github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
12,289 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

1547 Commits (ce2b46d0ae2330441ee41e21916671b9c0269ee6)

Author SHA1 Message Date
Ryan Richard 6968074c90 remove manifest config and bump rax coreos image 2015-05-13 21:33:25 -05:00
Ryan Richard 6ae14b3630 add initial support for flannel 2015-05-13 21:33:24 -05:00
Ryan Richard b2aa089df0 fix download-release.sh 
Download-release.sh was overwriting previous downloads
even if the temp URL had expired which resulted in the
release and binaries being overriden.
 2015-05-13 21:33:24 -05:00
Ryan Richard 75dac16c34 leverage $public_ip4 for apiserver communication 2015-05-13 21:33:24 -05:00
Eric Tune 936f9cc95d WIP: Update Rackspace so node talks to apiserver 
Kubernetes project has decided that it is better if kubelet
and kube-proxy use the apiserver REST interface to get and
set resources instead of accessing resource keys in etcd directly.
This is necessary to support kubelet reporting of events,
and also encapsulates the apiserver store details.

This means that the kubelet and kube-proxy need to know the
apiserver host(s) via a flag.

Since the Rackspace config already used etcd to advertise the
minions to the controller-manager, I used the same pattern to advertise
the apiserver(s) to the minions.

Setting --public_address_override=$private_ipv4 is intended to ensure that
the master serves its http interface on the right ethernet device, since I think
there are two on a droplet.

The new apiserver-advertiser.service puts the IPs of any apiservers in etcd.

The kubelet and kube-proxy now take an environment file which contains
the list of apiserver IPs, and that env var goes into a flag.  The
etcd_servers argument is removed -- the point is for these binaries
to not access etcd.

The new apiserver-finder.service watches for changes in etcd and
restarts kubelet and kube proxy when there are new apiservers.
 2015-05-13 21:33:23 -05:00
Zach Loafman 06c22c699a Ensure basic DNS functionality before doing real work in configure-vm.sh 
Fixes #8196. Maybe. If my theory is correct on how we got there. Also
changes the inference of master to be based on the master name, not
the node instance prefix. That way if we somehow have a bogus
hostname, the master will configure itself as a node, the whole
cluster fails, and it's a ton more obvious.
 2015-05-13 19:12:53 -07:00
Dawn Chen 309a157665 Merge pull request #7984 from cjcullen/kubelet 
Kubelet configure cbr0 instead of configure-vm.sh
 2015-05-13 17:32:52 -07:00
Vish Kannan f49757cba5 Merge pull request #8221 from ArtfulCoder/use_https 
Use https to access apiserver from kube2sky
 2015-05-13 17:21:41 -07:00
Abhishek Shah 71a10c2044 Use https 2015-05-13 17:03:29 -07:00
Robert Bailey a61baf6a74 Merge pull request #8208 from saad-ali/fixTemplateUpDown2 
Fix GCE kube-down incorrect MIG delete OpID
 2015-05-13 15:28:52 -07:00
saadali c118b6d603 Fix GCE kube-down incorrect MIG delete OpID 2015-05-13 15:06:43 -07:00
Vish Kannan 5b8e70181f Merge pull request #8199 from satnam6502/es 
Revert to using emptyDir for Elasticsearch data
 2015-05-13 14:47:03 -07:00
Jeff Lowdermilk 3f3760a14a Cleanup some todos for gke + rip out dead AuthConfig code 2015-05-13 13:54:02 -07:00
Brian Akins fac4350fa6 Initial addition of CoreOS as minion for AWS cluster 2015-05-13 16:39:22 -04:00
Rohit Jnagal a1ef8585da Merge pull request #8168 from brendandburns/docker 
Update single node docker to 0.16.2
 2015-05-13 13:25:27 -07:00
Quinton Hoole d114945b90 Merge pull request #8181 from thockin/dns-health 
Fix DNS health check
 2015-05-13 13:08:37 -07:00
Satnam Singh ca121ee98d Revert to using emptyDir for Elasticsearch data 2015-05-13 12:52:56 -07:00
Yu-Ju Hong ad83197c63 Merge pull request #8187 from satnam6502/nosecret 
Remove the use of secrets from node level logging agents
 2015-05-13 11:12:08 -07:00
Jeff Lowdermilk f8ebc4e21e Merge pull request #8104 from roberthbailey/kubelet-using-kubeconfig 
Replace the auth config file with a kubeconfig file when starting the kubelet on GCE.
 2015-05-13 11:09:27 -07:00
Derek Carr 9454d58547 Merge pull request #8127 from liggitt/service_account_admission 
Add ServiceAccount admission plugin
 2015-05-13 14:03:11 -04:00
Zach Loafman abd1f89ba7 Merge pull request #8189 from dchen1107/clean 
Monit watch kubelet and kube-proxy on master node too.
 2015-05-13 10:57:41 -07:00
Dawn Chen e32daf4229 Monit watch kubelet and kube-proxy on master node too. 2015-05-13 10:36:00 -07:00
Satnam Singh 53ec5e38c7 Remove the use of secrets from node level logging agents 2015-05-13 10:11:07 -07:00
Filip Grzadkowski eecd7b8c0f Revert "Set GOMAXPROCS for etcd" 2015-05-13 17:53:04 +02:00
Tim Hockin ab30484a4f Fix DNS health check 2015-05-13 08:51:06 -07:00
Zach Loafman 02f3a32196 Merge pull request #8131 from justinsb/aws_install_salt_gce_style 
Install specific salt version on AWS, based on GCE
 2015-05-13 06:55:32 -07:00
Brendan Burns 48d7604f4e Update single node docker to 0.16.2 2015-05-13 11:15:56 +01:00
Robert Bailey c47b9178b4 Replace the auth config file with a kubeconfig file when 
starting the kubelet on GCE.
 2015-05-13 01:03:28 -07:00
Madis Nõmme eb220f05a6 Properly get return value (considering errexit). Quote variables. 2015-05-13 10:45:51 +03:00
Madis Nõmme d4d02a9028 Optionally associate master instance with AWS Elastic IP 
When MASTER_RESERVED_IP is set to elastic IP from AWS, then aws/util.sh will
associate it with master instance and assign it to KUBE_MASTER_IP. If no MASTER_RESERVED_IP
is set, new elastic ip will be requested from amazon. This allows cluster certificates to
be generated for an IP that doesn't change between stopping & starting cluster instances.

The requested elastic ip is not released when kube-down.sh is run. I think it is good
because user could have created DNS records and it would be bad if the IP was removed.
He can reuse it next time through MASTER_RESERVED_IP when setting up cluster again.
 2015-05-13 10:45:51 +03:00
CJ Cullen 31ea7d1295 Put cbr0-modifying stuff behind a flag. Address some other comments. 2015-05-12 23:00:28 -07:00
CJ Cullen 5e3d2b9138 Kubelet configure cbr0 instead of configure-vm.sh 2015-05-12 23:00:12 -07:00
Justin Santa Barbara 23b1a22203 AWS: Don't use policy-rc.d to prevent starting daemons until we're ready 
It isn't required
 2015-05-12 21:18:48 -04:00
Nikhil Jindal c2fecff3d5 Merge pull request #8067 from piosz/kubectl 
Added label kubernetes.io/name to cluster services
 2015-05-12 17:09:22 -07:00
Quinton Hoole de0d59be05 Merge pull request #8096 from saad-ali/fixTemplateUpDown 
Make MIG deletion during GCE kube down blocking, so that subsequent template deletion doesn't fail.
 2015-05-12 17:05:13 -07:00
saadali 932cdd954d Clean up GCE kube-down script by using set e 2015-05-12 16:58:22 -07:00
Nikhil Jindal 5e11830e13 Merge pull request #7988 from satnam6502/es-image 
Make the Elasticsearch logging pods discover each other
 2015-05-12 16:19:57 -07:00
Satnam Singh 7cff506c93 Make the Elasticsearch logging pods discover each other 2015-05-12 15:26:09 -07:00
Alex Robinson a98d883134 Merge pull request #8121 from satnam6502/fluentd-gcp 
Convert node level logging to Cloud Logging to use token-system-logging
 2015-05-12 14:26:46 -07:00
Alex Robinson 96cb4360fa Merge pull request #8120 from satnam6502/fluentd-es 
Convert nodel level logging to ES to use token-system-logging
 2015-05-12 14:26:28 -07:00
Clayton Coleman 7d620c20b9 Merge pull request #8105 from thockin/dns-domain 
Rename default DNS domain to cluster.local
 2015-05-12 17:18:45 -04:00
Zach Loafman 0b0bace006 Merge pull request #8009 from mbforbes/refactorEnv 
Refactor master vs node kube-env and salt auth
 2015-05-12 13:37:54 -07:00
Justin Santa Barbara ffb0e7f9b8 Install specific salt version on AWS, based on GCE 
The latest salt version breaks the container_bridge.py _state function

We can lock to the same version as GCE.  This is not a full fix,
because we can't update to the latest salt without breaking GCE,
but this at least unbreaks and sync AWS with GCE.

This isn't a straight copy from GCE, because we still use
the salt master on AWS (for now)

Fixes #8114
 2015-05-12 16:33:56 -04:00
Max Forbes 76c89db5a8 Master vs node salt auth refactor in configure-vm.sh 2015-05-12 13:26:11 -07:00
Max Forbes 0acf8f9a00 Refactor GCE kube-env for both OSes. 2015-05-12 13:26:10 -07:00
Jordan Liggitt e5d47081a2 Add ServiceAccount admission plugin 2015-05-12 15:19:05 -04:00
Nikhil Jindal d75bd8bf2a Merge pull request #7101 from liggitt/service_account 
ServiceAccounts
 2015-05-12 10:23:41 -07:00
Satnam Singh ade18e4ff3 Conver node level logging to Cloud Logging to use token-system-logging 2015-05-12 10:17:45 -07:00
Satnam Singh f9af0658fa Convert nodel level logging to ES to use token-system-logging 2015-05-12 10:07:49 -07:00
Tim Hockin e83e49b076 rename default DNS domain to cluster.local 2015-05-11 23:00:43 -07:00
saadali c5b1508774 Make MIG deletion during GCE kube down blocking, so that subseqent template deletion doesn't fail. 2015-05-11 18:51:59 -07:00
Alex Robinson e2b7ef8d2c Merge pull request #8078 from satnam6502/fluentd-gcp 
Convert Fluentd to Cloud Logging pod specs to YAML
 2015-05-11 16:55:14 -07:00
Satnam Singh e246685468 Convert Fluentd to Cloud Logging pod specs to YAML 2015-05-11 14:55:46 -07:00
Satnam Singh 2f5ba28a17 Switch Fluentd to ES manifest back to YAML 2015-05-11 14:37:41 -07:00
Jordan Liggitt 7e14a80f63 ServiceAccount admission plugin 2015-05-11 17:18:06 -04:00
Jordan Liggitt db1f0dc906 JWT token generation/verification 2015-05-11 17:18:06 -04:00
Daniel Smith caddcd8cd3 Merge pull request #7901 from vishh/kube2sky 
Updated kube2sky to use the controller framework.
 2015-05-11 13:49:20 -07:00
Robert Bailey 6c42cb154b Stop copying certs into /usr/share/nginx/ since nothing relies 
on that location any longer.
 2015-05-11 11:44:19 -07:00
Alex Robinson 8bec62e42c Merge pull request #7995 from satnam6502/es-logging 
Upgrade to Kibana 4 for cluster logging
 2015-05-11 10:40:41 -07:00
Piotr Szczesniak 12e44ff8a9 Added label kubernetes.io/name to cluster services 
The label specifies service name which is displayed in kubectl cluster-info
 2015-05-11 19:35:53 +02:00
Nikhil Jindal 72ac82eba9 Merge pull request #8005 from lavalamp/kubectlFix 
Don't print debugging things on every run of kubectl.sh
 2015-05-11 10:19:37 -07:00
Jeff Lowdermilk 6523d18130 Future proof GKE kubeconfig handling in e2e driver 2015-05-11 09:57:54 -07:00
Filip Grzadkowski 26d14300e9 Increase disk size for kubernetes master. 
Signed-off-by: Filip Grzadkowski <filipg@google.com>
 2015-05-11 15:35:38 +02:00
Piotr Szczesniak 02aa97d695 Added name to kube-dns service 
Fixes #7922
 2015-05-11 12:42:22 +02:00
He Simei 9e2ac1b8bd add func test-build-release 
Signed-off-by: He Simei <hesimei@zju.edu.cn>
 2015-05-11 10:07:58 +08:00
Jeff Lowdermilk 78386e48ad fix #7921 2015-05-09 07:48:29 -07:00
Jeff Lowdermilk 051288c4ee Merge pull request #7921 from roberthbailey/gke-kubeconfig 
Stop setting a GKE specific version of the kubeconfig file
 2015-05-08 19:48:49 -07:00
Daniel Smith ccecb115ed Don't print debugging things on every run of kubectl.sh 2015-05-08 15:55:28 -07:00
Satnam Singh fcbe2229df Kibana by itself 
Upgrade to Kibana 4 for cluster logging
 2015-05-08 14:55:52 -07:00
Robert Bailey 9db0c68e3e For GKE, only use the special kubeconfig location if the file exists. 
This will allow Jenkins to keep running after the next gcloud release
without needing to make immediate modifications to this file. We can
then remove the extra logic at our own convenience.
 2015-05-08 14:53:49 -07:00
Justin Santa Barbara 3cf8d72d96 Copy some new properties from config-default => config.test 
ENABLE_MINION_PUBLIC_IP was causing a failure because the variable wasn't declared.

ADMISSION_CONTROL should just be set the same for both test & default
 2015-05-08 14:30:17 -07:00
Derek Carr 39de2ee5b8 Merge pull request #7982 from BenTheElder/vagrant_test_fixes 
Call kube-down in test-teardown for vagrant.
 2015-05-08 15:01:21 -04:00
BenTheElder 0b32bb1e4c Call kube-down in test-teardown 
See https://github.com/GoogleCloudPlatform/kubernetes/issues/7978
 2015-05-08 14:50:35 -04:00
Robert Bailey a7bb598889 Merge pull request #7928 from manolitto/disable_minion_public_ip 
AWS: make it possible to disable minion public ip assignment
 2015-05-08 09:52:42 -07:00
Manfred Geiler c5c62f7d57 fixed second missing $ and added curly brackets 2015-05-08 17:18:52 +02:00
Manfred Geiler 1119340260 fixed missing $ 2015-05-08 16:58:49 +02:00
Manfred Geiler 96d34c1106 AWS: added docs for KUBE_ENABLE_MINION_PUBLIC_IP option 2015-05-08 16:56:06 +02:00
Paul Morie ad4b6dcb0d Ease building kubelet image 2015-05-08 01:21:25 -04:00
Fabio Yeon 89b3ffa5b7 Check node status as part of validate-cluster.sh. 2015-05-07 16:13:07 -07:00
Manfred Geiler 205ed2bf6e AWS: make it possible to disable minion public ip association 2015-05-08 00:09:47 +02:00
Vishnu Kannan e521b3f1af Updated kube2sky to use the controller framework. 
Refactored the code a bit to make it easy for future enhancements and
unit testing.
Tested the change manually on a kube node with and without kubeConfig based tokens.
 2015-05-07 14:40:44 -07:00
Rohit Jnagal 36bb479c52 Merge pull request #5498 from ZJU-SEL/refactor-ubuntu 
Ubuntu-distro: deprecate & merge ubuntu single node work to ubuntu cluster node stuff
 2015-05-07 09:41:20 -07:00
Vish Kannan e25210d367 Merge pull request #7822 from thockin/dns 
DNS: expose 53/TCP
 2015-05-07 09:34:52 -07:00
wizard 595345c6a6 Merge the old single-node and multi-node ubuntu deployment into one better approach and update the guidance 2015-05-07 21:01:29 +08:00
Wojciech Tyczynski ca0f678b9a Merge pull request #7792 from pweil-/security-context-types 
SecurityContext admission clean up
 2015-05-07 10:43:43 +02:00
Wojciech Tyczynski 600b00f2b1 Merge pull request #7863 from fgrzadkowski/etcd_maxprocs 
Set GOMAXPROCS for etcd
 2015-05-07 10:09:29 +02:00
Tim Hockin ec8ba4a62f Expose 53/TCP on DNS service 2015-05-07 00:40:39 -07:00
Tim Hockin 9eb1fb85bd Convert DNS service to v1beta3 2015-05-07 00:40:35 -07:00
Tim Hockin 58a18447fa Expose 53/TCP in DNS pod (not service yet) 2015-05-07 00:40:31 -07:00
Tim Hockin dfe81b7974 Cleanups in DNS pod YAML. 2015-05-07 00:40:23 -07:00
Filip Grzadkowski 7e8bde53dd Set GOMAXPROCS for etcd 2015-05-07 08:11:39 +02:00
CJ Cullen f0c26052eb Fix controller-manager manifest for providers that don't specify CLUSTER_IP_RANGE 2015-05-06 17:50:04 -07:00
Maxwell Forbes 7426b533df Merge pull request #7862 from cjcullen/cbr0 
Remove restriction that cluster-cidr be a class-b
 2015-05-06 15:46:57 -07:00
saadali 4569de7a46 Enable Google Cloud Monitoring and Google Cloud Logging instead of 
Influxdb for Google Compute Engine deployments.
 2015-05-06 15:23:40 -07:00
CJ Cullen fbd125e4e2 Remove restriction that cluster-cidr be a class-b 2015-05-06 15:01:13 -07:00
Dawn Chen 07afcb2bce Merge pull request #7820 from zmerlynn/container-vm-v20150505 
Update to container-vm-v20150505 (Also updates GCE to Docker 1.6)
 2015-05-06 09:22:35 -07:00
Filipe Brandenburger b7f9e2cea0 Merge pull request #7651 from zmerlynn/upload_hash_in_util 
Also push .sha1 for devel builds
 2015-05-06 09:07:39 -07:00
Victor Marmol 302de065f2 Merge pull request #7798 from pmorie/run-containerized 
Add ability to dockerize kubelet in local cluster
 2015-05-06 08:13:04 -07:00
CJ Cullen a6b8b2ef59 Merge pull request #7764 from AntonioMeireles/skydns_etcd_deprecatedFlags 
skydns: use the etcd-2.x native syntax, enable IANA attributed ports.
 2015-05-06 07:31:20 -07:00
Paul Morie fa1d065595 Add ability to dockerize kubelet in local cluster 2015-05-06 09:36:52 -04:00
Mark Lamourine b7c1b7eed2 Added port 6443 to kube-proxy default IP address for api-server 
added  api_servers_with_port variable and settings.

removed extra port string

split azure api_server host and port out
 2015-05-06 12:43:24 +00:00
António Meireles 24a0e5618a skydns: use the etcd-2.x native syntax, enable IANA attributed ports. 
per https://github.com/coreos/etcd/blob/master/Documentation/backward_compatibility.md
(there are no functional changes, we just stop using the legacy flags, for
consistency.)

Signed-off-by: António Meireles <antonio.meireles@reformi.st>
 2015-05-06 10:07:34 +01:00
Jerzy Szczepkowski 58962100db Merge pull request #7827 from zmerlynn/safe_format_cleanup 
Clean up safe_format_and_mount spam in the startup logs
 2015-05-06 10:50:32 +02:00
Jerzy Szczepkowski ce590ff961 Merge pull request #7797 from pmorie/kubelet-image 
Create docker image for kubelet
 2015-05-06 09:23:07 +02:00
Robert Bailey 357df12c02 Set allocate_node_cidrs to be blank by default. 2015-05-05 23:41:30 -07:00
Robert Bailey 06c2f4e3d5 Merge pull request #7799 from cjcullen/test_pull_5246 
Fix sync problems in #5246
 2015-05-05 22:31:10 -07:00
Zach Loafman 399f7dee43 Clean up safe_format_and_mount spam in the startup logs 
Totally minor cleanup, but I'm tired of seeing it's spam in the
startup logs.
 2015-05-05 21:23:57 -07:00
Zach Loafman c78eabbfac Update to container-vm-v20150505 2015-05-05 17:15:54 -07:00
Paul Morie 7b22218f67 Create docker image for kubelet 2015-05-05 20:14:26 -04:00
Jerzy Szczepkowski e967ffd522 Added flag to set cluster class B network address for pods, add flag to disable allocation CIDRs for Pods. Fixed synchornization bug in NodeController registerNodes(). 2015-05-05 16:10:43 -07:00
Tomek Kulczynski 290c7b94ef Make nodecontroller configure nodes' pod IP ranges 2015-05-05 16:10:42 -07:00
Zach Loafman 875e83a741 Revert "Revert "Security context - types, kubelet, admission"" 2015-05-05 16:02:13 -07:00
Zach Loafman f48904fd5e Revert "Security context - types, kubelet, admission" 2015-05-05 15:20:39 -07:00
Paul Weil 5acdf5e70b remove trailing comma. Add sc admission controller to ansible and systemd 2015-05-05 16:34:38 -04:00
Paul Weil 982bf19c20 security context initial implementation - squash 2015-05-05 13:46:13 -04:00
Alex Robinson 9ea76dc004 Add a liveness probe to the DNS container. 2015-05-05 17:41:08 +00:00
Alex Robinson 07adb84c23 Update the DNS replication controller to be v1beta3. 2015-05-05 17:41:08 +00:00
Brendan Burns 1b17a32d87 Merge pull request #7755 from viklas/master 
FIX: Issue #7750 - Hyperkube docker image needs certificates to connect to cloud-providers
 2015-05-05 09:46:41 -07:00
Jeff Lowdermilk 87cdc3f032 Merge pull request #7672 from eparis/boilerplate-python 
Check license boilerplate for python files
 2015-05-05 09:23:36 -07:00
CJ Cullen 1ec0fb2e3d Make changes suggested in #7675 2015-05-04 21:58:13 -07:00
Chris Moos 1b814ffd2c Add safe_format_and_mount to hyperkube image. 
* Add volume format script into hyperkube image.
* Fix issue with format script on non-redhat platforms.
 2015-05-04 21:25:39 -07:00
Luke Benson bba2f9184f FIX: Issue #7750 - Hyperkube needs certificates 
Adds ‘ca-certificates’ package to dockerfile for building base
hyperkube image. This resolves controller-manager issue connecting to
cloud provider (experienced with AWS) when running services through
kyperkube.Tested with AWS and kube 0.16.1 binaries.
 2015-05-05 11:26:13 +10:00
Zach Loafman 0c107e4c44 Also push .sha1 for devel builds 
And adds a .sha1 cache file to indicate what file was already pushed
to GCS, and how to force it if not, removing a few seconds off a
kube-up/push if you're just cycling.

With this and #7602, all TAR_URLS will have a .sha1 as well.
 2015-05-04 17:45:34 -07:00
Victor Marmol d159f4cb2e Merge pull request #7740 from zmerlynn/docker_fallback 
Update non-GCE Salt distros to 1.6.0, fallback to ContainerVM Docker version on GCE
 2015-05-04 17:03:13 -07:00
Zach Loafman 2b3e52c230 Use built-in ContainerVM Docker version rather than installing lxc-docker 2015-05-04 16:33:00 -07:00
Robert Bailey 9718d667a7 Merge pull request #7744 from zmerlynn/allow_builtin_salt 
Skip SaltStack install if it's already installed
 2015-05-04 16:32:56 -07:00
Zach Loafman dd7f3f7df7 Skip SaltStack install if it's already installed 
Next ContainerVM image will have SaltStack in it. Also be a little
less persnickety if it's found running. This isn't the case, but we
don't have to be aggressive.
 2015-05-04 16:12:53 -07:00
Eric Paris f416289a85 update all python with boilerplate 2015-05-04 18:37:47 -04:00
Robert Bailey c6d4c24f37 Merge pull request #7736 from justinsb/aws_fix_known_tokens_file 
AWS: Fix variable naming that meant not all tokens were written
 2015-05-04 14:34:11 -07:00
Justin Santa Barbara 96f0a39172 AWS: Fix variable naming that meant not all tokens were written 
To resolve the inconsistency, chose to go closer to GCE
 2015-05-04 17:28:24 -04:00
Nikhil Jindal 2ae13693ab Merge pull request #7675 from cjcullen/cbr0 
Fix kube2sky flakes. Fix tools.GetEtcdVersion to work with etcd > 2.0.7
 2015-05-04 14:23:29 -07:00
Robert Bailey e3ff2dc02d Merge pull request #7678 from justinsb/aws_api_on_443 
AWS: Change apiserver to listen on 443 directly, not through nginx
 2015-05-04 13:52:57 -07:00
CJ Cullen a21713a771 Fix kube2sky flakes. Fix tools.GetEtcdVersion to work with etcd > 2.0.7 2015-05-04 13:01:35 -07:00
Daniel Smith fbe3ec7513 Merge pull request #7316 from ArtfulCoder/master_components_logs 
logs for master components
 2015-05-04 11:20:03 -07:00
Yu-Ju Hong 5270ce6d28 Merge pull request #7671 from vmarmol/fix-metadata 
Make rkt-install a oneshot.
 2015-05-04 10:50:36 -07:00
Yu-Ju Hong c3ba88296b Merge pull request #7665 from vmarmol/cluster-rkt 
Provide container_runtime flag to Kubelet in CoreOS.
 2015-05-04 10:06:58 -07:00
BenTheElder 7ea1ccd7a3 Set vagrant test cluster default NUM_MINIONS=2 2015-05-04 04:19:20 -04:00
Justin Santa Barbara 57f7b658bb AWS: Change apiserver to listen on 443 directly, not through nginx 
Mirrors changes in GCE.  I think the same changes will be needed for vagrant.
 2015-05-02 16:59:04 -04:00
Victor Marmol 9253249b19 Make rkt-install a oneshot. 
This will make our dependencies wait for us before they execute.
 2015-05-01 17:44:44 -07:00
Victor Marmol 727016dc30 Provide container_runtime flag to Kubelet in CoreOS. 2015-05-01 17:02:33 -07:00
Eric Paris 6b3a6e6b98 Make copyright ownership statement generic 
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
 2015-05-01 17:49:56 -04:00
Vish Kannan 3cc53127de Merge pull request #7626 from crossorigin/heapster-0.11.0 
bump heapster to v0.11.0 and grafana to v0.7.0
 2015-05-01 14:24:25 -07:00
Robert Bailey 14c2fb11e1 Don't exit abruptly if there aren't yet any minions right after 
the cluster is created.
 2015-05-01 13:51:59 -07:00
Ido Shamun e86316bc4d revert back INFLUXDB_EXTERNAL_URL to api v1beta1 2015-05-01 21:13:04 +03:00
Ido Shamun 37040fb0e3 bump heapster to v0.11.0 and grafana to v0.7.0 2015-05-01 19:42:30 +03:00
Eric Tune dc137a47eb Merge pull request #7209 from you-n-g/master 
change the current dir to the config dir
 2015-05-01 08:29:49 -07:00
Eric Tune dddf414cf5 Merge pull request #7195 from mbruzek/add-charms 
Add the Juju charms to Kubernetes
 2015-04-30 16:26:58 -07:00
Alex Robinson 8d24f73bab Merge pull request #7579 from satnam6502/fluentd-es-image 
Improve comment in Fluentd to ES logging config file
 2015-04-30 13:45:03 -07:00
Alex Robinson f30ed069c0 Merge pull request #7588 from satnam6502/fluentd-gcp-image 
Trim Fleuntd tag for Cloud Logging
 2015-04-30 13:44:39 -07:00
Satnam Singh 95007d7217 Improve comment in Fluentd to ES logging config file 2015-04-30 13:42:30 -07:00
Satnam Singh 941a457851 Trim Fleuntd tag for Cloud Logging 2015-04-30 13:39:35 -07:00
Victor Marmol dad73fa94a Merge pull request #7569 from bakins/kubernetes-master-name 
GCE CoreOS cluster - set master name based on variable
 2015-04-30 12:59:41 -07:00
Alex Robinson 58ede77a58 Merge pull request #7539 from satnam6502/master 
Trim cluster log tags to pod name and container name
 2015-04-30 10:29:41 -07:00
Zach Loafman 6a0fab3d34 Fix the fix for GKE kube-down 
Fixes issue in #7565
 2015-04-30 10:23:21 -07:00
Brian Akins b311a12d90 Use the variable as this changes based on environment. 2015-04-30 12:40:09 -04:00
Jeff Lowdermilk 996168dced fix kube-down for provider gke 2015-04-30 09:22:17 -07:00
Matt Bruzek 74c00d431e Removing unused scripts from km and kubernetes. 2015-04-30 09:27:51 +02:00
Young f181e98ebd change the current dir to the config dir 
Otherwise the script can't run in other dirs.
 2015-04-30 14:38:56 +08:00
Satnam Singh e65f0aafd5 Trim cluster log tags to pod name and container name 2015-04-29 18:24:13 -07:00
Quinton Hoole a2fe8a9e6c Merge pull request #7527 from cjcullen/dns 
Bump kube2sky to 1.2. Point it at https endpoint (3rd try).
 2015-04-29 18:00:14 -07:00
CJ Cullen 44cffec157 Bump kube2sky to 1.2. Point it at https endpoint (3rd try). 2015-04-29 14:58:56 -07:00
Yifan Gu 9ba1839f52 cluster/gce/coreos: Add metadata-service in node.yaml 2015-04-29 14:58:26 -07:00
Abhishek Shah 96439b5a52 logs for master components 2015-04-29 09:51:09 -07:00
Victor Marmol fc34277d8e Merge pull request #7445 from dchen1107/rkt-support 
Bring up a kuberenetes cluster using coreos image as worker nodes
 2015-04-28 18:04:42 -07:00
Zach Loafman 89195b0a14 Merge pull request #7461 from cjcullen/dns 
Revert kube2sky from 1.2 back to 1.1 until we figure out why it's flaky.
 2015-04-28 17:23:55 -07:00
Satnam Singh dc31c58443 Upgrade Elasticsearch to 1.5.2 for cluster logging 2015-04-28 16:20:03 -07:00
Dawn Chen 876f8beec9 Remove unused node-name attribute 2015-04-28 16:13:26 -07:00
Dawn Chen 13a0b033e2 Bring up a cluster using coreos image for worker nodes. 2015-04-28 16:13:26 -07:00
Dawn Chen 5fa11322f8 Factory out debian e.g. ContainerVM image specific support to its own 
helper utility library.
 2015-04-28 16:07:57 -07:00
Fabio Yeon 0a8d8c1579 Merge pull request #7460 from roberthbailey/validate-cluster 
Make validate cluster more reliable
 2015-04-28 15:57:43 -07:00
Dawn Chen 8963347b9e Introduce MASTER_IMAGE, MINION_IMAGE and OS_DISTRIBUTION to config-default 
for enable coreos and rocket support
 2015-04-28 15:31:09 -07:00
CJ Cullen 2b50ee53e0 Revert the change that bumped kube2sky from 1.1->1.2 until we figure out why it's flaky. 2015-04-28 14:57:44 -07:00
Robert Bailey a7e62d17ff Make validate cluster more reliable (it should retry checking the 
server if a subshell returns a non-zero exit status).
 2015-04-28 14:57:14 -07:00
Robert Bailey 8206aa9eac Salt configuration to add basic auth to GCE. 2015-04-28 14:07:54 -07:00
Alex Robinson 566f0d4724 Fix GCE logging scope name. 2015-04-28 13:44:30 -07:00
Alex Robinson 3e841510de Merge pull request #7393 from satnam6502/fluentd-gcp-image 
New Fluentd to Cloud Logging Dockerfile with args
 2015-04-28 11:01:14 -07:00
Alex Robinson 5b5525dca5 Merge pull request #7324 from vishh/log_scope 
Enable logging.write scope for minions.
 2015-04-28 11:00:10 -07:00
Vishnu Kannan 9c66305f8c Enable logging.write scope by default for nodes. This is required for storing events in 
Google Cloud Logging via heapster.
 2015-04-28 10:55:06 -07:00
Satnam Singh 20a0905d61 New Fluentd to Cloud Logging Dockerfile with args 2015-04-28 10:30:32 -07:00
Victor Marmol 094e5545d2 Merge pull request #7310 from rjnagal/node 
Fix the binary path reported by get-kube script.
 2015-04-28 08:24:37 -07:00
Derek Carr 824d830747 Merge pull request #7427 from jsafrane/devel/fix-vagrant2 
Fixed name of kube-proxy path in deployment scripts.
 2015-04-28 10:24:52 -04:00
Wojciech Tyczynski 92a0b385c7 Merge pull request #7274 from satnam6502/v1beta3 
Convert node level logging agents to v1beta3
 2015-04-28 10:32:37 +02:00
Jan Safranek 6e810492fb Fixed name of kube-proxy path in deployment scripts. 2015-04-28 10:10:37 +02:00
Satnam Singh 4a0cc7905d Convert node level logging agents to v1beta3 2015-04-27 17:21:42 -07:00
Alex Robinson 743945f3aa Merge pull request #7384 from a-robinson/opts 
Remove unused env variable from the fluentd dockerfiles
 2015-04-27 17:18:17 -07:00
CJ Cullen 39c5bf363b Merge pull request #7303 from erictune/kube_env3 
kube-proxy uses token to access port 443 of apiserver
 2015-04-27 14:33:53 -07:00
derekwaynecarr 81e9395533 Fix vagrant regression due to #7326 2015-04-27 17:18:30 -04:00
Alex Robinson ada9242155 Remove unused env variable from the fluentd dockerfiles and make their apt-get 
arguments consistent.
 2015-04-27 20:47:38 +00:00
Brendan Burns a02823c0db Merge pull request #7344 from roberthbailey/google-storage-ssl 
Fetch resources from storage.googleapis.com over SSL.
 2015-04-27 12:24:46 -07:00
Brendan Burns 637cd57a25 Merge pull request #6606 from gust1n/aws-existing-vpc 
AWS: Improving getting existing VPC and subnet
 2015-04-27 11:11:25 -07:00
Zach Loafman b8de4960ac Merge pull request #7367 from erictune/cleanupkubadmintoken 
Remove apparently dead code from Azure scripts.
 2015-04-27 10:13:40 -07:00
Zach Loafman 5ccfc0a225 Merge pull request #6006 from justinsb/aws_multiple_clusters 
First step to supporting multiple k8s clusters
 2015-04-27 10:11:03 -07:00
Eric Tune 9b31a76651 Remove apparently dead code from Azure scripts. 2015-04-27 10:08:50 -07:00
Eric Tune 9044177bb6 Generate a token for kube-proxy. 
Tested on GCE.
Includes untested modifications for AWS and Vagrant.
No changes for any other distros.
Probably will work on other up-to-date providers
but beware.  Symptom would be that service proxying
stops working.

 1. Generates a token kube-proxy in AWS, GCE, and Vagrant setup scripts.
 1. Distributes the token via salt-overlay, and salt to /var/lib/kube-proxy/kubeconfig
 1. Changes kube-proxy args:
   - use the --kubeconfig argument
   - changes --master argument from http://MASTER:7080 to https://MASTER
     - http -> https
     - explicit port 7080 -> implied 443

Possible ways this might break other distros:

Mitigation: there is an default empty kubeconfig file.
If the distro does not populate the salt-overlay, then
it should get the empty, which parses to an empty
object, which, combined with the --master argument,
should still work.

Mitigation:
  - azure: Special case to use 7080 in
  - rackspace: way out of date, so don't care.
  - vsphere: way out of date, so don't care.
  - other distros: not using salt.
 2015-04-27 08:59:57 -07:00
Zach Loafman df1cfae368 Merge pull request #7326 from roberthbailey/client-cert-auth 
Pass the CA root cert into the apiserver
 2015-04-27 07:48:59 -07:00
Robert Bailey a9f8f17299 Fetch the kibana tar.gz over SSL. 2015-04-26 21:57:49 -07:00
Robert Bailey 225da3f88f Fetch resources from storage.googleapis.com over SSL. 2015-04-26 21:51:37 -07:00
Robert Bailey 846ffcff83 Pass the CA root cert into the apiserver so that the apiserver will 
perform client cert checks for authorization. Only enable on GCE where
the apiserver is terminating SSL connections from end users.
 2015-04-24 22:01:56 -07:00
saadali acbd3d78f1 Specify host/container ports for InfluxDB, so that the UI is accessible. 2015-04-24 16:22:50 -07:00
Rohit Jnagal d60c86a3a7 Fix the binary path reported by get-kube script. 2015-04-24 21:31:21 +00:00
Brian Grant 60d7bad147 Merge pull request #7128 from nikhiljindal/fixbeta1tests 
Removing more references to v1beta1 from pkg/
 2015-04-24 11:07:53 -07:00
Satnam Singh b6bee06c20 Merge pull request #7269 from zmerlynn/lose_one_sanity 
Remove buggy GCE post turn-up cluster validation code (rely on validate-cluster.sh)
 2015-04-24 10:56:20 -07:00
Brendan Burns 49977e6a47 Revert "Update docker examples to 0.15.0" 2015-04-24 10:05:27 -07:00
Dawn Chen 2128d4e251 Merge pull request #7261 from erictune/kube_env 
Pass KUBELET_TOKEN in kube-env metadata.
 2015-04-24 10:03:34 -07:00
Nikhil Jindal 84cb48be11 Merge pull request #7246 from satnam6502/es 
Convert Elasticsearch logging to v1beta3 and de-salt
 2015-04-24 09:21:41 -07:00
nikhiljindal dcc368c781 Removing more references to v1beta1 from pkg/ 2015-04-24 00:45:17 -07:00
CJ Cullen 80af1c9e40 kube2sky using kubeconfig secret: take 2. Point system secrets at https://kubernetes. Override in clients that can't use DNS. 2015-04-23 18:13:16 -07:00
David Oppenheimer dda010b572 Merge pull request #7240 from satnam6502/v1beta3 
Update Kibana RC and service to v1beta3
 2015-04-23 17:09:27 -07:00
Zach Loafman ad829dead7 Remove buggy GCE post turn-up cluster validation code (rely on validate-cluster.sh) 
Fixes #7266
 2015-04-23 16:28:44 -07:00
Eric Tune e8a83b23d1 Pass KUBELET_TOKEN in kube-env metadata. 
ensure-kube-token is not needed anymore because
the token passed in kube-env.

In the up case it is set, in the push case it is an empty string
but not used.

Allow unset KUBELET_TOKEN (for push case).

Fix comment.
 2015-04-23 15:21:27 -07:00
Satnam Singh c9b9e7651e Convert Elasticsearch logging to v1beta and de-salt 2015-04-23 13:06:15 -07:00
Satnam Singh 0abc34245a Update Kibana RC and service to v1beta3 2015-04-23 12:19:17 -07:00
Derek Carr fade245a44 Merge pull request #7220 from jsafrane/devel/fix-vagrant 
V2: Fix vagrant setup broken by commit 7475efbcfb.
 2015-04-23 14:49:31 -04:00
Dawn Chen f9156c281a Merge pull request #7123 from satnam6502/logging 
Propagate pod and container name for log files
 2015-04-23 10:13:08 -07:00
Joakim Gustin 645d6d1f26 Use existing subnet when launching AWS cluster in existing VPC 2015-04-23 11:01:17 +02:00
Jan Safranek 1c8f888477 Fix vagrant setup broken by commit 7475efbcfb. 
- 'local' can be used only inside bash functions
- s/KNOWN_TOKENS_FILE/known_tokens_file
 2015-04-23 11:00:10 +02:00
Wojciech Tyczynski cf824ae5e0 Merge pull request #7164 from fgrzadkowski/fix_wait_minion 
Wait for minion to start even if gcloud command fails.
 2015-04-23 08:21:19 +02:00
Justin Santa Barbara 9253ae6dca AWS: Fix some bash style problems: variable quoting & locals 2015-04-22 18:30:09 -07:00
Fabio Yeon 0a0bd88db6 Revert "Change kube2sky to use token-system-dns secret, point at https endpoint ..." 2015-04-22 17:56:34 -07:00
Satnam Singh e4e830badc Update Kibana pod to speak to Elasticsearchusing v1beta3 2015-04-22 17:37:47 -07:00
Fabio Yeon 3ed2dcae68 Merge pull request #7197 from roberthbailey/fix-restart-apiserver 
Fix the restart-apiserver command for GCE/GKE.
 2015-04-22 15:52:14 -07:00
Robert Bailey 6951bb0bd5 Fix the restart-apiserver command for GCE/GKE. 2015-04-22 15:21:13 -07:00
Satnam Singh 2444c1f943 Propagate pod and container name for log files 2015-04-22 15:08:51 -07:00
Matt Bruzek ee2d43ac35 Changing the copyright to the Google. 2015-04-22 16:41:03 -05:00
Matt Bruzek dce5f28a63 Changing the copyright to the Google. 2015-04-22 16:40:16 -05:00
Dawn Chen 87e0d5da08 Merge pull request #7186 from ArtfulCoder/no_log_pod_on_master 
removed elasticsearch and fluentd-gcp pods from master
 2015-04-22 14:40:07 -07:00
Matt Bruzek cdc671a86f Setting the default release number to v0.15.0 2015-04-22 16:39:36 -05:00
Robert Bailey 4346c6ecae Swallow the output from the test ssh connections so that it 
doesn't interfere with string comparison.
 2015-04-22 14:19:15 -07:00
CJ Cullen 924015dc94 Merge pull request #7182 from justinsb/aws_fix_hostname 
AWS: Set hostname_override for minions, back to fully-qualified name
 2015-04-22 14:13:53 -07:00
Zach Loafman 26aeb6c370 Merge pull request #6618 from roberthbailey/no-nginx 
Salt reconfiguration to get rid of nginx on GCE
 2015-04-22 13:59:12 -07:00
Matt Bruzek 60f678be32 Merge branch 'master' of github.com:GoogleCloudPlatform/kubernetes into add-charms 2015-04-22 15:07:49 -05:00
Matt Bruzek b69792535d Updating guestbook with the v1beta3 json files. 2015-04-22 15:05:46 -05:00
Abhishek Shah 8cf11fd608 removed elasticsearch and fluentd-gcp pods from master 2015-04-22 12:54:57 -07:00
Brendan Burns ee34d4942b Merge pull request #6576 from jeffmendoza/azure-loop 
Azure: Wait for salt completion on cluster initialization
 2015-04-22 12:51:40 -07:00
Matt Bruzek b4766bb380 Removing unneeded status check before juju deployer 2015-04-22 14:45:50 -05:00
Robert Bailey 35a18e35c3 Merge pull request #7154 from cjcullen/readonly 
Change kube2sky to use token-system-dns secret, point at https endpoint ...
 2015-04-22 12:41:53 -07:00
Justin Santa Barbara 4120849cc4 AWS: Set hostname_override for minions, back to fully-qualified name 
This is a stop-gap fix; we'd really like to use EC2 instance ids, but that is
blocked by #7092 or changing that health-check to not assume that the node name
is resolvable.

This stop-gap essentially reverts #7072 for AWS
 2015-04-22 11:28:53 -07:00
Robert Bailey dc45f7f9e6 Remove nginx and replace basic auth with bearer token auth for GCE. 
- Configure the apiserver to listen securely on 443 instead of 6443.
 - Configure the kubelet to connect to 443 instead of 6443.
 - Update documentation to refer to bearer tokens instead of basic auth.
 2015-04-22 11:11:20 -07:00
Robert Bailey 4ca8fbbec6 Merge pull request #7147 from fabioy/validate.fix 
Fix validate-cluster.sh to work on Mac.
 2015-04-22 11:06:46 -07:00
Zach Loafman 86468cd29d Revert "Added kube-proxy token." 2015-04-22 10:55:08 -07:00
Matt Bruzek 450f1f0215 Using readlink instead of realpath. 2015-04-22 12:53:30 -05:00
Zach Loafman 0e3e502d52 Fix unbound variable after #7146 2015-04-22 10:19:53 -07:00
Zach Loafman 42e1710ccf Fix build after #7146 2015-04-22 10:11:19 -07:00
Zach Loafman c9988db0ee Merge pull request #7146 from brendandburns/get-k8s 
Extend the get-cluster.sh script to use sudo if necessary.
 2015-04-22 09:58:07 -07:00
Brendan Burns 42121d1809 Extend the get-cluster.sh script to use sudo if necessary. 2015-04-22 09:52:44 -07:00
Matt Bruzek dbca4bf5dd Using python to parse the json output from Juju. 2015-04-22 11:36:37 -05:00
Matt Bruzek 5deef09178 Exporting master and minion variables and calling detect methods in kube-up. 2015-04-22 11:35:49 -05:00
Zach Loafman b98f93bb4b Merge pull request #7112 from erictune/kubeconfig-secrets 
Extend PR#5470 for AWS and Vagrant
 2015-04-22 09:25:53 -07:00
Zach Loafman 854c20c5e2 Merge pull request #7113 from erictune/kube-proxy-token 
Added kube-proxy token.
 2015-04-22 09:16:04 -07:00
Matt Bruzek 35301bbcfd Merge branch 'add-charms' of github.com:mbruzek/kubernetes into add-charms 
Resolved conflicts in:
	cluster/juju/util.sh
 2015-04-22 10:36:42 -05:00