github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
17,368 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

552 Commits (c054b201485feefacd72bb44dd7d08083327642c)

Author SHA1 Message Date
Maru Newby 2da59a2f34 Install 'docker' package for Fedora 22 
Fedora < 22 provides docker via the 'docker-io' package, but this
package was renamed to 'docker' as of Fedora 22.  Though the docker
package can be installed manually with 'dnf install docker-io' on F22,
Salt requires the explicit package name or deployment will fail.
 2015-06-30 21:36:33 -07:00
Robert Bailey fedddee157 Install the kubectl binary on nodes in addition to the master. 2015-06-30 16:52:17 -07:00
derekwaynecarr 2cc869b1c5 Missed update to kube-proxy when removing nginx on vagrant 2015-06-30 15:42:52 -04:00
Dawn Chen e55cd709a1 Removed cluster/saltbase/salt/_states/container_bridge.py since it is useless now. 2015-06-30 11:00:41 -07:00
Zach Loafman f21b6b89d1 Fix issues mentioned in #10520 2015-06-30 06:51:10 -07:00
Daniel Smith dcd91666b9 wait until a token shows up to start addons 2015-06-29 18:41:12 -07:00
Justin Santa Barbara e29e9f0033 Add explicit dependency of docker pkg on the deb download 
Salt ordering continues to surprise me.  I saw them execute
out of order, though I don't know why.  Adding an explicit
dependency to prevent out-of-order execution.
 2015-06-28 23:51:12 -04:00
Justin Santa Barbara ea74bd13b8 Work around Salt 18089 
Directly create /etc/sysctl.d/99-salt.conf
 2015-06-28 23:50:00 -04:00
Justin Santa Barbara 54d3ac92ea Don't make kubelet systemd service depend on Docker 
Fixes #10379
 2015-06-26 11:03:09 -04:00
Maxwell Forbes bc1930927d Merge pull request #10347 from justinsb/vagrant_no_cidr_on_master 
Salt: don't assume that master => cbr-cidr
 2015-06-25 10:23:59 -07:00
Maxwell Forbes 655179dcfb Merge pull request #10264 from mikedanese/ca-token 
add ca cert to token controller and all service accounts
 2015-06-25 09:56:35 -07:00
Justin Santa Barbara a0ae1d90ba Salt: don't assume that master => cbr-cidr 
In particular, this is required for vagrant
 2015-06-25 09:17:00 -04:00
Brendan Burns d2334d60c8 Merge pull request #10328 from dchen1107/cleanup 
Add dependencies on docker and kubelet service when copying master co…
 2015-06-24 21:32:35 -07:00
Dawn Chen e7d217d941 Add dependencies on docker and kubelet service when copying master components manifests 
to /etc/kubernetes/manifest
 2015-06-24 21:15:08 -07:00
Maxwell Forbes 3afda5d566 Merge pull request #10312 from dchen1107/cleanup 
Take 2: Fix the race between configuring cbr0 and restarting static pods
 2015-06-24 17:59:50 -07:00
Mike Danese 56bde3342a add ca to token controller and all service accounts 2015-06-24 15:10:20 -07:00
Dawn Chen 6ddfa512de Revert "Revert "Fix the race between configuring cbr0 and restarting static pods"" 
This reverts commit fd0a95dd12.
 2015-06-24 11:10:10 -07:00
Piotr Szczesniak fd0a95dd12 Revert "Fix the race between configuring cbr0 and restarting static pods" 2015-06-24 09:56:49 +02:00
Dawn Chen 9dbe6fe4e4 Added more comments. 2015-06-23 16:28:41 -07:00
Dawn Chen 8d76d4ee57 Make master-addon service depend on both docker and kubelet service 
in salt.
 2015-06-23 12:11:20 -07:00
Dawn Chen 23200d303f Fix several issues on running syncPods until network is configured. 
Also fixed unittests and compiling.
 2015-06-23 12:11:19 -07:00
derekwaynecarr db202d4904 Remove nginx from vagrant 2015-06-23 13:07:50 -04:00
Brendan Burns 192ffdfb25 Fix the container bridge so that it can create cbr0 
Fix the kubelet so that it tries to sync status, even if Docker is down
 2015-06-22 23:18:01 -07:00
Brendan Burns a29ade2f33 Disable creation of cbr0, the kubelet does it now. 
Conditionalize the docker bridge.
 2015-06-22 23:15:29 -07:00
Jeff Lowdermilk 85770295c2 Merge pull request #10004 from ArtfulCoder/kubelet_health 
Augmented kubelet healthz with syncLoop check.
 2015-06-22 10:53:05 -07:00
Abhishek Shah 3556993179 Augmented kubelet healthz with syncLoop check. 
Monit uses read-only port for health monitoring.
 2015-06-19 18:14:01 -07:00
Brendan Burns ec1e308ae2 rev etcd to 2.0.12 2015-06-19 15:57:32 -07:00
Saad Ali 4d25121206 Merge pull request #9769 from brendandburns/secure 
Revert the revert of https://github.com/GoogleCloudPlatform/kubernetes/pull/9761
 2015-06-16 14:21:54 -07:00
Saad Ali 068000a8ba Merge pull request #9847 from mikedanese/apiserver-liveness-probe 
add livenessProbe to kube-apiserver.manifest
 2015-06-16 14:03:13 -07:00
Vishnu Kannan 31f7ea10c6 Updating heapster version to v0.14.1. 
Adding a standalone version of heapster which exposes stats via REST API.
 2015-06-16 11:56:23 -07:00
Saad Ali 5596e6f789 Merge pull request #9493 from marekbiskup/testAddonUpdate 
e2e test for addon upgrade
 2015-06-16 10:50:15 -07:00
Mike Danese 491eb5e583 add livenessProbe to kube-apiserver.manifest 2015-06-15 23:22:56 -07:00
Fabio Yeon 9b3e9a509d Merge pull request #9616 from jeffbean/kube_addons 
kube_addons - Adding variable with default for kubectl bin.
 2015-06-15 19:31:42 -07:00
Fabio Yeon 8d2c7ff1d7 Merge pull request #9687 from satnam6502/fluentd-gcp 
Adjust Fluentd source format for Docker files to be JSON for Cloud Lo…
 2015-06-15 13:32:49 -07:00
Satnam Singh 33311b46a2 Adjust Fluentd source format for Docker files to be JSON for Cloud Logging 2015-06-15 10:22:27 -07:00
Marek Biskup dcc4034d57 e2e test for addon update 2015-06-15 17:37:24 +02:00
Brendan Burns 51b20b35e2 Revert "Revert "Optionalize (default false) --insecure-registry."" 
This reverts commit 1645c9a9b8.
 2015-06-12 21:00:16 -07:00
Dawn Chen 1645c9a9b8 Revert "Optionalize (default false) --insecure-registry." 2015-06-12 17:50:38 -07:00
Justin Santa Barbara 16d6ba8a9d AWS: Stop the master kubelet from registering as a node (like GCE does) 2015-06-12 18:33:45 -04:00
Brendan Burns 675d8378f2 Optionalize (default false) --insecure-registry. 2015-06-11 16:33:14 -07:00
Abhi Shah 59a347d119 Merge pull request #9309 from saad-ali/issue9028 
Enable InfluxDB/Grafana for GCE in addition to GCL. Disable GCM
 2015-06-11 11:04:09 -07:00
Abhi Shah f4eb2f366f Merge pull request #9568 from marekbiskup/docker_log_rotate 
rotate docker log
 2015-06-10 14:50:07 -07:00
Jeffrey Bean 99f64a8a07 kube_addons - Adding variable with default for kubectl bin. Fixes #9599 2015-06-10 14:47:31 -07:00
Abhi Shah 53fa4e1366 Merge pull request #9383 from brendandburns/liveness 
Add liveness checks to the controller-manager and scheduler.
 2015-06-10 14:44:12 -07:00
Abhi Shah c8591bd323 Merge pull request #9491 from ArtfulCoder/etcd_log 
Etcd log mount
 2015-06-10 13:17:10 -07:00
Marek Biskup 83f8cd148d rotate docker log 2015-06-10 12:19:13 +02:00
Brendan Burns ff3f463e00 Add liveness checks to the controller-manager and scheduler. 2015-06-09 13:06:04 -07:00
Robert Bailey 2feb658ed7 Distribute the cluster CA cert to cluster addon pods through 
the kubeconfig file. Use the $KUBERNETES_MASTER_NAME from the
kube-env for skydns, because it can't use the service name.
 2015-06-08 20:17:45 -07:00
Abhishek Shah fe906677d4 Etcd log mount 2015-06-08 17:21:11 -07:00
krousey 8a9e0e00bf Merge pull request #9128 from marekbiskup/addonUpgrade 
Addon upgrade (partial implementation of #8107)
 2015-06-08 15:15:27 -07:00
Marek Biskup 13ba177668 kube-addon-update.sh 2015-06-08 15:10:40 +02:00
CJ Cullen 04cd9b3c75 Make sshproxy use a hostmount on master PD (don't spam sshKeys on upgrade/reboot). 
Add comment describing what SSHTunnelList.Close() does.
Simplify util.FileExists.
 2015-06-05 15:03:03 -07:00
CJ Cullen cb317604ab Some refactoring. Only selectively use ssh proxy. 
Add NetworkName to gce.Config.
Add locking to uses of master.tunnels.
 2015-06-05 14:55:16 -07:00
CJ Cullen de9a5f43bc Specify sshUser, sshKeyfile in kube-apiserver manifest. 
Trim space on ssh key so GCE doesn't treat it as 2 lines.
A couple other minor fixes.
 2015-06-05 14:55:15 -07:00
CJ Cullen 82afaaf31d Mount cloud-config files for cloudproviders in kube-apiserver & kube-controllermanager. 2015-06-05 14:54:20 -07:00
saadali bc53533c83 Enable InfluxDB/Grafana for GCE in addition to GCM/GCL 2015-06-05 01:17:45 -07:00
derekwaynecarr 2168cee414 Upgrade to Fedora 21, Docker 1.6, clean-up SDN 2015-06-04 10:59:23 -04:00
Daniel Smith 1690617ee6 remove ro service 2015-06-03 16:45:54 -07:00
Brian Grant 984b779b05 Merge pull request #9192 from dchen1107/clean 
Watch kubelet flag file, so restart kubelet upon changes.
 2015-06-03 14:45:07 -07:00
Brian Grant d37264edde Merge pull request #9158 from dchen1107/cleanup 
stop monit kube-proxy on master node.
 2015-06-03 12:13:17 -07:00
Dawn Chen 1d94348023 Watch kubelet flag file, so restart kubelet upon changes. 2015-06-03 09:13:28 -07:00
Prashanth Balasubramanian f7c0f1c1e3 Set min-request-timeout in test clusters 2015-06-03 08:46:28 -07:00
Brian Grant d861631f08 Merge pull request #9142 from roberthbailey/kubelet-on-master 
Prevent access to the /run and /exec endpoints on the master's kubelet
 2015-06-02 22:55:06 -07:00
Dawn Chen 301bed535e stop monit kube-proxy on master node. 
Fixed #8783
 2015-06-02 17:48:24 -07:00
CJ Cullen 934c553c04 Clarify description/usage of --advertise-address, Master.PublicAddress 2015-06-02 15:23:32 -07:00
Robert Bailey 1dad552edc Prevent access to the /run and /exec endpoints on the master's kubelet 
so that users can't run arbitrary code on the master.
 2015-06-02 14:42:11 -07:00
CJ Cullen 085a48a70e Add an advertise-address flag. This allows the address that the apiserver binds 
to (possibly 0.0.0.0) to be different than the address on which members of the cluster
can reach the apiserver (possibly not a local interface).
 2015-06-02 14:33:15 -07:00
Justin Santa Barbara c4a2631593 Mount logic breaks if /var/lib/kubelet is a symlink 
Pass the correct kubelet root-dir on AWS
 2015-05-29 20:13:09 -04:00
Rohit Jnagal 6274d845b9 Merge pull request #8931 from dchen1107/clean 
Fix the race when monit is used to monitor services which are also
 2015-05-29 11:23:21 -07:00
Rohit Jnagal 50b9d6284a Merge pull request #8681 from vmarmol/system-container 
Create a system container
 2015-05-29 09:41:06 -07:00
Tim Hockin ac3cc3c518 Rename PORTAL_NET all over 2015-05-28 16:10:44 -07:00
Tim Hockin 3005471100 Add new apiserver flags for clusterIP (nee portal) 
Leave old flags but marked as deprecated
 2015-05-28 16:10:44 -07:00
Dawn Chen 79a2a4f18d Fix the race when monit is used to monitor services which are also 
started at boot time via init.d at boot time.
 2015-05-28 11:58:33 -07:00
Eric Tune b76dd0e585 Merge pull request #8722 from roberthbailey/dead-flags-salt 
Remove deprecated nodecontroller flags from the salt configuration.
 2015-05-27 08:22:26 -07:00
Victor Marmol c97dda068d Create a /system system container in Debian. 2015-05-26 20:52:09 -07:00
Saad Ali fae1636eda Merge pull request #8586 from vmarmol/use-root-containers 
Run Docker containers as top-level containers in Debian.
 2015-05-26 18:44:36 -07:00
Saad Ali bed9f826d3 Merge pull request #7435 from jsafrane/devel/volume-tests 
V2: Add e2e tests for NFS and Gluster
 2015-05-26 17:49:41 -07:00
Robert Bailey e46b5641ae Remove deprecated flags from the salt configuration. 2015-05-26 12:36:09 -07:00
Jan Safranek 20004e0c16 Add e2e tests for Gluster and NFS tests. 
- add appropriate server containers into contrib/for-tests/volumes-tester
- the tests are off by default (they need kubelet --allow_privileged=True)
  - enable by 'go run hack/e2e.go ... --ginkgo.focus=Volume'
- add glusterfs tools to list of installed packages on each node
 2015-05-25 12:02:41 +02:00
CJ Cullen d6e0aedec1 Re-add the cluster_name flag that the ServiceController and RouteController need. 2015-05-22 16:31:22 -07:00
Victor Marmol 656be14e84 Run Docker containers as top-level containers in Debian. 
Part of #8215
 2015-05-22 13:27:25 -07:00
Dawn Chen 677a4aa1a7 Merge pull request #8164 from cjcullen/cloudprovider 
Route creation reconciler loop.
 2015-05-22 12:27:50 -07:00
Dawn Chen 626d25d50e Initial cpu limit for fluentd pods (file based). 2015-05-21 23:44:26 -07:00
Dawn Chen 456262c43c Merge pull request #8475 from dchen1107/clean 
Create default LimitRange object for cluster: 100m cpu.share per container
 2015-05-21 09:14:20 -07:00
CJ Cullen bf646abf8d Revert "Revert "Modify nodes to register directly with the master."" 
This reverts commit c53786ab31.
 2015-05-20 14:21:03 -07:00
Quinton Hoole c53786ab31 Revert "Modify nodes to register directly with the master." 2015-05-20 13:47:51 -07:00
Satnam Singh 32842b4d22 Update Fluentd GCP image 2015-05-19 16:12:50 -07:00
Dawn Chen 061155c1eb Create LimitRange object for cluster before addons service 2015-05-19 10:23:41 -07:00
Dawn Chen 55501a6314 Have default LimitRange created for cluster: 100m cpu.share per container 2015-05-19 10:23:40 -07:00
Robert Bailey 8e356f8439 Configure the cloud provider for the kubelet. 2015-05-19 09:55:07 -07:00
Robert Bailey 01467e0bb8 Modify nodes to register directly with the master. 
- Delete nodes when they are no longer ready and don't exist in the
cloud provider.
 - Label each node with it's hostname.
 - Add flag to skip node registration.
 - Add a test for registering an existing node.
 2015-05-19 09:55:07 -07:00
Jeff Lowdermilk 553f9f822b Add ga-beacon analytics to gendocs scripts 
hack/run-gendocs.sh puts ga-beacon analytics link into all md files,
hack/verify-gendocs.sh verifies presence of link.
 2015-05-15 18:56:38 -07:00
Daniel Smith ce4b54ec70 Merge pull request #8209 from krousey/v1beta1_cluster 
Removing some v1beta1 uses in cluster/
 2015-05-15 14:56:41 -07:00
Kris Rousey 98c457c397 Updating /cluster to use v1beta 3 specs, and change a lot of polling to 
healthz instead of api endpoints.
 2015-05-15 14:17:55 -07:00
Victor Marmol d3c6fb0d6a Merge pull request #8275 from dchen1107/clean 
Install monit_watcher as a cron job (1m) to check if monit is running,
 2015-05-15 08:02:55 -07:00
Dawn Chen e6c159eda2 Install monit_watcher as a cron job (1m) to check if monit is running, 
and oom protect monit processes.
 2015-05-14 15:19:11 -07:00
Rohit Jnagal e4c98a05ea Merge pull request #8182 from GoogleCloudPlatform/revert-7863-etcd_maxprocs 
Revert "Set GOMAXPROCS for etcd"
 2015-05-14 11:19:56 -07:00
Victor Marmol 5e7a7b9206 Merge pull request #8241 from gmarek/remove_name 
Remove unused ClusterName from NodeController
 2015-05-14 09:49:34 -07:00
Victor Marmol 2b1b85468a Merge pull request #7330 from chrismoos/volume_format_script_updates 
Add safe_format_and_mount to hyperkube image.
 2015-05-14 09:17:20 -07:00
gmarek 8a4717d3f5 Remove unused ClusterName from NodeController 2015-05-14 18:01:23 +02:00
Dawn Chen 309a157665 Merge pull request #7984 from cjcullen/kubelet 
Kubelet configure cbr0 instead of configure-vm.sh
 2015-05-13 17:32:52 -07:00
Yu-Ju Hong ad83197c63 Merge pull request #8187 from satnam6502/nosecret 
Remove the use of secrets from node level logging agents
 2015-05-13 11:12:08 -07:00
Jeff Lowdermilk f8ebc4e21e Merge pull request #8104 from roberthbailey/kubelet-using-kubeconfig 
Replace the auth config file with a kubeconfig file when starting the kubelet on GCE.
 2015-05-13 11:09:27 -07:00
Dawn Chen e32daf4229 Monit watch kubelet and kube-proxy on master node too. 2015-05-13 10:36:00 -07:00
Satnam Singh 53ec5e38c7 Remove the use of secrets from node level logging agents 2015-05-13 10:11:07 -07:00
Filip Grzadkowski eecd7b8c0f Revert "Set GOMAXPROCS for etcd" 2015-05-13 17:53:04 +02:00
Robert Bailey c47b9178b4 Replace the auth config file with a kubeconfig file when 
starting the kubelet on GCE.
 2015-05-13 01:03:28 -07:00
CJ Cullen 31ea7d1295 Put cbr0-modifying stuff behind a flag. Address some other comments. 2015-05-12 23:00:28 -07:00
Alex Robinson a98d883134 Merge pull request #8121 from satnam6502/fluentd-gcp 
Convert node level logging to Cloud Logging to use token-system-logging
 2015-05-12 14:26:46 -07:00
Alex Robinson 96cb4360fa Merge pull request #8120 from satnam6502/fluentd-es 
Convert nodel level logging to ES to use token-system-logging
 2015-05-12 14:26:28 -07:00
Nikhil Jindal d75bd8bf2a Merge pull request #7101 from liggitt/service_account 
ServiceAccounts
 2015-05-12 10:23:41 -07:00
Satnam Singh ade18e4ff3 Conver node level logging to Cloud Logging to use token-system-logging 2015-05-12 10:17:45 -07:00
Satnam Singh f9af0658fa Convert nodel level logging to ES to use token-system-logging 2015-05-12 10:07:49 -07:00
Alex Robinson e2b7ef8d2c Merge pull request #8078 from satnam6502/fluentd-gcp 
Convert Fluentd to Cloud Logging pod specs to YAML
 2015-05-11 16:55:14 -07:00
Satnam Singh e246685468 Convert Fluentd to Cloud Logging pod specs to YAML 2015-05-11 14:55:46 -07:00
Satnam Singh 2f5ba28a17 Switch Fluentd to ES manifest back to YAML 2015-05-11 14:37:41 -07:00
Jordan Liggitt db1f0dc906 JWT token generation/verification 2015-05-11 17:18:06 -04:00
Robert Bailey 6c42cb154b Stop copying certs into /usr/share/nginx/ since nothing relies 
on that location any longer.
 2015-05-11 11:44:19 -07:00
Wojciech Tyczynski 600b00f2b1 Merge pull request #7863 from fgrzadkowski/etcd_maxprocs 
Set GOMAXPROCS for etcd
 2015-05-07 10:09:29 +02:00
Filip Grzadkowski 7e8bde53dd Set GOMAXPROCS for etcd 2015-05-07 08:11:39 +02:00
CJ Cullen f0c26052eb Fix controller-manager manifest for providers that don't specify CLUSTER_IP_RANGE 2015-05-06 17:50:04 -07:00
Maxwell Forbes 7426b533df Merge pull request #7862 from cjcullen/cbr0 
Remove restriction that cluster-cidr be a class-b
 2015-05-06 15:46:57 -07:00
saadali 4569de7a46 Enable Google Cloud Monitoring and Google Cloud Logging instead of 
Influxdb for Google Compute Engine deployments.
 2015-05-06 15:23:40 -07:00
CJ Cullen fbd125e4e2 Remove restriction that cluster-cidr be a class-b 2015-05-06 15:01:13 -07:00
Mark Lamourine b7c1b7eed2 Added port 6443 to kube-proxy default IP address for api-server 
added  api_servers_with_port variable and settings.

removed extra port string

split azure api_server host and port out
 2015-05-06 12:43:24 +00:00
Robert Bailey 357df12c02 Set allocate_node_cidrs to be blank by default. 2015-05-05 23:41:30 -07:00
Jerzy Szczepkowski e967ffd522 Added flag to set cluster class B network address for pods, add flag to disable allocation CIDRs for Pods. Fixed synchornization bug in NodeController registerNodes(). 2015-05-05 16:10:43 -07:00
Jeff Lowdermilk 87cdc3f032 Merge pull request #7672 from eparis/boilerplate-python 
Check license boilerplate for python files
 2015-05-05 09:23:36 -07:00
Chris Moos 1b814ffd2c Add safe_format_and_mount to hyperkube image. 
* Add volume format script into hyperkube image.
* Fix issue with format script on non-redhat platforms.
 2015-05-04 21:25:39 -07:00
Zach Loafman 2b3e52c230 Use built-in ContainerVM Docker version rather than installing lxc-docker 2015-05-04 16:33:00 -07:00
Eric Paris f416289a85 update all python with boilerplate 2015-05-04 18:37:47 -04:00
Robert Bailey e3ff2dc02d Merge pull request #7678 from justinsb/aws_api_on_443 
AWS: Change apiserver to listen on 443 directly, not through nginx
 2015-05-04 13:52:57 -07:00
Daniel Smith fbe3ec7513 Merge pull request #7316 from ArtfulCoder/master_components_logs 
logs for master components
 2015-05-04 11:20:03 -07:00
Justin Santa Barbara 57f7b658bb AWS: Change apiserver to listen on 443 directly, not through nginx 
Mirrors changes in GCE.  I think the same changes will be needed for vagrant.
 2015-05-02 16:59:04 -04:00
Eric Paris 6b3a6e6b98 Make copyright ownership statement generic 
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
 2015-05-01 17:49:56 -04:00
Satnam Singh 941a457851 Trim Fleuntd tag for Cloud Logging 2015-04-30 13:39:35 -07:00
Satnam Singh e65f0aafd5 Trim cluster log tags to pod name and container name 2015-04-29 18:24:13 -07:00
Abhishek Shah 96439b5a52 logs for master components 2015-04-29 09:51:09 -07:00
Robert Bailey 8206aa9eac Salt configuration to add basic auth to GCE. 2015-04-28 14:07:54 -07:00
Satnam Singh 4a0cc7905d Convert node level logging agents to v1beta3 2015-04-27 17:21:42 -07:00
CJ Cullen 39c5bf363b Merge pull request #7303 from erictune/kube_env3 
kube-proxy uses token to access port 443 of apiserver
 2015-04-27 14:33:53 -07:00
derekwaynecarr 81e9395533 Fix vagrant regression due to #7326 2015-04-27 17:18:30 -04:00
Eric Tune 9044177bb6 Generate a token for kube-proxy. 
Tested on GCE.
Includes untested modifications for AWS and Vagrant.
No changes for any other distros.
Probably will work on other up-to-date providers
but beware.  Symptom would be that service proxying
stops working.

 1. Generates a token kube-proxy in AWS, GCE, and Vagrant setup scripts.
 1. Distributes the token via salt-overlay, and salt to /var/lib/kube-proxy/kubeconfig
 1. Changes kube-proxy args:
   - use the --kubeconfig argument
   - changes --master argument from http://MASTER:7080 to https://MASTER
     - http -> https
     - explicit port 7080 -> implied 443

Possible ways this might break other distros:

Mitigation: there is an default empty kubeconfig file.
If the distro does not populate the salt-overlay, then
it should get the empty, which parses to an empty
object, which, combined with the --master argument,
should still work.

Mitigation:
  - azure: Special case to use 7080 in
  - rackspace: way out of date, so don't care.
  - vsphere: way out of date, so don't care.
  - other distros: not using salt.
 2015-04-27 08:59:57 -07:00
Robert Bailey 846ffcff83 Pass the CA root cert into the apiserver so that the apiserver will 
perform client cert checks for authorization. Only enable on GCE where
the apiserver is terminating SSL connections from end users.
 2015-04-24 22:01:56 -07:00
Nikhil Jindal 84cb48be11 Merge pull request #7246 from satnam6502/es 
Convert Elasticsearch logging to v1beta3 and de-salt
 2015-04-24 09:21:41 -07:00
CJ Cullen 80af1c9e40 kube2sky using kubeconfig secret: take 2. Point system secrets at https://kubernetes. Override in clients that can't use DNS. 2015-04-23 18:13:16 -07:00
Satnam Singh c9b9e7651e Convert Elasticsearch logging to v1beta and de-salt 2015-04-23 13:06:15 -07:00
Dawn Chen f9156c281a Merge pull request #7123 from satnam6502/logging 
Propagate pod and container name for log files
 2015-04-23 10:13:08 -07:00
Satnam Singh 2444c1f943 Propagate pod and container name for log files 2015-04-22 15:08:51 -07:00
Dawn Chen 87e0d5da08 Merge pull request #7186 from ArtfulCoder/no_log_pod_on_master 
removed elasticsearch and fluentd-gcp pods from master
 2015-04-22 14:40:07 -07:00