Commit Graph

1001 Commits (be889f892a36082a9b39f32fd3716101d1abcbe9)

Author SHA1 Message Date
Mike Danese 7b8dbf4876 use kubectl delete in kube-addon-manager instead of stop
stop has been deprecated for about a year
2016-04-05 09:31:45 -07:00
Mike Danese 32426d6e97 don't ship kube-registry-proxy and pause in tars.
pause is built into containervm. if it's not on the machine we should just pull
it. nobody that I'm aware of uses kube-registry-proxy and it makes build/deployment
more complicated and slower.
2016-04-05 07:32:07 -07:00
Matt Johnson ce220836c3 Allow for local CNI binaries and configuration files with KUBERNETES_PROVIDER=vagrant.
Files are taken from cluster/network-plugins/{bin,conf} to be consumed within a vagrant kube-up.sh environment.
Paths used for configuration files and the 'cni' name of the network provider are all from the kubernetes documentation, but the actual implementation in the salt automation doesn't seem to exist.
2016-04-04 14:38:00 +01:00
Matt Johnson 46e6df655f Support use of NETWORK_PROVIDER=cni with KUBERNETES_PROVIDER=vagrant for a kube-up.
Use of NETWORK_PROVIDER=cni is documented as useable (as well as it's affects on the runtime args of kubelet),
however the actual implimentation in the salt automation doesnt seem to exist.
this change attempts to fix that for the vagrant usecase.
2016-04-04 14:37:48 +01:00
k8s-merge-robot 5be819b607 Merge pull request #23612 from mikedanese/addon-fix
Automatic merge from submit-queue

use apply instead of create to setup namespaces and tokens in addon manager

when the addon manager restarts, it takes ~15 minutes (1000 seconds) to start the sync loop because it retries creation of namespace and tokens 100 times. Create fails if the tokens already exist. Just use apply.
2016-04-03 05:50:12 -07:00
k8s-merge-robot b448825211 Merge pull request #23603 from mikedanese/dont-create-secret-for-dns
Automatic merge from submit-queue

stop creating secrets for dns, it uses the kube-system service account now
2016-04-02 17:20:52 -07:00
Minhan Xia d026d7ecbc Update cni binary 2016-03-31 13:57:51 -07:00
Alex Robinson b60ef6f0dd Merge pull request #23593 from dchen1107/docker
Remove unnecessary override of /etc/init.d/docker on containervm image.
2016-03-31 13:31:52 -07:00
Alex Robinson d41d50547d Merge pull request #23662 from ArtfulCoder/dockerscript
make docker-checker more robust
2016-03-31 10:53:39 -07:00
Abhishek Shah 736c02c7a0 make docker-checker more robust 2016-03-31 10:07:37 -07:00
CJ Cullen 26a6c66de5 Change kube-proxy & fluentd CPU request to 20m/80m. 2016-03-30 18:14:24 -07:00
k8s-merge-robot c327879771 Merge pull request #23512 from Q-Lee/nanny-fix
Automatic merge from submit-queue

Create a new Deployment in kube-system for every version.

It appears that version numbers have already been properly added to these files. Small change to delete an old deployment entirely, so we can make a new one per version (like replication controllers).

We'll want to change this back once the kube-addons support deployments in a later version.
2016-03-29 20:59:46 -07:00
Mike Danese ffa8bbde72 use apply instead of create to setup namespaces and tokens in addon manager 2016-03-29 16:41:53 -07:00
Mike Danese 0a821a473d stop create secrets for dns, it uses the kube-system service account now 2016-03-29 14:27:28 -07:00
Quintin Lee 0dcd49d584 Create a new Deployment in kube-system for every version. 2016-03-29 13:26:36 -07:00
Dawn Chen c5ac60f584 Remove unnecessary override of /etc/init.d/docker on containervm image. 2016-03-29 12:35:13 -07:00
k8s-merge-robot 3ec9f1e0a1 Merge pull request #23312 from mikedanese/static-routes-salt
Auto commit by PR queue bot
2016-03-26 12:29:40 -07:00
Yaroslav Molocko 0bfc496496 fix for https://github.com/kubernetes/kubernetes/issues/13511 2016-03-25 22:29:09 +08:00
Mike Danese be5b669b45 remove cadvisor salt
We have been removing cadviosr.manifest for over a year to cleanup
the old deployment style. I think we are ok at this point.
2016-03-24 11:55:29 -07:00
k8s-merge-robot cba5efd7de Merge pull request #23311 from mikedanese/nginx-salt
Auto commit by PR queue bot
2016-03-23 04:14:17 -07:00
Quintin Lee c484563315 Removing versions from deployment names. 2016-03-22 13:17:06 -07:00
Quintin Lee 79f0cc25e8 Support addon Deployments, make heapster a deployment with a nanny. 2016-03-22 13:17:06 -07:00
Mike Danese c676f8dabb remove unused static-routes from salt 2016-03-21 17:38:08 -07:00
Mike Danese 172d4e27f1 remove unused nginx salt
'aws', 'gce', 'vagrant', 'vsphere' are all the cloud providers
2016-03-21 17:25:31 -07:00
Justin Santa Barbara e0caa1e559 non_masquerade_cidr: verify-flags exception, salt syntax
Cope is non_masquerade_cidr value is empty; add exception for
verify-flags.
2016-03-15 11:05:55 -04:00
Matt Margolin e752f2149f Enable non_masquerade_cidr option configured in salt.grains
This should allow allow the non_masquerade_cidr option to get configured
in /etc/salt/minion.d/grains.conf, allowing the flag to used by kubelet
in /etc/sysconfig/kubelet. Default configuration is set in pillar
2016-03-15 09:56:33 -04:00
k8s-merge-robot 5191cfc415 Merge pull request #20931 from gswallow/master
Auto commit by PR queue bot
2016-03-07 06:18:53 -08:00
k8s-merge-robot bc96422e23 Merge pull request #22571 from zmerlynn/regional-registry
Auto commit by PR queue bot
2016-03-06 13:21:19 -08:00
k8s-merge-robot 0a21fa06d9 Merge pull request #22539 from a-robinson/newf
Auto commit by PR queue bot
2016-03-05 08:26:59 -08:00
k8s-merge-robot 886c943379 Merge pull request #22367 from a-robinson/requests
Auto commit by PR queue bot
2016-03-05 06:18:14 -08:00
k8s-merge-robot 271784e5fa Merge pull request #21167 from andyzheng0831/trusty-release
Auto commit by PR queue bot
2016-03-05 01:57:52 -08:00
k8s-merge-robot 57c944caa2 Merge pull request #22434 from justinsb/aws_docker_babysitter
Auto commit by PR queue bot
2016-03-04 21:52:03 -08:00
Zach Loafman 60e1fccc7f Regional registries: Hack the manifests!
Allow the gcr.io/google_containers registry to be overridden
regionally by just blasting a new KUBE_ADDON_REGISTRY out. Instead of
adding every addon to Salt and asking all of the other consumers
(Trusty, Juju, Mesos, etc) to change, just script the sed ourselves.

This is probably the 9th grossest thing I've ever done, but it works
well, and it works quickly. I kind of wish it didn't.
2016-03-04 20:00:54 -08:00
Abhi Shah 506f4d2212 Merge pull request #22551 from dchen1107/test1
Enable --log-level=info for docker daemons for scalability jenkins jo…
2016-03-04 16:50:19 -08:00
Alex Robinson 3216204668 Update to the latest version of google-fluentd.
It includes some performance improvements for parsing JSON (which is
very important for us, since all Docker logs are JSON) as well as a
couple new settings, like forcing of a flush of multiline logs after a
time period rather than having to wait until a new log is seen before
feeling confident flushing the previous one.
2016-03-05 00:18:31 +00:00
Alex Robinson 4e729c6c7c Reconfigure fluentd's resource limits and requests.
-Remove CPU limits to enable CPU bursting once 1.2 begins enforcing CPU limits.
-Add a memory limit for fluentd-es to match fluentd-gcp.
-Explicitly set requests to match limits.
2016-03-04 16:16:35 -08:00
k8s-merge-robot 23aa8565e2 Merge pull request #20851 from vmware/vsphere-docker-version-fix
Auto commit by PR queue bot
2016-03-04 15:50:36 -08:00
Dawn Chen fd10ca2f45 Enable --log-level=info for docker daemons for jenkins jobs and e2e tests except soak-continuous. 2016-03-04 13:31:42 -08:00
Andy Zheng 242b9977c7 Remove manifest copies from Trusty support
This change revises the way to provide kube-system manifests for clusters on Trusty. Originally, we maintained copies of some manifests under cluster/gce/trusty/kube-manifests, which is not scalable and hard to maintain. With this change, clusters on Trusty will use the same source of manifests as ContainerVM. This change also fixes some minor problems such as shell variables and comments to meet the style guidance better.
2016-03-04 11:16:49 -08:00
Justin Santa Barbara 6bdab05d11 Salt: Don't use Salt to start Docker
Starting docker through Salt has always been problematic.  Kubelet or
the babysitter process should start it.  We've kept it around primarily
so we have a `service: docker` node for the Salt DAG.

Instead, we enable (but do not start) the Docker service in Salt.  This
lets us keep the DAG node, but won't start it.

There's another bug in Salt, where watches will start the service even
on `service.enabled`.  So we remove the watches, and move them to our
existing Salt bug-fix script.
2016-03-04 12:07:10 -05:00
Justin Santa Barbara dbff0ef67b Systemd/non-Redhat: Add docker healthcheck script
We do the equivalent of #21727 for systemd systems.

Issue #21731
2016-03-04 12:05:52 -05:00
Justin Santa Barbara 64f1cbaddd Systemd/non-Redhat: Add docker prestart file
We do the equivalent of #21727 for systemd systems.

Issue #21731
2016-03-04 12:05:52 -05:00
Justin Santa Barbara d074b5ba13 docker systemd file: type->notify, docs->https
This minimizes the changes we make to the official Docker systemd file.
2016-03-04 12:05:52 -05:00
Alex Robinson 29eb6020fb Merge pull request #22074 from a-robinson/images
Update the logging images to parse sub-second docker timestamps.
2016-03-04 09:04:33 -08:00
k8s-merge-robot 09313b0847 Merge pull request #22254 from vmware/vsphere-pod-cidr-fix
Auto commit by PR queue bot
2016-03-04 04:17:44 -08:00
k8s-merge-robot 6d690d3f8a Merge pull request #21904 from justinsb/salt_docker_install_fix
Auto commit by PR queue bot
2016-03-03 22:07:14 -08:00
Jeff Lowdermilk 93e14a63e8 Revert "Enable --log-level=info for docker daemons for scalability jenkins jo…" 2016-03-03 19:21:11 -08:00
Jeff Lowdermilk 7215860ecd Merge pull request #22453 from dchen1107/test1
Enable --log-level=info for docker daemons for scalability jenkins jo…
2016-03-03 16:29:34 -08:00
Dawn Chen 84689a7a69 Enable --log-level=info for docker daemons for scalability jenkins job and e2e test. 2016-03-03 11:11:56 -08:00
Alex Robinson feea376b5c Update the logging images to parse sub-second docker timestamps. 2016-03-03 10:21:30 -08:00
Justin Santa Barbara 4ce0f8ccec Salt: bypass Salt when installing docker package on debian
The Docker 1.9.1 package on Debian is broken, and the service fails to
install when run unattended.  This is treated as an installation failure
and causes everything to fail.

However, the service can be started by Salt once we're not installing
the package, and indeed we restart docker anyway.

So, on Debian, use a helper script to install the docker package.  The
script sets up a policy-rc.d file to prevent the service starting, and
then cleanly removes it afterwards (this would be difficult to do in
Salt, I believe).
2016-03-03 11:14:33 -05:00
Zach Loafman 820842036b Show LICENSES in /etc/motd
Plumb through from the server tarball to
/usr/local/share/docs/kubernetes/LICENSES, then display in the motd.
2016-03-02 15:23:17 -08:00
Dhawal Yogesh Bhanushali fe7568d099 cidr-fix for vsphere cloud provider
let kubelet configure cbr0 bridge.
let kube-controll-manager distributed the subnet across the nodes.
create routes for the pod network.
2016-03-02 12:52:56 -08:00
Dawn Chen 960bea324e set --babysit-daemons=true for gce and aws 2016-03-01 16:46:31 -08:00
Dawn Chen a90ac42dd8 Kill docker daemon after configing cbr0 if flag --babysit-daemon is true so that babysitter process can restart it again with proper configurations and checkpoint file. 2016-03-01 16:46:31 -08:00
k8s-merge-robot a0b04a6df8 Merge pull request #20281 from cilium-team/fixing-docker-d
Auto commit by PR queue bot
2016-02-28 03:51:31 -08:00
Prashanth Balasubramanian 7d47d2dcd8 Kube-proxy requests 2x cpu shares of addons. 2016-02-25 15:39:27 -08:00
Justin Santa Barbara 977a4a56e4 AWS Debian Jessie: Install Docker 1.9.1 2016-02-22 22:55:11 -05:00
Prashanth B c833a14898 Merge pull request #21727 from dchen1107/test
Remove potential corrupted docker network checkpoint file before star…
2016-02-22 17:52:16 -08:00
Dawn Chen d922ddef8c Remove potential corrupted docker network checkpoint file before start docker
again.
2016-02-22 17:08:31 -08:00
k8s-merge-robot 8afccef608 Merge pull request #21632 from justinsb/docker_191
Auto commit by PR queue bot
2016-02-22 16:16:51 -08:00
Dhawal Yogesh Bhanushali e1a7441b36 restricting the version of docker to 1.9.x for vsphere support
for vsphere provider docker currently only supports 1.9.1 release.
The older versions of docker are failing on jessie due to issue https://github.com/docker/docker/issues/18793
and newer version 1.10.x is not properly tested.
2016-02-22 16:03:17 -08:00
Jeff Lowdermilk c406665b2b Plumb node labels through salt
Expose node-labels flag on kubelet for gce via a startup script
env var.
2016-02-22 15:31:34 -08:00
Dawn Chen 699c80b752 Merge pull request #21641 from bprashanth/promisc
Teach the kubelet about promiscuous mode, take 2
2016-02-22 15:08:18 -08:00
Dawn Chen b58826292a Merge pull request #21703 from dchen1107/test
Make sure docker is properly shutdown before startup.
2016-02-22 13:35:24 -08:00
Dawn Chen 6c5f07d58e Make sure docker is properly shutdown before startup. 2016-02-22 12:57:42 -08:00
k8s-merge-robot e629ee6bd3 Merge pull request #20704 from FujitsuEnablingSoftwareTechnologyGmbH/centos-support
Auto commit by PR queue bot
2016-02-22 02:35:22 -08:00
Lukasz Zajaczkowski 82be3d08f3 Add CentOS support 2016-02-22 07:41:35 +01:00
k8s-merge-robot facd8617ce Merge pull request #21505 from bprashanth/flannel-etcd
Auto commit by PR queue bot
2016-02-21 18:09:12 -08:00
Prashanth Balasubramanian c97e8df65b Stricter checking of HAIRPIN_FLAG in salt. 2016-02-21 14:43:43 -08:00
Prashanth Balasubramanian 2e8ff81de1 Teach the kubelet about --hairpin-mode=promiscuous-bridge. 2016-02-20 22:40:54 -08:00
k8s-merge-robot 0f1043d6df Merge pull request #21299 from wojtek-t/always_event_etcd
Auto commit by PR queue bot
2016-02-20 21:03:27 -08:00
Justin Santa Barbara dda792304d AWS Salt: Update to trusty, vivid, wily to Docker 1.9.1
This updates all of our recognized Ubuntu images to use Docker 1.9.1
2016-02-20 17:31:19 -05:00
k8s-merge-robot a12a2e984a Merge pull request #21233 from justinsb/aws_wily
Auto commit by PR queue bot
2016-02-20 13:28:08 -08:00
Daniel Smith a8b943dddd Revert "Put the container bridge in promiscuous mode." 2016-02-19 23:14:53 -08:00
Prashanth B b36e046fc8 Merge pull request #21326 from bprashanth/cbr0_promisc
Put the container bridge in promiscuous mode.
2016-02-19 17:52:34 -08:00
Joe Beda 11c7068b74 Merge pull request #21142 from justinsb/install_git_package
Salt: Make sure git is installed, for gitRepo volumes
2016-02-19 15:42:00 -08:00
Prashanth Balasubramanian a694a7ae4b Teach the kubelet about --hairpin-mode=promiscuous-bridge. 2016-02-19 14:59:16 -08:00
Brendan Burns 8bda033ef1 Merge pull request #21444 from dchen1107/test1
Log daemons' failure reasons to supervisord log files
2016-02-19 13:08:19 -08:00
k8s-merge-robot ced1ddfcc7 Merge pull request #21428 from ArtfulCoder/fluentes
Auto commit by PR queue bot
2016-02-19 08:56:10 -08:00
k8s-merge-robot 841d3f8311 Merge pull request #21357 from WeixuZhuang/fix
Auto commit by PR queue bot
2016-02-19 02:14:51 -08:00
Zach Loafman 6fe3023a3d Revert "Upgrade gce cluster to docker 1.9.1"
This reverts commit f07070d129.
2016-02-18 14:28:13 -08:00
Prashanth Balasubramanian 1e3db8ef9e Don't impose a memory limit on flannel etcd. 2016-02-18 13:52:58 -08:00
k8s-merge-robot 10f3403536 Merge pull request #21362 from ArtfulCoder/fluentd
Auto commit by PR queue bot
2016-02-17 22:25:28 -08:00
Dawn Chen 14f8ae1340 Log kubelet /healthz failure reasons to supervisord log file 2016-02-17 16:42:47 -08:00
Phillip Wittrock a8744279eb Merge pull request #21347 from yujuhong/health_check
Switch to using `docker version` as health check
2016-02-17 14:48:44 -08:00
Abhishek Shah e46b17044f Disable fluent-es on kubernetes-master 2016-02-17 14:01:20 -08:00
Abhishek Shah 51fba282ec Fluentd on GCE master should not use ClusterFirst 2016-02-17 11:32:41 -08:00
Justin Santa Barbara 4d2c580781 AWS kube-up: Add support for wily
vivid is technically no longer supported now, so we should support
wily.
2016-02-17 10:45:21 -05:00
Vishnu kannan 202578ebe5 enable for *real* new runtime and kubelet cgroup configs in GCE salt configs.
Signed-off-by: Vishnu kannan <vishnuk@google.com>
2016-02-16 16:08:57 -08:00
weixu b3f3a80667 Set the default value for DEBUG in cluster/saltbase/salt/generate-cert/make-ca-cert.sh
In commit 07d7cfd3, people add ${DEBUG} == "true" in file
cluster/saltbase/salt/generate-cert/make-ca-cert.sh
But the default value for DEBUG is not set. In that commit, it set the value
of DEBUG in cluster/ubuntu/util.sh where it call this script. When using this
script in saltstack to bring up cluster in other cloud platforms, it will fail
to generate the cert since we set set -o nounset in make-ca-cert.sh and var DEBUG
does not set. Set a default value for DEBUG here will fix this problem.
2016-02-16 16:03:20 -08:00
Yu-Ju Hong b92e2903fa Switched to using `docker version` as health check
`docker ps` can sometimes take a long time to finish, and restarting
docker in this case doesn't help.
2016-02-16 15:10:15 -08:00
k8s-merge-robot 4f3c89ce81 Merge pull request #21132 from petermd/kubeaddon-api-status
Auto commit by PR queue bot
2016-02-16 02:57:17 -08:00
Wojciech Tyczynski f6dc06bdc7 Always enable second etcd for events 2016-02-16 11:48:46 +01:00
k8s-merge-robot 396287aad9 Merge pull request #21110 from MikeSpreitzer/issue/21037
Auto commit by PR queue bot
2016-02-15 01:15:20 -08:00
André Martins 97acdf4cd8 fixing docker -d deprecation
Signed-off-by: André Martins <aanm90@gmail.com>
2016-02-14 23:07:32 +01:00
k8s-merge-robot 3d93b594e3 Merge pull request #20062 from mikefaille/master
Auto commit by PR queue bot
2016-02-13 10:36:57 -08:00
Dawn Chen 54933902b2 Make master component pods burstable, instead of guaranteed. 2016-02-12 14:28:48 -08:00
Mike Spreitzer 07d7cfd346 Fetch hacked easyrsa in kube-up instead of command run on master
This is good because it removes an obstacle to using the
cluster/ubuntu scripting to install Kubernetes into a restricted
environment where the machines can not open connections to arbitrary
external locations.

Also add debuggability to make-ca-cert.sh

Resolves #21037
Resolves #21092
2016-02-12 14:11:53 -05:00
Justin Santa Barbara f0d6fd10bc Salt: Make sure git is installed, for gitRepo volumes
Seems to be included in the GCE base image, but not on the images we use
on AWS (Ubuntu images).

Fix #20957
2016-02-12 12:51:08 -05:00
Vishnu kannan c3b5d5774c Update flag values for cgroups managed by kubelet.
Signed-off-by: Vishnu kannan <vishnuk@google.com>
2016-02-10 17:33:29 -08:00
Vishnu kannan 51e4ccf106 Updating the default values for the cgroups hierarchies that kubelet
creates for managing the nodes.

Signed-off-by: Vishnu kannan <vishnuk@google.com>
2016-02-10 16:02:36 -08:00
Marcin b7d72ef36d Startup scripts for custom metrics 2016-02-10 12:32:04 +01:00
Greg Swallow 646c22e47c Use local_ipv4 when public_ipv4 is not present. 2016-02-09 16:35:38 -05:00
Prashanth Balasubramanian c3a3a2bacd Pipe hairpin-mode flag through kubelet, enable on soak. 2016-02-09 12:12:19 -08:00
k8s-merge-robot 494186f40e Merge pull request #20867 from dchen1107/docker
Auto commit by PR queue bot
2016-02-09 10:02:44 -08:00
Dawn Chen f07070d129 Upgrade gce cluster to docker 1.9.1 2016-02-08 15:58:29 -08:00
Prashanth B 86b6fdf5ea Sanitize flannel config. 2016-02-07 05:19:50 +00:00
k8s-merge-robot d1b7fb3025 Merge pull request #20630 from a-robinson/logparse
Auto commit by PR queue bot
2016-02-06 11:28:08 -08:00
k8s-merge-robot fe269474ca Merge pull request #20330 from bryk/kubernetes-dashboard
Auto commit by PR queue bot
2016-02-06 00:15:10 -08:00
Daniel Smith 75c1dcaacd Merge pull request #20463 from andyzheng0831/trusty-master
Support master on Ubuntu Trusty
2016-02-05 15:49:28 -08:00
bryk 46f51d74bb Set kubernetes-dashboard as the default UI addon
Dashboard release info:
https://github.com/kubernetes/dashboard/releases/tag/v0.1.0

This replaces kube-ui addon
2016-02-05 13:36:37 +01:00
Alex Robinson e5c5f76402 Update the default fluentd images to parse system logs. 2016-02-04 23:29:27 +00:00
Andy Zheng b103f0f279 Support master on Ubuntu Trusty
This change support running kubernetes master on Ubuntu Trusty.
It uses pure cloud-config and shell scripts, and completely gets
rid of saltstack or the release salt tarball.
2016-02-03 11:22:28 -08:00
Dan Williams fabb65c13f Add a network plugin that duplicates "configureCBR0" functionality 2016-02-03 10:08:08 -06:00
Jeff Lowdermilk ec4b94aabc Merge pull request #20509 from yujuhong/docker_health
Change docker health checker to using `docker ps`
2016-02-02 11:50:04 -08:00
Yu-Ju Hong 156d301140 Change docker health checker to using `docker ps`
`docker ps` is a more reliable health check than docker version from past
experiences.
2016-02-02 11:08:21 -08:00
k8s-merge-robot d8047e7632 Merge pull request #20118 from erictune/chmod
Auto commit by PR queue bot
2016-02-02 04:50:54 -08:00
k8s-merge-robot b4d1c7541c Merge pull request #19870 from justinsb/salt_systemd_force
Auto commit by PR queue bot
2016-02-01 10:49:44 -08:00
k8s-merge-robot a5f03173c5 Merge pull request #19869 from justinsb/aws_fix_docker183_package_name
Auto commit by PR queue bot
2016-02-01 10:18:06 -08:00
Yifan Gu 05087612b9 salt: Try 'systemctl' if 'service' command fails when restarting docker. 2016-02-01 18:10:31 +08:00
Alex Robinson a81e6c3f4f Merge pull request #20307 from dchen1107/test1
Deprecated soon: override /etc/init.d/docker file on containervm image,
2016-01-30 13:32:41 -08:00
Dawn Chen 5f6f6acec7 Deprecated soon: override /etc/init.d/docker file on containervm image,
so that we can unblock docker 1.10 validation.
2016-01-28 17:44:23 -08:00
Peter McDonnell 4d4f1c645c exit if unable to query status from apiserver 2016-01-27 15:21:09 +00:00
k8s-merge-robot 86dd321c73 Merge pull request #19489 from cloudnativeapps/vsphere-support-1
Auto commit by PR queue bot
2016-01-26 22:27:55 -08:00
Alex Robinson 6acf297231 Update the fluentd versions to include fixes for #19405. 2016-01-27 00:30:53 +00:00
k8s-merge-robot 8c821700f3 Merge pull request #19389 from justinsb/internal_cidr
Auto commit by PR queue bot
2016-01-26 03:58:48 -08:00
Eric Tune f2df774ec9 Chmod password and token files.
Fixes #7808.
2016-01-25 15:14:17 -08:00
Dhawal Yogesh Bhanushali f7db2c6e99 vsphere support 2016-01-24 13:52:56 -08:00
Michael Faille ce7d5fe6e7 fix : openssl don't exist by default on CentOS docker image
To fix it, I just add openssl depedency on "generate-cert" state. It
should work on Debian-like and RedHat-Like systems. (and, Archlinux,
Opensuse, etc)

Fixed error :
$ sudo salt 'kubernetes-master' state.apply
----------
          ID: kubernetes-cert
    Function: cmd.script
      Result: False
     Comment: Command 'kubernetes-cert' run
     Started: 06:57:06.634203
    Duration: 208.719 ms
     Changes:
              ----------
              pid:
                  793
              retcode:
                  1
              stderr:
                  /tmpm24T3R.sh: line 22: openssl: command not found
                  chgrp: cannot access '/srv/kubernetes/server.key': No such file or directory
                  chgrp: cannot access '/srv/kubernetes/server.cert': No such file or directory
                  chmod: cannot access '/srv/kubernetes/server.key': No such file or directory
                  chmod: cannot access '/srv/kubernetes/server.cert': No such file or directory
              stdout:

After applying my patch (success) :
----------
          ID: kubernetes-cert
    Function: cmd.script
      Result: True
     Comment: Command 'kubernetes-cert' run
     Started: 07:17:04.172384
    Duration: 1041.092 ms
     Changes:
              ----------
              pid:
                  1045
              retcode:
                  0
              stderr:
                  Generating a 4096 bit RSA private key
                  ......................................................................++
                  ...............................................................................++
                  writing new private key to '/srv/kubernetes/server.key'
                  -----
              stdout:
----------
2016-01-24 02:18:11 -05:00
Justin Santa Barbara d8460d5920 AWS: Pass non-masquerade-cidr through kube-up
Set the environment variable NON_MASQUERADE_CIDR.

Docs in cluster/aws/options.md
2016-01-22 21:01:44 -05:00
Arsen Mamikonyan 8b5e9e2885 Change repository references to https://github.com/kubernetes/kubernetes 2016-01-22 10:23:14 -05:00
Alex Mohr 233d292ae5 Merge pull request #19456 from justinsb/salt_fix_tar_filemode
Salt: mode for tar file should be 644, not 755
2016-01-21 10:40:38 -08:00
Alex Mohr 8755f3e8a3 Merge pull request #19407 from justinsb/aws_fix_salt_helium_detection
AWS: don't rely on salt for kube-node-unpacker on AWS
2016-01-21 10:38:08 -08:00
Justin Santa Barbara cdd4caf4df Salt: force service provider to systemd if systemd
The version of Salt we're running doesn't do a good job of detecting
systemd.  Inspired by https://github.com/saltstack/salt/issues/13926,
I added a provider-force to the services.

With this change, salt-call -l debug state.highstate succeeds, even for
repeated invocations.

The issue was (probably) benign, but definitely caused noised (e.g. #11297)
2016-01-20 12:20:50 -05:00
Justin Santa Barbara 32d48c619c AWS: Fix the docker-engine package name
I got the package name wrong before, which meant that salt was failing
on invocations after the first (the name apparently doesn't matter on
the first invocation).
2016-01-20 12:19:36 -05:00
Justin Santa Barbara 9f995df29c AWS: Use Docker 1.8.3 on Ubuntu vivid
This currently requires downloading from the Docker repository, until we
get the packages uploaded to Google Cloud Storage.

Issue #19796
2016-01-18 14:13:55 -05:00
Justin Santa Barbara 65feea4449 AWS: don't rely on salt for kube-node-unpacker on AWS
We've had a lot of salt problems with systemd on AWS; we have a
workaround in place that we use everywhere else, we should use that for
kube-node-unpacker too.

Fixes #19386
Issue #19388
2016-01-17 14:35:07 -05:00
k8s-merge-robot bd8d37f6f2 Merge pull request #19522 from apcera/dev_python3
Auto commit by PR queue bot
2016-01-17 03:21:07 -08:00
Josh Ellithorpe 76e8a8b08d Fix issues with Python3 and bring up a dev cluster 2016-01-12 11:08:42 -08:00
Daniel Smith 3b9d67e6c0 Merge pull request #18742 from bprashanth/flannel_release_temp
Don't pull flannel from github
2016-01-12 10:37:52 -08:00
Justin Santa Barbara 5bf346216c Salt: mode for tar file should be 644, not 755
Probably harmless, but it doesn't make sense to have it be executable.
2016-01-10 11:04:56 -05:00
Minhan Xia c3d400f4bb Gather Fluentd logs 2016-01-06 13:46:12 -08:00
gmarek fc6247152b Split levels of verbosity of test logging on components. 2015-12-28 11:41:09 +01:00
k8s-merge-robot 2eea4c0e8f Merge pull request #18819 from wojtek-t/flag_gate_second_etcd
Auto commit by PR queue bot
2015-12-20 00:36:58 -08:00
k8s-merge-robot 3f91f18a55 Merge pull request #18488 from yifan-gu/dockerized_python
Auto commit by PR queue bot
2015-12-19 10:52:15 -08:00
k8s-merge-robot 0b647564fc Merge pull request #18625 from bprashanth/kube_up_flannel
Auto commit by PR queue bot
2015-12-19 01:29:11 -08:00
Yifan Gu 516032f336 kube-addons: Use python container if python is not found on the machine.
To build the python image, BUILD_PYTHON_IMAGE should be set during make.
When the addon script is running, it will check if python is installed
on the machine, if not, it will use the python image that built previously.
2015-12-18 15:14:56 -08:00
Wojciech Tyczynski 38bb110905 Enable etcd for events only in large clusters 2015-12-18 12:03:29 +01:00
k8s-merge-robot 6716290903 Merge pull request #18388 from nikhiljindal/clusterName
Auto commit by PR queue bot
2015-12-16 03:50:11 -08:00
Prashanth Balasubramanian 19a2cd23f3 Don't pull flannel from github 2015-12-15 17:42:54 -08:00
Minhan Xia f0c176dd6a add validation for fluentd pods 2015-12-14 16:23:11 -08:00
Prashanth Balasubramanian b5303b9978 Tell kubernetes-master not to wait on flannel. 2015-12-14 09:47:09 -08:00
nikhiljindal 724b098855 Deleting unused master.ClusterName param 2015-12-11 13:39:19 -08:00
k8s-merge-robot 1b90941841 Merge pull request #18456 from thockin/bump-flannel-ver
Auto commit by PR queue bot
2015-12-11 00:34:39 -08:00
k8s-merge-robot eb2fc232d5 Merge pull request #18198 from brendandburns/aws2
Auto commit by PR queue bot
2015-12-11 00:14:00 -08:00
Tim Hockin 6b830cf229 Fix a couple flannel invocations I missed 2015-12-10 11:48:46 -08:00
Zach Loafman 8b21b76df8 Fix defaulting in cluster/saltbase/install.sh 2015-12-09 16:42:58 -08:00
Zach Loafman e264db4349 Merge pull request #17580 from mikedanese/stage-image
add an option to push/pull component images from a registry using kube-up
2015-12-09 13:49:45 -08:00
Mike Danese 4ace8280a0 add an option to push/pull component images from a registry using kube-up 2015-12-08 14:19:30 -08:00
gmarek 4060eba626 Use KubeletPort from API object, salt changes, take 2
This reverts commit a7425bf070, reversing
changes made to 4a9b0fc715.
2015-12-07 10:31:11 +01:00
Wojciech Tyczynski dca6f5ac5a Merge pull request #18074 from jsafrane/devel/e2e-rbd
e2e: Remove specific Gluster repo.
2015-12-06 09:43:10 +01:00
Brendan Burns 9c0897e98b Fix the scripts to handle master/minion salt setups (e.g. AWS) 2015-12-04 12:52:43 -08:00
Brendan Burns b4c4a045f7 Fix an incorrect reference to the directive that installs docker 2015-12-03 15:06:33 -08:00
Jan Safranek 85de88892c e2e: Remove specific Gluster repo.
Debian Wheezy image in GCE has already the correct one.
2015-12-02 15:21:01 +01:00
Mike Danese e2c5c898fb move vagrant to masterless salt 2015-12-01 15:53:50 -08:00
Mike Danese 7c413790df don't unpack salt in tmpfs 2015-11-29 18:36:38 -08:00
Prashanth Balasubramanian 9aa0efa393 Turn flannel off by default 2015-11-25 09:43:48 +01:00
Prashanth Balasubramanian ad2d3d4c20 Docs etc 2015-11-25 09:42:59 +01:00
Prashanth Balasubramanian 321bc73264 Flannel server in static pod with private etcd. 2015-11-25 09:42:59 +01:00
Prashanth Balasubramanian 7aa8ebe30f Flannel handshakes with kubelet. 2015-11-25 09:42:59 +01:00
Prashanth Balasubramanian 4cd1ee177b Salt configuration for flanneld 2015-11-25 09:42:59 +01:00
Marek Grabowski 7f72d18550 Revert "Salt changes to enable using non-default Kubelet port" 2015-11-25 09:15:36 +01:00
k8s-merge-robot 60b628a6d6 Merge pull request #17375 from gmarek/kubelet-port-salt
Auto commit by PR queue bot
2015-11-24 19:39:57 -08:00
Mike Danese 65b8d43543 remove code that puts kube-proxy into a special cgroup since it runs in a container now 2015-11-23 10:20:58 -08:00
gmarek 3ffa01d7cd Salt changes to enable using non-default Kubelet port 2015-11-23 16:02:46 +01:00
Mike Danese a29350e40d delete unused files 2015-11-20 16:17:19 -08:00
Mike Danese 1d9d11c836 run kube-proxy in a static pod 2015-11-18 16:52:10 -08:00
Matt Moore b750d1dddc Drop the beta for GCR v2 images.
beta.gcr.io is no longer needed to pull through v2.
2015-11-14 12:19:02 -08:00
k8s-merge-robot 75dadbc117 Merge pull request #16763 from zmerlynn/bump-containervm
Auto commit by PR queue bot
2015-11-05 14:55:40 -08:00
Joe Beda 993c1ee222 Update etcd to 2.2.1 2015-11-04 12:26:57 -08:00
Robert Bailey d5bb12134e Replace monit with supervisord in documentation. 2015-11-03 16:20:02 -08:00
Zach Loafman 4b29260bc6 Bump ContainerVM to container-vm-v20151103 2015-11-03 15:44:36 -08:00
Dawn Chen 956561810f Remove monit related salt files. 2015-11-03 09:31:50 -08:00
Dawn Chen 29614d3fe0 Enable supervisord for other cloud providers. 2015-11-03 09:30:24 -08:00
Alex Robinson 887b9dd78a Merge pull request #16232 from bprashanth/salt
Cluster-loadbalancing addon
2015-10-30 09:45:16 -07:00
Prashanth Balasubramanian 962cc11f73 Cluster-loadbalancing addon 2015-10-29 15:07:25 -07:00
Zach Loafman f0e6ae4b8f Merge pull request #12393 from jsafrane/devel/gce-tests
Update e2e scripts to run storage tests on GCE/Vagrant
2015-10-29 07:46:17 -07:00
Alex Robinson f0ebe4066f Update fluentd-gcp to include all recent improvements that are in the
new google-fluentd 1.5.4-1 build.
2015-10-29 11:54:07 +00:00
Jan Safranek fe0741bffe Configure cluster for e2e tests.
When KUBE_E2E_STORAGE_TEST_ENVIRONMENT is set to 'true', kube-up.sh script
will:

- Install the right packages for all storage volumes.
- Use devicemapper as docker storage backend. 'aufs', the default one on
Debian, does not support extended attibutes required by Ceph RBD and Gluster
server containers.

Tested on GCE and Vagrant, e2e tests for storage volumes passes without any
additional configuration.
2015-10-29 11:03:34 +01:00
Zach Loafman 17fd5f2536 NFS: Revamp example, add nfs-common to debian saltbase
This ensures nfs-common is installed on GCE, and provides a more
functional explanation/example. I launched two replication controllers
so that there were busybox pods to poke around at the NFS volume, and
so that the later wget actually works (the original example would have
to work on the node, or need some other access to the container
network). After switching to two controllers, it actually makes more
sense to use PV claims, and it's probably a configuration that makes
more sense for indirection for NFS anyways.
2015-10-27 16:58:04 -07:00
Dawn Chen 038f871c43 Merge pull request #16071 from brendandburns/heapster
Make heapster config creation dynamic
2015-10-23 09:25:59 -07:00
Saad Ali 76c5e0e553 Revert "Use KubeletPort reported in NodeStatus instead of cluster-wide master config" 2015-10-22 21:25:38 -07:00
k8s-merge-robot a6b8e112ac Merge pull request #12919 from gmarek/use_api_ports
Auto commit by PR queue bot
2015-10-22 19:53:41 -07:00
Brendan Burns 90d9e6e935 Make heapster config creation dynamic 2015-10-22 12:05:49 -07:00
gmarek 6d6cd8e46a Use KubeletPort reporeted in NodeStatus instead of cluster-wide master config. 2015-10-21 17:19:31 +02:00
Justin Santa Barbara 726c7afab7 AWS: install netcat-traditional, instead of netcat-openbsd
We want to match the version of netcat that is installed on GCE.  We
were having problems with netcat-openbsd having slightly different
timeout behaviour (on UDP packets; when there was no listener).
2015-10-19 22:50:06 -04:00
k8s-merge-robot 0e1b78fb6e Merge pull request #15728 from a-robinson/dockerlog
Auto commit by PR queue bot
2015-10-19 06:59:38 -07:00
k8s-merge-robot 44a9877bd4 Merge pull request #15750 from yehuis4/master
Auto commit by PR queue bot
2015-10-19 01:06:34 -07:00
Mike Danese 8e8437dad8 declare azure/ubuntu/saltstack bankruptcy 2015-10-16 18:21:21 -07:00
y00278980 2a0e1dd9e2 Fix some problems:
1. cluster/saltbase/pillar/README.md L8 quoted the wrong line number of cluster/gce/configure-vm.sh
2. spelling mistake of 'retruns'
2015-10-16 21:29:05 +08:00
Alex Robinson 40d1a01fa8 Set Docker's default log level to warning to reduce log spam. 2015-10-15 13:49:28 -07:00
Mike Danese ef015c3574 add config-vm flag to enable terminated pod garbage collection. 2015-10-15 08:19:39 -07:00
k8s-merge-robot 7ef2a1b293 Merge pull request #15427 from brendandburns/controllerversion
Auto commit by PR queue bot
2015-10-15 05:38:33 -07:00
Brendan Burns 0c730f4ea7 update 2015-10-14 18:22:19 -07:00
Dawn Chen 03fb74400b Upgrade to docker 1.8.3 2015-10-13 11:05:09 -07:00
k8s-merge-robot 8580804f77 Merge pull request #15138 from mattmoor/limited-beta-rewrite
Auto commit by PR queue bot
2015-10-10 11:41:34 -07:00
Mike Danese fa60bbe8e6 add flag to kubelet to ignore the cidr passed down by the apiserver on the master 2015-10-08 21:21:19 -07:00
Janet Kuo 4b8f91fd0e Merge pull request #15190 from dchen1107/fix
unset Kubelet flag for manifest_url for master node.
2015-10-07 14:48:35 -07:00
Dawn Chen c29296f9a8 Set manifest-url-header when enable_manifest_url is set 2015-10-07 13:27:03 -07:00
Filip Grzadkowski c1345ce2d9 Merge pull request #15068 from wojtek-t/fix_default_limits
Tweak limits for system pods in manifest files.
2015-10-07 09:41:28 +02:00
Dawn Chen 37720e8899 unset Kubelet flag for manifest_url for master node. 2015-10-06 17:33:29 -07:00
Matt Moore eeb4eeb17c Move pause and fluentd-elasticsearch to GCR v2.
This scopes down the initially ambitious PR:
https://github.com/kubernetes/kubernetes/pull/14960 to replace just
`pause` and `fluentd-elasticsearch` to come through `beta.gcr.io`.

The v2 versions have been pushed under new tags, `pause:2.0` and
`fluentd-elastisearch:1.12`.

NOTE: `beta.gcr.io` will still serve images using v1 until they are repushed with v2.  Pulls through `gcr.io` will still work after pushing through `beta.gcr.io`, but will be served over v1 (via compat logic).
2015-10-06 16:39:07 -07:00
Janet Kuo f4bbb32bd9 Merge pull request #15024 from mikedanese/expcontroller
enable all experimental controllers in controller-manager with one flag
2015-10-06 14:20:11 -07:00
Alex Robinson 32b9d8aad0 Merge pull request #14823 from wojtek-t/move_events_to_separate_etcd
Move events to a separate etcd instance
2015-10-05 16:28:04 -07:00
Mike Danese 833be48d61 enable all experimental flags with one controller 2015-10-05 14:54:19 -07:00
Wojciech Tyczynski 2a74d1d6ca Tweak limits in manifest files. 2015-10-05 14:45:43 +02:00
Wojciech Tyczynski 0f1cbe37a4 Events in separate etcd 2015-10-05 10:54:24 +02:00
Ananth Suryanarayana d50d7763da Add opencontrail networking provisioning support in kubernetes salt based provisioning
OpenContrail is an open-source based networking software which provides virtualization support for the cloud.

This change-set adds ability to install and provision opencontrail software for networking in kubernetes based cloud environment.

There are basically 3 components

o kube-network-manager -- plugin between contrail components and kubernets components
o provision_master.sh -- OpenContrail software installer and provisioner in master node
o provision_minion.sh -- OpenContrail software installer and provisioner in minion node(s)

These are driven via salt configuration files

One can provision opencontrail by just setting "export NETWORK_PROVIDER=opencontrail"
Optionally, OPENCONTRAIL_TAG, and OPENCONTRAIL_KUBERNETES_TAG can be used to
specify opencontrail and contrail-kubernetes software versions to install and provision.

Public-IP Subnet provided by contrail can be configured via OPENCONTRAIL_PUBLIC_SUBNET
environment variable

At this moment, plan is to add support for aws, gce and vagrant based platforms

For more information on contrail-kubernetes, please visit https://github.com/juniper/contrail-kubernetes For more information on opencontrail, please visit http://www.opencontrail.org
2015-10-03 08:03:02 -07:00
Abhishek Shah 2d3a688ab7 reduce cpu requirement for etcd, after 2 etcd pods are being run 2015-10-02 10:31:04 -07:00
Brendan Burns a4581c7cd5 Add a second etcd instance for use with events. 2015-09-29 13:13:59 -07:00
Brian Grant 3cbd5f01a0 Merge pull request #13044 from roberthbailey/kubelet-healthcheck
Healthcheck the kubelet on the secure port rather than the read-only port.
2015-09-25 11:11:51 -07:00
Marcin Wielgus 039acb8c1d Merge pull request #14463 from nikhiljindal/DeploymentOnGCE
Allow enabling deployment controller on GCE and GKE
2015-09-25 13:47:36 +02:00
nikhiljindal ed5d24ed52 Allow enabling deployment controller on GCE and GKE 2015-09-24 11:37:16 -07:00
Abhishek Shah 09465c9a2a allow privileged pods 2015-09-22 13:44:08 -07:00
Robert Bailey da94ed7957 Healthcheck the kubelet on the secure port rather than the read-only port. 2015-09-16 12:15:29 -07:00
k8s-merge-robot 3dcb75c599 Merge pull request #13986 from derekwaynecarr/move_to_flannel
Auto commit by PR queue bot
2015-09-16 09:36:09 -07:00
k8s-merge-robot 14ccba8924 Merge pull request #13886 from a-robinson/logtags
Auto commit by PR queue bot
2015-09-16 05:51:32 -07:00
Alex Robinson 8040f75594 Update fluentd-gcp to use a new google-fluentd build with my recent
changes to fluent-plugin-google-cloud to attach Kubernetes metadata to
logs.

Along with this, separate logs from containers in the cluster out from
logs from the daemons running on the node by instantiating two instances
of the output plugin, one which uses the new metadata (for containers)
and one which doesn't (for things like docker and the kubelet).
2015-09-15 23:14:43 +00:00
derekwaynecarr 360e7620d3 Move vagrant to flannel 2015-09-15 15:42:38 -04:00
Alex Robinson 614b1cf3c1 Replace /varlog with /var/log in the fluentd-gcp config to match the
recently updated fluent-es config.
2015-09-11 16:52:49 -07:00
Mike Danese 4bd638921f Merge pull request #13752 from yujuhong/docker1.8_upgrade
Upgrade to docker 1.8.2 for Debian Wheezy on GCE
2015-09-11 11:15:30 -07:00
Yu-Ju Hong 4cdd00fb9c Upgrade to docker 1.8.2 for Debian Wheezy on GCE 2015-09-11 10:09:59 -07:00
Jerzy Szczepkowski 5be8817315 Turning on pod autoscaler on GCE.
Implemented optional turning on of pod autoscaler in kube-up script for GCE.
2015-09-11 12:03:41 +02:00
k8s-merge-robot c0d0ef6dd1 Merge pull request #13817 from a-robinson/varlib
Auto commit by PR queue bot
2015-09-10 13:24:07 -07:00
Jeff Lowdermilk 08442974bb Revert "Turning on pod autoscaler on GCE." 2015-09-10 11:46:37 -07:00
Alex Robinson 746dcb8075 Make fluentd-es output its warning logs and fluentd-gcp mount
/var/lib/docker read-only.
2015-09-10 18:28:27 +00:00
Jerzy Szczepkowski b41862b670 Turning on pod autoscaler on GCE.
Implemented optional turning on of pod autoscaler in kube-up script for GCE.
2015-09-10 16:10:01 +02:00
Dai Zuozhuo 2e2ef3e830 change -o template to -o go-template=... 2015-09-05 22:30:47 +08:00
derekwaynecarr aff9ee5a40 Enable CFS quota in vagrant setup 2015-09-03 13:44:28 -04:00
k8s-merge-robot 9c4802420b Merge pull request #8632 from jimmidyson/logging-kube-metadata
Auto commit by PR queue bot
2015-09-02 19:08:34 -07:00
Derek Carr 445fff030c Merge pull request #11469 from fredjean/fix-vagrant-vmware
Boot a Vagrant on VMWare Kubernetes Cluster
2015-09-02 14:23:53 -04:00
Jimmi Dyson e07da97447 Switch to fluentd kubernetes metadata plugin to enrich logs with more searchable kubernetes metadata 2015-09-02 10:33:15 +01:00
Alex Robinson 66ff3c133b Merge pull request #13229 from a-robinson/fluent
Clean up the fluentd images to make them more debuggable
2015-09-01 17:01:04 -07:00
Prashanth B 52f7833cd3 Revert "Revert "LimitRange updates for Resource Requirements Requests"" 2015-08-28 09:26:36 -07:00
Fred Jean 1305f54645 Booting a Kubernetes cluster on Vagrant
* Using Fedora 21 as the base box
* Discover the active network interfaces in the box to avoid hardcoding
  them in configuration.
* Use the master IP for the certificate.
2015-08-27 21:43:36 -06:00
Alex Robinson d02dc64036 Let fluentd-es log by not redirecting to a file within the container
and only using -q (warning logs only) rather than -qq (error logs only).
2015-08-27 21:41:44 +00:00
Alex Robinson b3154a7815 Remove the garbage log file in the fluentd-gcp that gets filled with
gunk when installing the google-fluentd agent.

Also let it log things by not redirecting to a file within the container
and only using -q (warning logs only) rather than -qq (error logs only).
2015-08-27 21:41:44 +00:00
Piotr Szczesniak 6e05b9e3a3 Revert "LimitRange updates for Resource Requirements Requests" 2015-08-27 10:50:50 +02:00
Yu-Ju Hong 1bae2b677d Merge pull request #12492 from derekwaynecarr/limit_range_api
LimitRange updates for Resource Requirements Requests
2015-08-26 13:02:57 -07:00