f7c0f1c1e3
Set min-request-timeout in test clusters
2015-06-03 08:46:28 -07:00
3da686fea5
Merge pull request #8894 from cjcullen/kmaster2
...
Add an explicit variable to indicate whether an instance is master or not
2015-06-02 20:37:43 -07:00
e77ded1e84
Merge pull request #8649 from cjcullen/servicefix
...
Add an advertise-address flag
2015-06-02 19:54:28 -07:00
21147d784a
Merge pull request #9074 from roberthbailey/unbound-var
...
Don't assume that CA_CERT_BASE64 will be set.
2015-06-02 18:52:49 -07:00
dcf5b16cea
Add an explicit KUBERNETES_MASTER variable to the kube-env.
2015-06-02 17:17:02 -07:00
934c553c04
Clarify description/usage of --advertise-address, Master.PublicAddress
2015-06-02 15:23:32 -07:00
085a48a70e
Add an advertise-address flag. This allows the address that the apiserver binds
...
to (possibly 0.0.0.0) to be different than the address on which members of the cluster
can reach the apiserver (possibly not a local interface).
2015-06-02 14:33:15 -07:00
caafd28245
Retry downloading binary tars in case of unpack failure
2015-06-02 14:59:15 +02:00
8195f13b86
Merge pull request #9063 from piosz/cluster_upgrade
...
Refactored kube-push.sh script
2015-06-01 13:47:15 -07:00
43951b04d2
Merge pull request #9016 from goltermann/kube-down-fix
...
GCE kube-down.sh error fixes
2015-06-01 13:46:54 -07:00
0142e4c9c2
Refactored kube-push.sh script
...
The script allows also to push binaries only to the master or specified node.
Added support for released tars.
Introduced new push methods and implemented them for GCE.
2015-06-01 21:21:00 +02:00
0c62b71f8a
Don't assume that CA_CERT_BASE64 will be set.
2015-06-01 11:35:26 -07:00
4c19734b71
Fix kube-down errors for GCE
2015-05-29 14:12:22 -07:00
ff51f0b2e1
Merge pull request #8696 from derekwaynecarr/force_namespace_creation
...
Force explicit namespace provision, update e2e for failures
2015-05-29 09:28:47 -07:00
4fc38849ea
Retry downloading tars in case of unpack failure
2015-05-29 13:06:24 +02:00
ac3cc3c518
Rename PORTAL_NET all over
2015-05-28 16:10:44 -07:00
2c20c3664c
Merge pull request #8902 from brendandburns/fix
...
Turn off certificate checking for Mavericks, as the curl is borked.
2015-05-28 15:32:50 -07:00
4ac239499b
Merge pull request #8904 from justinsb/fix_8903
...
GCE kube-up; write the marker only after we have uploaded the file
2015-05-28 15:30:47 -07:00
3e8b1d5e01
Update all salt providers to force explicit namespace creation; update e2e
2015-05-28 13:45:49 -04:00
521cb0e85b
Pass arg lists to gcloud as comma-separated single arg
...
This should get rid of the scary warning messages on GCE up.
Fixes #8117
2015-05-28 00:36:13 -04:00
dc11a5434a
GCE kube-up; write the marker only after we have uploaded the file
...
We can't write the marker before we upload the file, otherwise anything
that interrupts the upload will leave a corrupted upload that we believe
to be current.
2015-05-27 23:33:29 -04:00
e1c0e100b5
Turn off certificate checking for Mavericks, as the curl is borked.
2015-05-27 19:53:24 -07:00
93a67b75a0
Merge pull request #8537 from a-robinson/ssd
...
Change the default master data disk on GCE to be a 20GB SSD
2015-05-27 09:39:19 -07:00
496be63c00
Merge pull request #8717 from saad-ali/gceUpgradeScriptNewParams
...
Modify GCE upgrade script to not require exact version number
2015-05-26 15:09:15 -07:00
e2c4a01b60
Merge pull request #8808 from fgrzadkowski/fix_warnings
...
Fix WARNING during kube-push.sh
2015-05-26 08:29:04 -07:00
8fe771b4a3
Fix WARNING during kube-push.sh
2015-05-26 17:04:57 +02:00
5b03939b84
Fix WARNING when creating firewall during e2e tests
2015-05-25 09:46:24 +02:00
ae80ed53cf
Automatically open NodePort firewall rules for e2e tests
2015-05-22 22:39:40 -04:00
27c777d61d
Modify GCE upgrade script to not require exact version number
2015-05-22 15:57:35 -07:00
677a4aa1a7
Merge pull request #8164 from cjcullen/cloudprovider
...
Route creation reconciler loop.
2015-05-22 12:27:50 -07:00
e6da5b9601
Make routecontroller_test less hacky.
...
Rename reconcilePodCIDRs to reconcileNodeCIDRs.
Add comments and TODOs about using controller framework.
2015-05-21 18:05:11 -07:00
3e4a94080d
Merge pull request #7938 from mbforbes/rollingUpgrade
...
Rolling node upgrade
2015-05-21 14:48:40 -07:00
0d12a15971
Route creation reconciler loop.
2015-05-20 14:21:30 -07:00
02eee4890b
cluster/gce/coreos: Make rkt version configuable.
2015-05-20 12:08:32 -07:00
24c532bef1
Change the default master data disk on GCE to be a 20GB SSD.
2015-05-19 15:49:18 -07:00
3437ac691a
Rolling node upgrade
2015-05-19 11:42:34 -07:00
ce4b54ec70
Merge pull request #8209 from krousey/v1beta1_cluster
...
Removing some v1beta1 uses in cluster/
2015-05-15 14:56:41 -07:00
98c457c397
Updating /cluster to use v1beta 3 specs, and change a lot of polling to
...
healthz instead of api endpoints.
2015-05-15 14:17:55 -07:00
1f0b4c5e2a
Merge pull request #8232 from zmerlynn/i8196
...
Ensure basic DNS functionality before doing real work in configure-vm.sh
2015-05-15 10:19:35 -07:00
213a1b5e71
Merge pull request #8290 from roberthbailey/unbound-var
...
Fix an unbound variable error when CA_CERT isn't set.
2015-05-14 15:51:55 -07:00
9edc359de7
Fix an unbound variable error when CA_CERT isn't set.
2015-05-14 15:42:16 -07:00
a236f04a5f
Remove newlines output by base64 on linux.
2015-05-14 15:39:26 -07:00
9ab41db7ea
Static cert distribution for GCE.
...
To make cert validation work, no longer use the
fqdn for the master name on the node VMs.
2015-05-14 11:59:13 -07:00
06c22c699a
Ensure basic DNS functionality before doing real work in configure-vm.sh
...
Fixes #8196 . Maybe. If my theory is correct on how we got there. Also
changes the inference of master to be based on the master name, not
the node instance prefix. That way if we somehow have a bogus
hostname, the master will configure itself as a node, the whole
cluster fails, and it's a ton more obvious.
2015-05-13 19:12:53 -07:00
309a157665
Merge pull request #7984 from cjcullen/kubelet
...
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-13 17:32:52 -07:00
c118b6d603
Fix GCE kube-down incorrect MIG delete OpID
2015-05-13 15:06:43 -07:00
c47b9178b4
Replace the auth config file with a kubeconfig file when
...
starting the kubelet on GCE.
2015-05-13 01:03:28 -07:00
5e3d2b9138
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-12 23:00:12 -07:00
de0d59be05
Merge pull request #8096 from saad-ali/fixTemplateUpDown
...
Make MIG deletion during GCE kube down blocking, so that subsequent template deletion doesn't fail.
2015-05-12 17:05:13 -07:00
932cdd954d
Clean up GCE kube-down script by using set e
2015-05-12 16:58:22 -07:00
7d620c20b9
Merge pull request #8105 from thockin/dns-domain
...
Rename default DNS domain to cluster.local
2015-05-12 17:18:45 -04:00
0b0bace006
Merge pull request #8009 from mbforbes/refactorEnv
...
Refactor master vs node kube-env and salt auth
2015-05-12 13:37:54 -07:00
76c89db5a8
Master vs node salt auth refactor in configure-vm.sh
2015-05-12 13:26:11 -07:00
0acf8f9a00
Refactor GCE kube-env for both OSes.
2015-05-12 13:26:10 -07:00
e83e49b076
rename default DNS domain to cluster.local
2015-05-11 23:00:43 -07:00
c5b1508774
Make MIG deletion during GCE kube down blocking, so that subseqent template deletion doesn't fail.
2015-05-11 18:51:59 -07:00
7e14a80f63
ServiceAccount admission plugin
2015-05-11 17:18:06 -04:00
72ac82eba9
Merge pull request #8005 from lavalamp/kubectlFix
...
Don't print debugging things on every run of kubectl.sh
2015-05-11 10:19:37 -07:00
26d14300e9
Increase disk size for kubernetes master.
...
Signed-off-by: Filip Grzadkowski <filipg@google.com>
2015-05-11 15:35:38 +02:00
ccecb115ed
Don't print debugging things on every run of kubectl.sh
2015-05-08 15:55:28 -07:00
ca0f678b9a
Merge pull request #7792 from pweil-/security-context-types
...
SecurityContext admission clean up
2015-05-07 10:43:43 +02:00
7426b533df
Merge pull request #7862 from cjcullen/cbr0
...
Remove restriction that cluster-cidr be a class-b
2015-05-06 15:46:57 -07:00
4569de7a46
Enable Google Cloud Monitoring and Google Cloud Logging instead of
...
Influxdb for Google Compute Engine deployments.
2015-05-06 15:23:40 -07:00
fbd125e4e2
Remove restriction that cluster-cidr be a class-b
2015-05-06 15:01:13 -07:00
07afcb2bce
Merge pull request #7820 from zmerlynn/container-vm-v20150505
...
Update to container-vm-v20150505 (Also updates GCE to Docker 1.6)
2015-05-06 09:22:35 -07:00
b7f9e2cea0
Merge pull request #7651 from zmerlynn/upload_hash_in_util
...
Also push .sha1 for devel builds
2015-05-06 09:07:39 -07:00
58962100db
Merge pull request #7827 from zmerlynn/safe_format_cleanup
...
Clean up safe_format_and_mount spam in the startup logs
2015-05-06 10:50:32 +02:00
06c2f4e3d5
Merge pull request #7799 from cjcullen/test_pull_5246
...
Fix sync problems in #5246
2015-05-05 22:31:10 -07:00
399f7dee43
Clean up safe_format_and_mount spam in the startup logs
...
Totally minor cleanup, but I'm tired of seeing it's spam in the
startup logs.
2015-05-05 21:23:57 -07:00
c78eabbfac
Update to container-vm-v20150505
2015-05-05 17:15:54 -07:00
e967ffd522
Added flag to set cluster class B network address for pods, add flag to disable allocation CIDRs for Pods. Fixed synchornization bug in NodeController registerNodes().
2015-05-05 16:10:43 -07:00
290c7b94ef
Make nodecontroller configure nodes' pod IP ranges
2015-05-05 16:10:42 -07:00
875e83a741
Revert "Revert "Security context - types, kubelet, admission""
2015-05-05 16:02:13 -07:00
f48904fd5e
Revert "Security context - types, kubelet, admission"
2015-05-05 15:20:39 -07:00
5acdf5e70b
remove trailing comma. Add sc admission controller to ansible and systemd
2015-05-05 16:34:38 -04:00
982bf19c20
security context initial implementation - squash
2015-05-05 13:46:13 -04:00
0c107e4c44
Also push .sha1 for devel builds
...
And adds a .sha1 cache file to indicate what file was already pushed
to GCS, and how to force it if not, removing a few seconds off a
kube-up/push if you're just cycling.
With this and #7602 , all TAR_URLS will have a .sha1 as well.
2015-05-04 17:45:34 -07:00
9718d667a7
Merge pull request #7744 from zmerlynn/allow_builtin_salt
...
Skip SaltStack install if it's already installed
2015-05-04 16:32:56 -07:00
dd7f3f7df7
Skip SaltStack install if it's already installed
...
Next ContainerVM image will have SaltStack in it. Also be a little
less persnickety if it's found running. This isn't the case, but we
don't have to be aggressive.
2015-05-04 16:12:53 -07:00
5270ce6d28
Merge pull request #7671 from vmarmol/fix-metadata
...
Make rkt-install a oneshot.
2015-05-04 10:50:36 -07:00
c3ba88296b
Merge pull request #7665 from vmarmol/cluster-rkt
...
Provide container_runtime flag to Kubelet in CoreOS.
2015-05-04 10:06:58 -07:00
9253249b19
Make rkt-install a oneshot.
...
This will make our dependencies wait for us before they execute.
2015-05-01 17:44:44 -07:00
727016dc30
Provide container_runtime flag to Kubelet in CoreOS.
2015-05-01 17:02:33 -07:00
6b3a6e6b98
Make copyright ownership statement generic
...
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
b311a12d90
Use the variable as this changes based on environment.
2015-04-30 12:40:09 -04:00
9ba1839f52
cluster/gce/coreos: Add metadata-service in node.yaml
2015-04-29 14:58:26 -07:00
876f8beec9
Remove unused node-name attribute
2015-04-28 16:13:26 -07:00
13a0b033e2
Bring up a cluster using coreos image for worker nodes.
2015-04-28 16:13:26 -07:00
5fa11322f8
Factory out debian e.g. ContainerVM image specific support to its own
...
helper utility library.
2015-04-28 16:07:57 -07:00
8963347b9e
Introduce MASTER_IMAGE, MINION_IMAGE and OS_DISTRIBUTION to config-default
...
for enable coreos and rocket support
2015-04-28 15:31:09 -07:00
8206aa9eac
Salt configuration to add basic auth to GCE.
2015-04-28 14:07:54 -07:00
566f0d4724
Fix GCE logging scope name.
2015-04-28 13:44:30 -07:00
5b5525dca5
Merge pull request #7324 from vishh/log_scope
...
Enable logging.write scope for minions.
2015-04-28 11:00:10 -07:00
9c66305f8c
Enable logging.write scope by default for nodes. This is required for storing events in
...
Google Cloud Logging via heapster.
2015-04-28 10:55:06 -07:00
39c5bf363b
Merge pull request #7303 from erictune/kube_env3
...
kube-proxy uses token to access port 443 of apiserver
2015-04-27 14:33:53 -07:00
9044177bb6
Generate a token for kube-proxy.
...
Tested on GCE.
Includes untested modifications for AWS and Vagrant.
No changes for any other distros.
Probably will work on other up-to-date providers
but beware. Symptom would be that service proxying
stops working.
1. Generates a token kube-proxy in AWS, GCE, and Vagrant setup scripts.
1. Distributes the token via salt-overlay, and salt to /var/lib/kube-proxy/kubeconfig
1. Changes kube-proxy args:
- use the --kubeconfig argument
- changes --master argument from http://MASTER:7080 to https://MASTER
- http -> https
- explicit port 7080 -> implied 443
Possible ways this might break other distros:
Mitigation: there is an default empty kubeconfig file.
If the distro does not populate the salt-overlay, then
it should get the empty, which parses to an empty
object, which, combined with the --master argument,
should still work.
Mitigation:
- azure: Special case to use 7080 in
- rackspace: way out of date, so don't care.
- vsphere: way out of date, so don't care.
- other distros: not using salt.
2015-04-27 08:59:57 -07:00
60d7bad147
Merge pull request #7128 from nikhiljindal/fixbeta1tests
...
Removing more references to v1beta1 from pkg/
2015-04-24 11:07:53 -07:00
b6bee06c20
Merge pull request #7269 from zmerlynn/lose_one_sanity
...
Remove buggy GCE post turn-up cluster validation code (rely on validate-cluster.sh)
2015-04-24 10:56:20 -07:00
dcc368c781
Removing more references to v1beta1 from pkg/
2015-04-24 00:45:17 -07:00
ad829dead7
Remove buggy GCE post turn-up cluster validation code (rely on validate-cluster.sh)
...
Fixes #7266
2015-04-23 16:28:44 -07:00
e8a83b23d1
Pass KUBELET_TOKEN in kube-env metadata.
...
ensure-kube-token is not needed anymore because
the token passed in kube-env.
In the up case it is set, in the push case it is an empty string
but not used.
Allow unset KUBELET_TOKEN (for push case).
Fix comment.
2015-04-23 15:21:27 -07:00
cf824ae5e0
Merge pull request #7164 from fgrzadkowski/fix_wait_minion
...
Wait for minion to start even if gcloud command fails.
2015-04-23 08:21:19 +02:00
6951bb0bd5
Fix the restart-apiserver command for GCE/GKE.
2015-04-22 15:21:13 -07:00
4346c6ecae
Swallow the output from the test ssh connections so that it
...
doesn't interfere with string comparison.
2015-04-22 14:19:15 -07:00
dc45f7f9e6
Remove nginx and replace basic auth with bearer token auth for GCE.
...
- Configure the apiserver to listen securely on 443 instead of 6443.
- Configure the kubelet to connect to 443 instead of 6443.
- Update documentation to refer to bearer tokens instead of basic auth.
2015-04-22 11:11:20 -07:00
86468cd29d
Revert "Added kube-proxy token."
2015-04-22 10:55:08 -07:00
0e3e502d52
Fix unbound variable after #7146
2015-04-22 10:19:53 -07:00
42e1710ccf
Fix build after #7146
2015-04-22 10:11:19 -07:00
c9988db0ee
Merge pull request #7146 from brendandburns/get-k8s
...
Extend the get-cluster.sh script to use sudo if necessary.
2015-04-22 09:58:07 -07:00
42121d1809
Extend the get-cluster.sh script to use sudo if necessary.
2015-04-22 09:52:44 -07:00
854c20c5e2
Merge pull request #7113 from erictune/kube-proxy-token
...
Added kube-proxy token.
2015-04-22 09:16:04 -07:00
780db9d794
Wait for minion to start even if gcloud command fails.
2015-04-22 16:37:22 +02:00
78dabbdb7f
Fix the ssh-to-node to actually fail on failures.
2015-04-21 15:27:38 -07:00
71e6b05825
Fix kube-apiserver restart.
2015-04-21 15:11:00 -07:00
9d715226d6
Fix kube-apiserver restart.
2015-04-21 13:59:26 -07:00
2ca8a9d15d
Added kube-proxy token.
...
Generates the new token on AWS, GCE, Vagrant.
Renames instance metadata from "kube-token" to "kubelet-token".
(Is this okay for GKE?)
Having separate tokens for kubelet and kube-proxy permits
using principle of least privilege, makes it easy to
rate limit the clients separately, allows annotation
of apiserver logs with the client identity at a finer grain
than just source-ip.
2015-04-21 09:21:31 -07:00
196b3d066d
Merge pull request #6919 from zmerlynn/sharded-e2e
...
Add hack/parallel-e2e.sh to run hack/e2e.go on multiple clusters
2015-04-20 11:34:18 -07:00
68c9191cfc
Allow CLUSTER_IP_RANGE/MINION_IP_RANGE to be overridden by KUBE_GCE_CLUSTER_CLASS_B
2015-04-20 11:17:21 -07:00
4f6dc99075
Generate kubeconfig for all providers in cluster/ that use auth
2015-04-20 11:07:35 -07:00
eb1ea26995
Merge pull request #7012 from jlowdermilk/export-kubeconfig
...
export KUBECONFIG so callers of common.sh functions can use it
2015-04-17 16:37:10 -07:00
1c265f3784
export KUBECONFIG so callers of common.sh functions can use it
2015-04-17 16:22:07 -07:00
2775b9e0de
Merge pull request #6998 from zmerlynn/make_reboot_work
...
Make reboots work on GCE/GKE
2015-04-17 16:10:32 -07:00
bcb63642b8
Make reboots work on GCE/GKE
...
* Fixes an issue where salt-minion would actually come up after reboot
(upstart is horrible obnoxious)
* Caches .deb downloads
* Handles PD remount on reboot correctly
* Notes a future optimization
Fixes #5666
2015-04-17 12:12:00 -07:00
aca8452a21
Merge pull request #6994 from cjcullen/staticip
...
Reserve Master IP before creating Master VM
2015-04-17 11:48:48 -07:00
6a3c809833
Reserve Master IP before creating Master VM.
2015-04-17 11:36:00 -07:00
05d8e96cd4
Push the configure-vm.sh script when we push metadata
...
This is needed when we upgrade (and useful when you're trying to
change the startup script for reboots).
Along the way: allow add-instance-metadata[-from-file] to take a
variable number of KVs.
2015-04-17 11:27:48 -07:00
2a8291a67e
Retry Move KUBECONFIG to common.sh, change default to new location
2015-04-17 10:33:12 -07:00
723f2941e8
Revert "Move KUBECONFIG into common.sh, change default to new location"
2015-04-16 22:17:11 -07:00
5ce9b07cbe
Move KUBECONFIG declaration into common.sh, change default to new location
2015-04-16 19:23:35 -07:00
4094505f84
Enable configuring size of minion disk
2015-04-15 11:19:43 +02:00
5df4d927b9
We have had user reports that look like hash conflicts. Expand the has to 10 digits.
2015-04-08 21:51:50 -07:00
13b805fe1e
Merge pull request #6504 from ghodss/gce-customize-minion-size
...
Make minion disk size in GCE kube-up customizable
2015-04-07 08:36:43 -07:00
6ec32bf16c
Make minion disk size in GCE kube-up customizable
2015-04-06 21:47:45 -07:00
fd7db14df0
Add local file option to "upgrade.sh".
2015-04-06 16:30:15 -07:00
616c6be653
Refactor the "gcloud compute instances create" call as well.
2015-04-06 08:35:02 -07:00
9e5fd874cc
First hack at upgrade script for GCE:
...
Address #6075 : Shoot the master VM while saving the master-pd. This
takes a couple of minor changes to configure-vm.sh, some of which also
would be necessary for reboot. In particular, I changed it so that the
kube-token instance metadata is no longer required after inception;
instead, we mount the master-pd and see if we've already created the
known tokens file before blocking on the instance metadata.
Also partially addresses #6099 in bash by refactoring the kube-push
path.
2015-04-05 11:42:34 -07:00
0ffabfa9f7
Add ability to set master/minion size for GCE using envvar.
2015-04-03 11:36:05 +02:00
59daeabaee
Make secrets at cluster startup.
...
These secrets will be used in subsequent PRs by:
scheduler, controller-manager, monitoring services,
logging services, and skydns.
Each of these services will then be able to stop using kubernetes-ro
or host networking.
2015-04-02 15:58:45 -07:00
5e6e67ba59
Add an alternative TokenSource to the GCE CloudProvider.
2015-04-01 17:52:30 -07:00
ce72839153
Merge pull request #6329 from mbforbes/fixUp
...
Fix pod that's looked for on kube up.
2015-04-01 17:51:37 -07:00
4f9b1c486f
Don't ever give up on retrying downloads in the GCE download-or-bust function.
2015-04-02 00:40:19 +00:00
152a461f39
Fix pod that's looked for on kube up.
2015-04-01 17:28:04 -07:00
0d382c03fc
Add missing } to fix cluster/gce/util.sh
2015-03-31 14:03:18 -07:00
fe00f7abd0
Merge pull request #6168 from brendandburns/docs
...
Auto-install gcloud and needed components, if necessary
2015-03-31 13:55:46 -07:00
6c219885e0
s/apiservers/api_servers/ in Salt
...
It looks like api_servers finally won this battle. Kill off the
last remaining places passing it, but allow the kubelet Salt to
accept apiservers for a period of time.
(This was bothering my OCD.)
2015-03-31 12:29:46 -07:00
98cdf04189
Auto-install gcloud if needed.
2015-03-31 12:10:35 -07:00
0c75f26a74
Merge pull request #6148 from zmerlynn/brctl_complaint
...
Fix "brctl: invalid command" message appearing in startup logs
2015-03-30 08:01:30 -07:00
b3636bba34
Fix "brctl: invalid command" message appearing in startup logs
...
We were actually failing to call brctl in configure-vm.sh. I finally
tracked it down to the attempt to delete the docker0 bridge. This
particular package was getting installed later by Salt anyways, so
all this PR is doing is moving the package install up from Salt to
bash.
Also adds some minor logging.
2015-03-29 18:30:33 -07:00
708553f0bb
GCE node salt: Use the master FQDN, not the master IP
...
This will allow us to upgrade the master by full re-provision, without
even bothering to reserve the IP.
2015-03-28 13:44:45 -07:00
525bbfd175
Merge pull request #6103 from zmerlynn/remove_gce_node_names
...
Remove the --machines SaltStack configuration on GCE
2015-03-27 17:55:16 -07:00
68ccb97907
Remove the --machines SaltStack configuration on GCE
...
Per https://github.com/GoogleCloudPlatform/kubernetes/issues/6072#issuecomment-87074456 , this is no longer necessary.
We now no longer need a static node list. Woo!
2015-03-27 14:44:19 -07:00
6fd376a04f
Fix the scripts to optionally skip prompts and also return successfully no matter what.
2015-03-27 13:53:26 -07:00
1aa2b97792
Revert "Revert "Update gce starting guide to use get.k8s.io""
...
This reverts commit b369f2b48f
2015-03-27 13:46:28 -07:00
b369f2b48f
Revert "Update gce starting guide to use get.k8s.io"
2015-03-26 19:36:25 -07:00
61b624457d
Update gce starting guide to use get.k8s.io
...
Also auto install gcloud if it's not present.
2015-03-26 16:08:56 -07:00
ddb0a70481
Fix tiny salt logging line.
2015-03-26 14:37:51 -07:00
eea09ddfbb
Fix the date command to work on OS X
2015-03-26 13:48:59 -07:00
ed567736ea
Retry apt operations to death
...
Nodes are probably broken if update or install fails. Don't proceed
if we can't get past these. Also, instead of ignoring the error off
dpkg, use --force depends, which changes the errors to be kinder
warnings for anyone looking through the logs.
2015-03-24 16:11:40 -07:00
ee53dfc741
Turn on namespace lifecycle plug-in
2015-03-24 10:36:06 -04:00
c3189657b6
Bump the default boot disk size for GCE from 10GB to 100GB so that there is
...
more space to store containers and image layers.
2015-03-20 13:06:35 -07:00
407d1fec45
Both @satnam6502 and E2E tests confirm: This code is no longer needed
...
Deletion is wonderful. The only weird thing was where to put the
message about the proxy URLs. Satnam suggested kubectl clusterinfo,
which seemed like a good option to put at the end of cluster turn-up.
2015-03-19 22:23:11 -07:00
57cd8165b0
Ensure salt-minion never starts by setting invoke-rc.d policy using
...
the /usr/sbin/policy-rc.d script and returning 101, per
https://people.debian.org/~hmh/invokerc.d-policyrc.d-specification.txt ,
but only for the window while we're installing Salt.
This is a much more fool-proof method than what I was attempting
before. I hunted for how to do this before and clearly failed at my
Google-fu.
Fixes #5621
2015-03-18 16:15:24 -07:00
b6e7f470cb
Merge pull request #5576 from vmarmol/auth
...
Add monitoring scope to default GCE config.
2015-03-17 17:22:52 -07:00
8e2dc04da8
Add monitoring scope to default GCE config.
...
This will allow Heapster to run GCM-based monitoring on the nodes.
2015-03-17 17:02:10 -07:00
dce75998d0
Upgrade to container-vm-20150315
2015-03-17 16:10:39 -07:00
f2de7b4dcc
Add --can-ip-forward to master instance
...
Another piece missing in
https://github.com/GoogleCloudPlatform/kubernetes/pull/5390 . The
master should have --can-ip-forward if you're routing to it.
2015-03-13 15:17:07 -07:00
0948cb745f
Merge pull request #5454 from jlowdermilk/get-password
...
Make get-password robust against invalid kubeconfig entries
2015-03-13 13:40:55 -07:00
8fef6fb343
Make get-password robust against invalid kubeconfig entries
2015-03-13 13:26:47 -07:00
9b55e1f176
Delete master route on kube-down
2015-03-13 11:00:19 -07:00
dfb9f2aa17
Revert "Revert "Actually update binaries during kube-push""
2015-03-12 18:04:36 -07:00
bb2c3037e0
Revert "Actually update binaries during kube-push"
2015-03-12 17:09:50 -07:00
c3951d7cf6
Merge pull request #5415 from zmerlynn/fix_binary_push
...
Actually update binaries during kube-push
2015-03-12 16:51:28 -07:00
b02188b7d8
Actually update binaries during kube-push
...
This was a dumb mistake during a re-factor of configure-vm. I tested
this early, re-factored the tail of this file, spot checked kube-push
and failed to test kube-push properly. My bad.
Fixes #5361 . Fixes #5408 .
2015-03-12 16:44:32 -07:00
5d9fe6212c
Add MASTER_IP_RANGE to e2e.
2015-03-12 14:22:03 -07:00
9fc5262c14
Infer KUBERNETES_MASTER from hostname rather than requiring it to be explicit
...
This allows GKE to have the same YAML on both the master and nodes
2015-03-12 11:51:21 -07:00
e16bcceceb
Merge pull request #5390 from brendandburns/shell_sucks
...
Configure docker on the master like we do on workers.
2015-03-12 11:42:03 -07:00
17ff8fb421
Configure docker on the master like we do on workers.
2015-03-12 10:37:30 -07:00
bc655681fe
Merge pull request #5352 from zmerlynn/conditional_disk
...
Don't always run mount-master-pd
2015-03-12 10:19:04 -07:00
c03b080328
Merge pull request #5332 from vishh/heapster_e2e
...
Adding a ginkgo version of monitoring e2e test
2015-03-12 08:37:45 -07:00
d4f06cea9f
Don't always run mount-master-pd
2015-03-11 19:58:44 -07:00
e7aca5c337
Enable heapster based cluster monitoring by default on other cluster providers, expect for GKE.
2015-03-11 23:34:04 +00:00
663bdb91c9
Remove monitoring firewall setup methods. Heapster anf Grafana are now accessible via the API server proxy.
2015-03-11 23:20:45 +00:00
425dd7e3ee
Adding a heapster ginkgo e2e test.
2015-03-11 21:47:47 +00:00
e780592315
Merge pull request #5264 from jlowdermilk/kube-up
...
Standalone kubeconfig for gce kube-up (mulligan)
2015-03-11 11:46:45 -07:00
64eca7393a
Update to use yaml quote
2015-03-11 11:07:36 -04:00
468bf1da75
Enable common set of admission controllers across salt providers
2015-03-11 11:06:00 -04:00
759e82c29f
Remove dep on yaml for GCE startup
...
Write out "yaml" in util.sh. Dying a little. :'(
Fixes #5258
2015-03-10 16:38:52 -07:00
7333d991fb
Revert "Fix need for yaml in GCE kube-up by importing PyYAML into third_party"
2015-03-10 15:42:28 -07:00
7db006ab1a
Generate standalone kubeconfig on kube-up, clear on kube-down.
...
Also tweaked the ginkgo tests to pull auth directly from a kubeconfig file
instead of the legacy kubernetes_auth file.
2015-03-10 14:23:34 -07:00
965f684e2f
Adjust kube-env.py to use third_party PyYAML
2015-03-10 13:53:13 -07:00
b31b633f85
One additional cleanup: Send only the master name, rather the internal
...
IP address. The configure-vm script can resolve this relatively easily
on the node. This is less painful for GKE, which creates all the
resources in parallel.
2015-03-10 09:04:29 -07:00
120dba474e
Change GCE to use standalone Saltstack config:
...
Change provisioning to pass all variables to both master and node. Run
Salt in a masterless setup on all nodes ala
http://docs.saltstack.com/en/latest/topics/tutorials/quickstart.html ,
which involves ensuring Salt daemon is NOT running after install. Kill
Salt master install. And fix push to actually work in this new flow.
As part of this, the GCE Salt config no longer has access to the Salt
mine, which is primarily obnoxious for two reasons: - The minions
can't use Salt to see the master: this is easily fixed by static
config. - The master can't see the list of all the minions: this is
fixed temporarily by static config in util.sh, but later, by other
means (see
https://github.com/GoogleCloudPlatform/kubernetes/issues/156 , which
should eventually remove this direction).
As part of it, flatten all of cluster/gce/templates/* into
configure-vm.sh, using a single, separate piece of YAML to drive the
environment variables, rather than constantly rewriting the startup
script.
2015-03-10 09:04:29 -07:00
a280e0da2d
Revert "Standalone kubeconfig for gce kube-up"
2015-03-09 17:45:06 -07:00
89bc7bbea9
Merge pull request #5154 from jlowdermilk/kube-up
...
Standalone kubeconfig for gce kube-up
2015-03-09 16:22:51 -07:00
4173d369aa
Generate standalone kubeconfig on kube-up, clear on kube-down.
...
Also tweaked the ginkgo tests to pull auth directly from a kubeconfig file
instead of the legacy kubernetes_auth file.
2015-03-09 16:02:00 -07:00
38178299bb
Upgrade to latest containervm image: v20150305
2015-03-06 13:54:33 -08:00
83c3c53ff6
Merge pull request #5014 from justinsb/aws_cluster_push
...
Copy download-or-bust helper from gce to aws
2015-03-04 16:26:01 -08:00
05d4aea3bf
Copy download-or-bust helper from gce to aws
...
During a push, we were wget-ing to <filename>.1, .2, etc, which wasn't working
2015-03-04 16:30:11 -05:00
12e785c3b8
Implement restart-apiserver for AWS, fix comment
2015-03-04 15:35:29 -05:00
2a6b5a2262
Removed staled docker artifacts on GCE minions.
2015-03-02 23:24:29 -08:00
e918f36c2b
Fix URL for Elasticsearch
2015-03-02 15:57:12 -08:00
66dfbe900a
Merge pull request #4963 from roberthbailey/kubectl-proxy
...
Remove host ports from the update demo and update tests (take 2).
2015-03-02 15:16:04 -08:00
72183c064c
Use proxy instead of load balancer
2015-03-02 13:44:41 -08:00
5799dd5f7d
Remove host ports from the update demo and update tests (take 2).
2015-03-02 10:15:34 -08:00
7763570579
Print grafana address print in kube-up.sh.
...
Print grafana address print in kube-up.sh. Resolved #4721 .
2015-02-27 09:15:08 +01:00
19b927ea57
Name a cluster and use it to make forwarding rules for GCE
2015-02-23 17:04:33 -08:00
6a18b74fa3
Minor reordering of GCE kube-up subcommands to keep them logically grouped.
2015-02-23 13:57:09 -08:00
953982f47f
Add the salt-overlay and /etc/salt directories to the GCE master-pd and reserve
...
the master's IP upon creation to make it easier to replace the master later.
This pulls out the parts of PR #3174 that don't break anything and will
make upgrading existing clusters in the future less painful.
Add /etc/salt to the master-pd
2015-02-23 13:56:11 -08:00
434b74da63
Delete cluster level logging services during kube down
2015-02-19 14:30:53 -08:00
eee9804e97
Strip whitespace that OS X inserts on wc calls.
2015-02-17 17:19:33 -08:00
fe5b257cfc
Merge pull request #4427 from satnam6502/e2e_cluster_logging
...
Enabled Elasticsearch cluster level logging for e2e test clusters
2015-02-17 14:32:26 -08:00
3043ae9144
Merge pull request #4492 from jlowdermilk/e2e
...
Cleanup resources after services/guestbook e2e tests.
2015-02-17 12:04:46 -08:00
47622092fd
Merge pull request #4164 from tkulczynski/mig
...
Use Managed Instance Group for managing Nodes in GCE
2015-02-17 12:01:48 -08:00
bcadad2e2e
Use Managed Instance Group instead of manually creating Nodes in GCE
2015-02-17 20:33:31 +01:00
8ad671b01e
Cleanup resources after shell tests exit
2015-02-17 11:27:54 -08:00
aa32f1b2ce
Retry #4337 : Make gce kubeconfig context include project
2015-02-13 13:31:50 -08:00
6625136d80
Enabled Elasticsearch cluster level logging for e2e test clusters
2015-02-13 11:15:47 -08:00
e2ec52bfdf
Revert "Make gce's kubeconfig context include the gce project"
2015-02-12 17:01:06 -08:00
edea91e519
Merge pull request #4337 from jlowdermilk/kubeconfig
...
Make gce's kubeconfig context include the gce project
2015-02-12 15:22:26 -08:00
41547a1152
Fix kube-up bug introduced by #4353
2015-02-11 17:44:28 -08:00
0194ed8575
Merge pull request #4353 from erictune/fix_get_password
...
Don't fail get-password when no current-context.
2015-02-11 15:25:24 -08:00
c348b30f62
Update util.sh
2015-02-11 14:32:41 -08:00
549504dfff
Don't fail get-password when no current-context.
2015-02-11 14:25:15 -08:00
56462c020a
democratize restart-apiserver method across clouds
2015-02-11 13:44:43 -08:00
3da5d27ab2
Make gce's kubeconfig context include the gce project
...
Change the .kubeconfig context that gce kube-up creates to project
+ instance prefix, so you can spin up clusters with the same name
in different compute projects without overwriting .kubeconfig.
2015-02-11 12:07:59 -08:00
49a9f8b512
Fix kube-up.sh for OS X.
2015-02-06 16:35:39 -08:00
8f6d9c1039
Use config output formatting to get password in gce kube-up
...
Gets rid of e2e dependency on pyyaml.
2015-02-05 14:54:45 -08:00
ffe6149d51
Merge pull request #4097 from jlowdermilk/fix-jenkins-e2e
...
Fix get-password for gce
2015-02-03 20:09:48 -08:00
06aa8bd164
Fixes get-password for gce
2015-02-03 19:38:24 -08:00
2f546ce649
Parameterize ENABLE_{NODE,CLUSTER}_{LOGGING,MONITORING} and LOGGING_DESTINATION
...
In config-{default,test.sh}. This will make it possible for e.g.
Jenkins to override LOGGING_DESTINATION. Also reorder the parameters
so they're in the same order across files for easier scanning.
2015-02-03 17:23:17 -08:00
baba7d6004
Merge pull request #4034 from jlowdermilk/kube-up
...
Use kubectl to manage config for gce clusters
2015-02-03 14:50:38 -08:00
793677e8e2
Merge pull request #4062 from dchen1107/image
...
Upgrade to container-vm-v20150129 image
2015-02-03 10:50:28 -08:00
ae27f29c56
Reinstate cluster logging URLs to the end of kube-up.sh
...
Adds labels to the services, waits for them to be created (which
should be instant, but just in case), query the forwarding rules like
as we did before.
Fixes #3893
2015-02-03 08:27:02 -08:00
f919b3e9c6
Upgrade to container-vm-v20150129 image
2015-02-02 16:57:43 -08:00
e0ec192869
Use kubeconfig to manage config for gce/e2e clusters
2015-02-02 15:02:25 -08:00
a1b51d9165
Maybe make services e2e test more resilient to GCE errors
2015-01-29 15:50:46 -08:00
72c1820055
Generate IP addresses for minions of large GCE clusters
...
Use env for for subnet size
2015-01-27 16:11:39 -08:00
a305269e18
Deferred creation of SkyDNS, monitoring and logging objects
...
This implements phase 1 of the proposal in #3579 , moving the creation
of the pods, RCs, and services to the master after the apiserver is
available.
This is such a wide commit because our existing initial config story
is special:
* Add kube-addons service and associated salt configuration:
** We configure /etc/kubernetes/addons to be a directory of objects
that are appropriately configured for the current cluster.
** "/etc/init.d/kube-addons start" slurps up everything in that dir.
(Most of the difficult is the business logic in salt around getting
that directory built at all.)
** We cheat and overlay cluster/addons into saltbase/salt/kube-addons
as config files for the kube-addons meta-service.
* Change .yaml.in files to salt templates
* Rename {setup,teardown}-{monitoring,logging} to
{setup,teardown}-{monitoring,logging}-firewall to properly reflect
their real purpose now (the purpose of these functions is now ONLY to
bring up the firewall rules, and possibly to relay the IP to the user).
* Rework GCE {setup,teardown}-{monitoring,logging}-firewall: Both
functions were improperly configuring global rules, yet used
lifecycles tied to the cluster. Use $NODE_INSTANCE_PREFIX with the
rule. The logging rule needed a $NETWORK specifier. The monitoring
rule tried gcloud describe first, but given the instancing, this feels
like a waste of time now.
* Plumb ENABLE_CLUSTER_MONITORING, ENABLE_CLUSTER_LOGGING,
ELASTICSEARCH_LOGGING_REPLICAS and DNS_REPLICAS down to the master,
since these are needed there now.
(Desperately want just a yaml or json file we can share between
providers that has all this crap. Maybe #3525 is an answer?)
Huge caveats: I've gone pretty firm testing on GCE, including
twiddling the env variables and making sure the objects I expect to
come up, come up. I've tested that it doesn't break GKE bringup
somehow. But I haven't had a chance to test the other providers.
2015-01-21 12:25:50 -08:00
50c32fbba4
Adding a replication controller for all monitoring pods.
...
Removed auth for Grafana to facilitate usage via service proxy on the api-server.
Added a grafana service
Removed elasticsearch dependency for monitoring - faster startup times.
2015-01-16 18:37:46 +00:00
43cd9e91f6
Revert "Adding a replication controller for all monitoring pods."
2015-01-16 07:16:54 -08:00
d443dd8ea6
Merge pull request #3489 from vishh/monitoring_rc
...
Adding a replication controller for all monitoring pods.
2015-01-15 18:18:54 -08:00
ca2267e3e9
Adding a replication controller for all monitoring pods.
...
Removed auth for Grafana to facilitate usage via service proxy on the api-server.
Added a grafana service
Removed elasticsearch dependency for monitoring - faster startup times.
2015-01-16 00:56:51 +00:00
0b9f6bc8bb
Merge pull request #3528 from satnam6502/fixoutput
...
Report project and zone only once for GCE
2015-01-15 13:35:48 -08:00
1bff012c36
Convert basic.sh e2e test to Go
2015-01-15 11:41:29 -08:00
9ba6525597
Report project and zone only once
2015-01-15 11:21:42 -08:00
ba8b4518c1
Upgrade OSS k8s on GCE to latest containervm image: container-vm-v20150112
2015-01-14 16:17:57 -08:00
295bd3768d
Launch Elasticsearch and Kibana automatically
2015-01-09 13:41:46 -08:00
9aa48b7628
Move heapster data files to cluster/addons.
...
Also pretty up the JSON (make it real JSON) and streamline the sed in cluster/gce/init.sh.
2015-01-05 12:32:35 -08:00
8b38453501
Allow for easily specifying the type and size of minion disks on GCE.
...
Issue #3192
2015-01-03 16:57:16 -08:00
7dec65f535
Merge pull request #3156 from evenemento/master
...
Add missign network flag
2014-12-29 14:06:01 -08:00
Prashanth Balasubramanian