github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
14,018 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

453 Commits (d630232b4b12742487367ebf0f9e8223d1e76754)

Author SHA1 Message Date
Zach Loafman acf6fc6e24 Merge pull request #10627 from eparis/total-ansible 
Ansible: Get DNS working - Add kubectl kubeconfig file
 2015-07-01 16:07:53 -07:00
Zach Loafman e5670c104d Merge pull request #10604 from nikhiljindal/v1 
Updating scripts to use v1 instead of v1beta3
 2015-07-01 15:54:17 -07:00
nikhiljindal 274792d7bb Stop exposing v1beta3 by default 2015-07-01 14:38:02 -07:00
Eric Paris c66bafaa18 Generate a kubeconfig for kubectl which can be taken off the masterA 
/etc/kubernetes/kuectl.kubeconfig
 2015-07-01 13:19:06 -04:00
Eric Paris 88087decb4 Fix certs in ansible 2015-07-01 13:09:22 -04:00
nikhiljindal 2e9e46dd08 Updating scripts to use v1 instead of v1beta3 2015-07-01 00:23:16 -07:00
Janet Kuo 62b488359f Enable -c for kubectl logs container arg 2015-06-30 13:25:54 -07:00
Eric Paris ddf52a854e Make sure serviceaccount tokens are created and recognized 2015-06-30 13:05:59 -04:00
Eric Paris 3cacc42985 Hide DNS variables away from the user 
Fewer knobs == more winning. Also rename from kube.local to
cluster.local. Some e2e tests really want that.
 2015-06-30 13:05:59 -04:00
Eric Paris 3a78104267 Add cluster logging with fluentd and elastic search 2015-06-30 13:05:59 -04:00
Eric Paris 7d7d5d4c4e Add influxdb cluster monitoring 2015-06-30 13:05:59 -04:00
Eric Paris a127ce7266 Use slurp to get the ca.crt 2015-06-30 13:05:59 -04:00
Eric Paris 9f4bfd144f Per master tokens for the scheduler and controller-manager 2015-06-30 13:05:58 -04:00
Eric Paris c6f2841839 Place a different token for every node/daemon combination 
We can now revoke one token at a time!
 2015-06-30 13:05:58 -04:00
Eric Paris bb179b6a4c Use a token for the scheduler, controller-manager, proxy and kubelet 
Before we used the kubecfg certificate for everything. Mint one token
for each service and push it around where it belongs.
 2015-06-30 13:05:55 -04:00
Chao Xu 7f89a29aad add "kubectl patch". It will replace "kubectl udpate --patch" in the future 2015-06-29 16:36:45 -07:00
Alex Robinson 764d34d363 Merge pull request #10468 from caesarxuchao/add-cmd-replace 
Add command "kubectl replace"
 2015-06-29 16:06:33 -07:00
Chao Xu 9b3d42c090 Add command "kubectl replace". "kubectl update" is still supported as an alias. 
"kubectl replace --patch" is NOT supported. It's moved to "kubectl patch" as a separate command in another commit.
 2015-06-29 12:14:24 -07:00
Tim Hockin 745c2af792 Add a simple hostport-to-service proxy 
Example: a pod like the  below should
proxy port 53 TCP and UDP to the main DNS service.

```
apiVersion: v1
kind: Pod
metadata:
  name: localhost-dns-proxy
spec:
  containers:
  - name: proxy-udp
    image: gcr.io/google_containers/proxy-to-service:v1
    args: [ "udp", "53", "kube-dns.default" ]
    ports:
    - name: udp
      protocol: UDP
      containerPort: 53
      hostPort: 53
  - name: proxy-tcp
    image: gcr.io/google_containers/proxy-to-service:v1
    args: [ "tcp", "53", "kube-dns.default" ]
    ports:
    - name: tcp
      protocol: TCP
      containerPort: 53
      hostPort: 53
```
 2015-06-26 21:55:18 -07:00
Robert Bailey c6940932f7 Merge pull request #10378 from jeffbean/ansible-final 
Ansible rework for Kubernetes cluster deployment
 2015-06-26 16:55:00 -07:00
Robert Bailey 508f7f1697 Merge pull request #10358 from caesarxuchao/add-force-update 
Add --force to `kubectl update`
 2015-06-26 10:49:04 -07:00
Maxwell Forbes 712f303350 Merge pull request #9736 from sdminonne/bug_fix2 
To add validation for service ports when defined as string
 2015-06-25 19:37:04 -07:00
Jeff Bean a0c312f224 Changing CentOS install of master and nodes 
The testing repo now had updated packages for kubernetes
Also adding some options to rsync task to work with different users ssh settings
 2015-06-25 18:45:49 -07:00
Chao Xu ef5de91fd7 add "--force" flag to "kubectl update"; 
update relevant tests
 2015-06-25 17:16:20 -07:00
Maxwell Forbes 5e748c1d47 Merge pull request #10070 from lavalamp/e2eProxyFix 
proxy e2e test improvements
 2015-06-25 13:15:03 -07:00
Maxwell Forbes 655179dcfb Merge pull request #10264 from mikedanese/ca-token 
add ca cert to token controller and all service accounts
 2015-06-25 09:56:35 -07:00
Maxwell Forbes 2bb4cf3f8f Merge pull request #10266 from ArtfulCoder/kubelet_resolv 
update docker's resolv.conf file with options ndots:5
 2015-06-25 09:54:36 -07:00
Abhishek Shah 23caf446ae update docker's resolv.conf file with options ndots:5 2015-06-24 23:33:58 -07:00
Maxwell Forbes 3afda5d566 Merge pull request #10312 from dchen1107/cleanup 
Take 2: Fix the race between configuring cbr0 and restarting static pods
 2015-06-24 17:59:50 -07:00
Maxwell Forbes 28946766a3 Merge pull request #9807 from krousey/container_manifest 
Removing ContainerManifest
 2015-06-24 17:55:29 -07:00
Mike Danese 56bde3342a add ca to token controller and all service accounts 2015-06-24 15:10:20 -07:00
Eric Paris 52999cd292 Check for rpm directly, don't imply from ansible_pkg_manager 
Atomic host have neither dnf nor yum. So we cannot use that as a
hueristic if they have rpm.
 2015-06-24 17:07:13 -04:00
Eric Paris 97b88fa563 Set SELinux permissive to allow DNS to work 2015-06-24 17:07:12 -04:00
Eric Paris 8cf36d7402 Declare etcd roles in meta rather then top level playbook 2015-06-24 17:07:12 -04:00
Eric Paris 83bd4d0903 Install python-firewall as ansible needs python2 firewalld support 2015-06-24 17:07:12 -04:00
Eric Paris fc5c063a2d Support Fedora Rawhide 
Fedora rawhide has neither yum, nor python2, nor python2 libselinux
bindings. Ansible needs all of these.

This adds a new play which can be used to get machines setup so they can
then be managed with ansible.
 2015-06-24 17:07:12 -04:00
Eric Paris 7996f39413 Vagrant? Did we mean to include this? 2015-06-24 17:07:12 -04:00
Jeff Bean 7b8ed5a12c support dns in particular 2015-06-24 17:07:12 -04:00
Jeff Bean 374658ef01 support the upstream 'addons' nonsense 2015-06-24 17:07:12 -04:00
Eric Paris c2e4df7c87 Create, distribute, and use certificates for TLS and identity 2015-06-24 17:07:11 -04:00
Eric Paris 3d10f00401 Give kube-apiserver CAP_NET_BIND_SERVICE 
It is needed to bind on port 443
 2015-06-24 17:07:08 -04:00
Kris Rousey d13421e084 Removing ContainerManifest 2015-06-24 11:31:34 -07:00
Dawn Chen 6ddfa512de Revert "Revert "Fix the race between configuring cbr0 and restarting static pods"" 
This reverts commit fd0a95dd12.
 2015-06-24 11:10:10 -07:00
Jeff Bean e08bd6f3c3 Configure docker daemon 2015-06-24 13:45:46 -04:00
Jeff Bean 45bdfeac0c Packge install on CentOS 7 2015-06-24 13:45:46 -04:00
Jeff Bean f259892cc9 Basic Generic File Cleanups 
No major changes, just renaming, whitespace, etc
 2015-06-24 13:45:46 -04:00
Eric Paris 9816488179 Do not restart etcd quickly 
https://github.com/coreos/etcd/pull/2878

etcd destroys itself if you start and then restart etcd very rapidly.
So don't do that any more.
 2015-06-24 13:45:46 -04:00
Eric Paris 70b7358d00 If multiple etcd servers defined, point at all of them 
(we still can only set up a single server though)
 2015-06-24 13:45:46 -04:00
Eric Paris a95243450e Set up flannel in your cluster! 2015-06-24 13:45:42 -04:00
Eric Paris bc6c425ab4 Use 'command' not 'shell' even thought it doesn't matter 2015-06-24 13:45:42 -04:00