361c40cc66
add a compatibility shim for certs to support a cluster downgrade
2017-03-14 09:25:50 -07:00
097755fbd9
Merge pull request #41666 from mikedanese/cvm-master
...
Automatic merge from submit-queue (batch tested with PRs 41306, 42187, 41666, 42275, 42266)
remove support for debian masters in GCE
Asked about this on the mailing list and no one objects.
@zmerlynn @roberthbailey
```release-note
Remove support for debian masters in GCE kube-up.
```
2017-03-03 10:54:42 -08:00
1864e0516d
Merge pull request #42192 from mikedanese/mds-block
...
Automatic merge from submit-queue (batch tested with PRs 41980, 42192, 42223, 41822, 42048)
add kube-env variable to block traffic to metadataserver
@Q-Lee @thockin
2017-03-02 00:59:16 -08:00
90b26465d7
fix upgrades
2017-02-28 14:52:37 -08:00
cb9bdb8813
remove support for debian masters in GCE
2017-02-28 09:54:07 -08:00
34e02c9989
add kube-env variable to block traffic to metadataserver
2017-02-27 16:54:44 -08:00
192392bddd
refactor certs in GCE
2017-02-23 10:12:31 -08:00
3695e85b34
Expose storage media type as env variable
2017-02-17 14:16:55 +01:00
80e57b7016
Added configurable etcd initial-cluster-state to kube-up script.
...
Added configurable etcd initial-cluster-state to kube-up script. This
allows creation of multi-master cluster from scratch. This is a
cherry-pick of #41320 from 1.5 branch.
2017-02-13 16:10:47 +01:00
c8ce55fef4
Revert "Merge pull request #41132 from kubernetes/revert-40893-kubelet-auth"
...
This reverts commit fd56078298d953402cdf
2017-02-09 15:55:12 -08:00
1841e5b2e0
Revert "remove second CA used for kubelet auth in favor of webhook auth"
2017-02-08 13:22:10 +01:00
86d9493747
remove second CA used for kubelet auth in favor of webhook auth
2017-02-07 13:22:01 -08:00
d0997a3d1f
Generate a kubelet CA and kube-apiserver cert-pair for kubelet auth.
...
Plumb through to kubelet/kube-apiserver on gci & cvm.
2017-01-03 14:30:45 -08:00
ca22a75015
kube-up: Only specify ETCD_QUORUM_READ if non-empty
...
Fix #38290
2016-12-07 09:45:24 -05:00
38a63e388d
Set kernel.softlockup_panic =1 based on the flag.
2016-12-02 16:09:16 -08:00
1570aad238
Merge pull request #37451 from jszczepkowski/ha-read-quorum
...
Automatic merge from submit-queue
Added setting etcd read quorum flag
2016-12-01 06:31:24 -08:00
02542cae06
Added setting etcd read quorum flag.
...
Added setting etcd read quorum flag in kube-up scripts. Required for HA master.
2016-11-25 13:53:11 +01:00
b52d971aee
stash
2016-11-21 10:16:29 +01:00
ab7266bf19
SSL certificates for etcd cluster.
...
Added generation of SSL certificates for etcd cluster internal
communication. Turned on on gci & trusty.
2016-11-10 15:26:03 +01:00
b26faae7fc
Migrates addons from using ReplicationControllers to Deployments
2016-11-09 09:17:05 -08:00
a0c34eee35
Merge pull request #33239 from MrHohn/dns-autoscaler
...
Automatic merge from submit-queue
Deploy kube-dns with cluster-proportional-autoscaler
This PR integrates [cluster-proportional-autoscaler](https://github.com/kubernetes-incubator/cluster-proportional-autoscaler ) with kube-dns for DNS horizontal autoscaling.
Fixes #28648 and #27781 .
2016-11-07 19:31:31 -08:00
d961190e6f
Deployed DNS horizontal autoscaler as an addon
...
DNS horizontal autoscaling feature is turned on by default on gce.
The corresponding env var is piped into almost all other cloud
providers.
2016-11-07 10:44:44 -08:00
182a09c3c7
Merge pull request #35526 from justinsb/fix_35521_b
...
Automatic merge from submit-queue
kubelet bootstrap: start hostNetwork pods before we have PodCIDR
Network readiness was checked in the pod admission phase, but pods that
fail admission are not retried. Move the check to the pod start phase.
Issue #35409
Issue #35521
2016-11-06 12:53:14 -08:00
3ca1f06149
Prepare for easy change to etcd3 storage backend
2016-11-04 13:46:01 +01:00
68c0b4268b
Update bringup: don't pass in dummy pod-cidr
...
We no longer pass in a "dummy" pod-cidr (10.123.45.0/29), and rely on
reconcile-cidr=true instead (which is the default).
2016-11-04 00:11:55 -04:00
c2248324c1
Expose etcd version.
2016-11-02 17:03:13 +01:00
7ee7b55c5e
Rename TEST_ETCD_VERSION to ETCD_VERSION
2016-10-28 13:56:59 +02:00
94f580ef03
Revert "bootstrap: Start hostNetwork pods even if network plugin not ready"
2016-10-25 08:38:59 -07:00
6465742da1
Update bringup: don't pass in dummy pod-cidr
...
We no longer pass in a "dummy" pod-cidr (10.123.45.0/29), and rely on
reconcile-cidr=true instead (which is the default).
2016-10-22 11:16:19 -04:00
51ec7c2845
retry salt-call in configure-vm.sh
2016-10-12 10:25:32 -07:00
879a2dcdbd
bump master cidr range from /30 to /29
2016-09-16 13:41:58 -07:00
e7c42280f8
fix feature_gates salt plumbing
2016-08-25 17:34:41 -07:00
6e75fa9745
Merge pull request #31103 from mwielgus/scheduling-alg-provider-flag
...
Automatic merge from submit-queue
Scheduling algorithm provider flag in kube-up.sh
Follow up of:
#30274 #30992
cc: @piosz @wojtek-t @davidopp
2016-08-23 01:44:54 -07:00
182a4fd0ac
Scripts to configure image verification admission controller for gce.
2016-08-22 16:54:03 -07:00
11fabd7176
Scheduling algorithm provider flag in kube-up.sh
2016-08-22 17:49:00 +02:00
9030a3234f
Merge pull request #30859 from wojtek-t/allow_custom_etcd_in_e2e
...
Automatic merge from submit-queue
Add possibility to run non-default etcd image in tests
Ref #20504
@lavalamp @hongchaodeng @timothysc - FYI
2016-08-20 09:32:35 -07:00
51198f59da
Add --feature-gates to kube-system components
...
apiserver,scheduler,controller-manager,proxy,kubelet all get
flag. Using one variable to plumb through config via salt/init
scripts for GCE and GKE
2016-08-19 09:07:43 -07:00
1f3fdab063
Salt configuration for Rescheduler
2016-08-18 12:24:09 +02:00
315d9f3689
Allow non-default etcd
2016-08-18 11:56:01 +02:00
679afea360
etcd3 support
2016-08-10 13:33:35 +02:00
963a05ec72
AWS/GCE: Rework use of master name
...
* Add a pillar for hostname (because even if there's a good Salt
function for it, I don't trust it to return the short hostname)
* Move INITIAL_ETCD_CLUSTER to just the GCE turn-up
* Remove the master_name, which isn't needed as a pillar
2016-08-04 08:46:36 -07:00
657b30ccf6
Modified etcd manifest to support clustering.
...
Modified etcd manifest to support clustering.
2016-07-30 16:01:04 +02:00
fb3f02fb68
Revert "Modified etcd manifest to support clustering."
2016-07-27 12:03:21 -07:00
827ee794d6
Modified etcd manifest to support clustering.
...
Modified etcd manifest to support clustering.
2016-07-26 23:24:14 +02:00
eb3483eaba
kube-up: increase download timeout for kubernetes.tar.gz
...
Particularly on smaller instances on AWS, we were hitting the 80 second
timeout now that our image is well over the 1GB mark.
Increase the timeout from 80 seconds to 300 seconds.
Fix #29418
2016-07-22 00:39:35 -04:00
e559e305dd
append an abac rule for $KUBE_USER.
2016-07-21 09:40:39 -07:00
4c667c38c9
GCE bring-up: Differentiate NODE_TAGS from NODE_INSTANCE_PREFIX
...
Kubernetes-side fix to #29074 (GKE-side fix necessary as well)
2016-07-18 14:20:45 -07:00
2e308035f0
Copy FEDERATIONS_DOMAIN_MAP to a local variable since the helper script doesn't allow overwriting the existing variable.
2016-07-06 15:53:45 -07:00
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
3a6494e9ae
Merge pull request #28132 from madhusudancs/fed-kubedns-flags-nodebootstrap
...
Automatic merge from submit-queue
Substitute federation_domain_map parameter with its value in node bootstrap scripts.
This PR also removes the substitution code we added to the build scripts.
**Release Note**
```release-note
If you use one of the kube-dns replication controller manifest in `cluster/saltbase/salt/kube-dns`, i.e. `cluster/saltbase/salt/kube-dns/{skydns-rc.yaml.base,skydns-rc.yaml.in}`, either substitute one of `__PILLAR__FEDERATIONS__DOMAIN__MAP__` or `{{ pillar['federations_domain_map'] }}` with the corresponding federation name to domain name value or remove them if you do not support cluster federation at this time. If you plan to substitute the parameter with its value, here is an example for `{{ pillar['federations_domain_map'] }`
pillar['federations_domain_map'] = "- --federations=myfederation=federation.test"
where `myfederation` is the name of the federation and `federation.test` is the domain name registered for the federation.
```
cc @erictune @kubernetes/sig-cluster-federation @MikeSpreitzer @luxas
[]()
2016-06-29 14:09:46 -07:00
Mike Danese