Eric Paris
6b9ef5b2d8
generate-cert: allow for alternative paths
...
Instead of hard coding kube-cert and /srv/kubernetes allow these to be
overwritten by environment variables. / is immutable on some systems
and so /srv is not a possible location to store data.
2015-08-04 19:01:16 -04:00
Alex Mohr
ad4086eab1
Merge pull request #11308 from gmarek/pillar
...
Auto commit by PR queue bot
2015-08-04 12:42:57 -07:00
Alex Mohr
4c5763f28c
Merge pull request #11299 from wojtek-t/increase_kubelet_start_timeout
...
Auto commit by PR queue bot
2015-08-03 16:14:02 -07:00
Justin Santa Barbara
463458bf5f
AWS: Install ntp daemon on all nodes
...
The AWS API requires a signature on method calls, including the
timestamp to prevent replay attacks. A time drift of up to 5 minutes
between client and server is tolerated.
However, if the client clock drifts by >5 minutes, the server will start
to reject API calls (with the cryptic "AWS was not able to validate the
provided access credentials").
To prevent this happening, we install ntp on all nodes.
Fix #11371
2015-08-01 14:32:08 -04:00
Jian Huang
45c37b9bd0
Update README.md
...
There is a bad link in the doc. change ../../docs/salt.md to ../../docs/admin/salt.md
2015-07-31 18:44:06 +08:00
gmarek
5bb7eec5ab
Use salt pillars to pass test arguments during cluster creation.
2015-07-31 09:32:01 +02:00
Mike Danese
bfaa527139
Merge pull request #12045 from a-robinson/logs
...
Fix fluentd configs to collect etcd logs on the master
2015-07-30 17:36:46 -07:00
Alex Robinson
69ab7026af
Update fluentd-es to collect etcd logs and remove merge conflict cruft.
2015-07-30 22:21:01 +00:00
Alex Robinson
9e18c29e9f
Make fluentd-gcp collect etcd's logs on the master.
2015-07-30 22:20:57 +00:00
Alex Robinson
94ae0a9a0d
Make the kubelet on a GCE master check instance metadata for manifests.
...
Primary motivation: enable GKE and other cluster-as-a-service folks to
easily run additional logic on the master without having to modify salt
or SSH to the master after it's been created.
2015-07-30 21:04:34 +00:00
Janet Kuo
180798cfa4
Use example syncer tags instead of hard-coded examples in doc
2015-07-27 14:48:41 -07:00
Piotr Szczesniak
f48543aba5
Made enabling Kube UI configurable
2015-07-27 08:23:04 +02:00
Mike Danese
01349cdbfa
Merge pull request #11786 from a-robinson/fluentd
...
Update fluentd-gcp images to include latest Dockerfile changes
2015-07-24 12:40:41 -07:00
Brendan Burns
26de8cd6b2
Merge pull request #10601 from marun/docker-pkg-f22
...
Auto commit by PR queue bot
2015-07-23 22:15:50 -07:00
Alex Robinson
0889307522
Update the fluentd-gcp images to include their latest Dockerfile changes.
...
Their Dockerfiles were changed in #11768 .
2015-07-24 01:27:42 +00:00
Vish Kannan
919fded0f8
Merge pull request #10401 from justinsb/workaround_salt_18089
...
Work around Salt 18089
2015-07-23 16:52:21 -07:00
Dawn Chen
ebc36c0e5a
timeout docker load: 30 second, and restart docker daemon to workaround docker-load-hang issue.
2015-07-17 15:16:23 -07:00
Dawn Chen
7e665230c7
Stop monit kube-addon on nodes.
2015-07-15 11:11:55 -07:00
Wojciech Tyczynski
628ceac305
Increase kubelet start timeout in Monit config
2015-07-15 13:28:07 +02:00
Victor Marmol
cabecc1271
Merge pull request #10611 from marekbiskup/addon-update-kill-children
...
Addon update kill children
2015-07-09 21:09:58 -07:00
Victor Marmol
ee8d2857fc
Merge pull request #9381 from justinsb/aws_support_jessie
...
AWS: Add support for Vivid Vervet & Debian Jessie
2015-07-09 15:20:37 -07:00
Marek Biskup
aa608258a6
kill child processes of addon-update on stop
2015-07-09 13:10:54 +02:00
Victor Marmol
f1e66c718d
Merge pull request #10590 from roberthbailey/kubelet-on-nodes
...
Install the kubectl binary on nodes in addition to the master.
2015-07-08 16:13:12 -07:00
Justin Santa Barbara
89900fa19b
AWS: Ubuntu Vivid, set cgroup_root to docker
...
Otherwise libcontainer generates systemd unit file names that start with "-",
which are not valid.
2015-07-08 17:00:43 -04:00
Victor Marmol
dd37642369
Merge pull request #10488 from justinsb/salt_support_systemd
...
Salt: support systemd (don't assume Redhat <=> systemd)
2015-07-08 13:43:08 -07:00
Victor Marmol
3be3603ef3
Merge pull request #10877 from brendandburns/aws
...
Fix AWS Setup.
2015-07-08 11:33:32 -07:00
derekwaynecarr
e2ddd2dd7b
Missing ca crt in vagrant controllers
2015-07-08 10:59:10 -04:00
Brendan Burns
6d08ade4ce
Don't start Docker by default on AWS
2015-07-07 21:57:43 -07:00
Satnam Singh
90e105521c
Wait for service accounts in the kube-system namesapce
2015-07-06 18:12:25 -07:00
Brendan Burns
988aa6fdf6
Move things into a 'kube-system' namespace.
2015-07-06 15:08:23 -07:00
Yu-Ju Hong
1e0a16392d
Merge pull request #10780 from cjcullen/testfix
...
Hacky workaround for #9822
2015-07-06 15:00:35 -07:00
Yu-Ju Hong
b58e7c8c2d
Merge pull request #10655 from dchen1107/cadvisor
...
Set minimal shares for containers with no cpu specified
2015-07-06 11:38:54 -07:00
Tim Hockin
6c88401889
Merge pull request #10271 from erictune/how-to-write-a-gsg
...
Scratch Getting-started-guide
2015-07-06 11:00:44 -07:00
Eric Tune
682abd9dab
Scratch Getting-started-guide
2015-07-06 10:38:20 -07:00
CJ Cullen
edd419790e
Hacky workaround for #9822
2015-07-06 10:02:53 -07:00
Yu-Ju Hong
8ce6fe855b
Merge pull request #10712 from justinsb/always_install_socat
...
Salt: install socat; needed for port-forward
2015-07-06 09:58:52 -07:00
Yu-Ju Hong
83fbcba97b
Merge pull request #10698 from justinsb/aws_master_sans
...
AWS: Configure SSL certificate alternate-names
2015-07-06 09:57:44 -07:00
Zach Loafman
a2250d1caf
Merge pull request #10597 from a-robinson/fluentd
...
Run fluentd on the master to collect the core master logs
2015-07-04 21:12:47 -07:00
Justin Santa Barbara
6504df77f1
Salt: install socat; needed for port-forward
...
port-forward needs socat on the node hosts; we technically
don't need it today on the master, but this seems the right
place to put it, and socat is a small dependency.
2015-07-03 19:12:44 -04:00
Justin Santa Barbara
25007421ba
Salt: re-remove comment block
...
It had been removed in upstream, but had been kept by mistake here.
2015-07-03 12:43:36 -04:00
Justin Santa Barbara
600a0d6fe7
Salt: have kube-addons service depend on init file
...
For symmetry with systemd
2015-07-03 12:41:59 -04:00
Justin Santa Barbara
a5b3c73ac4
Salt: Add service block for kube-proxy for systemd
...
We have the workaround for Salt's problems here, but we should still express
our intent.
2015-07-03 10:26:21 -04:00
Justin Santa Barbara
60d822435b
Salt: clean daemon_args on RedHat, not systemd
...
I don't think it actually makes a difference based on how we're using it,
but this is now more of a precise change.
2015-07-03 10:24:32 -04:00
Justin Santa Barbara
ad0293e3f3
Salt: Add more dependencies to systemd services
...
This may help Salt reload services correctly, although we still
need the script until Salt's bug with reloading services on systemd
is resolved.
Salt bug: https://github.com/saltstack/salt/issues/16778
2015-07-03 01:40:15 -04:00
Justin Santa Barbara
944fc1ed58
Set standard bash options in services helper script
2015-07-03 01:40:15 -04:00
Justin Santa Barbara
bcd92c7522
Salt: support systemd (don't assume Redhat <=> systemd)
...
Also work around problems with Salt & systemd services, in particular
that Salt doesn't issue a daemon-reload.
2015-07-03 01:40:15 -04:00
Justin Santa Barbara
c676c11189
AWS: Configure SSL certificate alternate-names
...
GCE does this in its per-provider scripts; this does the same for AWS and lets
other providers do the same; I believe kube2sky requires 10.0.0.1 as a SAN.
2015-07-03 01:18:07 -04:00
Dawn Chen
9ce11545c0
Explicitly configure master component containers and nginx with 200m each.
2015-07-02 10:46:39 -07:00
Zach Loafman
1d16be675c
Merge pull request #10653 from dchen1107/resource_management
...
Set resource limit for addon containers
2015-07-01 19:35:28 -07:00
Dawn Chen
54531d9b55
Set memory limit (200mi) to fluentd static pod
2015-07-01 17:00:06 -07:00
Zach Loafman
b60c8e567f
Merge pull request #10077 from timstclair/ui-server
...
Move dashboard UI out of the apiserver to a separate pod
2015-07-01 15:56:33 -07:00
nikhiljindal
274792d7bb
Stop exposing v1beta3 by default
2015-07-01 14:38:02 -07:00
Tim St. Clair
b6b2d6df42
Add kube-ui cluster addon for serving k8s dashboard UI.
...
Changes include:
- Add kube-ui binary for serving static dashboard UI
- Add kube-ui docker image, replication controller, and service
- Make the kube-ui a cluster-addon (enabled by default)
- Split the compiled pkg/ui/datafile.go into separate dashboard and swagger packages
- Update docs to reflect changes
2015-07-01 14:21:47 -07:00
Alex Robinson
e5ea6ae854
Run fluentd on the master node by default.
...
This involves adding the logging-write scope to the master when running on GCE.
2015-07-01 20:07:52 +00:00
Marek Biskup
8df3a9cae8
namespaces in addon update
2015-07-01 21:31:52 +02:00
Zach Loafman
3094c1624b
Merge pull request #10492 from derekwaynecarr/add_watch_service_file
...
Fix Vagrant kube-up - missed file watch on systemd stops kubelet starting on initial kube-up
2015-07-01 09:49:59 -07:00
Marek Biskup
7873e252f0
addon updater should not retry too many times because specs may be invalid
2015-07-01 16:22:32 +02:00
derekwaynecarr
de78898170
Missing file watch on systemd stops kubelet starting on kube-up
2015-07-01 09:59:26 -04:00
Zach Loafman
b83236ee7a
Merge pull request #10568 from derekwaynecarr/fix_vagrant_kube_proxy
...
Missed update to kube-proxy when removing nginx on vagrant
2015-07-01 06:42:00 -07:00
Maru Newby
2da59a2f34
Install 'docker' package for Fedora 22
...
Fedora < 22 provides docker via the 'docker-io' package, but this
package was renamed to 'docker' as of Fedora 22. Though the docker
package can be installed manually with 'dnf install docker-io' on F22,
Salt requires the explicit package name or deployment will fail.
2015-06-30 21:36:33 -07:00
Robert Bailey
fedddee157
Install the kubectl binary on nodes in addition to the master.
2015-06-30 16:52:17 -07:00
derekwaynecarr
2cc869b1c5
Missed update to kube-proxy when removing nginx on vagrant
2015-06-30 15:42:52 -04:00
Dawn Chen
e55cd709a1
Removed cluster/saltbase/salt/_states/container_bridge.py since it is useless now.
2015-06-30 11:00:41 -07:00
Zach Loafman
f21b6b89d1
Fix issues mentioned in #10520
2015-06-30 06:51:10 -07:00
Daniel Smith
dcd91666b9
wait until a token shows up to start addons
2015-06-29 18:41:12 -07:00
Justin Santa Barbara
e29e9f0033
Add explicit dependency of docker pkg on the deb download
...
Salt ordering continues to surprise me. I saw them execute
out of order, though I don't know why. Adding an explicit
dependency to prevent out-of-order execution.
2015-06-28 23:51:12 -04:00
Justin Santa Barbara
ea74bd13b8
Work around Salt 18089
...
Directly create /etc/sysctl.d/99-salt.conf
2015-06-28 23:50:00 -04:00
Justin Santa Barbara
54d3ac92ea
Don't make kubelet systemd service depend on Docker
...
Fixes #10379
2015-06-26 11:03:09 -04:00
Maxwell Forbes
bc1930927d
Merge pull request #10347 from justinsb/vagrant_no_cidr_on_master
...
Salt: don't assume that master => cbr-cidr
2015-06-25 10:23:59 -07:00
Maxwell Forbes
655179dcfb
Merge pull request #10264 from mikedanese/ca-token
...
add ca cert to token controller and all service accounts
2015-06-25 09:56:35 -07:00
Justin Santa Barbara
a0ae1d90ba
Salt: don't assume that master => cbr-cidr
...
In particular, this is required for vagrant
2015-06-25 09:17:00 -04:00
Brendan Burns
d2334d60c8
Merge pull request #10328 from dchen1107/cleanup
...
Add dependencies on docker and kubelet service when copying master co…
2015-06-24 21:32:35 -07:00
Dawn Chen
e7d217d941
Add dependencies on docker and kubelet service when copying master components manifests
...
to /etc/kubernetes/manifest
2015-06-24 21:15:08 -07:00
Maxwell Forbes
3afda5d566
Merge pull request #10312 from dchen1107/cleanup
...
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Mike Danese
56bde3342a
add ca to token controller and all service accounts
2015-06-24 15:10:20 -07:00
Dawn Chen
6ddfa512de
Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
...
This reverts commit fd0a95dd12
.
2015-06-24 11:10:10 -07:00
Piotr Szczesniak
fd0a95dd12
Revert "Fix the race between configuring cbr0 and restarting static pods"
2015-06-24 09:56:49 +02:00
Dawn Chen
9dbe6fe4e4
Added more comments.
2015-06-23 16:28:41 -07:00
Dawn Chen
8d76d4ee57
Make master-addon service depend on both docker and kubelet service
...
in salt.
2015-06-23 12:11:20 -07:00
Dawn Chen
23200d303f
Fix several issues on running syncPods until network is configured.
...
Also fixed unittests and compiling.
2015-06-23 12:11:19 -07:00
derekwaynecarr
db202d4904
Remove nginx from vagrant
2015-06-23 13:07:50 -04:00
Brendan Burns
192ffdfb25
Fix the container bridge so that it can create cbr0
...
Fix the kubelet so that it tries to sync status, even if Docker is down
2015-06-22 23:18:01 -07:00
Brendan Burns
a29ade2f33
Disable creation of cbr0, the kubelet does it now.
...
Conditionalize the docker bridge.
2015-06-22 23:15:29 -07:00
Jeff Lowdermilk
85770295c2
Merge pull request #10004 from ArtfulCoder/kubelet_health
...
Augmented kubelet healthz with syncLoop check.
2015-06-22 10:53:05 -07:00
Abhishek Shah
3556993179
Augmented kubelet healthz with syncLoop check.
...
Monit uses read-only port for health monitoring.
2015-06-19 18:14:01 -07:00
Brendan Burns
ec1e308ae2
rev etcd to 2.0.12
2015-06-19 15:57:32 -07:00
Saad Ali
4d25121206
Merge pull request #9769 from brendandburns/secure
...
Revert the revert of https://github.com/GoogleCloudPlatform/kubernetes/pull/9761
2015-06-16 14:21:54 -07:00
Saad Ali
068000a8ba
Merge pull request #9847 from mikedanese/apiserver-liveness-probe
...
add livenessProbe to kube-apiserver.manifest
2015-06-16 14:03:13 -07:00
Vishnu Kannan
31f7ea10c6
Updating heapster version to v0.14.1.
...
Adding a standalone version of heapster which exposes stats via REST API.
2015-06-16 11:56:23 -07:00
Saad Ali
5596e6f789
Merge pull request #9493 from marekbiskup/testAddonUpdate
...
e2e test for addon upgrade
2015-06-16 10:50:15 -07:00
Mike Danese
491eb5e583
add livenessProbe to kube-apiserver.manifest
2015-06-15 23:22:56 -07:00
Fabio Yeon
9b3e9a509d
Merge pull request #9616 from jeffbean/kube_addons
...
kube_addons - Adding variable with default for kubectl bin.
2015-06-15 19:31:42 -07:00
Fabio Yeon
8d2c7ff1d7
Merge pull request #9687 from satnam6502/fluentd-gcp
...
Adjust Fluentd source format for Docker files to be JSON for Cloud Lo…
2015-06-15 13:32:49 -07:00
Satnam Singh
33311b46a2
Adjust Fluentd source format for Docker files to be JSON for Cloud Logging
2015-06-15 10:22:27 -07:00
Marek Biskup
dcc4034d57
e2e test for addon update
2015-06-15 17:37:24 +02:00
Brendan Burns
51b20b35e2
Revert "Revert "Optionalize (default false) --insecure-registry.""
...
This reverts commit 1645c9a9b8
.
2015-06-12 21:00:16 -07:00
Dawn Chen
1645c9a9b8
Revert "Optionalize (default false) --insecure-registry."
2015-06-12 17:50:38 -07:00
Justin Santa Barbara
16d6ba8a9d
AWS: Stop the master kubelet from registering as a node (like GCE does)
2015-06-12 18:33:45 -04:00
Brendan Burns
675d8378f2
Optionalize (default false) --insecure-registry.
2015-06-11 16:33:14 -07:00
Abhi Shah
59a347d119
Merge pull request #9309 from saad-ali/issue9028
...
Enable InfluxDB/Grafana for GCE in addition to GCL. Disable GCM
2015-06-11 11:04:09 -07:00