Commit Graph

639 Commits (41cb3d6a39a2b318739d1c3e4063a751ebc499f9)

Author SHA1 Message Date
Eric Paris c560f41a4b Update docs which were incorrectly using _ in flag names
Each of these was verified that the actual flag declaration correctly
used -
2015-08-17 11:18:43 -07:00
Justin Santa Barbara 0ff8dd45ef Fix escaping problem in kube-scheduler manifest
'{{pillar[log_level]}}' was appearing literally in the command line,
instead of being substituted.

Fixes #12787
2015-08-17 08:16:24 -04:00
Dawn Chen 1932b48db3 Restore the logic of disable docker upgrade through salt for gce.
Currently it is commented out.
2015-08-11 14:55:58 -07:00
Dawn Chen 3901b225e3 Docker 1.7.1 2015-08-11 14:55:57 -07:00
Marek Grabowski 5f9cefc1d8 Merge pull request #12441 from vlajos/typofixes-vlajos-20150807
typofix - https://github.com/vlajos/misspell_fixer
2015-08-10 16:33:52 +02:00
Ed Costello 35a5eda585 Copy edits for typos 2015-08-09 14:18:06 -04:00
Veres Lajos 9f77e49109 typofix - https://github.com/vlajos/misspell_fixer 2015-08-08 22:31:48 +01:00
Eric Paris 86ca88be61 convert cluster/ from --flag_name= --flag-name= 2015-08-07 11:00:13 -04:00
Dawn Chen 2be69e7718 Merge pull request #12325 from brendandburns/supervisord
Add support for supervisord as a monit alternative.
2015-08-06 16:16:35 -07:00
Brendan Burns 15b9d98733 Add support for supervisord as a monit alternative. 2015-08-06 15:48:45 -07:00
Robert Bailey 8df33bc1a7 Register the kubelet on the master node with an apiserver. This option is
separated from the apiserver running locally on the master node so that it
can be optionally enabled or disabled as needed.

Also, fix the healthchecking configuration for the master components, which
was previously only working by coincidence:

If a kubelet doesn't register with a master, it never bothers to figure out
what its local address is. In which case it ends up constructing a URL like
http://:8080/healthz for the http probe. This happens to work on the master
because all of the pods are using host networking and explicitly binding to
127.0.0.1. Once the kubelet is registered with the master and it determines
the local node address, it tries to healthcheck on an address where the pod
isn't listening and the kubelet periodically restarts each master component
when the liveness probe fails.
2015-08-06 13:39:32 -07:00
Marek Grabowski 77675b052d Merge pull request #12301 from derekwaynecarr/fix_systemd_salt
Fix salt configuration on systemd setups
2015-08-06 11:36:27 +02:00
Mike Danese fe6b15ba2f rewrite all links to issues to k8s links 2015-08-05 21:11:11 -07:00
derekwaynecarr 0de0e3e9f1 Fix salt configuration on systemd setups 2015-08-05 17:01:43 -04:00
Alex Mohr e4fde6d2ca Merge pull request #9583 from eparis/make-cert-path
generate-cert: allow for alternative paths
2015-08-05 00:04:17 -07:00
Alex Robinson cc02e50fc7 Collect more of the VM's log files (monit, salt) in fluentd-es. 2015-08-05 00:22:38 +00:00
Alex Robinson 7430181d65 Collect more of the VM's log files (monit, salt) in fluentd-gcp. 2015-08-05 00:21:47 +00:00
Eric Paris 0753acf2f8 Allow make-ca-cert.sh to run on OS X
Currently make-ca-cert.sh uses (equiv of)

mktemp -d --tmpdir kube.XXXXX

but --tmpdir is not a valid option on OS X. Switch to

mktemp -d -t kube.XXXXX

Which is valid, but subtly different between OS X and Linux. The
directory you get back will be different on each.

Linux:  ${tmpdir}/kube.y5Bsu/
OS X:   ${tmpdir}/kube.XXXXX.VQ81oOui/
2015-08-04 19:03:01 -04:00
Eric Paris c69b6f5ba7 Respect KUBECTL_BIN in kube-addon-update.sh not just kube-addons.sh 2015-08-04 19:02:31 -04:00
Eric Paris 6b9ef5b2d8 generate-cert: allow for alternative paths
Instead of hard coding kube-cert and /srv/kubernetes allow these to be
overwritten by environment variables.  / is immutable on some systems
and so /srv is not a possible location to store data.
2015-08-04 19:01:16 -04:00
Alex Mohr ad4086eab1 Merge pull request #11308 from gmarek/pillar
Auto commit by PR queue bot
2015-08-04 12:42:57 -07:00
Alex Mohr 4c5763f28c Merge pull request #11299 from wojtek-t/increase_kubelet_start_timeout
Auto commit by PR queue bot
2015-08-03 16:14:02 -07:00
Justin Santa Barbara 463458bf5f AWS: Install ntp daemon on all nodes
The AWS API requires a signature on method calls, including the
timestamp to prevent replay attacks.  A time drift of up to 5 minutes
between client and server is tolerated.

However, if the client clock drifts by >5 minutes, the server will start
to reject API calls (with the cryptic "AWS was not able to validate the
provided access credentials").

To prevent this happening, we install ntp on all nodes.

Fix #11371
2015-08-01 14:32:08 -04:00
Jian Huang 45c37b9bd0 Update README.md
There is a bad link in the doc. change ../../docs/salt.md to ../../docs/admin/salt.md
2015-07-31 18:44:06 +08:00
gmarek 5bb7eec5ab Use salt pillars to pass test arguments during cluster creation. 2015-07-31 09:32:01 +02:00
Mike Danese bfaa527139 Merge pull request #12045 from a-robinson/logs
Fix fluentd configs to collect etcd logs on the master
2015-07-30 17:36:46 -07:00
Alex Robinson 69ab7026af Update fluentd-es to collect etcd logs and remove merge conflict cruft. 2015-07-30 22:21:01 +00:00
Alex Robinson 9e18c29e9f Make fluentd-gcp collect etcd's logs on the master. 2015-07-30 22:20:57 +00:00
Alex Robinson 94ae0a9a0d Make the kubelet on a GCE master check instance metadata for manifests.
Primary motivation: enable GKE and other cluster-as-a-service folks to
easily run additional logic on the master without having to modify salt
or SSH to the master after it's been created.
2015-07-30 21:04:34 +00:00
Janet Kuo 180798cfa4 Use example syncer tags instead of hard-coded examples in doc 2015-07-27 14:48:41 -07:00
Piotr Szczesniak f48543aba5 Made enabling Kube UI configurable 2015-07-27 08:23:04 +02:00
Mike Danese 01349cdbfa Merge pull request #11786 from a-robinson/fluentd
Update fluentd-gcp images to include latest Dockerfile changes
2015-07-24 12:40:41 -07:00
Brendan Burns 26de8cd6b2 Merge pull request #10601 from marun/docker-pkg-f22
Auto commit by PR queue bot
2015-07-23 22:15:50 -07:00
Alex Robinson 0889307522 Update the fluentd-gcp images to include their latest Dockerfile changes.
Their Dockerfiles were changed in #11768.
2015-07-24 01:27:42 +00:00
Vish Kannan 919fded0f8 Merge pull request #10401 from justinsb/workaround_salt_18089
Work around Salt 18089
2015-07-23 16:52:21 -07:00
Dawn Chen ebc36c0e5a timeout docker load: 30 second, and restart docker daemon to workaround docker-load-hang issue. 2015-07-17 15:16:23 -07:00
Dawn Chen 7e665230c7 Stop monit kube-addon on nodes. 2015-07-15 11:11:55 -07:00
Wojciech Tyczynski 628ceac305 Increase kubelet start timeout in Monit config 2015-07-15 13:28:07 +02:00
Victor Marmol cabecc1271 Merge pull request #10611 from marekbiskup/addon-update-kill-children
Addon update kill children
2015-07-09 21:09:58 -07:00
Victor Marmol ee8d2857fc Merge pull request #9381 from justinsb/aws_support_jessie
AWS: Add support for Vivid Vervet & Debian Jessie
2015-07-09 15:20:37 -07:00
Marek Biskup aa608258a6 kill child processes of addon-update on stop 2015-07-09 13:10:54 +02:00
Victor Marmol f1e66c718d Merge pull request #10590 from roberthbailey/kubelet-on-nodes
Install the kubectl binary on nodes in addition to the master.
2015-07-08 16:13:12 -07:00
Justin Santa Barbara 89900fa19b AWS: Ubuntu Vivid, set cgroup_root to docker
Otherwise libcontainer generates systemd unit file names that start with "-",
which are not valid.
2015-07-08 17:00:43 -04:00
Victor Marmol dd37642369 Merge pull request #10488 from justinsb/salt_support_systemd
Salt: support systemd (don't assume Redhat <=> systemd)
2015-07-08 13:43:08 -07:00
Victor Marmol 3be3603ef3 Merge pull request #10877 from brendandburns/aws
Fix AWS Setup.
2015-07-08 11:33:32 -07:00
derekwaynecarr e2ddd2dd7b Missing ca crt in vagrant controllers 2015-07-08 10:59:10 -04:00
Brendan Burns 6d08ade4ce Don't start Docker by default on AWS 2015-07-07 21:57:43 -07:00
Satnam Singh 90e105521c Wait for service accounts in the kube-system namesapce 2015-07-06 18:12:25 -07:00
Brendan Burns 988aa6fdf6 Move things into a 'kube-system' namespace. 2015-07-06 15:08:23 -07:00
Yu-Ju Hong 1e0a16392d Merge pull request #10780 from cjcullen/testfix
Hacky workaround for #9822
2015-07-06 15:00:35 -07:00
Yu-Ju Hong b58e7c8c2d Merge pull request #10655 from dchen1107/cadvisor
Set minimal shares for containers with no cpu specified
2015-07-06 11:38:54 -07:00
Tim Hockin 6c88401889 Merge pull request #10271 from erictune/how-to-write-a-gsg
Scratch Getting-started-guide
2015-07-06 11:00:44 -07:00
Eric Tune 682abd9dab Scratch Getting-started-guide 2015-07-06 10:38:20 -07:00
CJ Cullen edd419790e Hacky workaround for #9822 2015-07-06 10:02:53 -07:00
Yu-Ju Hong 8ce6fe855b Merge pull request #10712 from justinsb/always_install_socat
Salt: install socat; needed for port-forward
2015-07-06 09:58:52 -07:00
Yu-Ju Hong 83fbcba97b Merge pull request #10698 from justinsb/aws_master_sans
AWS: Configure SSL certificate alternate-names
2015-07-06 09:57:44 -07:00
Zach Loafman a2250d1caf Merge pull request #10597 from a-robinson/fluentd
Run fluentd on the master to collect the core master logs
2015-07-04 21:12:47 -07:00
Justin Santa Barbara 6504df77f1 Salt: install socat; needed for port-forward
port-forward needs socat on the node hosts; we technically
don't need it today on the master, but this seems the right
place to put it, and socat is a small dependency.
2015-07-03 19:12:44 -04:00
Justin Santa Barbara 25007421ba Salt: re-remove comment block
It had been removed in upstream, but had been kept by mistake here.
2015-07-03 12:43:36 -04:00
Justin Santa Barbara 600a0d6fe7 Salt: have kube-addons service depend on init file
For symmetry with systemd
2015-07-03 12:41:59 -04:00
Justin Santa Barbara a5b3c73ac4 Salt: Add service block for kube-proxy for systemd
We have the workaround for Salt's problems here, but we should still express
our intent.
2015-07-03 10:26:21 -04:00
Justin Santa Barbara 60d822435b Salt: clean daemon_args on RedHat, not systemd
I don't think it actually makes a difference based on how we're using it,
but this is now more of a precise change.
2015-07-03 10:24:32 -04:00
Justin Santa Barbara ad0293e3f3 Salt: Add more dependencies to systemd services
This may help Salt reload services correctly, although we still
need the script until Salt's bug with reloading services on systemd
is resolved.

Salt bug: https://github.com/saltstack/salt/issues/16778
2015-07-03 01:40:15 -04:00
Justin Santa Barbara 944fc1ed58 Set standard bash options in services helper script 2015-07-03 01:40:15 -04:00
Justin Santa Barbara bcd92c7522 Salt: support systemd (don't assume Redhat <=> systemd)
Also work around problems with Salt & systemd services, in particular
that Salt doesn't issue a daemon-reload.
2015-07-03 01:40:15 -04:00
Justin Santa Barbara c676c11189 AWS: Configure SSL certificate alternate-names
GCE does this in its per-provider scripts; this does the same for AWS and lets
other providers do the same; I believe kube2sky requires 10.0.0.1 as a SAN.
2015-07-03 01:18:07 -04:00
Dawn Chen 9ce11545c0 Explicitly configure master component containers and nginx with 200m each. 2015-07-02 10:46:39 -07:00
Zach Loafman 1d16be675c Merge pull request #10653 from dchen1107/resource_management
Set resource limit for addon containers
2015-07-01 19:35:28 -07:00
Dawn Chen 54531d9b55 Set memory limit (200mi) to fluentd static pod 2015-07-01 17:00:06 -07:00
Zach Loafman b60c8e567f Merge pull request #10077 from timstclair/ui-server
Move dashboard UI out of the apiserver to a separate pod
2015-07-01 15:56:33 -07:00
nikhiljindal 274792d7bb Stop exposing v1beta3 by default 2015-07-01 14:38:02 -07:00
Tim St. Clair b6b2d6df42 Add kube-ui cluster addon for serving k8s dashboard UI.
Changes include:
- Add kube-ui binary for serving static dashboard UI
- Add kube-ui docker image, replication controller, and service
- Make the kube-ui a cluster-addon (enabled by default)
- Split the compiled pkg/ui/datafile.go into separate dashboard and swagger packages
- Update docs to reflect changes
2015-07-01 14:21:47 -07:00
Alex Robinson e5ea6ae854 Run fluentd on the master node by default.
This involves adding the logging-write scope to the master when running on GCE.
2015-07-01 20:07:52 +00:00
Marek Biskup 8df3a9cae8 namespaces in addon update 2015-07-01 21:31:52 +02:00
Zach Loafman 3094c1624b Merge pull request #10492 from derekwaynecarr/add_watch_service_file
Fix Vagrant kube-up - missed file watch on systemd stops kubelet starting on initial kube-up
2015-07-01 09:49:59 -07:00
Marek Biskup 7873e252f0 addon updater should not retry too many times because specs may be invalid 2015-07-01 16:22:32 +02:00
derekwaynecarr de78898170 Missing file watch on systemd stops kubelet starting on kube-up 2015-07-01 09:59:26 -04:00
Zach Loafman b83236ee7a Merge pull request #10568 from derekwaynecarr/fix_vagrant_kube_proxy
Missed update to kube-proxy when removing nginx on vagrant
2015-07-01 06:42:00 -07:00
Maru Newby 2da59a2f34 Install 'docker' package for Fedora 22
Fedora < 22 provides docker via the 'docker-io' package, but this
package was renamed to 'docker' as of Fedora 22.  Though the docker
package can be installed manually with 'dnf install docker-io' on F22,
Salt requires the explicit package name or deployment will fail.
2015-06-30 21:36:33 -07:00
Robert Bailey fedddee157 Install the kubectl binary on nodes in addition to the master. 2015-06-30 16:52:17 -07:00
derekwaynecarr 2cc869b1c5 Missed update to kube-proxy when removing nginx on vagrant 2015-06-30 15:42:52 -04:00
Dawn Chen e55cd709a1 Removed cluster/saltbase/salt/_states/container_bridge.py since it is useless now. 2015-06-30 11:00:41 -07:00
Zach Loafman f21b6b89d1 Fix issues mentioned in #10520 2015-06-30 06:51:10 -07:00
Daniel Smith dcd91666b9 wait until a token shows up to start addons 2015-06-29 18:41:12 -07:00
Justin Santa Barbara e29e9f0033 Add explicit dependency of docker pkg on the deb download
Salt ordering continues to surprise me.  I saw them execute
out of order, though I don't know why.  Adding an explicit
dependency to prevent out-of-order execution.
2015-06-28 23:51:12 -04:00
Justin Santa Barbara ea74bd13b8 Work around Salt 18089
Directly create /etc/sysctl.d/99-salt.conf
2015-06-28 23:50:00 -04:00
Justin Santa Barbara 54d3ac92ea Don't make kubelet systemd service depend on Docker
Fixes #10379
2015-06-26 11:03:09 -04:00
Maxwell Forbes bc1930927d Merge pull request #10347 from justinsb/vagrant_no_cidr_on_master
Salt: don't assume that master => cbr-cidr
2015-06-25 10:23:59 -07:00
Maxwell Forbes 655179dcfb Merge pull request #10264 from mikedanese/ca-token
add ca cert to token controller and all service accounts
2015-06-25 09:56:35 -07:00
Justin Santa Barbara a0ae1d90ba Salt: don't assume that master => cbr-cidr
In particular, this is required for vagrant
2015-06-25 09:17:00 -04:00
Brendan Burns d2334d60c8 Merge pull request #10328 from dchen1107/cleanup
Add dependencies on docker and kubelet service when copying master co…
2015-06-24 21:32:35 -07:00
Dawn Chen e7d217d941 Add dependencies on docker and kubelet service when copying master components manifests
to /etc/kubernetes/manifest
2015-06-24 21:15:08 -07:00
Maxwell Forbes 3afda5d566 Merge pull request #10312 from dchen1107/cleanup
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Mike Danese 56bde3342a add ca to token controller and all service accounts 2015-06-24 15:10:20 -07:00
Dawn Chen 6ddfa512de Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
This reverts commit fd0a95dd12.
2015-06-24 11:10:10 -07:00
Piotr Szczesniak fd0a95dd12 Revert "Fix the race between configuring cbr0 and restarting static pods" 2015-06-24 09:56:49 +02:00
Dawn Chen 9dbe6fe4e4 Added more comments. 2015-06-23 16:28:41 -07:00
Dawn Chen 8d76d4ee57 Make master-addon service depend on both docker and kubelet service
in salt.
2015-06-23 12:11:20 -07:00
Dawn Chen 23200d303f Fix several issues on running syncPods until network is configured.
Also fixed unittests and compiling.
2015-06-23 12:11:19 -07:00
derekwaynecarr db202d4904 Remove nginx from vagrant 2015-06-23 13:07:50 -04:00
Brendan Burns 192ffdfb25 Fix the container bridge so that it can create cbr0
Fix the kubelet so that it tries to sync status, even if Docker is down
2015-06-22 23:18:01 -07:00
Brendan Burns a29ade2f33 Disable creation of cbr0, the kubelet does it now.
Conditionalize the docker bridge.
2015-06-22 23:15:29 -07:00
Jeff Lowdermilk 85770295c2 Merge pull request #10004 from ArtfulCoder/kubelet_health
Augmented kubelet healthz with syncLoop check.
2015-06-22 10:53:05 -07:00
Abhishek Shah 3556993179 Augmented kubelet healthz with syncLoop check.
Monit uses read-only port for health monitoring.
2015-06-19 18:14:01 -07:00
Brendan Burns ec1e308ae2 rev etcd to 2.0.12 2015-06-19 15:57:32 -07:00
Saad Ali 4d25121206 Merge pull request #9769 from brendandburns/secure
Revert the revert of https://github.com/GoogleCloudPlatform/kubernetes/pull/9761
2015-06-16 14:21:54 -07:00
Saad Ali 068000a8ba Merge pull request #9847 from mikedanese/apiserver-liveness-probe
add livenessProbe to kube-apiserver.manifest
2015-06-16 14:03:13 -07:00
Vishnu Kannan 31f7ea10c6 Updating heapster version to v0.14.1.
Adding a standalone version of heapster which exposes stats via REST API.
2015-06-16 11:56:23 -07:00
Saad Ali 5596e6f789 Merge pull request #9493 from marekbiskup/testAddonUpdate
e2e test for addon upgrade
2015-06-16 10:50:15 -07:00
Mike Danese 491eb5e583 add livenessProbe to kube-apiserver.manifest 2015-06-15 23:22:56 -07:00
Fabio Yeon 9b3e9a509d Merge pull request #9616 from jeffbean/kube_addons
kube_addons - Adding variable with default for kubectl bin.
2015-06-15 19:31:42 -07:00
Fabio Yeon 8d2c7ff1d7 Merge pull request #9687 from satnam6502/fluentd-gcp
Adjust Fluentd source format for Docker files to be JSON for Cloud Lo…
2015-06-15 13:32:49 -07:00
Satnam Singh 33311b46a2 Adjust Fluentd source format for Docker files to be JSON for Cloud Logging 2015-06-15 10:22:27 -07:00
Marek Biskup dcc4034d57 e2e test for addon update 2015-06-15 17:37:24 +02:00
Brendan Burns 51b20b35e2 Revert "Revert "Optionalize (default false) --insecure-registry.""
This reverts commit 1645c9a9b8.
2015-06-12 21:00:16 -07:00
Dawn Chen 1645c9a9b8 Revert "Optionalize (default false) --insecure-registry." 2015-06-12 17:50:38 -07:00
Justin Santa Barbara 16d6ba8a9d AWS: Stop the master kubelet from registering as a node (like GCE does) 2015-06-12 18:33:45 -04:00
Brendan Burns 675d8378f2 Optionalize (default false) --insecure-registry. 2015-06-11 16:33:14 -07:00
Abhi Shah 59a347d119 Merge pull request #9309 from saad-ali/issue9028
Enable InfluxDB/Grafana for GCE in addition to GCL. Disable GCM
2015-06-11 11:04:09 -07:00
Abhi Shah f4eb2f366f Merge pull request #9568 from marekbiskup/docker_log_rotate
rotate docker log
2015-06-10 14:50:07 -07:00
Jeffrey Bean 99f64a8a07 kube_addons - Adding variable with default for kubectl bin. Fixes #9599 2015-06-10 14:47:31 -07:00
Abhi Shah 53fa4e1366 Merge pull request #9383 from brendandburns/liveness
Add liveness checks to the controller-manager and scheduler.
2015-06-10 14:44:12 -07:00
Abhi Shah c8591bd323 Merge pull request #9491 from ArtfulCoder/etcd_log
Etcd log mount
2015-06-10 13:17:10 -07:00
Marek Biskup 83f8cd148d rotate docker log 2015-06-10 12:19:13 +02:00
Brendan Burns ff3f463e00 Add liveness checks to the controller-manager and scheduler. 2015-06-09 13:06:04 -07:00
Robert Bailey 2feb658ed7 Distribute the cluster CA cert to cluster addon pods through
the kubeconfig file. Use the $KUBERNETES_MASTER_NAME from the
kube-env for skydns, because it can't use the service name.
2015-06-08 20:17:45 -07:00
Abhishek Shah fe906677d4 Etcd log mount 2015-06-08 17:21:11 -07:00
krousey 8a9e0e00bf Merge pull request #9128 from marekbiskup/addonUpgrade
Addon upgrade (partial implementation of #8107)
2015-06-08 15:15:27 -07:00
Marek Biskup 13ba177668 kube-addon-update.sh 2015-06-08 15:10:40 +02:00
CJ Cullen 04cd9b3c75 Make sshproxy use a hostmount on master PD (don't spam sshKeys on upgrade/reboot).
Add comment describing what SSHTunnelList.Close() does.
Simplify util.FileExists.
2015-06-05 15:03:03 -07:00
CJ Cullen cb317604ab Some refactoring. Only selectively use ssh proxy.
Add NetworkName to gce.Config.
Add locking to uses of master.tunnels.
2015-06-05 14:55:16 -07:00
CJ Cullen de9a5f43bc Specify sshUser, sshKeyfile in kube-apiserver manifest.
Trim space on ssh key so GCE doesn't treat it as 2 lines.
A couple other minor fixes.
2015-06-05 14:55:15 -07:00
CJ Cullen 82afaaf31d Mount cloud-config files for cloudproviders in kube-apiserver & kube-controllermanager. 2015-06-05 14:54:20 -07:00
saadali bc53533c83 Enable InfluxDB/Grafana for GCE in addition to GCM/GCL 2015-06-05 01:17:45 -07:00
derekwaynecarr 2168cee414 Upgrade to Fedora 21, Docker 1.6, clean-up SDN 2015-06-04 10:59:23 -04:00
Daniel Smith 1690617ee6 remove ro service 2015-06-03 16:45:54 -07:00
Brian Grant 984b779b05 Merge pull request #9192 from dchen1107/clean
Watch kubelet flag file, so restart kubelet upon changes.
2015-06-03 14:45:07 -07:00
Brian Grant d37264edde Merge pull request #9158 from dchen1107/cleanup
stop monit kube-proxy on master node.
2015-06-03 12:13:17 -07:00
Dawn Chen 1d94348023 Watch kubelet flag file, so restart kubelet upon changes. 2015-06-03 09:13:28 -07:00
Prashanth Balasubramanian f7c0f1c1e3 Set min-request-timeout in test clusters 2015-06-03 08:46:28 -07:00
Brian Grant d861631f08 Merge pull request #9142 from roberthbailey/kubelet-on-master
Prevent access to the /run and /exec endpoints on the master's kubelet
2015-06-02 22:55:06 -07:00
Dawn Chen 301bed535e stop monit kube-proxy on master node.
Fixed #8783
2015-06-02 17:48:24 -07:00
CJ Cullen 934c553c04 Clarify description/usage of --advertise-address, Master.PublicAddress 2015-06-02 15:23:32 -07:00
Robert Bailey 1dad552edc Prevent access to the /run and /exec endpoints on the master's kubelet
so that users can't run arbitrary code on the master.
2015-06-02 14:42:11 -07:00
CJ Cullen 085a48a70e Add an advertise-address flag. This allows the address that the apiserver binds
to (possibly 0.0.0.0) to be different than the address on which members of the cluster
can reach the apiserver (possibly not a local interface).
2015-06-02 14:33:15 -07:00
Justin Santa Barbara c4a2631593 Mount logic breaks if /var/lib/kubelet is a symlink
Pass the correct kubelet root-dir on AWS
2015-05-29 20:13:09 -04:00
Rohit Jnagal 6274d845b9 Merge pull request #8931 from dchen1107/clean
Fix the race when monit is used to monitor services which are also
2015-05-29 11:23:21 -07:00
Rohit Jnagal 50b9d6284a Merge pull request #8681 from vmarmol/system-container
Create a system container
2015-05-29 09:41:06 -07:00
Tim Hockin ac3cc3c518 Rename PORTAL_NET all over 2015-05-28 16:10:44 -07:00
Tim Hockin 3005471100 Add new apiserver flags for clusterIP (nee portal)
Leave old flags but marked as deprecated
2015-05-28 16:10:44 -07:00