Commit Graph

1110 Commits (7433d10104ca1f49f065371cc4b22fda303ea24b)

Author SHA1 Message Date
Brendan Burns 49977e6a47 Revert "Update docker examples to 0.15.0" 2015-04-24 10:05:27 -07:00
Dawn Chen 2128d4e251 Merge pull request #7261 from erictune/kube_env
Pass KUBELET_TOKEN in kube-env metadata.
2015-04-24 10:03:34 -07:00
Nikhil Jindal 84cb48be11 Merge pull request #7246 from satnam6502/es
Convert Elasticsearch logging to v1beta3 and de-salt
2015-04-24 09:21:41 -07:00
CJ Cullen 80af1c9e40 kube2sky using kubeconfig secret: take 2. Point system secrets at https://kubernetes. Override in clients that can't use DNS. 2015-04-23 18:13:16 -07:00
David Oppenheimer dda010b572 Merge pull request #7240 from satnam6502/v1beta3
Update Kibana RC and service to v1beta3
2015-04-23 17:09:27 -07:00
Eric Tune e8a83b23d1 Pass KUBELET_TOKEN in kube-env metadata.
ensure-kube-token is not needed anymore because
the token passed in kube-env.

In the up case it is set, in the push case it is an empty string
but not used.

Allow unset KUBELET_TOKEN (for push case).

Fix comment.
2015-04-23 15:21:27 -07:00
Satnam Singh c9b9e7651e Convert Elasticsearch logging to v1beta and de-salt 2015-04-23 13:06:15 -07:00
Satnam Singh 0abc34245a Update Kibana RC and service to v1beta3 2015-04-23 12:19:17 -07:00
Derek Carr fade245a44 Merge pull request #7220 from jsafrane/devel/fix-vagrant
V2: Fix vagrant setup broken by commit 7475efbcfb.
2015-04-23 14:49:31 -04:00
Dawn Chen f9156c281a Merge pull request #7123 from satnam6502/logging
Propagate pod and container name for log files
2015-04-23 10:13:08 -07:00
Jan Safranek 1c8f888477 Fix vagrant setup broken by commit 7475efbcfb.
- 'local' can be used only inside bash functions
- s/KNOWN_TOKENS_FILE/known_tokens_file
2015-04-23 11:00:10 +02:00
Wojciech Tyczynski cf824ae5e0 Merge pull request #7164 from fgrzadkowski/fix_wait_minion
Wait for minion to start even if gcloud command fails.
2015-04-23 08:21:19 +02:00
Fabio Yeon 0a0bd88db6 Revert "Change kube2sky to use token-system-dns secret, point at https endpoint ..." 2015-04-22 17:56:34 -07:00
Satnam Singh e4e830badc Update Kibana pod to speak to Elasticsearchusing v1beta3 2015-04-22 17:37:47 -07:00
Fabio Yeon 3ed2dcae68 Merge pull request #7197 from roberthbailey/fix-restart-apiserver
Fix the restart-apiserver command for GCE/GKE.
2015-04-22 15:52:14 -07:00
Robert Bailey 6951bb0bd5 Fix the restart-apiserver command for GCE/GKE. 2015-04-22 15:21:13 -07:00
Satnam Singh 2444c1f943 Propagate pod and container name for log files 2015-04-22 15:08:51 -07:00
Dawn Chen 87e0d5da08 Merge pull request #7186 from ArtfulCoder/no_log_pod_on_master
removed elasticsearch and fluentd-gcp pods from master
2015-04-22 14:40:07 -07:00
Robert Bailey 4346c6ecae Swallow the output from the test ssh connections so that it
doesn't interfere with string comparison.
2015-04-22 14:19:15 -07:00
CJ Cullen 924015dc94 Merge pull request #7182 from justinsb/aws_fix_hostname
AWS: Set hostname_override for minions, back to fully-qualified name
2015-04-22 14:13:53 -07:00
Zach Loafman 26aeb6c370 Merge pull request #6618 from roberthbailey/no-nginx
Salt reconfiguration to get rid of nginx on GCE
2015-04-22 13:59:12 -07:00
Abhishek Shah 8cf11fd608 removed elasticsearch and fluentd-gcp pods from master 2015-04-22 12:54:57 -07:00
Brendan Burns ee34d4942b Merge pull request #6576 from jeffmendoza/azure-loop
Azure: Wait for salt completion on cluster initialization
2015-04-22 12:51:40 -07:00
Robert Bailey 35a18e35c3 Merge pull request #7154 from cjcullen/readonly
Change kube2sky to use token-system-dns secret, point at https endpoint ...
2015-04-22 12:41:53 -07:00
Justin Santa Barbara 4120849cc4 AWS: Set hostname_override for minions, back to fully-qualified name
This is a stop-gap fix; we'd really like to use EC2 instance ids, but that is
blocked by #7092 or changing that health-check to not assume that the node name
is resolvable.

This stop-gap essentially reverts #7072 for AWS
2015-04-22 11:28:53 -07:00
Robert Bailey dc45f7f9e6 Remove nginx and replace basic auth with bearer token auth for GCE.
- Configure the apiserver to listen securely on 443 instead of 6443.
 - Configure the kubelet to connect to 443 instead of 6443.
 - Update documentation to refer to bearer tokens instead of basic auth.
2015-04-22 11:11:20 -07:00
Robert Bailey 4ca8fbbec6 Merge pull request #7147 from fabioy/validate.fix
Fix validate-cluster.sh to work on Mac.
2015-04-22 11:06:46 -07:00
Zach Loafman 86468cd29d Revert "Added kube-proxy token." 2015-04-22 10:55:08 -07:00
Zach Loafman 0e3e502d52 Fix unbound variable after #7146 2015-04-22 10:19:53 -07:00
Zach Loafman 42e1710ccf Fix build after #7146 2015-04-22 10:11:19 -07:00
Zach Loafman c9988db0ee Merge pull request #7146 from brendandburns/get-k8s
Extend the get-cluster.sh script to use sudo if necessary.
2015-04-22 09:58:07 -07:00
Brendan Burns 42121d1809 Extend the get-cluster.sh script to use sudo if necessary. 2015-04-22 09:52:44 -07:00
Zach Loafman b98f93bb4b Merge pull request #7112 from erictune/kubeconfig-secrets
Extend PR#5470 for AWS and Vagrant
2015-04-22 09:25:53 -07:00
Zach Loafman 854c20c5e2 Merge pull request #7113 from erictune/kube-proxy-token
Added kube-proxy token.
2015-04-22 09:16:04 -07:00
Filip Grzadkowski 780db9d794 Wait for minion to start even if gcloud command fails. 2015-04-22 16:37:22 +02:00
CJ Cullen e982ac5b55 Change kube2sky to use token-system-dns secret, point at https endpoint (instead of kubernetes-ro service). 2015-04-21 23:10:12 -07:00
fabioy acb64e66e8 Fix validate-cluster.sh to work on Mac. 2015-04-21 17:51:35 -07:00
Brendan Burns 78dabbdb7f Fix the ssh-to-node to actually fail on failures. 2015-04-21 15:27:38 -07:00
Brendan Burns 71e6b05825 Fix kube-apiserver restart. 2015-04-21 15:11:00 -07:00
Robert Bailey 0035781c50 Merge pull request #7137 from brendandburns/fix
Fix kube-apiserver restart.
2015-04-21 14:33:54 -07:00
Brendan Burns 9d715226d6 Fix kube-apiserver restart. 2015-04-21 13:59:26 -07:00
Robert Bailey 8745ebce15 Revert "Rollback "validate-cluster.sh" to previous version." 2015-04-21 13:30:16 -07:00
Robert Bailey b9904f63d4 Merge pull request #7124 from fabioy/revert-validate.fix
Rollback "validate-cluster.sh" to previous version.
2015-04-21 12:29:54 -07:00
Robert Bailey a50e02bb3b Merge pull request #7078 from jlowdermilk/gke-kubectl
Use standalone kubectl for gke, remove special case for vagrant
2015-04-21 12:11:45 -07:00
Fabio Yeon 12db42e4f0 Rollback "validate-cluster.sh" to previous version. 2015-04-21 12:09:34 -07:00
Jeff Lowdermilk 70a576e25a Use standalone kubectl for gke, remove special case for vagrant
also fix hack/local-up-cluster.sh kubeconfig instructions
2015-04-21 11:01:45 -07:00
Eric Tune b944049fe9 Merge pull request #6916 from ArtfulCoder/controller-in-a-pod
kube-controller-manager in a pod.
2015-04-21 09:58:29 -07:00
Eric Tune 2ca8a9d15d Added kube-proxy token.
Generates the new token on AWS, GCE, Vagrant.
Renames instance metadata from "kube-token" to "kubelet-token".
(Is this okay for GKE?)

Having separate tokens for kubelet and kube-proxy permits
using principle of least privilege, makes it easy to
rate limit the clients separately, allows annotation
of apiserver logs with the client identity at a finer grain
than just source-ip.
2015-04-21 09:21:31 -07:00
Eric Tune 7475efbcfb Extend PR#5470 for AWS and Vagrant 2015-04-21 08:22:31 -07:00
Justin Santa Barbara 29592356f7 Rename salt minion_ip to hostname_override
Prep work for making AWS node identifier -> instance id
2015-04-21 06:24:49 -07:00