Commit Graph

462 Commits (e9afbd5cdf4501e3ba4377d4032afc28b03eac93)

Author SHA1 Message Date
Yu-Ju Hong 94f580ef03 Revert "bootstrap: Start hostNetwork pods even if network plugin not ready" 2016-10-25 08:38:59 -07:00
Mike Danese 27116c6818 rename build/ to build-tools/ 2016-10-24 14:41:56 -07:00
Justin Santa Barbara 6465742da1 Update bringup: don't pass in dummy pod-cidr
We no longer pass in a "dummy" pod-cidr (10.123.45.0/29), and rely on
reconcile-cidr=true instead (which is the default).
2016-10-22 11:16:19 -04:00
Kubernetes Submit Queue 712d3d2cd3 Merge pull request #30912 from mwl/fix/aws-multicluster-per-region
Automatic merge from submit-queue

Added INSTANCE_PREFIX to project hash to avoid S3 bucket clash

**What this PR does / why we need it**:
Fixes an issue where if you run multiple k8s clusters in same region S3 resources are being overwritten and therefore node bootstrapping stalls, i.e. when using Auto scaling.

**Special notes for your reviewer**:
By adding the `INSTANCE_PREFIX` to the project hash in the S3 bucket the bucket will not be overwritten.

**Release note**:
<!--  Steps to write your release note:
1. Use the release-note-* labels to set the release note state (if you have access) 
2. Enter your extended release note in the below block; leaving it blank means using the PR title as the release note. If no release note is required, just write `NONE`. 
-->
```release-note
```
2016-10-16 09:10:43 -07:00
Colin Hom 5039d93c60 fixup: iam roles are now uniquely identified by CLUSTER_ID + VPC_ID
this is the same criteria that is currently applied for ascertaining ownership other resources ( eg: security groups, which are also deleted in a similar fashion)

We are now respecting existing cluster namespace isolation rules.
2016-10-11 11:54:55 -07:00
Colin Hom 0c562bac48 federation: aws compatibility for cluster and e2e frameworks 2016-10-07 11:25:18 -07:00
Justin Santa Barbara a6dfaffe3f Fix typo: incremeting -> incrementing 2016-09-24 16:10:51 -04:00
Minhan Xia 879a2dcdbd bump master cidr range from /30 to /29 2016-09-16 13:41:58 -07:00
Zach Loafman 11c8830dec AWS: Docker is flapping because of cbr0 bringup, flip to kubenet
This is a mitigation. There's a kubelet bug that prevents
NETWORK_PROVIDER=none from working right now.
2016-09-07 15:41:38 -07:00
Euan Kemp a2a324bf8b cluster/rkt: Update default rkt version 2016-09-06 12:09:11 -07:00
Martin Westergaard Lassen c73a47f599 Added INSTANCE_PREFIX to S3 project hash to avoid url clashes between clusters in same EC2 region 2016-09-05 14:22:00 +01:00
Zach Loafman a167a90f80 AWS: Fix unbound SSH_CIDR
Another e2e bug, this one injected by https://github.com/kubernetes/kubernetes/pull/27061
2016-08-29 19:12:16 -07:00
Kubernetes Submit Queue e277ccef94 Merge pull request #31295 from zmerlynn/e2e-what-what
Automatic merge from submit-queue

AWS: Hopefully fix e2e?

**What this PR does / why we need it**: Fix AWS e2e
**Which issue this PR fixes**: fixes build broken by #28499 
**Special notes for your reviewer**: This is a pump & dump, I probably won't be around to respond to comments after this. If it needs a cherry-pick or anything, please check?
2016-08-29 17:10:06 -07:00
Kubernetes Submit Queue ef2718620c Merge pull request #30900 from jsafrane/pvc-admission
Automatic merge from submit-queue

Add admission controller for default storage class.

The admission controller adds a default class to PVCs that do not require any
specific class. This way, users (=PVC authors) do not need to care about
storage classes, administrator can configure a default one and all these PVCs
that do not care about class will get the default one.

The marker of default class is annotation "volume.beta.kubernetes.io/storage-class", which must be set to "true" to work. All other values (or missing annotation) makes the class non-default.

Based on @thockin's code, added tests and made it not to reject a PVC when no class is marked as default.
. 
@kubernetes/sig-storage
2016-08-24 03:32:46 -07:00
Zach Loafman dfcf286036 AWS: Hopefully fix e2e?
Broken by #28499
2016-08-23 13:56:12 -07:00
Jan Safranek 5f6efefc40 [squash] Rename and move to storageclass/ 2016-08-22 14:11:01 +02:00
Kubernetes Submit Queue 10a25b1709 Merge pull request #28499 from Secful/parameterize_vpc_name
Automatic merge from submit-queue

Parameterize vpc name
2016-08-22 00:54:38 -07:00
Kubernetes Submit Queue 413677110b Merge pull request #27061 from Naddiseo/aws-ip-restrict-ssh-fixes-26661
Automatic merge from submit-queue

kube-up: Allow IP restrictions for SSH and HTTPS API access on AWS.

<!--
Checklist for submitting a Pull Request

Please remove this comment block before submitting.

1. Please read our [contributor guidelines](https://github.com/kubernetes/kubernetes/blob/master/CONTRIBUTING.md).
2. See our [developer guide](https://github.com/kubernetes/kubernetes/blob/master/docs/devel/development.md).
3. If you want this PR to automatically close an issue when it is merged,
   add `fixes #<issue number>` or `fixes #<issue number>, fixes #<issue number>`
   to close multiple issues (see: https://github.com/blog/1506-closing-issues-via-pull-requests).
4. Follow the instructions for [labeling and writing a release note for this PR](https://github.com/kubernetes/kubernetes/blob/master/docs/devel/pull-requests.md#release-notes) in the block below.
-->

```release-note

```


[![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/.github/PULL_REQUEST_TEMPLATE.md?pixel)]()

Closes #26661
2016-08-21 20:45:06 -07:00
Jan Safranek 82d35fb461 Add admission controller for default storage class.
The admission controller adds a default class to PVCs that do not require any
specific class. This way, users (=PVC authors) do not need to care about
storage classes, administrator can configure a default one and all these PVCs
that do not care about class will get the default one.
2016-08-18 18:55:35 +02:00
Zach Loafman ec33089519 AWS: Handle kube-down case where the LaunchConfig is dangling
Always query and attempt to delete the default launch-config
2016-08-17 14:45:43 -07:00
Zach Loafman 8d0200e5af AWS: Allow no-op kube-down to exit 0
Not exactly sure why hack/e2e.go IsUp() is returning true right now,
but I can solve this a different way. This unifies with the GCE
behavior, which is that no-op kube-down returns 0.
2016-08-10 10:36:38 -07:00
Ryan Hitchman 5508e49ef5 Use bash ranges "{1..3}" instead of "$(seq 1 3)". 2016-08-08 16:23:39 -07:00
k8s-merge-robot 3d162d0400 Merge pull request #29427 from justinsb/aws_master_os_distribution
Automatic merge from submit-queue

AWS kube-up: fix MASTER_OS_DISTRIBUTION

On AWS we were defining KUBE_MASTER_OS_DISTRIBUTION, but the scripts
expect MASTER_OS_DISTRIBUTION.

Fixes #29422
2016-07-22 15:35:20 -07:00
Justin Santa Barbara 55d0d3b4fa AWS kube-up: export kube_user to salt
This was done for GCE in #29164, but not for AWS.

Fixes #29424
2016-07-22 00:46:03 -04:00
Justin Santa Barbara 49da8298c9 AWS kube-up: fix MASTER_OS_DISTRIBUTION
On AWS we were defining KUBE_MASTER_OS_DISTRIBUTION, but the scripts
expect MASTER_OS_DISTRIBUTION.

Fixes #29422
2016-07-22 00:45:05 -04:00
Maisem Ali 97f3f80833 Splitting OS_DISTRIBUTION into NODE_OS_DISTRIBUTION and
MASTER_OS_DISTRIBUTION.
2016-07-15 12:02:31 -07:00
joe2far 5ead89b5bb Fixed several typos 2016-07-13 15:06:24 +01:00
Michael Vilensky bc30b49a1e Parameterize vpc name 2016-07-04 16:22:40 +03:00
David McMahon ef0c9f0c5b Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
k8s-merge-robot c0e0e74728 Merge pull request #27278 from activars/aws_optional_dhcp_set_id
Automatic merge from submit-queue

Making DHCP_OPTION_SET_ID creation optional

Reason: We have a pre-configured VPC in AWS. `kube-up.sh` should not making changes to the VPC DHCP option if there's already DHCP options configured. 

PR Changes: When `DHCP_OPTION_SET_ID` is given in environment variable, kube-up.sh will skip the `DHCP_OPTION_SET_ID` creation.
2016-06-28 01:13:20 -07:00
k8s-merge-robot eeda4c7915 Merge pull request #24910 from paralin/aws-configurable-context
Automatic merge from submit-queue

cluster/aws: Add option for kubeconfig context

Added KUBE_CONFIG_CONTEXT environment variable to customize the kubeconfig context created at the end of the aws kube-up script.

Fixes #24877 

This PR does barely anything and shouldn't require e2e tests. It's just a minor convenience.

<!-- Reviewable:start -->
---
This change is [<img src="http://reviewable.k8s.io/review_button.svg" height="35" align="absmiddle" alt="Reviewable"/>](http://reviewable.k8s.io/reviews/kubernetes/kubernetes/24910)
<!-- Reviewable:end -->
2016-06-24 13:09:40 -07:00
nikhiljindal 1204411209 Revert "Federation e2e supports aws"
This reverts commit 5bacc4830e.
2016-06-24 10:44:35 -07:00
Colin Hom 5bacc4830e Federation e2e supports aws 2016-06-21 18:22:46 -07:00
Justin Santa Barbara f3cc5f503a AWS kube-up: Authorize route53 in the IAM policy
Federation needs this now (on the nodes), and I suspect ingress
controllers will shortly want this also.  Given we're going to authorize
it on the nodes, we should authorize it on the master also (the master
is much more trusted).

Fix #27467
2016-06-21 15:42:54 -04:00
k8s-merge-robot ee87a39f04 Merge pull request #27676 from justinsb/aws_debian_1_11
Automatic merge from submit-queue

AWS kube-up: move to Docker 1.11.2

This is to mirror GCE

Also we remove support for vivid as Docker no longer packages for it, and remove some of the unreachable distro code in aws kube-up.

Also bump the AMI to a 1.3 version (with preinstalled Docker 1.11.2)

Fixes https://github.com/kubernetes/kubernetes/issues/27654
2016-06-21 12:29:03 -07:00
nikhiljindal 864b267a8d Simplifying the code to create kubeconfig 2016-06-20 16:10:47 -07:00
nikhiljindal 657a7ef6a4 Create kubeconfig for cluster secrets on other cloud providers as well 2016-06-20 14:36:14 -07:00
Justin Santa Barbara 0345013dde AWS kube-up: point to new AMI; link to new tool
Also remove the copy of the manifest now that it has found a real home
in kube-deploy.
2016-06-18 20:42:31 -04:00
Justin Santa Barbara b8112beb34 AWS kube-up: remove support for vivid
Vivid is EOL, and Docker is no longer packaged for it.

Remove support for it in 1.3 (in 1.2 we had warned users it was EOL).

Also remove unused wheezy, trusty & coreos & do general cleanup.
2016-06-18 20:42:31 -04:00
Justin Santa Barbara e58a16e95a AWS kube-down: Issue warning if VPC not found
Issue #17219
2016-06-15 23:53:57 -04:00
Jing Dong 70ac7abb10 kube-up.sh should allow using existing DHCP option set without making changes to existing VPC configuration. 2016-06-13 15:02:14 +01:00
Richard Eames d9be75e9fe Allow IP restrictions for SSH and HTTPS API access on AWS.
Closes #26661
2016-06-08 12:33:15 -06:00
Marcin Wielgus edf21902b5 Rename ENABLE_NODE_AUTOSCALER to ENABLE_CLUSTER_AUTOSCALER - part 1 2016-06-08 13:35:38 +02:00
Josh Ellithorpe 07f8d025c8
Remove SecurityContextDeny from aws configurations 2016-06-04 15:52:10 -07:00
gmarek 049d7f6c50 Remove unused POLL_SLEEP_INTERVAL 2016-05-24 13:34:03 +02:00
k8s-merge-robot 7c1d37bdb5 Merge pull request #24464 from matthewrudy/aws-ap-northeast2
Automatic merge from submit-queue

AWS: More support for ap-northeast-2 region

Issue #24446

The new AWS region for Seoul, Korea (ap-northeast-2)
was launched in January 2016
https://aws.amazon.com/blogs/aws/now-open-aws-asia-pacific-seoul-region/

But it requires a few changes.

To test:
```
export KUBERNETES_PROVIDER=aws
export KUBE_AWS_ZONE=ap-northeast-2a
export MASTER_SIZE=t2.medium
export NODE_SIZE=t2.medium
export NUM_NODES=4
cluster/kube-up.sh
```

I assigned the AMIs by checking the specific version used from `ap-northeast-1`,
and finding the same image with the same datestamp.

<!-- Reviewable:start -->
---
This change is [<img src="http://reviewable.k8s.io/review_button.svg" height="35" align="absmiddle" alt="Reviewable"/>](http://reviewable.k8s.io/reviews/kubernetes/kubernetes/24464)
<!-- Reviewable:end -->
2016-05-17 04:01:39 -07:00
k8s-merge-robot 61f383e5d1 Merge pull request #23785 from ajohnstone/23784-aws-vpc-key-error
Automatic merge from submit-queue

AWS kube-down: don't fail if ELB not in VPC - #23784

Prevent python undefined key error.

```
Traceback (most recent call last):
  File "<string>", line 1, in <module>
KeyError: 'VPCId'
```

Fixes #23784

<!-- Reviewable:start -->
---
This change is [<img src="http://reviewable.k8s.io/review_button.svg" height="35" align="absmiddle" alt="Reviewable"/>](http://reviewable.k8s.io/reviews/kubernetes/kubernetes/23785)
<!-- Reviewable:end -->
2016-05-16 01:45:49 -07:00
Alexander Krassiev be2633a0a1 Fixed 'Invalid endpoint: https://ec2.us-east-.amazonaws.com'. #24420 #24020 2016-05-14 11:08:04 -07:00
Matthew Rudy Jacobs 895e44405c Add configuration for AWS ap-northeast-2 region
Added AWS_IMAGEs from https://cloud-images.ubuntu.com/locator/
2016-05-14 01:15:55 +08:00
Fabio Yeon 4dcc4bbcd8 Merge pull request #23362 from miguelfrde/configure-base-vpc-cidr
AWS kube-up: Allow VPC CIDR to be specified (experimental)
2016-05-10 19:37:33 -07:00