Satnam Singh
69668365ce
Update sidecar logging console output in docs
2015-07-18 22:47:42 +01:00
Eric Tune
f5e6161e49
Merge pull request #11298 from mesosphere/fix-10776
...
Fix deadlocks and race conditions in mesos master election notifier
2015-07-15 13:55:17 -07:00
Dr. Stefan Schimanski
e98c8e7685
Fix deadlocks and race conditions in mesos master election notifier
...
- n.node used the n.lock as underlaying locker. The service loop initially
locked it, the Notify function tried to lock it before calling n.node.Signal,
leading to a dead-lock.
- the go routine calling ChangeMaster was not synchronized with the Notify
method. The former was triggering change events that the later never saw
when the former's startup was faster that of Notify. Hence, not even a single
event was noticed and not even a single start/stop call of the slow service
was triggered.
This patch replaces the n.node condition object with a simple channel n.changed.
The service loop watches it.
Updating the notified private variables is still protected with n.lock against
races, but independently of the n.changed channel. Hence, the deadlock is gone.
Moreover, the startup of the Notify loop is synchronized with the go routine which
changes the master. Hence, the Notify loop will see the master changes.
Fixes #10776
2015-07-15 21:45:53 +02:00
Eric Tune
3dad5a0652
Merge pull request #10835 from mesosphere/mesos-root-ca-file
...
Add --root-ca-key code to Mesos controller-manager fork
2015-07-14 12:16:49 -07:00
Eric Tune
ed26ffe95e
Merge pull request #10685 from jeffbean/ansible_dev
...
Ansible enhancements for CentOS
2015-07-14 12:08:06 -07:00
David Oppenheimer
089a703194
Disable TestPlugin_LifeCycle due to flakiness.
2015-07-10 22:14:16 -07:00
Brendan Burns
86f54b4d05
Merge pull request #11035 from nikhiljindal/nettest
...
Updating nettest image to latest code
2015-07-09 22:08:01 -07:00
nikhiljindal
90d371c98f
Updating nettest image to latest code
2015-07-09 18:07:18 -07:00
Victor Marmol
5540570e44
Merge pull request #10925 from bprashanth/sidecar_exec
...
Sidecar container capable of servicing exec style liveness probes over http
2015-07-09 17:46:11 -07:00
Prashanth Balasubramanian
3ec6703a5d
Create a sidecar container for use as an http-exec bridge
2015-07-09 15:00:25 -07:00
Alex Mohr
7737d18882
Update release notes tool and documentation
2015-07-07 17:40:10 -07:00
Dr. Stefan Schimanski
39b3af0fdc
Add --root-ca-key code to Mesos' controller-manager fork
2015-07-07 18:19:47 +02:00
Satnam Singh
96c4e587ad
Change config files to kube-system which were missed in the original PR
2015-07-07 01:05:19 -07:00
Jeffrey Bean
f7b5d0db61
[Ansible] Adding new CentOS repo for newest Kubernetes packages.
...
This is the game we play until Kubernetes GA packages are out.
2015-07-02 15:06:27 -07:00
Zach Loafman
acf6fc6e24
Merge pull request #10627 from eparis/total-ansible
...
Ansible: Get DNS working - Add kubectl kubeconfig file
2015-07-01 16:07:53 -07:00
Zach Loafman
e5670c104d
Merge pull request #10604 from nikhiljindal/v1
...
Updating scripts to use v1 instead of v1beta3
2015-07-01 15:54:17 -07:00
nikhiljindal
274792d7bb
Stop exposing v1beta3 by default
2015-07-01 14:38:02 -07:00
Eric Paris
c66bafaa18
Generate a kubeconfig for kubectl which can be taken off the masterA
...
/etc/kubernetes/kuectl.kubeconfig
2015-07-01 13:19:06 -04:00
Eric Paris
88087decb4
Fix certs in ansible
2015-07-01 13:09:22 -04:00
nikhiljindal
2e9e46dd08
Updating scripts to use v1 instead of v1beta3
2015-07-01 00:23:16 -07:00
Janet Kuo
62b488359f
Enable -c for kubectl logs container arg
2015-06-30 13:25:54 -07:00
Eric Paris
ddf52a854e
Make sure serviceaccount tokens are created and recognized
2015-06-30 13:05:59 -04:00
Eric Paris
3cacc42985
Hide DNS variables away from the user
...
Fewer knobs == more winning. Also rename from kube.local to
cluster.local. Some e2e tests really want that.
2015-06-30 13:05:59 -04:00
Eric Paris
3a78104267
Add cluster logging with fluentd and elastic search
2015-06-30 13:05:59 -04:00
Eric Paris
7d7d5d4c4e
Add influxdb cluster monitoring
2015-06-30 13:05:59 -04:00
Eric Paris
a127ce7266
Use slurp to get the ca.crt
2015-06-30 13:05:59 -04:00
Eric Paris
9f4bfd144f
Per master tokens for the scheduler and controller-manager
2015-06-30 13:05:58 -04:00
Eric Paris
c6f2841839
Place a different token for every node/daemon combination
...
We can now revoke one token at a time!
2015-06-30 13:05:58 -04:00
Eric Paris
bb179b6a4c
Use a token for the scheduler, controller-manager, proxy and kubelet
...
Before we used the kubecfg certificate for everything. Mint one token
for each service and push it around where it belongs.
2015-06-30 13:05:55 -04:00
Chao Xu
7f89a29aad
add "kubectl patch". It will replace "kubectl udpate --patch" in the future
2015-06-29 16:36:45 -07:00
Alex Robinson
764d34d363
Merge pull request #10468 from caesarxuchao/add-cmd-replace
...
Add command "kubectl replace"
2015-06-29 16:06:33 -07:00
Chao Xu
9b3d42c090
Add command "kubectl replace". "kubectl update" is still supported as an alias.
...
"kubectl replace --patch" is NOT supported. It's moved to "kubectl patch" as a separate command in another commit.
2015-06-29 12:14:24 -07:00
Tim Hockin
745c2af792
Add a simple hostport-to-service proxy
...
Example: a pod like the below should
proxy port 53 TCP and UDP to the main DNS service.
```
apiVersion: v1
kind: Pod
metadata:
name: localhost-dns-proxy
spec:
containers:
- name: proxy-udp
image: gcr.io/google_containers/proxy-to-service:v1
args: [ "udp", "53", "kube-dns.default" ]
ports:
- name: udp
protocol: UDP
containerPort: 53
hostPort: 53
- name: proxy-tcp
image: gcr.io/google_containers/proxy-to-service:v1
args: [ "tcp", "53", "kube-dns.default" ]
ports:
- name: tcp
protocol: TCP
containerPort: 53
hostPort: 53
```
2015-06-26 21:55:18 -07:00
Robert Bailey
c6940932f7
Merge pull request #10378 from jeffbean/ansible-final
...
Ansible rework for Kubernetes cluster deployment
2015-06-26 16:55:00 -07:00
Robert Bailey
508f7f1697
Merge pull request #10358 from caesarxuchao/add-force-update
...
Add --force to `kubectl update`
2015-06-26 10:49:04 -07:00
Maxwell Forbes
712f303350
Merge pull request #9736 from sdminonne/bug_fix2
...
To add validation for service ports when defined as string
2015-06-25 19:37:04 -07:00
Jeff Bean
a0c312f224
Changing CentOS install of master and nodes
...
The testing repo now had updated packages for kubernetes
Also adding some options to rsync task to work with different users ssh settings
2015-06-25 18:45:49 -07:00
Chao Xu
ef5de91fd7
add "--force" flag to "kubectl update";
...
update relevant tests
2015-06-25 17:16:20 -07:00
Maxwell Forbes
5e748c1d47
Merge pull request #10070 from lavalamp/e2eProxyFix
...
proxy e2e test improvements
2015-06-25 13:15:03 -07:00
Maxwell Forbes
655179dcfb
Merge pull request #10264 from mikedanese/ca-token
...
add ca cert to token controller and all service accounts
2015-06-25 09:56:35 -07:00
Maxwell Forbes
2bb4cf3f8f
Merge pull request #10266 from ArtfulCoder/kubelet_resolv
...
update docker's resolv.conf file with options ndots:5
2015-06-25 09:54:36 -07:00
Abhishek Shah
23caf446ae
update docker's resolv.conf file with options ndots:5
2015-06-24 23:33:58 -07:00
Maxwell Forbes
3afda5d566
Merge pull request #10312 from dchen1107/cleanup
...
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Maxwell Forbes
28946766a3
Merge pull request #9807 from krousey/container_manifest
...
Removing ContainerManifest
2015-06-24 17:55:29 -07:00
Mike Danese
56bde3342a
add ca to token controller and all service accounts
2015-06-24 15:10:20 -07:00
Eric Paris
52999cd292
Check for rpm directly, don't imply from ansible_pkg_manager
...
Atomic host have neither dnf nor yum. So we cannot use that as a
hueristic if they have rpm.
2015-06-24 17:07:13 -04:00
Eric Paris
97b88fa563
Set SELinux permissive to allow DNS to work
2015-06-24 17:07:12 -04:00
Eric Paris
8cf36d7402
Declare etcd roles in meta rather then top level playbook
2015-06-24 17:07:12 -04:00
Eric Paris
83bd4d0903
Install python-firewall as ansible needs python2 firewalld support
2015-06-24 17:07:12 -04:00
Eric Paris
fc5c063a2d
Support Fedora Rawhide
...
Fedora rawhide has neither yum, nor python2, nor python2 libselinux
bindings. Ansible needs all of these.
This adds a new play which can be used to get machines setup so they can
then be managed with ansible.
2015-06-24 17:07:12 -04:00