:57 -07:00
saadali
4569de7a46
Enable Google Cloud Monitoring and Google Cloud Logging instead of
...
Influxdb for Google Compute Engine deployments.
2015-05-06 15:23:40 -07:00
CJ Cullen
fbd125e4e2
Remove restriction that cluster-cidr be a class-b
2015-05-06 15:01:13 -07:00
Dawn Chen
07afcb2bce
Merge pull request #7820 from zmerlynn/container-vm-v20150505
...
Update to container-vm-v20150505 (Also updates GCE to Docker 1.6)
2015-05-06 09:22:35 -07:00
Filipe Brandenburger
b7f9e2cea0
Merge pull request #7651 from zmerlynn/upload_hash_in_util
...
Also push .sha1 for devel builds
2015-05-06 09:07:39 -07:00
Jerzy Szczepkowski
58962100db
Merge pull request #7827 from zmerlynn/safe_format_cleanup
...
Clean up safe_format_and_mount spam in the startup logs
2015-05-06 10:50:32 +02:00
Robert Bailey
06c2f4e3d5
Merge pull request #7799 from cjcullen/test_pull_5246
...
Fix sync problems in #5246
2015-05-05 22:31:10 -07:00
Zach Loafman
399f7dee43
Clean up safe_format_and_mount spam in the startup logs
...
Totally minor cleanup, but I'm tired of seeing it's spam in the
startup logs.
2015-05-05 21:23:57 -07:00
Zach Loafman
c78eabbfac
Update to container-vm-v20150505
2015-05-05 17:15:54 -07:00
Jerzy Szczepkowski
e967ffd522
Added flag to set cluster class B network address for pods, add flag to disable allocation CIDRs for Pods. Fixed synchornization bug in NodeController registerNodes().
2015-05-05 16:10:43 -07:00
Tomek Kulczynski
290c7b94ef
Make nodecontroller configure nodes' pod IP ranges
2015-05-05 16:10:42 -07:00
Zach Loafman
875e83a741
Revert "Revert "Security context - types, kubelet, admission""
2015-05-05 16:02:13 -07:00
Zach Loafman
f48904fd5e
Revert "Security context - types, kubelet, admission"
2015-05-05 15:20:39 -07:00
Paul Weil
5acdf5e70b
remove trailing comma. Add sc admission controller to ansible and systemd
2015-05-05 16:34:38 -04:00
Paul Weil
982bf19c20
security context initial implementation - squash
2015-05-05 13:46:13 -04:00
Zach Loafman
0c107e4c44
Also push .sha1 for devel builds
...
And adds a .sha1 cache file to indicate what file was already pushed
to GCS, and how to force it if not, removing a few seconds off a
kube-up/push if you're just cycling.
With this and #7602 , all TAR_URLS will have a .sha1 as well.
2015-05-04 17:45:34 -07:00
Robert Bailey
9718d667a7
Merge pull request #7744 from zmerlynn/allow_builtin_salt
...
Skip SaltStack install if it's already installed
2015-05-04 16:32:56 -07:00
Zach Loafman
dd7f3f7df7
Skip SaltStack install if it's already installed
...
Next ContainerVM image will have SaltStack in it. Also be a little
less persnickety if it's found running. This isn't the case, but we
don't have to be aggressive.
2015-05-04 16:12:53 -07:00
Yu-Ju Hong
5270ce6d28
Merge pull request #7671 from vmarmol/fix-metadata
...
Make rkt-install a oneshot.
2015-05-04 10:50:36 -07:00
Yu-Ju Hong
c3ba88296b
Merge pull request #7665 from vmarmol/cluster-rkt
...
Provide container_runtime flag to Kubelet in CoreOS.
2015-05-04 10:06:58 -07:00
Victor Marmol
9253249b19
Make rkt-install a oneshot.
...
This will make our dependencies wait for us before they execute.
2015-05-01 17:44:44 -07:00
Victor Marmol
727016dc30
Provide container_runtime flag to Kubelet in CoreOS.
2015-05-01 17:02:33 -07:00
Eric Paris
6b3a6e6b98
Make copyright ownership statement generic
...
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
Brian Akins
b311a12d90
Use the variable as this changes based on environment.
2015-04-30 12:40:09 -04:00
Yifan Gu
9ba1839f52
cluster/gce/coreos: Add metadata-service in node.yaml
2015-04-29 14:58:26 -07:00
Dawn Chen
876f8beec9
Remove unused node-name attribute
2015-04-28 16:13:26 -07:00
Dawn Chen
13a0b033e2
Bring up a cluster using coreos image for worker nodes.
2015-04-28 16:13:26 -07:00
Dawn Chen
5fa11322f8
Factory out debian e.g. ContainerVM image specific support to its own
...
helper utility library.
2015-04-28 16:07:57 -07:00
Dawn Chen
8963347b9e
Introduce MASTER_IMAGE, MINION_IMAGE and OS_DISTRIBUTION to config-default
...
for enable coreos and rocket support
2015-04-28 15:31:09 -07:00
Robert Bailey
8206aa9eac
Salt configuration to add basic auth to GCE.
2015-04-28 14:07:54 -07:00
Alex Robinson
566f0d4724
Fix GCE logging scope name.
2015-04-28 13:44:30 -07:00
Alex Robinson
5b5525dca5
Merge pull request #7324 from vishh/log_scope
...
Enable logging.write scope for minions.
2015-04-28 11:00:10 -07:00
Vishnu Kannan
9c66305f8c
Enable logging.write scope by default for nodes. This is required for storing events in
...
Google Cloud Logging via heapster.
2015-04-28 10:55:06 -07:00
CJ Cullen
39c5bf363b
Merge pull request #7303 from erictune/kube_env3
...
kube-proxy uses token to access port 443 of apiserver
2015-04-27 14:33:53 -07:00
Eric Tune
9044177bb6
Generate a token for kube-proxy.
...
Tested on GCE.
Includes untested modifications for AWS and Vagrant.
No changes for any other distros.
Probably will work on other up-to-date providers
but beware. Symptom would be that service proxying
stops working.
1. Generates a token kube-proxy in AWS, GCE, and Vagrant setup scripts.
1. Distributes the token via salt-overlay, and salt to /var/lib/kube-proxy/kubeconfig
1. Changes kube-proxy args:
- use the --kubeconfig argument
- changes --master argument from http://MASTER:7080 to https://MASTER
- http -> https
- explicit port 7080 -> implied 443
Possible ways this might break other distros:
Mitigation: there is an default empty kubeconfig file.
If the distro does not populate the salt-overlay, then
it should get the empty, which parses to an empty
object, which, combined with the --master argument,
should still work.
Mitigation:
- azure: Special case to use 7080 in
- rackspace: way out of date, so don't care.
- vsphere: way out of date, so don't care.
- other distros: not using salt.
2015-04-27 08:59:57 -07:00
Brian Grant
60d7bad147
Merge pull request #7128 from nikhiljindal/fixbeta1tests
...
Removing more references to v1beta1 from pkg/
2015-04-24 11:07:53 -07:00