Commit Graph

413 Commits (e6db88b12d5c3c398366171f7f5386a3e7d5ee3c)

Author SHA1 Message Date
Kubernetes Submit Queue f9c9a25e64
Merge pull request #61427 from hyperbolic2346/mwilson/admission
Automatic merge from submit-queue (batch tested with PRs 61402, 61143, 61427, 60592). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Changing admission controller settings

**What this PR does / why we need it**:
By default, the admission controller settings in a CDK cluster didn't match the set recommended here:
https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use

Now they do.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/517
**Special notes for your reviewer**:

**Release note**:
```release-note
Updated admission controller settings for Juju deployed Kubernetes clusters
```
2018-03-27 15:33:12 -07:00
Kubernetes Submit Queue 6cca687bd8
Merge pull request #61479 from hyperbolic2346/mwilson/api-server-clear-client-ca
Automatic merge from submit-queue (batch tested with PRs 61195, 61479). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Clearing out the client-ca-file option

**What this PR does / why we need it**:
kubernetes-master charm wouldn't clear the ca-client-file snap setting. We haven't used it for a while, but since it wasn't clearing it out any old deploys that updated would still have it set. This change will start clearing it.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/515
**Special notes for your reviewer**:

**Release note**:

```release-note
kubernetes-master charm now properly clears the client-ca-file setting on the apiserver snap
```
2018-03-27 11:04:07 -07:00
Mike Wilson 43ed7779da Removing the always pull policy on this image. 2018-03-23 11:17:42 -04:00
Kubernetes Submit Queue 5d2e4e2d0b
Merge pull request #61273 from juju-solutions/bug/actions-charm-env
Automatic merge from submit-queue (batch tested with PRs 60980, 61273, 60811, 61021, 61367). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Use charm env in actions to get have charmhelpers available

**What this PR does / why we need it**: Due to changes in the base layer the actions in the Juju charms do not have access to charmhelpers in the default environment. This PR fixes this issue.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-03-22 02:08:16 -07:00
Mike Wilson 69e264fce6 Clearing out the client-ca-file option in case it exists on the snap from long ago. 2018-03-21 09:52:38 -04:00
Mike Wilson ffaab76223 Changing admission controller settings to match https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use 2018-03-20 15:03:39 -04:00
Konstantinos Tsakalozos d6c62198cf Use charm env in actions to get have charmhelpers available 2018-03-16 11:55:52 +02:00
Rye Terrell 21b63cc1f2 Bugfix for erroneous upgrade needed messaging in kubernetes worker charm. 2018-03-07 09:14:28 -06:00
Konstantinos Tsakalozos e2399de900 Clean-up not needed method. 2018-02-15 17:01:52 +02:00
Kubernetes Submit Queue 97ad5912d5
Merge pull request #59792 from juju-solutions/bug/basicmaster
Automatic merge from submit-queue (batch tested with PRs 59788, 59846, 59792). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

 Juju deployments change basic auth password should keep admin in masters group

**What this PR does / why we need it**: This is a bug fix for juju k8s deployments. Re-configuring client_password should keep the admin user on the masters group. 

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-02-14 09:45:31 -08:00
Kubernetes Submit Queue f114f0e45c
Merge pull request #59837 from Cynerva/gkk/fix-auth-bootstrap-on-upgrade
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

juju: Fix broken ingress after upgrade-charm

**What this PR does / why we need it**:

This fixes a bug that prevents the ingress controller from being deployed after doing an `upgrade-charm`.

Essentially, `worker.auth.bootstrapped` gets cleared during `upgrade-charm`, and it never gets set again. This prevents the `start_worker` and `render_and_launch_ingress` handlers from running, among other things.

This PR fixes that.

**Release note**:

```release-note
NONE
```
2018-02-14 02:07:55 -08:00
Kubernetes Submit Queue 92e4d3da00
Merge pull request #59803 from wwwtyro/rye/robust-label-change
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Avoid hook errors when effecting label changes on kubernetes-worker charm.

**What this PR does / why we need it**: Avoid hook errors when effecting label changes on kubernetes-worker charm.

**Release note**:
```release-note
Avoid hook errors when effecting label changes on kubernetes-worker charm.
```
2018-02-13 13:13:20 -08:00
George Kraft d1ab6a110a juju: Fix broken ingress after upgrade-charm 2018-02-13 14:04:18 -06:00
Rye Terrell e52ecc56d7 Avoid hook errors when effecting label changes. 2018-02-13 13:37:18 -06:00
Konstantinos Tsakalozos 9dd222d3b5 Fix: change basic auth password should keep admin in masters group 2018-02-13 11:22:28 +02:00
Mike Wilson 15530c0914 Requesting new credentials when node names change 2018-02-11 14:25:45 -05:00
Kubernetes Submit Queue 317853c90c
Merge pull request #59464 from dixudx/fix_all_typos
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

fix all the typos across the project

**What this PR does / why we need it**:
There are lots of typos across the project. We should avoid small PRs on fixing those annoying typos, which is time-consuming and low efficient.

This PR does fix all the typos across the project currently. And with #59463, typos could be avoided when a new PR gets merged.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:
/sig testing
/area test-infra
/sig release
/cc @ixdy 
/assign @fejta 

**Release note**:

```release-note
None
```
2018-02-10 22:12:45 -08:00
Di Xu 48388fec7e fix all the typos across the project 2018-02-11 11:04:14 +08:00
George Kraft fba0119eb0 juju: Fix kube-proxy failing to identify local endpoints 2018-02-09 16:56:22 -06:00
Kubernetes Submit Queue fb340a4695
Merge pull request #57824 from thockin/gcr-vanity
Automatic merge from submit-queue (batch tested with PRs 57824, 58806, 59410, 59280). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

2nd try at using a vanity GCR name

The 2nd commit here is the changes relative to the reverted PR.  Please focus review attention on that.

This is the 2nd attempt.  The previous try (#57573) was reverted while we
figured out the regional mirrors (oops).
    
New plan: k8s.gcr.io is a read-only facade that auto-detects your source
region (us, eu, or asia for now) and pulls from the closest.  To publish
an image, push k8s-staging.gcr.io and it will be synced to the regionals
automatically (similar to today).  For now the staging is an alias to
gcr.io/google_containers (the legacy URL).
    
When we move off of google-owned projects (working on it), then we just
do a one-time sync, and change the google-internal config, and nobody
outside should notice.
    
We can, in parallel, change the auto-sync into a manual sync - send a PR
to "promote" something from staging, and a bot activates it.  Nice and
visible, easy to keep track of.

xref https://github.com/kubernetes/release/issues/281

TL;DR:
  *  The new `staging-k8s.gcr.io` is where we push images.  It is literally an alias to `gcr.io/google_containers` (the existing repo) and is hosted in the US.
  * The contents of `staging-k8s.gcr.io` are automatically synced to `{asia,eu,us)-k8s.gcr.io`.
  * The new `k8s.gcr.io` will be a read-only alias to whichever regional repo is closest to you.
  * In the future, images will be promoted from `staging` to regional "prod" more explicitly and auditably.

 ```release-note
Use "k8s.gcr.io" for pulling container images rather than "gcr.io/google_containers".  Images are already synced, so this should not impact anyone materially.
    
Documentation and tools should all convert to the new name. Users should take note of this in case they see this new name in the system.
```
2018-02-08 03:29:32 -08:00
Tim Hockin 3586986416 Switch to k8s.gcr.io vanity domain
This is the 2nd attempt.  The previous was reverted while we figured out
the regional mirrors (oops).

New plan: k8s.gcr.io is a read-only facade that auto-detects your source
region (us, eu, or asia for now) and pulls from the closest.  To publish
an image, push k8s-staging.gcr.io and it will be synced to the regionals
automatically (similar to today).  For now the staging is an alias to
gcr.io/google_containers (the legacy URL).

When we move off of google-owned projects (working on it), then we just
do a one-time sync, and change the google-internal config, and nobody
outside should notice.

We can, in parallel, change the auto-sync into a manual sync - send a PR
to "promote" something from staging, and a bot activates it.  Nice and
visible, easy to keep track of.
2018-02-07 21:14:19 -08:00
Kubernetes Submit Queue f2362ed6e5
Merge pull request #59396 from kwmonroe/bug/opts-before-login
Automatic merge from submit-queue (batch tested with PRs 59441, 58264, 59287, 59396, 59439). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Ensure docker daemon opts are in effect before docker login

**What this PR does / why we need it**:
Make sure the kubernetes-worker charm is using the configured `docker-opts` daemon options prior to running the `docker-logins` handler.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/layer-docker/issues/112
**Special notes for your reviewer**:

**Release note**:

```release-note
Fixed charm issue where docker login would run prior to daemon options being set. 
```
2018-02-06 20:27:42 -08:00
Kevin W Monroe fa440c8dd2 split docker-logins logic into 2 handlers
Previous commit relied on non-obvious reactive behavior, with the
'docker.restart' flag being exploited to re-execute docker_logins_changed
in a single hook execution.

Split this into 2 handlers:
- when docker-logins config changes, set one flag to handle the login
and another to request a daemon restart (if needed).
- run docker login after any potential daemon restarts have occurred.
2018-02-06 11:29:42 -06:00
Kevin W Monroe 4af548bb5a Ensure daemon opts are in effect before docker login 2018-02-06 05:16:20 +00:00
halfcrazy 9b64650311 fix typo in cluster 2018-02-03 11:08:06 +08:00
Kubernetes Submit Queue ea501413ce
Merge pull request #59219 from hyperbolic2346/mwilson/get-node-name-timeout-bump
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

bumping timeouts for apiserver communication.

**What this PR does / why we need it**:
Our CI is failing due to timeouts. The times we set node names intersects with apiserver restarts, which can sometimes get caught up for longer than one minute. This is a temporary fix until we can decide on the best long-term solution.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Upped the timeout for apiserver communication in the juju kubernetes-worker charm.
```
2018-02-02 10:25:36 -08:00
Kubernetes Submit Queue 4b8309e315
Merge pull request #59064 from hyperbolic2346/mwilson/upgrade-creds-fix
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fixing upgrade charm failing if upgrading from an old enough charm

**What this PR does / why we need it**:
Charms before ~Nov 2017 can not upgrade to charms made after that time due to a race with a missing credential dictionary. This change forces the dictionary to be created before we attempt to use it.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/474
**Special notes for your reviewer**:

**Release note**:

```release-note
Fixed issue with charm upgrades resulting in an error state.
```
2018-02-02 04:34:28 -08:00
Mike Wilson af71c9670f bumping timeouts for apiserver communication. 2018-02-01 15:55:44 -05:00
Kubernetes Submit Queue 57bd4f8344
Merge pull request #59116 from hyperbolic2346/mwilson/priv-typo-fix
Automatic merge from submit-queue (batch tested with PRs 57683, 59116, 58728, 59140, 58976). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fixing issue with capitalization in allow-privileged

**What this PR does / why we need it**:
Config option in kubernetes-master allow-privileged would do odd things if you used True instead of true.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/374
**Special notes for your reviewer**:

**Release note**:

```release-note
Fixed issue with kubernetes-worker option allow-privileged not properly handling the value True with a capital T.
```
2018-02-01 07:04:37 -08:00
Mike Wilson 33dac2d0f3 Adding lower() to kubernetes master's usage of allow-privileged. 2018-01-31 12:20:37 -05:00
Mike Wilson ec0bedbf43 Fixing issue with capitalization causing odd behaviors for allow-privileged configuration option. 2018-01-31 10:26:23 -05:00
Mike Wilson 17f8f18f6f Fixing upgrade charm failing if upgrading from an old enough charm(pre Nov 2017). 2018-01-30 14:52:57 -05:00
Mike Wilson e87b537654 Forcing get_node_name to continue searching for a node name if the returned list of nodes doesn't include this one.
There was a race condition where the kubelet was restarting and we were querying the api server for this node.
2018-01-29 20:27:35 -05:00
Kubernetes Submit Queue 46cd37480e
Merge pull request #58843 from hyperbolic2346/mwilson/spaces-fixes
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fixing spaces issue found with tests.

Had some missing parameters for some functions.



**What this PR does / why we need it**:
Fixing charms when setting extra sans on load balancer or master
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/477
**Special notes for your reviewer**:

**Release note**:

```release-note
Fixing extra_sans option on master and load balancer.
```
2018-01-26 07:40:06 -08:00
Mike Wilson 5acf24db79 Fixing spaces issue found with tests. Had some missing parameters for some functions. 2018-01-25 21:20:35 -05:00
Kubernetes Submit Queue cd2692c49d
Merge pull request #58830 from wwwtyro/rye/storage-backend-config
Automatic merge from submit-queue (batch tested with PRs 53778, 58378, 58830). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add storage-backend configuration option to kubernetes-master charm.

**What this PR does / why we need it**: Add storage-backend configuration option to kubernetes-master charm.

**Release note**:
```release-note
Add storage-backend configuration option to kubernetes-master charm.
```
2018-01-25 17:09:36 -08:00
Rye Terrell 6db03cf471 Add storage-backend configuration option to kubernetes-master charm. 2018-01-25 15:30:41 -06:00
Kubernetes Submit Queue 2e4947ec3c
Merge pull request #58756 from wwwtyro/rye/check-config-created
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Ensure config has been created before attempting to launch ingress.

**What this PR does / why we need it**: Ensure config has been created before attempting to launch ingress.

**Release note**:
```release-note
Ensure config has been created before attempting to launch ingress.
```
2018-01-24 15:06:11 -08:00
Rye Terrell 154caf6a8c Ensure config has been created before attempting to launch ingress. 2018-01-24 11:06:37 -06:00
Kubernetes Submit Queue 36ea7614e9
Merge pull request #58708 from hyperbolic2346/mwilson/kubeapi-network-spaces
Automatic merge from submit-queue (batch tested with PRs 54242, 58522, 58704, 58708, 58712). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Adding network spaces support for kubeapi-load-balancer.

**What this PR does / why we need it**:
Adding support for juju network spaces to kubeapi-load-balancer charm
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/406
**Special notes for your reviewer**:

**Release note**:

```release-note
Added support for network spaces in the kubeapi-load-balancer charm
```
2018-01-23 15:29:46 -08:00
Kubernetes Submit Queue 28adfecd9b
Merge pull request #58704 from hyperbolic2346/mwilson/kubernetes-master-spaces
Automatic merge from submit-queue (batch tested with PRs 54242, 58522, 58704, 58708, 58712). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Adding network spaces support for kubernetes-master.

**What this PR does / why we need it**:
Adding support for juju network spaces to kubernetes-master charm
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/406
**Special notes for your reviewer**:

**Release note**:

```release-note
Added support for network spaces in the kubernetes-master charm
```
2018-01-23 15:29:44 -08:00
Mike Wilson aef2aecd70 Adding network spaces support for kubeapi-load-balancer. 2018-01-23 13:33:14 -05:00
Mike Wilson 2afc76fadd Adding network spaces support for kubernetes-master. 2018-01-23 11:17:05 -05:00
Kubernetes Submit Queue ecb3d7bb6d
Merge pull request #58523 from hyperbolic2346/mwilson/network-spaces
Automatic merge from submit-queue (batch tested with PRs 58438, 58523, 58513, 57948). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

network spaces support for kubernetes-worker charm

**What this PR does / why we need it**:
Adds support for network spaces in the kubernetes-worker charm.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/406
**Special notes for your reviewer**:

**Release note**:

```release-note
Added support for network spaces in the kubernetes-worker charm
```
2018-01-23 03:53:28 -08:00
Mike Wilson a22358e525 Fixing some flake8 issues 2018-01-22 14:54:58 -05:00
Mike Wilson b04a88cc9e Adding support for changing default backend and nginx container images 2018-01-19 16:40:57 -05:00
Mike Wilson 531c9a81c1 Changing where the charm gets network addresses in order to support network spaces. 2018-01-19 10:00:46 -05:00
George Kraft f56463bf32 Fix flake8 lint error in kubernetes-master charm 2018-01-18 13:53:13 -06:00
Kubernetes Submit Queue ee43f7c34e
Merge pull request #57246 from juju-solutions/feature/etcd3
Automatic merge from submit-queue (batch tested with PRs 49874, 56919, 57246). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Enable support for etcd3

**What this PR does / why we need it**: With this PR juju deployments of kubernetes can use both etcd2 and 3.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:

**Special notes for your reviewer**: Lets not merge this immediately. Lets wait for next year. 

**Release note**:

```NONE

```
2018-01-10 08:15:46 -08:00
Konstantinos Tsakalozos e3cafd8303 Enable support for etcd3 2018-01-08 14:44:56 +02:00