Tim Hockin
745c2af792
Add a simple hostport-to-service proxy
...
Example: a pod like the below should
proxy port 53 TCP and UDP to the main DNS service.
```
apiVersion: v1
kind: Pod
metadata:
name: localhost-dns-proxy
spec:
containers:
- name: proxy-udp
image: gcr.io/google_containers/proxy-to-service:v1
args: [ "udp", "53", "kube-dns.default" ]
ports:
- name: udp
protocol: UDP
containerPort: 53
hostPort: 53
- name: proxy-tcp
image: gcr.io/google_containers/proxy-to-service:v1
args: [ "tcp", "53", "kube-dns.default" ]
ports:
- name: tcp
protocol: TCP
containerPort: 53
hostPort: 53
```
2015-06-26 21:55:18 -07:00
Robert Bailey
c6940932f7
Merge pull request #10378 from jeffbean/ansible-final
...
Ansible rework for Kubernetes cluster deployment
2015-06-26 16:55:00 -07:00
Robert Bailey
508f7f1697
Merge pull request #10358 from caesarxuchao/add-force-update
...
Add --force to `kubectl update`
2015-06-26 10:49:04 -07:00
Maxwell Forbes
712f303350
Merge pull request #9736 from sdminonne/bug_fix2
...
To add validation for service ports when defined as string
2015-06-25 19:37:04 -07:00
Jeff Bean
a0c312f224
Changing CentOS install of master and nodes
...
The testing repo now had updated packages for kubernetes
Also adding some options to rsync task to work with different users ssh settings
2015-06-25 18:45:49 -07:00
Chao Xu
ef5de91fd7
add "--force" flag to "kubectl update";
...
update relevant tests
2015-06-25 17:16:20 -07:00
Maxwell Forbes
5e748c1d47
Merge pull request #10070 from lavalamp/e2eProxyFix
...
proxy e2e test improvements
2015-06-25 13:15:03 -07:00
Maxwell Forbes
655179dcfb
Merge pull request #10264 from mikedanese/ca-token
...
add ca cert to token controller and all service accounts
2015-06-25 09:56:35 -07:00
Maxwell Forbes
2bb4cf3f8f
Merge pull request #10266 from ArtfulCoder/kubelet_resolv
...
update docker's resolv.conf file with options ndots:5
2015-06-25 09:54:36 -07:00
Abhishek Shah
23caf446ae
update docker's resolv.conf file with options ndots:5
2015-06-24 23:33:58 -07:00
Maxwell Forbes
3afda5d566
Merge pull request #10312 from dchen1107/cleanup
...
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Maxwell Forbes
28946766a3
Merge pull request #9807 from krousey/container_manifest
...
Removing ContainerManifest
2015-06-24 17:55:29 -07:00
Mike Danese
56bde3342a
add ca to token controller and all service accounts
2015-06-24 15:10:20 -07:00
Eric Paris
52999cd292
Check for rpm directly, don't imply from ansible_pkg_manager
...
Atomic host have neither dnf nor yum. So we cannot use that as a
hueristic if they have rpm.
2015-06-24 17:07:13 -04:00
Eric Paris
97b88fa563
Set SELinux permissive to allow DNS to work
2015-06-24 17:07:12 -04:00
Eric Paris
8cf36d7402
Declare etcd roles in meta rather then top level playbook
2015-06-24 17:07:12 -04:00
Eric Paris
83bd4d0903
Install python-firewall as ansible needs python2 firewalld support
2015-06-24 17:07:12 -04:00
Eric Paris
fc5c063a2d
Support Fedora Rawhide
...
Fedora rawhide has neither yum, nor python2, nor python2 libselinux
bindings. Ansible needs all of these.
This adds a new play which can be used to get machines setup so they can
then be managed with ansible.
2015-06-24 17:07:12 -04:00
Eric Paris
7996f39413
Vagrant? Did we mean to include this?
2015-06-24 17:07:12 -04:00
Jeff Bean
7b8ed5a12c
support dns in particular
2015-06-24 17:07:12 -04:00
Jeff Bean
374658ef01
support the upstream 'addons' nonsense
2015-06-24 17:07:12 -04:00
Eric Paris
c2e4df7c87
Create, distribute, and use certificates for TLS and identity
2015-06-24 17:07:11 -04:00
Eric Paris
3d10f00401
Give kube-apiserver CAP_NET_BIND_SERVICE
...
It is needed to bind on port 443
2015-06-24 17:07:08 -04:00
Kris Rousey
d13421e084
Removing ContainerManifest
2015-06-24 11:31:34 -07:00
Dawn Chen
6ddfa512de
Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
...
This reverts commit fd0a95dd12
.
2015-06-24 11:10:10 -07:00
Jeff Bean
e08bd6f3c3
Configure docker daemon
2015-06-24 13:45:46 -04:00
Jeff Bean
45bdfeac0c
Packge install on CentOS 7
2015-06-24 13:45:46 -04:00
Jeff Bean
f259892cc9
Basic Generic File Cleanups
...
No major changes, just renaming, whitespace, etc
2015-06-24 13:45:46 -04:00
Eric Paris
9816488179
Do not restart etcd quickly
...
https://github.com/coreos/etcd/pull/2878
etcd destroys itself if you start and then restart etcd very rapidly.
So don't do that any more.
2015-06-24 13:45:46 -04:00
Eric Paris
70b7358d00
If multiple etcd servers defined, point at all of them
...
(we still can only set up a single server though)
2015-06-24 13:45:46 -04:00
Eric Paris
a95243450e
Set up flannel in your cluster!
2015-06-24 13:45:42 -04:00
Eric Paris
bc6c425ab4
Use 'command' not 'shell' even thought it doesn't matter
2015-06-24 13:45:42 -04:00
Eric Paris
fec5e789fd
Shorthand to run the ansible setup command
2015-06-24 13:45:42 -04:00
Eric Paris
f66395283e
Rename minion->node
2015-06-24 13:45:42 -04:00
Eric Paris
c4ba90337c
Only install kube-master on the master and node on the nodes
2015-06-24 13:45:42 -04:00
Eric Paris
f274881b94
do not register nodes to apiserver
...
They now register themselves
2015-06-24 13:45:42 -04:00
Eric Paris
8bb7e14a44
Rework cluster.yml and use tags, not files
2015-06-24 13:45:41 -04:00
Eric Paris
b0b3b03045
Use {{ ansible_pkg_mgr }} instead of yum
...
This should make things work on systems with dnf and even on systems
which use apt!
2015-06-24 13:45:41 -04:00
Eric Paris
3af9346596
etcd requires advertise-client-urls with listen-client-urls
...
otherwise it won't start
2015-06-24 13:45:41 -04:00
Eric Paris
8830e7b84e
Follow upstream default admission controllers
2015-06-24 13:45:41 -04:00
Piotr Szczesniak
fd0a95dd12
Revert "Fix the race between configuring cbr0 and restarting static pods"
2015-06-24 09:56:49 +02:00
Daniel Smith
64bee7f4f0
Fix bug with env vars containing = signs
2015-06-23 18:45:58 -07:00
Jeff Lowdermilk
50d50a3cb8
Merge pull request #10211 from dchen1107/cleanup
...
Fix the race between configuring cbr0 and restarting static pods
2015-06-23 17:09:01 -07:00
Dawn Chen
23200d303f
Fix several issues on running syncPods until network is configured.
...
Also fixed unittests and compiling.
2015-06-23 12:11:19 -07:00
Dr. Stefan Schimanski
9e0c9b4f5a
Mesos: create static pod file source only for configured static pods
...
The file source was created even when no static pods were configured.
In this case it was never marked as seen. As a consequence the kubelet
syncPods functions never deleted pods because it was too cautious due
an unseen pod source, leading to leaked pods.
2015-06-23 12:25:21 +02:00
Jeff Lowdermilk
0d7de0991e
Disable TestProc_doWithNestedXConcurrent
...
This test is killing more than 50% of shippable builds. Disabling
to stop the madness.
2015-06-22 15:39:43 -07:00
Salvatore Dario Minonne
4b13faa346
To add validation for service ports when defined as string (fixing issue #9734 )
2015-06-22 17:21:51 +02:00
Anastasis Andronidis
b06ef70057
Print resource labels as columns
2015-06-22 00:44:51 +02:00
Eric Paris
f40fce4598
kubectl log->logs in bash completions
...
The kubectl log command switched to logs. But the bash completions code
was still looking for a singular
2015-06-19 16:00:58 -04:00
Satnam Singh
3d8a3a809f
Merge pull request #10067 from lavalamp/miscFix
...
fix config file
2015-06-18 17:48:07 -07:00