Commit Graph

1879 Commits (c208c1c9a39e4cc74d30cd8c68d08650277c4449)

Author SHA1 Message Date
CJ Cullen edd419790e Hacky workaround for #9822 2015-07-06 10:02:53 -07:00
Yu-Ju Hong 8ce6fe855b Merge pull request #10712 from justinsb/always_install_socat
Salt: install socat; needed for port-forward
2015-07-06 09:58:52 -07:00
Yu-Ju Hong 83fbcba97b Merge pull request #10698 from justinsb/aws_master_sans
AWS: Configure SSL certificate alternate-names
2015-07-06 09:57:44 -07:00
Yu-Ju Hong acf848a597 Merge pull request #10552 from shauns/patch-1
Respect DNS_DOMAIN setting in AWS+CoreOS
2015-07-06 09:36:54 -07:00
Justin Santa Barbara cc68f87a7b AWS: Query by subnet-id, if we have it
If we are matching an existing subnet-id, query using that subnet-id!
2015-07-06 10:14:15 -04:00
Justin Santa Barbara 2429c7edf8 AWS: Allow callers to specify VPC_ID and SUBNET_ID
This is for people that want to run in a shared VPC/Subnet; while this should
work, we don't actively want to support it yet.  So we don't block it,
but we don't document/encourage it either!
2015-07-06 10:10:34 -04:00
Prashanth B bb6f2f7ad9 Merge pull request #10716 from justinsb/spelling
Misc (non-code) spelling fixes
2015-07-05 11:23:17 -07:00
Zach Loafman a2250d1caf Merge pull request #10597 from a-robinson/fluentd
Run fluentd on the master to collect the core master logs
2015-07-04 21:12:47 -07:00
Justin Santa Barbara fca7822800 Misc (non-code) spelling fixes 2015-07-04 10:39:37 -04:00
Alex Robinson 4bfbd5f553 Add limits to the fluentd buffer size. 2015-07-03 23:24:08 +00:00
Justin Santa Barbara 6504df77f1 Salt: install socat; needed for port-forward
port-forward needs socat on the node hosts; we technically
don't need it today on the master, but this seems the right
place to put it, and socat is a small dependency.
2015-07-03 19:12:44 -04:00
Justin Santa Barbara 25007421ba Salt: re-remove comment block
It had been removed in upstream, but had been kept by mistake here.
2015-07-03 12:43:36 -04:00
Justin Santa Barbara 600a0d6fe7 Salt: have kube-addons service depend on init file
For symmetry with systemd
2015-07-03 12:41:59 -04:00
Justin Santa Barbara a5b3c73ac4 Salt: Add service block for kube-proxy for systemd
We have the workaround for Salt's problems here, but we should still express
our intent.
2015-07-03 10:26:21 -04:00
Justin Santa Barbara 60d822435b Salt: clean daemon_args on RedHat, not systemd
I don't think it actually makes a difference based on how we're using it,
but this is now more of a precise change.
2015-07-03 10:24:32 -04:00
Justin Santa Barbara ad0293e3f3 Salt: Add more dependencies to systemd services
This may help Salt reload services correctly, although we still
need the script until Salt's bug with reloading services on systemd
is resolved.

Salt bug: https://github.com/saltstack/salt/issues/16778
2015-07-03 01:40:15 -04:00
Justin Santa Barbara 944fc1ed58 Set standard bash options in services helper script 2015-07-03 01:40:15 -04:00
Justin Santa Barbara bcd92c7522 Salt: support systemd (don't assume Redhat <=> systemd)
Also work around problems with Salt & systemd services, in particular
that Salt doesn't issue a daemon-reload.
2015-07-03 01:40:15 -04:00
Justin Santa Barbara c676c11189 AWS: Configure SSL certificate alternate-names
GCE does this in its per-provider scripts; this does the same for AWS and lets
other providers do the same; I believe kube2sky requires 10.0.0.1 as a SAN.
2015-07-03 01:18:07 -04:00
Dawn Chen 9ce11545c0 Explicitly configure master component containers and nginx with 200m each. 2015-07-02 10:46:39 -07:00
Arsen Mamikonyan 38c3bdfa45 Do not override environment variable in ubuntu defaults and ubuntu/build.sh 2015-07-02 13:10:54 +01:00
Zach Loafman 1d16be675c Merge pull request #10653 from dchen1107/resource_management
Set resource limit for addon containers
2015-07-01 19:35:28 -07:00
Dawn Chen 54531d9b55 Set memory limit (200mi) to fluentd static pod 2015-07-01 17:00:06 -07:00
Dawn Chen 6b61918b67 Set resource limit for both elasticsearch and kibana containers based on data collected by #10335 2015-07-01 16:01:09 -07:00
Zach Loafman b60c8e567f Merge pull request #10077 from timstclair/ui-server
Move dashboard UI out of the apiserver to a separate pod
2015-07-01 15:56:33 -07:00
Zach Loafman e5670c104d Merge pull request #10604 from nikhiljindal/v1
Updating scripts to use v1 instead of v1beta3
2015-07-01 15:54:17 -07:00
Zach Loafman b27a8e1d90 Merge pull request #10606 from nikhiljindal/testsToV1
Update tests/examples to v1
2015-07-01 15:53:54 -07:00
Zach Loafman e3e024da10 Merge pull request #10614 from justinsb/aws_ssh_fingeprint
AWS: Use the SSH key fingerprint, not the AWS fingerprint
2015-07-01 15:53:31 -07:00
Dawn Chen ce520dd6e8 Set resource limit for skydns containers based on data collected by #10335 2015-07-01 14:47:29 -07:00
Dawn Chen 4f2d22263e Set resource limit for both heapster and influxdb container based on data collected
by #10335. Please noted that both influxdb and heapster could be oom-killed due to
memory leakage here.
2015-07-01 14:39:10 -07:00
nikhiljindal 274792d7bb Stop exposing v1beta3 by default 2015-07-01 14:38:02 -07:00
Tim St. Clair b6b2d6df42 Add kube-ui cluster addon for serving k8s dashboard UI.
Changes include:
- Add kube-ui binary for serving static dashboard UI
- Add kube-ui docker image, replication controller, and service
- Make the kube-ui a cluster-addon (enabled by default)
- Split the compiled pkg/ui/datafile.go into separate dashboard and swagger packages
- Update docs to reflect changes
2015-07-01 14:21:47 -07:00
Zach Loafman 30cc467159 Merge pull request #10634 from mikedanese/fix-ca-logs
fix heapster google configs so that heapster has a CA cert for googleapis
2015-07-01 14:14:06 -07:00
Alex Robinson e5ea6ae854 Run fluentd on the master node by default.
This involves adding the logging-write scope to the master when running on GCE.
2015-07-01 20:07:52 +00:00
Alex Robinson 8855371763 Configure fluentd to collect additional log files, including master log files.
This also merges the output blocks together because there's no compelling
reason to have a separate output block for each input.
2015-07-01 20:07:47 +00:00
Marek Biskup 8df3a9cae8 namespaces in addon update 2015-07-01 21:31:52 +02:00
Mike Danese 6ecddd9290 fix heapster configs so that heapster has a CA cert for googleapis 2015-07-01 11:26:30 -07:00
Zach Loafman 3094c1624b Merge pull request #10492 from derekwaynecarr/add_watch_service_file
Fix Vagrant kube-up - missed file watch on systemd stops kubelet starting on initial kube-up
2015-07-01 09:49:59 -07:00
Zach Loafman bd12aefdf2 Merge pull request #10237 from marekbiskup/addon-update-do-not-retry-too-long
addon updater should not retry too many times - specs may be invalid
2015-07-01 08:52:02 -07:00
Zach Loafman 502103cdc6 Merge pull request #10453 from satnam6502/fix-es
Change port names to avoid validation failure
2015-07-01 08:30:28 -07:00
Marek Biskup 7873e252f0 addon updater should not retry too many times because specs may be invalid 2015-07-01 16:22:32 +02:00
derekwaynecarr de78898170 Missing file watch on systemd stops kubelet starting on kube-up 2015-07-01 09:59:26 -04:00
Zach Loafman b83236ee7a Merge pull request #10568 from derekwaynecarr/fix_vagrant_kube_proxy
Missed update to kube-proxy when removing nginx on vagrant
2015-07-01 06:42:00 -07:00
Zach Loafman ffeb982064 Merge pull request #10528 from dchen1107/cleanup
Persistent influxdb data to directory on local host.
2015-07-01 06:41:24 -07:00
Justin Santa Barbara 2a8d46864b AWS: Use the SSH key fingerprint, not the AWS fingerprint
This is unfortunate, because it means we have two fingerprints,
although arguably the OpenSSH key fingerprint is much more common.
However, the OSX Mavericks version of ssh-keygen can't compute
the AWS fingerprint correctly (e.g. https://www.netmeister.org/blog/ssh2pkcs8.html)

So we work on OSX Mavericks, we use the more common OpenSSH fingerprint.
2015-07-01 04:10:48 -07:00
nikhiljindal 2e9e46dd08 Updating scripts to use v1 instead of v1beta3 2015-07-01 00:23:16 -07:00
Dawn Chen ff17623742 Persistent influxdb data to directory on local host. 2015-06-30 22:08:40 -07:00
Robert Bailey fedddee157 Install the kubectl binary on nodes in addition to the master. 2015-06-30 16:52:17 -07:00
derekwaynecarr 2cc869b1c5 Missed update to kube-proxy when removing nginx on vagrant 2015-06-30 15:42:52 -04:00
Dawn Chen e55cd709a1 Removed cluster/saltbase/salt/_states/container_bridge.py since it is useless now. 2015-06-30 11:00:41 -07:00
Satnam Singh 4e58e001da Change port names to avoid validation failure 2015-06-30 10:56:20 -07:00
Shaun Stanworth 74bb1b349a Respect DNS_DOMAIN setting in AWS+CoreOS
Without this change, CoreOS minion nodes are unable to perform short-name DNS lookups by default, as the default value for `DNS_DOMAIN` is `cluster.local`, which doesn't match the hard-coded value here.
2015-06-30 17:48:15 +01:00
Zach Loafman f21b6b89d1 Fix issues mentioned in #10520 2015-06-30 06:51:10 -07:00
Daniel Smith dcd91666b9 wait until a token shows up to start addons 2015-06-29 18:41:12 -07:00
Alex Robinson af533b2b2a Merge pull request #10275 from ddysher/ubuntu-flannel
Ubuntu cluster: run flannel on master
2015-06-29 16:30:31 -07:00
Alex Robinson ac917aa36a Merge pull request #10402 from justinsb/docker_pkg_require_download
Add explicit dependency of docker pkg on the deb download
2015-06-29 16:10:53 -07:00
Alex Robinson 799c0a09e0 Merge pull request #10369 from mikedanese/heapster-in-cluster-config
bump heapster addon version to use inClusterConfig
2015-06-29 10:56:50 -07:00
Justin Santa Barbara e29e9f0033 Add explicit dependency of docker pkg on the deb download
Salt ordering continues to surprise me.  I saw them execute
out of order, though I don't know why.  Adding an explicit
dependency to prevent out-of-order execution.
2015-06-28 23:51:12 -04:00
Robert Bailey 1c0b765df6 Merge pull request #10359 from justinsb/aws_fix_options
Fix AWS options doc
2015-06-26 23:16:51 -07:00
Robert Bailey e6f14a21ce Merge pull request #10403 from justinsb/ebs-for-master-data-2
AWS: Use persistent disk on master
2015-06-26 21:52:10 -07:00
Robert Bailey ad12c98e6d Merge pull request #10150 from thockin/kube2sky-with-token-fix
Make DNS not need its own token
2015-06-26 18:17:03 -07:00
Robert Bailey 017a43702a Merge pull request #10400 from justinsb/fix_10379
Don't make kubelet systemd service depend on Docker
2015-06-26 17:12:51 -07:00
Dawn Chen 1a4d3ef680 Revert "Set resource limit for both heapster and influxdb container based on" 2015-06-26 15:45:26 -07:00
Mike Danese bfc80095d4 bump heapster addon version to use inClusterConfig 2015-06-26 15:43:32 -07:00
Robert Bailey ffb846a284 Merge pull request #10375 from eparis/enable_node_monitoring
Remove unused enable_node_monitoring
2015-06-26 12:58:14 -07:00
Robert Bailey 91589143a3 Merge pull request #10370 from mikedanese/no-more-machines
remove --machines and related deprecated flags from code and docs
2015-06-26 10:54:01 -07:00
Robert Bailey 0048eae8eb Merge pull request #9965 from stevekuznetsov/skuznets/allow-https
Allowing for HTTPS Probes
2015-06-26 10:43:37 -07:00
Justin Santa Barbara a3cb84fa56 AWS: Wait for disk to be attached in setup-master-pd.sh 2015-06-26 11:52:45 -04:00
Justin Santa Barbara 6e09cd3ffd AWS: Create/reuse master pd directly 2015-06-26 11:52:45 -04:00
Justin Santa Barbara 0a4f03f235 AWS: Mount ephemeral on /mnt/ephemeral
If we're going to have a persistent disk on /mnt/master-pd, it seems risky
sometimes to have /mnt be a mounted volume.

A new consistent approach: we mount volumes under /mnt/<name>.
2015-06-26 11:52:45 -04:00
Justin Santa Barbara 7059f379a4 AWS: Mount persistent disk as sdb on master 2015-06-26 11:52:44 -04:00
Adam Sunderland 66e0c5432f Use EBS for Master Data
Signed-off-by: Adam Sunderland <iterion@gmail.com>
2015-06-26 11:52:44 -04:00
Justin Santa Barbara 3ef028148d Fix AWS options doc
Fix formatting, and ZONE should have been KUBE_AWS_ZONE.
2015-06-26 11:16:44 -04:00
Justin Santa Barbara 54d3ac92ea Don't make kubelet systemd service depend on Docker
Fixes #10379
2015-06-26 11:03:09 -04:00
Mike Danese 1e130e0794 remove --machines from code and docs 2015-06-25 18:29:11 -07:00
Eric Paris 58df58f3d7 Remove unused enable_node_monitoring option
Back in 1a7f7245e7 we dropped the one
place this was used, but left all of the variable and definitions and
garbage around cluster/
2015-06-25 20:57:56 -04:00
Tim Hockin 6757a1ce94 Use the svc.cluster.local name for DNS health checks 2015-06-25 17:11:53 -07:00
Tim Hockin 07e75c1dec Use v1 API 2015-06-25 17:04:47 -07:00
Tim Hockin 1ce7f1b5be Stop using special tokens for DNS 2015-06-25 17:04:47 -07:00
Tim Hockin 2b4da35499 Make kube2sky fall back on service accounts
Service accounts are as yet unverified (no CA cert) but at least it will work.
2015-06-25 17:04:47 -07:00
Tim Hockin 88ce0ad8e9 Clean up Changelog
- sort newest-first
- add missing entry
- format consistently
2015-06-25 17:04:47 -07:00
Brendan Burns 74806a1047 Merge pull request #10296 from thockin/eol-registry-cache
EOL Google's registry caching mirror
2015-06-25 14:52:27 -07:00
Maxwell Forbes bc1930927d Merge pull request #10347 from justinsb/vagrant_no_cidr_on_master
Salt: don't assume that master => cbr-cidr
2015-06-25 10:23:59 -07:00
Maxwell Forbes 655179dcfb Merge pull request #10264 from mikedanese/ca-token
add ca cert to token controller and all service accounts
2015-06-25 09:56:35 -07:00
Steve Kuznetsov d581d1f6c0 Fixed typo in gce-specific kube-up script 2015-06-25 12:51:34 -04:00
Justin Santa Barbara a0ae1d90ba Salt: don't assume that master => cbr-cidr
In particular, this is required for vagrant
2015-06-25 09:17:00 -04:00
Brendan Burns d2334d60c8 Merge pull request #10328 from dchen1107/cleanup
Add dependencies on docker and kubelet service when copying master co…
2015-06-24 21:32:35 -07:00
Dawn Chen e7d217d941 Add dependencies on docker and kubelet service when copying master components manifests
to /etc/kubernetes/manifest
2015-06-24 21:15:08 -07:00
Maxwell Forbes 3afda5d566 Merge pull request #10312 from dchen1107/cleanup
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Mike Danese 56bde3342a add ca to token controller and all service accounts 2015-06-24 15:10:20 -07:00
Maxwell Forbes 244c2f7b90 Merge pull request #10236 from derekwaynecarr/remove_nginx
Remove nginx from vagrant configuration
2015-06-24 13:21:59 -07:00
Dawn Chen 6ddfa512de Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
This reverts commit fd0a95dd12.
2015-06-24 11:10:10 -07:00
Tim Hockin 280f99afd9 EOL our registry caching mirror
Docker's v1 registry has gotten slower and slower, and they have no
interest in fixing it.  Using a mirror forces v1 mode.  Measurements
show that v1 with our mirror is slower than v2 with docker's registry in
just about all metrics.
2015-06-24 09:56:59 -07:00
Piotr Szczesniak fd0a95dd12 Revert "Fix the race between configuring cbr0 and restarting static pods" 2015-06-24 09:56:49 +02:00
Deyuan Deng 6f765708ad Ubuntu cluster: properly formatting shell scripts 2015-06-23 23:07:23 -04:00
Deyuan Deng 09a274a7a5 Ubuntu cluster: run flannel on master 2015-06-23 23:07:17 -04:00
Jeff Lowdermilk 50d50a3cb8 Merge pull request #10211 from dchen1107/cleanup
Fix the race between configuring cbr0 and restarting static pods
2015-06-23 17:09:01 -07:00
Dawn Chen 9dbe6fe4e4 Added more comments. 2015-06-23 16:28:41 -07:00
Jeff Lowdermilk c1a7055701 Merge pull request #10260 from dchen1107/clean
Set resource limit for both heapster and influxdb container based on
2015-06-23 15:57:53 -07:00
Dawn Chen e0186c3bd0 Set resource limit for both heapster and influxdb container based on
data collected by #5880
2015-06-23 14:28:51 -07:00