Commit Graph

435 Commits (530369cc01d834191a6c71de8fb57e9606f93fde)

Author SHA1 Message Date
Tim Hockin 745c2af792 Add a simple hostport-to-service proxy
Example: a pod like the  below should
proxy port 53 TCP and UDP to the main DNS service.

```
apiVersion: v1
kind: Pod
metadata:
  name: localhost-dns-proxy
spec:
  containers:
  - name: proxy-udp
    image: gcr.io/google_containers/proxy-to-service:v1
    args: [ "udp", "53", "kube-dns.default" ]
    ports:
    - name: udp
      protocol: UDP
      containerPort: 53
      hostPort: 53
  - name: proxy-tcp
    image: gcr.io/google_containers/proxy-to-service:v1
    args: [ "tcp", "53", "kube-dns.default" ]
    ports:
    - name: tcp
      protocol: TCP
      containerPort: 53
      hostPort: 53
```
2015-06-26 21:55:18 -07:00
Robert Bailey c6940932f7 Merge pull request #10378 from jeffbean/ansible-final
Ansible rework for Kubernetes cluster deployment
2015-06-26 16:55:00 -07:00
Robert Bailey 508f7f1697 Merge pull request #10358 from caesarxuchao/add-force-update
Add --force to `kubectl update`
2015-06-26 10:49:04 -07:00
Maxwell Forbes 712f303350 Merge pull request #9736 from sdminonne/bug_fix2
To add validation for service ports when defined as string
2015-06-25 19:37:04 -07:00
Jeff Bean a0c312f224 Changing CentOS install of master and nodes
The testing repo now had updated packages for kubernetes
Also adding some options to rsync task to work with different users ssh settings
2015-06-25 18:45:49 -07:00
Chao Xu ef5de91fd7 add "--force" flag to "kubectl update";
update relevant tests
2015-06-25 17:16:20 -07:00
Maxwell Forbes 5e748c1d47 Merge pull request #10070 from lavalamp/e2eProxyFix
proxy e2e test improvements
2015-06-25 13:15:03 -07:00
Maxwell Forbes 655179dcfb Merge pull request #10264 from mikedanese/ca-token
add ca cert to token controller and all service accounts
2015-06-25 09:56:35 -07:00
Maxwell Forbes 2bb4cf3f8f Merge pull request #10266 from ArtfulCoder/kubelet_resolv
update docker's resolv.conf file with options ndots:5
2015-06-25 09:54:36 -07:00
Abhishek Shah 23caf446ae update docker's resolv.conf file with options ndots:5 2015-06-24 23:33:58 -07:00
Maxwell Forbes 3afda5d566 Merge pull request #10312 from dchen1107/cleanup
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Maxwell Forbes 28946766a3 Merge pull request #9807 from krousey/container_manifest
Removing ContainerManifest
2015-06-24 17:55:29 -07:00
Mike Danese 56bde3342a add ca to token controller and all service accounts 2015-06-24 15:10:20 -07:00
Eric Paris 52999cd292 Check for rpm directly, don't imply from ansible_pkg_manager
Atomic host have neither dnf nor yum. So we cannot use that as a
hueristic if they have rpm.
2015-06-24 17:07:13 -04:00
Eric Paris 97b88fa563 Set SELinux permissive to allow DNS to work 2015-06-24 17:07:12 -04:00
Eric Paris 8cf36d7402 Declare etcd roles in meta rather then top level playbook 2015-06-24 17:07:12 -04:00
Eric Paris 83bd4d0903 Install python-firewall as ansible needs python2 firewalld support 2015-06-24 17:07:12 -04:00
Eric Paris fc5c063a2d Support Fedora Rawhide
Fedora rawhide has neither yum, nor python2, nor python2 libselinux
bindings. Ansible needs all of these.

This adds a new play which can be used to get machines setup so they can
then be managed with ansible.
2015-06-24 17:07:12 -04:00
Eric Paris 7996f39413 Vagrant? Did we mean to include this? 2015-06-24 17:07:12 -04:00
Jeff Bean 7b8ed5a12c support dns in particular 2015-06-24 17:07:12 -04:00
Jeff Bean 374658ef01 support the upstream 'addons' nonsense 2015-06-24 17:07:12 -04:00
Eric Paris c2e4df7c87 Create, distribute, and use certificates for TLS and identity 2015-06-24 17:07:11 -04:00
Eric Paris 3d10f00401 Give kube-apiserver CAP_NET_BIND_SERVICE
It is needed to bind on port 443
2015-06-24 17:07:08 -04:00
Kris Rousey d13421e084 Removing ContainerManifest 2015-06-24 11:31:34 -07:00
Dawn Chen 6ddfa512de Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
This reverts commit fd0a95dd12.
2015-06-24 11:10:10 -07:00
Jeff Bean e08bd6f3c3 Configure docker daemon 2015-06-24 13:45:46 -04:00
Jeff Bean 45bdfeac0c Packge install on CentOS 7 2015-06-24 13:45:46 -04:00
Jeff Bean f259892cc9 Basic Generic File Cleanups
No major changes, just renaming, whitespace, etc
2015-06-24 13:45:46 -04:00
Eric Paris 9816488179 Do not restart etcd quickly
https://github.com/coreos/etcd/pull/2878

etcd destroys itself if you start and then restart etcd very rapidly.
So don't do that any more.
2015-06-24 13:45:46 -04:00
Eric Paris 70b7358d00 If multiple etcd servers defined, point at all of them
(we still can only set up a single server though)
2015-06-24 13:45:46 -04:00
Eric Paris a95243450e Set up flannel in your cluster! 2015-06-24 13:45:42 -04:00
Eric Paris bc6c425ab4 Use 'command' not 'shell' even thought it doesn't matter 2015-06-24 13:45:42 -04:00
Eric Paris fec5e789fd Shorthand to run the ansible setup command 2015-06-24 13:45:42 -04:00
Eric Paris f66395283e Rename minion->node 2015-06-24 13:45:42 -04:00
Eric Paris c4ba90337c Only install kube-master on the master and node on the nodes 2015-06-24 13:45:42 -04:00
Eric Paris f274881b94 do not register nodes to apiserver
They now register themselves
2015-06-24 13:45:42 -04:00
Eric Paris 8bb7e14a44 Rework cluster.yml and use tags, not files 2015-06-24 13:45:41 -04:00
Eric Paris b0b3b03045 Use {{ ansible_pkg_mgr }} instead of yum
This should make things work on systems with dnf and even on systems
which use apt!
2015-06-24 13:45:41 -04:00
Eric Paris 3af9346596 etcd requires advertise-client-urls with listen-client-urls
otherwise it won't start
2015-06-24 13:45:41 -04:00
Eric Paris 8830e7b84e Follow upstream default admission controllers 2015-06-24 13:45:41 -04:00
Piotr Szczesniak fd0a95dd12 Revert "Fix the race between configuring cbr0 and restarting static pods" 2015-06-24 09:56:49 +02:00
Daniel Smith 64bee7f4f0 Fix bug with env vars containing = signs 2015-06-23 18:45:58 -07:00
Jeff Lowdermilk 50d50a3cb8 Merge pull request #10211 from dchen1107/cleanup
Fix the race between configuring cbr0 and restarting static pods
2015-06-23 17:09:01 -07:00
Dawn Chen 23200d303f Fix several issues on running syncPods until network is configured.
Also fixed unittests and compiling.
2015-06-23 12:11:19 -07:00
Dr. Stefan Schimanski 9e0c9b4f5a Mesos: create static pod file source only for configured static pods
The file source was created even when no static pods were configured.
In this case it was never marked as seen. As a consequence the kubelet
syncPods functions never deleted pods because it was too cautious due
an unseen pod source, leading to leaked pods.
2015-06-23 12:25:21 +02:00
Jeff Lowdermilk 0d7de0991e Disable TestProc_doWithNestedXConcurrent
This test is killing more than 50% of shippable builds. Disabling
to stop the madness.
2015-06-22 15:39:43 -07:00
Salvatore Dario Minonne 4b13faa346 To add validation for service ports when defined as string (fixing issue #9734) 2015-06-22 17:21:51 +02:00
Anastasis Andronidis b06ef70057 Print resource labels as columns 2015-06-22 00:44:51 +02:00
Eric Paris f40fce4598 kubectl log->logs in bash completions
The kubectl log command switched to logs. But the bash completions code
was still looking for a singular
2015-06-19 16:00:58 -04:00
Satnam Singh 3d8a3a809f Merge pull request #10067 from lavalamp/miscFix
fix config file
2015-06-18 17:48:07 -07:00