Commit Graph

414 Commits (c8591bd32356f440aeedd2babb8daf40940a5128)

Author SHA1 Message Date
Joe Beda 06d838ffb1 Merge pull request #2369 from jbeda/vagrant-fix
Vagrant fixes
2014-11-14 16:43:06 -08:00
Brendan Burns c2485a4056 Merge pull request #2147 from justinsb/ipv6
Initial ipv6 / iptables work
2014-11-14 10:34:37 -08:00
Joe Beda 5a0159ea00 Get Vagrant to start using TLS client certs.
Also fix up cert generation. It was failing during the first salt highstate when trying to chown the certs as the apiserver user didn't exist yet.  Fix this by creating a 'kube-cert' group and chgrping the files to that.  Then make the apiserver a member of that group.

Fixes #2365
Fixes #2368
2014-11-13 22:16:45 -08:00
Eric Paris a99c3c7963 rename kube server binaries to kube-
apiserver becomes kube-apiserver
controller-manager -> kube-controller-manager
scheduler and proxy similarly.

Only thing I promise is that right now hack/build-go.sh and
build/release.sh exit with 0.  That's it.  Who knows if any of this
actually works....
2014-11-13 20:08:26 -05:00
Richard Larocque 63d6e7cd9f make-cert.sh: Create directory before writing cert
Adds a "mkdir -p" to the make-cert.sh.  This fixes an issue where the
script could fail if /srv/kubernetes did not exist previously.
2014-11-13 16:39:09 -08:00
Eric Tune 19ec2234f9 Make server certs accessible to apiserver user. 2014-11-13 13:02:48 -08:00
Joe Beda ee2f030623 Give the API server access to TLS certs.
Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).
2014-11-12 18:14:24 -08:00
Brendan Burns 62bd634c07 Update the AWS config. 2014-11-10 13:33:43 -08:00
Brendan Burns bdc4ab62c7 Merge pull request #2245 from jbeda/gcs-deps
Start pulling external dependencies from GCS where possible
2014-11-10 11:00:41 -08:00
bgrant0607 6c70227a2e Merge pull request #2249 from satnam6502/salt
Make Docker container dirs writable for pos file
2014-11-08 11:56:48 -08:00
Satnam Singh 9fac9949b2 Make Docker container dirs writable for pos file 2014-11-07 17:42:48 -08:00
Joe Beda a839599883 Install client tools on master.
We now include kubecfg and kubectl in "server binary" tar and place them into /usr/local/bin on the master.
2014-11-07 17:13:18 -08:00
Joe Beda d033dfcc2b Load etcd tarball from GCS.
Also fix up comment about how to cache docker debs.
2014-11-07 13:43:07 -08:00
Justin SB ddaa716de1 Allow specification of docker daemon args 2014-11-04 14:12:59 -08:00
Justin SB 8e70a664e8 Extend container_bridge.py (salt lib) to support IPv6 2014-11-04 06:33:34 -08:00
Brendan Burns f44bb9d673 Merge pull request #2104 from jbeda/gcs-docker-install
Get docker deb from GCS
2014-10-31 21:15:06 -07:00
Joe Beda 29455398e6 Get docker deb from GCS.
Also lock to 1.3.0 due to issues in 1.3.1 (docker/docker#8889)
2014-10-31 16:27:00 -07:00
Deyuan Deng 019b7fc74c Separate minion controller from master. 2014-10-30 20:24:15 -04:00
Pieter Noordhuis 918c8e2b96 Limit GCE specific mods to GCE 2014-10-29 12:39:07 -07:00
Pieter Noordhuis 1152471db7 Split reactor files
There now are reactor files to run highstate on:

* New nodes only
* Master nodes
* Minion nodes
2014-10-29 11:30:09 -07:00
Pieter Noordhuis e90f98a52c Make vSphere scripts work for binary deploys
Fixes #1732.
2014-10-29 11:30:08 -07:00
Brendan Burns c4d6f3a1cd Fix the etcd md5 since they uploaded a new binary. 2014-10-29 11:18:37 -07:00
Joe Beda 8100c063b8 Turn on auto security updates for debian based systems.
Fixes #2008
2014-10-27 13:49:51 -07:00
Joe Beda 25b1eea116 Merge pull request #1832 from doublerr/rackspace_switch_to_coreos
Rackspace - Switch to CoreOS for standard cluster
2014-10-22 09:30:55 -07:00
derekwaynecarr b836e31cf4 Fixup docker configuration for sdn 2014-10-22 11:32:38 -04:00
Satnam Singh 39212f5e2e Flunentd to GCP logging node level configuration 2014-10-20 18:05:00 -07:00
Satnam Singh b7722a631d Adjust test in salt file to use boolean value 2014-10-20 15:52:28 -07:00
derekwaynecarr 0d86be680b Do not require a writeable /vagrant 2014-10-20 16:59:15 -04:00
Ryan Richard a8bae68865 Rackspace - Switch to CoreOS for standard cluster
The Rackspace setup for Kubernetes now leverages CoreOS instead of Ubuntu. We've dropped Salt completely for our cluster.
2014-10-20 12:14:20 -05:00
Dawn Chen baf3bea79a Set --ip-masq to false 2014-10-16 12:17:18 -07:00
Tim Hockin e907011111 Core support for ip-per-service 2014-10-16 08:36:47 -07:00
Joe Beda 9bb20b41ee Break out dynamic salt files to enable clean kube-push.
This lets us blow away salt files and replace them with a new version while keeping a tree of "overlay" files that are cluster specific and generated at cluster up time.

Fixes #1783
2014-10-14 15:01:43 -07:00
Joe Beda 96c1bc17ca Set shell options for reliability.
Tweak a few other small things in our shell scripts.
2014-10-10 12:33:36 -07:00
Joe Beda d43a6ec5a3 Standardize how we refer to the kubernetes root.
Now use $KUBE_ROOT as the variable pretty much everywhere.
2014-10-10 12:33:36 -07:00
Joe Beda 881cf80182 Vagrant now using pre-built binaries. 2014-10-10 12:30:12 -07:00
Joe Beda 15cd6f07d6 Use binary releases for cluster push scripts.
This is for GCE right now.  Other clouds/clusters are probably broken.
2014-10-10 12:30:11 -07:00
Joe Beda 9a8807b033 get.docker.com is now the preferred place to get Docker
Update salt configs
2014-10-09 12:31:53 -07:00
Joe Beda 0de2ef496e Merge pull request #1595 from thockin/flageq
Use '=' for flags or else parsing gets confused sometimes
2014-10-06 13:14:35 -07:00
Tim Hockin 440d14c239 Use '=' for flags or else parsing gets confused sometimes 2014-10-06 12:25:56 -07:00
Deyuan Deng 253907ab04 Add etcdctl in master 2014-10-04 11:26:01 -04:00
Brendan Burns 77d13db307 Fix the vagrant build. 2014-09-26 14:02:56 -07:00
Joe Beda b3e7fd4209 Be more robust in how we pass flags.
Using the '=' form of a flag makes things better if we have an empty list of machines.
2014-09-25 11:52:18 -07:00
Brendan Burns cafd20b233 Complete the mitm prevention on GCE. 2014-09-23 16:51:04 -07:00
Brendan Burns d38b498b0f Add a script for generating CA signed certs, and a client cert. 2014-09-23 11:38:29 -07:00
Brendan Burns bb829ce8f6 fix salt. 2014-09-17 17:13:41 -07:00
Brendan Burns ffa4500e09 Add a salt flag for enabling privileged containers. 2014-09-17 14:25:28 -07:00
brendandburns c74060d465 Merge pull request #1282 from derekwaynecarr/add_vagrant_to_docker_group
Add vagrant user to docker group
2014-09-15 17:07:02 -07:00
Brendan Burns 61e90fdaff Fix the logrotate cron job. 2014-09-11 20:56:31 -07:00
Brendan Burns 76c0ce374d Start log rolling for docker containers too. Fix logrotate for other daemons. 2014-09-11 15:47:06 -07:00
derekwaynecarr 63bd987561 Add vagrant user to docker group 2014-09-11 16:48:17 -04:00
Brendan Burns 686c3bec84 Add initial logrotate support. 2014-09-09 13:35:06 -07:00
derekwaynecarr f42fcef620 Add explicit flag to use openvswitch 2014-09-08 15:31:22 -04:00
Brendan Burns e8afebf1e1 Update nginx to support websockets and not buffer watches. 2014-09-05 21:46:01 -07:00
Brendan Burns 4a934427db Exclude vendored etcd. 2014-09-04 12:05:34 -07:00
Brendan Burns 3864cf453a Fix travis and cluster installs. 2014-09-04 10:31:09 -07:00
Joe Beda 847c87faa8 Fix docker start after minion reboot on GCE/debian
Uncomment docker service state as it should no longer be affected by race bug in docker init.d start script.  Also make sure that the docker service state depends on the cbr state.

Fixes #802
2014-09-03 11:11:28 -07:00
Ryan Richard 0b50244c72 workaround lack of jinja2.7 support 2014-09-02 19:05:56 -05:00
Joe Beda 2ac0770694 Make salt configs work with Jinja 2.6.
Fixes #1089
2014-08-28 16:54:14 -07:00
Ryan Richard 2565164a8d Add Rackspace support for dev-build-and-up 2014-08-28 10:36:58 -05:00
Clayton Coleman f5a835b067 Merge pull request #978 from rajatchopra/podnet
Add IP per pod with Open vSwitch in Vagrant
2014-08-26 19:29:42 -04:00
Joe Beda 5722eba780 Propagate version info into salt config and use to build.
Fixes #1043.
2014-08-26 16:17:06 -07:00
Rajat Chopra 2dd57898d4 add ip per pod across vagrant minions 2014-08-26 11:29:35 -07:00
Joe Beda 831a0d7e50 Merge pull request #1027 from MSOpenTech/azure-scripts
Add salt configuration for openvpn for use on Azure.
2014-08-26 11:04:03 -07:00
Jeff Mendoza adace2ccf5 Remove commented lines from openvpn config files. 2014-08-25 16:29:32 -07:00
Pieter Noordhuis 65bb90ffef Update apiserver defaults template
Set "cloud" grain to "vsphere".

The "minion_ips" grain doesn't seem to be used anymore.
2014-08-25 15:20:19 -07:00
Jeff Mendoza 13989794f8 Add salt configuration for openvpn for use on Azure.
Sets up openvpn for container to container communication. Azure
deploy scripts create certs used for openvpn conneciton. Salt
installs and configures openvpn.
2014-08-25 14:56:54 -07:00
Pieter Noordhuis c535d6d30b Incorporate comments 2014-08-25 10:01:25 -07:00
Pieter Noordhuis ad7f131a5b Deploy k8s to vSphere 2014-08-24 20:27:05 -07:00
Daniel Smith 79f60da6c4 add salt files to make scheduler run 2014-08-20 15:32:49 -07:00
Brendan Burns dc1de2bc0e Remove a duplicate flag. 2014-08-19 09:48:41 -07:00
brendandburns bd53643647 Merge pull request #851 from derekwaynecarr/cloud_provider
Vagrant supports a cloud provider
2014-08-18 18:23:49 -07:00
brendandburns 2d84987c11 Merge pull request #885 from thockin/net
Proper ip-per-pod on GCE.
2014-08-18 18:22:05 -07:00
Brendan Burns a779102924 Fix the installation of nsinit 2014-08-18 16:40:12 -07:00
Brendan Burns 0caae9c1d4 Add a in container exec based health check. 2014-08-18 12:00:11 -07:00
derekwaynecarr 8df21b84a1 Add vagrant cloudprovider 2014-08-18 14:30:31 -04:00
Tim Hockin 03ade159c3 Proper ip-per-pod on GCE.
Back out the second iptables rule, now that we know what the problem was - we
need to open a firewal rule on each minion.
2014-08-15 15:54:20 -07:00
derekwaynecarr 10be80295c apiserver listen on 0.0.0.0 in vagrant 2014-08-14 10:02:04 -04:00
Joe Beda 70c6c75ae3 Fix release and salt scripts for godep 2014-08-13 15:57:41 -07:00
derekwaynecarr 7db42a7b73 Fix nsinit on Vagrant 2014-08-12 16:35:01 -04:00
derekwaynecarr ba7345d967 Do not always look for latest pkg 2014-08-12 16:10:59 -04:00
derekwaynecarr c8c5435656 Enforce --address flag is set on all Linux flavors 2014-08-07 17:54:49 -05:00
Tim Hockin 7e9c142392 Remove duplicate -config param
This is duplicated in cluster/saltbase/salt/kubelet/default
cluster/saltbase/salt/kubelet/initd
2014-08-07 10:53:08 -07:00
Victor Marmol c501e09d14 Merge pull request #820 from brendandburns/nsenter
Install nsinit that is vendored into docker.
2014-08-07 08:36:49 -07:00
Clayton Coleman 4123a44653 Merge pull request #819 from thockin/restarts
Disable docker restarts, for now
2014-08-07 10:41:56 -04:00
Brendan Burns 22586c87fe Install nsinit that is vendored into docker. 2014-08-06 22:45:18 -07:00
Tim Hockin 92f13ceb52 Disable docker restarts, for now
If the docker daemon goes down and comes up, it will try to restart
containers.  This will race with our own restart loop.  Only one loop should
be controlling restarts, probably.
2014-08-06 22:41:09 -07:00
brendandburns 71bfa4cd74 Merge pull request #810 from derekwaynecarr/less_verbose
Run go-build on each kubepush and vagrant log only states that change or error to improve readability
2014-08-06 22:41:09 -07:00
Tim Hockin b0ffa8c8f6 Set kubelet -address flag to 0.0.0.0 via salt
Currently it binds to the eth0 IP only, this includes localhost.  The flag
default is localhost only, but we need it looser than that.
2014-08-06 18:11:35 -07:00
Daniel Smith aa3ac324bc Merge pull request #803 from brendandburns/nsenter
Install nsinit on hosts.
2014-08-06 15:12:49 -07:00
derekwaynecarr b9dc38e617 Log only states that change or error to improve readability 2014-08-06 14:47:41 -04:00
Daniel Smith ea47ca7aa0 Stop passing etcd_servers to controller manager 2014-08-05 17:46:39 -07:00
Brendan Burns abb754c00d Install nsinit on hosts. 2014-08-05 15:57:39 -07:00
derekwaynecarr d8af1da2f6 Pull golang from golang 2014-08-05 14:24:10 -04:00
Tim Hockin 4c58752684 Make container-to-container IP work across VMs. 2014-08-04 20:52:13 -07:00
Filipe Brandenburger d7396acced Remove executable permissions of files that do not need it.
In particular, .gitignore, *.go, *.sls and etcd.conf are files that
should not be marked as executable.

Tested: built it with hack/build-go.sh, called all binaries with
  the -version flag to confirm they work.

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
2014-08-01 08:22:46 -07:00
Victor Marmol 4de48613e7 Change cAdvisor port to 4194.
This is so it doesn't conflict with the default registry address of
5000.
2014-07-31 13:14:00 -07:00
Danny Jones bc11e8c57b Set kubelet user home directory to /var/lib/kubelet
The kubelet user does not have permissions to create directories in
/var/lib. This sets the home directory to /var/lib/kubelet so that the
directory is made prior to running the kubelet. This matches the
default root directory path (/var/lib/kubelet) and allows kubelet to
us that directory.
2014-07-29 14:44:01 -07:00
Eric Tune 10a61d05a1 Stopy proxying etcd (localhost:4001) on https:/$MASTER_IP/etcd. 2014-07-28 12:21:06 -07:00
Jonathan Boulle c43035088b assorted formatting and typo fixes 2014-07-24 15:10:36 -07:00
derekwaynecarr 69ae2fe4bb Initial vagrant setup and e2e testing support 2014-07-24 16:32:36 -04:00
Daniel Smith b87ae144ea Merge pull request #552 from MSOpenTech/azure-scripts
Update salt config for apiserver to support Azure.
2014-07-24 12:46:53 -07:00
Victor Marmol db38b114fe Update the cAdvisor manifest for the new volume type.
Closes #559
2014-07-23 08:38:38 -07:00
Jeff Mendoza cc471c29f3 Add gce grain to salt config, change apiserver salt config. 2014-07-22 10:30:00 -07:00
Jeff Mendoza 6cebe4443a Update salt config for apiserver to support Azure. 2014-07-21 16:50:47 -07:00
Daniel Smith 05f01a3654 Revert "assorted formatting and typo fixes" 2014-07-18 17:16:30 -07:00
Jonathan Boulle 9e63c3a633 assorted formatting and typo fixes 2014-07-18 13:02:59 -07:00
Victor Marmol d9962946fc Use latest cAdvisor image.
This keeps us from downloading all cAdvisor images just to use "latest".
2014-07-15 10:16:52 -07:00
Brendan Burns 41c6680943 add http health checks. 2014-07-09 12:01:43 -07:00
Daniel Smith 212a393404 Merge pull request #293 from brendandburns/minion
Activate cloud minion registry.
2014-07-01 12:11:22 -07:00
Victor Marmol 842907613b Run cAdvisor on all minions. 2014-07-01 11:36:33 -07:00
Brendan Burns d5516e4cdc Activate gce minion list. 2014-07-01 11:33:58 -07:00
Brendan Burns 2759b2367f Add load balancing support to services. 2014-06-17 12:37:39 -07:00
Brendan Burns 5cb4444176 Task -> Pod #4, the final chapter 2014-06-08 23:00:12 -07:00
Joe Beda 894a7e3282 Move everything out of src and reorganize scripts.
Fixed up some scripts to be more robust.  Changed the e2e test setup to use g1-small instances.  Fixed up documentation to reflect the new script locations.  Disabled the "curl | bash" cluster launch as it hasn't been well tested and doesn't include the cloudcfg tool yet.
2014-06-06 21:41:19 -07:00