Eric Paris
1253ca52cd
Ansible: start to support debian
2015-07-24 09:58:31 -04:00
Eric Paris
a25b34e1a4
Ansible: Vagrant: allow passing ansible tags to vagrant provision
...
Creating a cluster from scratch takes about 7 minutes. But if you just
rebuild the binaries and want to update those you don't want to have to
rerun the entire thing. There is an ansible tag 'binary-update' which
will do that. Now one can do
```
ANSIBLE_TAGS=binary-update vagrant provision
```
And it will push the new binaries.
2015-07-24 09:58:31 -04:00
Eric Paris
8ba4d85fa9
Ansible: Add kube-ui kube-addon support
2015-07-24 09:58:31 -04:00
Eric Paris
217f8eef95
Ansible: convert DNS from kube_config_dir to kube_addons_dir
2015-07-24 09:58:31 -04:00
Eric Paris
9aed89f816
Ansible: fast update of binaries
...
If you are using locally build binaries as a developer you likely will
want to just push those binaries to an existing cluster, not rerun the
entire playbook. Add a tag to do just that.
2015-07-24 09:58:31 -04:00
Jeff Bean
0653156e1e
Ansible: Updating README
2015-07-24 09:58:31 -04:00
Jeff Bean
29980851f7
Ansible: Adding variable for kubernetes apiserver port
2015-07-24 09:58:31 -04:00
Jeff Bean
90b1318168
Ansible: Adding variable for kubernetes addon dir
2015-07-24 09:58:30 -04:00
Eric Paris
ce4d2d41fb
Ansible: Vagrant: Add libvirt support
2015-07-24 09:58:30 -04:00
Eric Paris
51a33d3ff5
Ansible: vagrant: generic set_provider() function
2015-07-24 09:58:30 -04:00
Eric Paris
dda42add54
Ansible: Vagrant: Add vbox support
2015-07-24 09:58:30 -04:00
Eric Paris
36e991742b
Ansible: Vagrant: Update to os1 vagrant scripts
...
Do the /etc/host creation with vagrant, so it uses internal instead of
external ips (hostmanager only knew about the public ip)
Ignore errors on docker failure when 'restarting' docker in flannel
handler. If this is a clean install, we haven't run 'node' yet so docker
isn't installed so it doesn't need to be started. It would be better to
be more specific in ignoring errors though...
2015-07-24 09:58:30 -04:00
jayunit100
a008fe24bb
Ansible: Vagrant: kubernetes openstack deployer
...
vbox deployer separated and deprecated. Readded-later
2015-07-24 09:58:25 -04:00
Eric Paris
fd1024baa2
Install openssl when using make-ca-certs.sh
...
easyrsa requires openssl. So make sure it is installed.
2015-07-24 09:56:42 -04:00
Eric Paris
90ecd96f84
Ansible: Run from locally built binaries
...
Instead of from distro packages
2015-07-24 09:48:36 -04:00
Eric Paris
c3849fd240
Ansible: Minor typo in play text (no functional change)
2015-07-24 09:48:36 -04:00
Eric Paris
605437f811
Ansible: Support new upstream non-default namespace for addons
2015-07-24 09:48:35 -04:00
Eric Paris
165aa56c1a
Ansible: Do not fail flannel restart is docker not installed
...
On first install flannel runs before docker is installed. So do not fail
if docker is not installed
2015-07-24 09:48:35 -04:00
Eric Paris
8b57cc8918
Ansible: cert gen: use inventory hostname not ip address
2015-07-24 09:48:35 -04:00
Vish Kannan
6306ad1bce
Merge pull request #11736 from thockin/cleanup-dns-legacy
...
Stop populating legacy DNS names
2015-07-23 17:30:00 -07:00
Tim Hockin
89e9851ac5
Update examples to not use old DNS names
2015-07-23 13:51:09 -07:00
Avesh Agarwal
e507dbe7b8
Fixed ansible syntax error.
2015-07-23 15:26:11 -04:00
Wojciech Tyczynski
5988d30da0
Merge pull request #10715 from justinsb/spelling_octects
...
Spelling fix (in code): octects -> octets
2015-07-23 09:00:39 +02:00
Justin Santa Barbara
1ece037555
Spelling fix (in code): octects -> octets
2015-07-04 10:37:57 -04:00
Jeffrey Bean
f7b5d0db61
[Ansible] Adding new CentOS repo for newest Kubernetes packages.
...
This is the game we play until Kubernetes GA packages are out.
2015-07-02 15:06:27 -07:00
Zach Loafman
acf6fc6e24
Merge pull request #10627 from eparis/total-ansible
...
Ansible: Get DNS working - Add kubectl kubeconfig file
2015-07-01 16:07:53 -07:00
Eric Paris
c66bafaa18
Generate a kubeconfig for kubectl which can be taken off the masterA
...
/etc/kubernetes/kuectl.kubeconfig
2015-07-01 13:19:06 -04:00
Eric Paris
88087decb4
Fix certs in ansible
2015-07-01 13:09:22 -04:00
nikhiljindal
2e9e46dd08
Updating scripts to use v1 instead of v1beta3
2015-07-01 00:23:16 -07:00
Eric Paris
ddf52a854e
Make sure serviceaccount tokens are created and recognized
2015-06-30 13:05:59 -04:00
Eric Paris
3cacc42985
Hide DNS variables away from the user
...
Fewer knobs == more winning. Also rename from kube.local to
cluster.local. Some e2e tests really want that.
2015-06-30 13:05:59 -04:00
Eric Paris
3a78104267
Add cluster logging with fluentd and elastic search
2015-06-30 13:05:59 -04:00
Eric Paris
7d7d5d4c4e
Add influxdb cluster monitoring
2015-06-30 13:05:59 -04:00
Eric Paris
a127ce7266
Use slurp to get the ca.crt
2015-06-30 13:05:59 -04:00
Eric Paris
9f4bfd144f
Per master tokens for the scheduler and controller-manager
2015-06-30 13:05:58 -04:00
Eric Paris
c6f2841839
Place a different token for every node/daemon combination
...
We can now revoke one token at a time!
2015-06-30 13:05:58 -04:00
Eric Paris
bb179b6a4c
Use a token for the scheduler, controller-manager, proxy and kubelet
...
Before we used the kubecfg certificate for everything. Mint one token
for each service and push it around where it belongs.
2015-06-30 13:05:55 -04:00
Jeff Bean
a0c312f224
Changing CentOS install of master and nodes
...
The testing repo now had updated packages for kubernetes
Also adding some options to rsync task to work with different users ssh settings
2015-06-25 18:45:49 -07:00
Eric Paris
52999cd292
Check for rpm directly, don't imply from ansible_pkg_manager
...
Atomic host have neither dnf nor yum. So we cannot use that as a
hueristic if they have rpm.
2015-06-24 17:07:13 -04:00
Eric Paris
97b88fa563
Set SELinux permissive to allow DNS to work
2015-06-24 17:07:12 -04:00
Eric Paris
8cf36d7402
Declare etcd roles in meta rather then top level playbook
2015-06-24 17:07:12 -04:00
Eric Paris
83bd4d0903
Install python-firewall as ansible needs python2 firewalld support
2015-06-24 17:07:12 -04:00
Eric Paris
fc5c063a2d
Support Fedora Rawhide
...
Fedora rawhide has neither yum, nor python2, nor python2 libselinux
bindings. Ansible needs all of these.
This adds a new play which can be used to get machines setup so they can
then be managed with ansible.
2015-06-24 17:07:12 -04:00
Eric Paris
7996f39413
Vagrant? Did we mean to include this?
2015-06-24 17:07:12 -04:00
Jeff Bean
7b8ed5a12c
support dns in particular
2015-06-24 17:07:12 -04:00
Jeff Bean
374658ef01
support the upstream 'addons' nonsense
2015-06-24 17:07:12 -04:00
Eric Paris
c2e4df7c87
Create, distribute, and use certificates for TLS and identity
2015-06-24 17:07:11 -04:00
Eric Paris
3d10f00401
Give kube-apiserver CAP_NET_BIND_SERVICE
...
It is needed to bind on port 443
2015-06-24 17:07:08 -04:00
Jeff Bean
e08bd6f3c3
Configure docker daemon
2015-06-24 13:45:46 -04:00
Jeff Bean
45bdfeac0c
Packge install on CentOS 7
2015-06-24 13:45:46 -04:00