Erik Wilson
fa03a0df3c
Run kubelet with containerd flag
...
The containerd flag was accidentally added to kubelet and is
deprecated, but needed for cadvisor to properly connect with
the k3s containerd socket, so adding for now.
5 years ago
Erik Wilson
5b98d10e4b
Warn if NPC can't start rather than fatal error
...
If the ip_set kernel module is not available we should warn
that the network policy controller can not start rather than
cause a fatal error.
Also adds module probing and config checks for ip_set.
5 years ago
Erik Wilson
7675f9f85c
Clean up host-gw variable names
5 years ago
Segator
c23f12765e
hostgw flannel support
5 years ago
Segator
6736e24673
support hostgw
5 years ago
Erik Wilson
9421746ccf
Merge pull request #1235 from ibuildthecloud/master
...
Fix uint64 truncation issue in dqlite
5 years ago
galal-hussein
388cd9c4e8
Add secret encryption configuration
5 years ago
Darren Shepherd
9bda58c81a
Fix uint64 truncation issue in dqlite
5 years ago
galal-hussein
07d4c1510d
Add lease permissions to ccm cluster role
5 years ago
Erik Wilson
5c37454762
Merge pull request #1198 from narqo/tunel-addr-join-host-port
...
Respect IPv6 when building proxy address
5 years ago
Erik Wilson
9b2538c2c4
Set wireguard persistent-keepalive on wg set peer
5 years ago
Erik Wilson
3376f31fc2
Revert "Merge pull request #1190 from erikwilson/wireguard-keepalive"
...
This reverts commit e712cdf7e8
, reversing
changes made to d5929bc8c8
.
Wireguard docs fail to describe that persistent-keepalive is only valid
when peer is set.
5 years ago
Vladimir Varankin
0c5299c951
pkg/agent/tunnel: respect ipv6 when building proxy addresses
5 years ago
Erik Wilson
6875b11dd2
Fix identity_token -> identitytoken for containerd toml
5 years ago
Darren Shepherd
4acaa0740d
Small dqlite fixes
5 years ago
Erik Wilson
97383868bd
Merge pull request #1186 from erikwilson/upgrade-k8s-1.17.0
...
Upgrade k8s to v1.17.0
5 years ago
Erik Wilson
e712cdf7e8
Merge pull request #1190 from erikwilson/wireguard-keepalive
...
Set Wireguard keepalive to 25 seconds
5 years ago
Erik Wilson
5679a8bd2f
Update generated
5 years ago
Erik Wilson
76281bf731
Update k3s for k8s 1.17.0
5 years ago
Erik Wilson
814c302d7c
Merge pull request #955 from btashton/servicelb-sysctl
...
Enable ip forwarding on both all and default net config
5 years ago
Erik Wilson
7b62811f98
Set Wireguard keepalive to 25 seconds
5 years ago
Erik Wilson
d4959d53af
Merge pull request #1182 from erikwilson/docker-pause-image
...
Allow --pause-image to set docker sandbox image also
5 years ago
Erik Wilson
2eacfa75cb
Merge pull request #1180 from erikwilson/cleanup-flannel-backend-help-text
...
Cleanup --flannel-backend help text
5 years ago
Erik Wilson
56b0743653
Merge pull request #1171 from dweomer/mutable-labels
...
Mutable --node-label values for server/agent sub-commands.
5 years ago
Erik Wilson
c2be59e5f3
Allow udp protocol for service-lb ports
...
For #577
5 years ago
Brennan Ashton
a952d5c32a
Default device net config enables ip forwarding
...
The Linux kernel is inconsistent about how devconf is configured for new
network namespaces between ipv4 and ipv6. The behavior can also be
controlled via net.core.devconf_inherit_init_net in Linux 5.1+ so make
sure to enable forwarding on all and default for both ipv6 and ipv4.
This issue first came up testing on a yocto kernel that had this patch:
ipv4: net namespace does not inherit network configurations
[0] https://www.kernel.org/doc/html/latest/admin-guide/sysctl/net.html#devconf-inherit-init-net
[1] https://lkml.org/lkml/2014/7/29/119
Signed-off-by: Brennan Ashton <brennana@jfrog.com>
5 years ago
Erik Wilson
2de93d70cf
Allow --pause-image to set docker sandbox image also
5 years ago
Erik Wilson
11e4d01efe
Cleanup --flannel-backend help text
5 years ago
Jacob Blain Christen
063efb25bb
Mutable --node-label values for server/agent sub-commands.
...
Values passed in via the server/agent `--node-label` flag are treated as mutable. They are passed through to the kubelet just as before but after the kubelet comes up they are applied again. This allows for passing labels a k3s start-time that may be necessary for scheduling but may change from boot to boot, e.g. `k3os.io/version` after an upgrade.
Tested locallon on my amd64 workstation with the docker container.
Addresses #1119 .
5 years ago
yuzhiquan
24869ddf21
remove []byte trans, handle func error
5 years ago
yuzhiquan
7cc0110081
fix typo
5 years ago
Erik Wilson
ce3a03a16a
Merge pull request #1111 from dduportal/patch-1
...
Bump Traefik to 1.7.19
5 years ago
dduportal
9598a527a2
Regenerate bindata
...
Signed-off-by: dduportal <1522731+dduportal@users.noreply.github.com>
5 years ago
Guangbo Chen
8ff4c3c256
Update base pause image to rancher repo
5 years ago
galal-hussein
99b8222e8d
Change storage to datastore
5 years ago
Darren Shepherd
c2e7f9c7b0
Add logging parameters
5 years ago
Darren Shepherd
4e544bded2
Delete unused code
5 years ago
Darren Shepherd
ff34c5c5cf
Download cert/key to agent with single HTTP request
...
Since generated cert/keys are stored locally, each server has a different
copy. In a HA setup we need to ensure we download the cert and key from
the same server so we combined HTTP requests to do that.
5 years ago
Erik Wilson
95ff805c98
Fix broken K3S_TOKEN env
5 years ago
Darren Shepherd
77703b90ff
Don't ever change 10252/10251 ports
...
Kubernetes componentstatus check is hardcoded to 10252 and 10251
so we should never change these ports. If you do componentstatus
will return error.
5 years ago
Erik Wilson
d4151b7739
Add the --with-node-id flag to agent
5 years ago
Erik Wilson
670d4b4162
Merge pull request #914 from erikwilson/validation-utilities
...
Add check-config for system validation
5 years ago
Erik Wilson
a73f8b1773
Update check-config.sh for k3s
5 years ago
Darren Shepherd
9a4df7c05c
Merge pull request #1058 from ibuildthecloud/master
...
Update kine/dynamiclistener
5 years ago
Darren Shepherd
6063317144
Add a couple more known SANs
5 years ago
Erik Wilson
e4b3730fa2
Go DNS lookup order hack
5 years ago
Erik Wilson
d383d1b47e
Merge pull request #1054 from erikwilson/sort-deployments
...
Use lexical (sorted) order for file deployments
5 years ago
Erik Wilson
b298733b3f
Use lexical (sorted) order for file deployments
5 years ago
Erik Wilson
55c05ac500
Refactor node password location
5 years ago
Erik Wilson
eff502342a
Fix node-passwd on upgrade missing 3 columns
5 years ago
Darren Shepherd
3e213d1347
Allow --debug to be set with K3S_DEBUG env var
5 years ago
Darren Shepherd
668fcf7e83
Fix broken --cluster-reset
5 years ago
Darren Shepherd
b2439788d7
Reduce logging in dqlite
5 years ago
Darren Shepherd
0ae20eb7a3
Support both http and db based bootstrap
5 years ago
Darren Shepherd
3f5fb70116
Move server arguments to experimental for dqlite related
5 years ago
Darren Shepherd
29b270dce6
Wait for apiserver to be health, not just running
5 years ago
Darren Shepherd
e2431bdf9d
Add dqlite support
5 years ago
Darren Shepherd
53d3ab074c
Shrink k3s wrapper binary
5 years ago
Darren Shepherd
91cacb3a14
Fix server join issues
5 years ago
Erik Wilson
e9a11c7cc4
Update generated code
5 years ago
Erik Wilson
47a94637dc
Move metrics-server manifests to sub-directory
5 years ago
Erik Wilson
01f6e0e64e
Add context to server daemon functions that wait
5 years ago
larmog
7aa3d08385
Wait for api-server to report version after starting
5 years ago
Erik Wilson
c4eb6ea3ef
Update generated data
5 years ago
Erik Wilson
0fef39de65
Add default multi-arch metrics-server deployment
5 years ago
Erik Wilson
931f63073f
Merge pull request #899 from mrueg/coredns-ready
...
coredns: Add readinessProbe
5 years ago
Erik Wilson
2bbc356f65
Merge pull request #1008 from erikwilson/ip6-system-setup
...
Improve ip6 system setup & utilities
5 years ago
Erik Wilson
afa9422ad9
Improve ip6 system setup & utilities
5 years ago
Darren Shepherd
609c5e5f51
Update generated code
5 years ago
Darren Shepherd
ba240d0611
Refactor tokens, bootstrap, and cli args
5 years ago
Manuel Rüger
e8ca18ab2b
coredns: Add readinessProbe
5 years ago
Erik Wilson
8a8fa8a351
Update go generated data
5 years ago
YAMAMOTO Takashi
4970d6133f
Propagate DisableAgent flag
...
The recent setMasterRoleLabel stuff uses it.
5 years ago
Erik Wilson
f648a64ee3
Merge pull request #923 from AkihiroSuda/fix-rootless-kubelet-flags
...
rootless: add kubelet flags automatically
5 years ago
Akihiro Suda
aafccdbccb
rootless: add kubelet flags automatically
...
Fix https://github.com/rancher/k3s/issues/784
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
5 years ago
Erik Wilson
ad4ea681ce
Hide the --disable-agent flag
5 years ago
Erik Wilson
1cd3786a6a
Merge pull request #952 from btashton/bump-klipper-lb
...
Bump klipper-lb version
5 years ago
Brennan Ashton
af7dc09f5c
Bump klipper-lb version
...
Signed-off-by: Brennan Ashton <brennana@jfrog.com>
5 years ago
Erik Wilson
aed163b338
Remove trailing whitespace trimming from containerd template
5 years ago
Erik Wilson
2ff2baba49
Merge pull request #913 from erikwilson/kube-router-network-policy
...
Add network policy support
5 years ago
Erik Wilson
da3a7c6bbc
Add network policy controller
5 years ago
Erik Wilson
1df72d14b8
Cleanup containerd config template spacing
5 years ago
Erik Wilson
90df4a1921
Use containerd-shim-run-v2
5 years ago
Erik Wilson
12307a4a69
Fallback to /etc/strongswan for config
...
Needed for docker image
5 years ago
Darren Shepherd
30c14a4db6
Merge pull request #901 from erikwilson/default-kubelet-dir
...
Use default kubelet directory
5 years ago
Erik Wilson
0ee586c233
Merge pull request #894 from galal-hussein/fix_master_label_ha
...
Fix Master label in HA setups
5 years ago
Erik Wilson
265181715a
Merge pull request #892 from iwilltry42/master
...
[Enhancement] include subdirectories for auto-deploy manifests
5 years ago
Erik Wilson
9e14d3e470
Merge pull request #851 from MagnaXSoftware/switch-string-slice
...
Add comma-separated no-deploy values
5 years ago
galal-hussein
7c60285435
Fix master role label in ha setups
5 years ago
Xavier Landreville
2f4a08c54d
Add comma-separated no-deploy values
...
This allows no-deploy values to be either specified as multiple --no-deploy invocations,
or a single invocation with comma-separated values.
5 years ago
galal-hussein
d2c1f66496
Add k3s cloud provider
5 years ago
Erik Wilson
c72ef62d2c
Use default kubelet directory
5 years ago
Thorsten Klein
50017c39a2
include subdirectories for auto-deploy manifests
5 years ago
Erik Wilson
c12d2a1aea
Merge pull request #867 from galal-hussein/private_reg
...
Add private registry support to containerd
5 years ago
galal-hussein
436ff4ef63
fix cert rotation function
5 years ago
galal-hussein
5ccc880ddb
Add private registry to containerd
5 years ago
Erik Wilson
cac41db0e1
Merge pull request #816 from galal-hussein/default_local_storage
...
Add default storage class
5 years ago
galal-hussein
2dc5ba5bae
Add certificate rotation
5 years ago
galal-hussein
56e0e5ad7e
Add default local storage provisioner
5 years ago
Erik Wilson
6f7a1a70fa
Label new flannel flags as experimental
5 years ago
Erik Wilson
0af32bba75
Use newest flannel API
5 years ago
Erik Wilson
999e40d6d3
Add strongswan utilities for ipsec
5 years ago
Erik Wilson
959acf9c92
Add --flannel-backend flag
5 years ago
Erik Wilson
359a77939c
Enable hairpin mode
5 years ago
Erik Wilson
36fa425d45
Enable extension and ipsec flannel backends
5 years ago
Erik Wilson
3cd807a657
Add --flannel-conf flag
5 years ago
Darren Shepherd
8dcc09f7be
Update generated code
5 years ago
galal-hussein
b1891f445b
Add master role label on startup
5 years ago
Erik Wilson
db9540aa10
Bump CoreDNS to v1.6.3
5 years ago
Darren Shepherd
36ca606073
Merge pull request #793 from yamt/noderestriction
...
Add back NodeRestriction
5 years ago
Darren Shepherd
df1f4551cb
Update generated code
5 years ago
YAMAMOTO Takashi
9cf80eacd9
Add back NodeRestriction
...
It has been removed as a part of #764 for no obvious reasons.
Fix #791
5 years ago
Erik Wilson
197985c673
Add --kubelet-certificate-authority flag
5 years ago
Darren Shepherd
209acb58c1
Revert CSI patch
5 years ago
Darren Shepherd
8f597ba168
Don't run leader elections on controllers when no leader election
5 years ago
Darren Shepherd
f0382329a5
Drop openapi hack
5 years ago
Darren Shepherd
f34329f4f1
Wrong import
5 years ago
Darren Shepherd
f57dd13774
Default kube-apiserver to httpsport + 1
5 years ago
Darren Shepherd
9c8b95be9d
Drop unneeded prometheus imports
5 years ago
Darren Shepherd
a51a2eaaad
Add anonymous-auth=false and remove NodeRestriction
5 years ago
Darren Shepherd
b24f214a50
Update to new cri-api import
5 years ago
Manuel Zapf
50227ff894
bump traefik version to 1.7.14 ( #769 )
...
* bump traefik version
5 years ago
Erik Wilson
a5238098d1
Merge pull request #752 from carlosedp/patch-1
...
Enable metrics endpoint to Traefik
5 years ago
Erik Wilson
5679cfafaf
Merge pull request #707 from ibuildthecloud/pr683
...
Integrate Kine
5 years ago
Darren Shepherd
2cb6f52339
Disable storing bootstrap information by default
5 years ago
Carlos Eduardo
993e6a1950
Enable metrics endpoint to Traefik
5 years ago
Erik Wilson
e6067314c9
Localhost -> 127.0.0.1
5 years ago
galal-hussein
1ae0c540d7
Refactor bootstrap, move kine startup code to kine, integrate kine
5 years ago
Erik Wilson
a76ca2e887
Remove hostname requirement in `/etc/hosts`
5 years ago
William Zhang
458cea6633
Update traefik to 1.7.12
...
Signed-off-by: William Zhang <warmchang@outlook.com>
5 years ago
Darren Shepherd
99716deb08
Merge pull request #705 from yamt/cg
...
Appease kubelet warnings on docker for mac
5 years ago
Darren Shepherd
63dfc168d7
Merge pull request #718 from erikwilson/log-update
...
Cleanup logging
5 years ago
William Zhang
bdb8550638
🔧 jteeuwen/go-bindata --> go-bindata/go-bindata
...
Signed-off-by: William Zhang <warmchang@outlook.com>
5 years ago
Erik Wilson
c849525a27
Merge pull request #722 from erikwilson/debug-lb-logs
...
Change load balancer logging to debug
5 years ago
Erik Wilson
98254a3412
Change load balancer logging to debug
5 years ago
Erik Wilson
30e050a692
Cleanup logging
5 years ago
Erik Wilson
3c342e22a6
Fix panic in node controller
5 years ago
YAMAMOTO Takashi
fc8eddae29
Appease kubelet warnings on docker for mac
...
On my environment, the name=systemd entry in /proc/self/cgroup
looks like:
13:name=systemd:/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499
Kubelet periodically complains like:
E0802 06:42:52.667123 1 summary_sys_containers.go:47] Failed to get system container stats for "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy": failed to get cgroup stats for "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy": failed to get container info for "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy": unknown container "/docker/917b388b40c70b17a3283d852d38bfcdc84d1bf8242e32a779eacd98a610e499/kube-proxy"
5 years ago
Erik Wilson
c170115c54
Merge pull request #676 from erikwilson/go-proxy
...
Add go load-balancing proxy
5 years ago
Erik Wilson
5deef13086
Merge pull request #687 from yamt/cacerts
...
Simplify startWrangler a bit
5 years ago
Erik Wilson
be0cc6e943
Merge pull request #690 from erikwilson/regenerate-certs-on-ca-change
...
Regenerate server certs if CA changed
5 years ago
Erik Wilson
739e4214bd
Merge pull request #693 from yamt/insecure-bootstrap
...
Fix bootstrap with non-tls etcd
5 years ago
Erik Wilson
506d8cdcc3
Merge pull request #691 from erikwilson/early-return-routes
...
Fix missing early returns on routes
5 years ago
YAMAMOTO Takashi
d78701acb1
Fix bootstrap with non-tls etcd
5 years ago
Erik Wilson
fdb997b4ee
Fix missing early returns on routes
5 years ago
Erik Wilson
a74d9e5282
Regenerate server certs if CA changed
5 years ago
Erik Wilson
a17e336993
Use go tcpproxy
5 years ago
YAMAMOTO Takashi
88e668cf6f
Simplify startWrangler a bit
...
We no longer make dynamiclistener generate CA certs.
5 years ago
YAMAMOTO Takashi
07eeb56d81
Remove pkg/proxy which is no longer used
5 years ago
YAMAMOTO Takashi
35d972fd72
Sort args to make log outputs a bit more deterministic
5 years ago
Erik Wilson
1833b65fcd
Merge pull request #647 from yamt/remove-proxy-port
...
Remove agent proxy config which is no longer used
5 years ago
Erik Wilson
e1162c7cfa
Update agent to notify systemd
5 years ago
Erik Wilson
8ce509ee6b
Cleanup tunnel logs
5 years ago
Erik Wilson
23b0797578
Add context to tunnel connect
5 years ago
Erik Wilson
b93b4732eb
Start endpoint tunnel watch before waiting
5 years ago
Erik Wilson
2d32337334
Merge pull request #650 from erikwilson/update-bootstrap
...
Bootstrap node key files & fix permissions
5 years ago
Erik Wilson
2f4d2838ea
Bootstrap node key files & fix permissions
5 years ago
YAMAMOTO Takashi
dc4ebd4c67
Remove agent proxy config which is no longer used
5 years ago
YAMAMOTO Takashi
f6a04ea995
Add a few comments in bootstrap.go
5 years ago
Erik Wilson
f6701bbe99
Merge pull request #634 from erikwilson/enforce-type-on-bootstrap
...
Enforce explicit read or write for bootstrap
5 years ago
Erik Wilson
fdc1427317
Add more logs for bootstrap
5 years ago
Erik Wilson
e77dc568bb
Cleanup tunnel
5 years ago
Erik Wilson
34fc4d0336
Merge pull request #629 from erikwilson/update-remotedialer
...
Update remotedialer & tunnel logs
5 years ago
Erik Wilson
131f3bec44
Merge pull request #619 from erikwilson/node-ip-from-flannel-iface
...
Default node-ip from flannel-iface
5 years ago
Erik Wilson
e79fda96d2
Enforce explicit read or write for bootstrap
5 years ago
Erik Wilson
a1ce08d4f1
Default node-ip from flannel-iface
5 years ago
Erik Wilson
7e6664b684
Add resource version to tunnel endpoint watch
5 years ago
Erik Wilson
034a863696
Cleanup remotedialer tunnel logs
5 years ago
Erik Wilson
403e73ab1c
Merge pull request #633 from ibuildthecloud/wrangler
...
Update wrangler
5 years ago
Darren Shepherd
37a60b18ca
Update wrangler
5 years ago
Darren Shepherd
dbb7b04c3d
Add option to disable scheduler
5 years ago
Erik Wilson
185a8dca13
Merge pull request #615 from erikwilson/master
...
Use watch-cache for kvsql
5 years ago
Erik Wilson
ad11ba583f
Use watch-cache for kvsql
5 years ago
Erik Wilson
c32e6469a8
Revert "Merge pull request #607 from dramich/mockgen"
...
This reverts commit cb306b9378
, reversing
changes made to ebb12c74c6
.
5 years ago
Erik Wilson
e0212144e8
Tunnel agent to all servers
...
Watch the kubernetes endpoints to create a tunnel to all servers.
5 years ago
Dan Ramich
3d50502cae
Generated changes
5 years ago
Dan Ramich
760dd6b655
Disable mock generation
5 years ago
Erik Wilson
11a4c71f28
Use watch-cache for etcd3 backend
5 years ago
Erik Wilson
853708c8ba
Merge pull request #591 from erikwilson/add-ctr
...
Build & enable ctr with k3s server
5 years ago
Erik Wilson
24b73403c7
Cleanup bootstrap
5 years ago
Erik Wilson
ed72856d27
Build & enable ctr with k3s server
5 years ago
Erik Wilson
8d979d675e
Add tls support for etcd cert storage backend
5 years ago
Erik Wilson
4b540f8d94
Cleanup command help text
5 years ago
galal-hussein
37582b6fac
Add cert storage backend flag
5 years ago
galal-hussein
28d9d83be2
Add k3s HA bootstrap
6 years ago
Erik Wilson
7090a7d551
Move node password to separate file
6 years ago
Erik Wilson
29865fd9c9
Remove agent proxy
6 years ago
Erik Wilson
c9b62c9a90
Remove CA Certs/Key from listenerconfig storage
6 years ago
Erik Wilson
93f6690f26
Graceful upgrade token to server CA
6 years ago
Erik Wilson
1e035820bf
Generated data
6 years ago
Erik Wilson
2c9444399b
Refactor certs
6 years ago
Darren Shepherd
30c3c42f93
Add missing ConfigMap cache to helm apply
6 years ago
galal-hussein
94b5a22dda
Disable the svclb controller nodeploy for svclb is passed
6 years ago
Darren Shepherd
e0d2bd3e2d
Merge branch 'pr505'
6 years ago
Darren Shepherd
9f4e43fea6
Merge pull request #506 from AkihiroSuda/bump-up-rootlesskit
...
rootless: use built-in port driver
6 years ago
Erik Wilson
2b44679352
Generated data
6 years ago
galal-hussein
17d8708ca5
Add storage backend flags
6 years ago
Akihiro Suda
5a51a8de45
rootless: use built-in port driver
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
6 years ago
Akihiro Suda
490d6aefe0
rootless: fix mounting /var/lib/cni
...
k3s was unable to start up when /var/lib/cni is missing on the host.
Fix https://github.com/rancher/k3s/issues/470
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
6 years ago
Erik Wilson
199f673676
Merge pull request #479 from galal-hussein/add_storage_backend_options
...
Add MySQL and Postgress support
6 years ago
Darren Shepherd
7ee554013a
Update generated code
6 years ago
Darren Shepherd
d94a346a1e
Switch to wrangler-api and helm-controller
6 years ago
Darren Shepherd
c0702b0492
Port to wrangler
6 years ago
Darren Shepherd
16f7aaab66
Update vendor
6 years ago
Darren Shepherd
4b4dd1b59b
Merge pull request #454 from galal-hussein/node_labels_taints
...
Expose node labels and taints and add node roles
6 years ago
Darren Shepherd
a999cd43aa
Merge pull request #459 from galal-hussein/check_time
...
Check if server time before 1/1/1970
6 years ago
Darren Shepherd
0c18c5a92a
Merge pull request #461 from galal-hussein/fix_alternate_kubeconfig
...
Create symlink for kubeconfig when --write-kubeconfig is selected
6 years ago
Darren Shepherd
06b1acb324
Merge pull request #460 from galal-hussein/kubeconfig_readable
...
change permissions of kubeconfig and issue warning with kubectl wrapper
6 years ago
galal-hussein
e9cd8adbf6
Add Storage endpoint option
6 years ago
galal-hussein
4c6cf29e02
Create symlink for kubeconfig when --write-kubeconfig is selected
6 years ago
galal-hussein
483df6fd82
Check if server time before 1/1/1980
...
Check
6 years ago
Wenxuan Zhao
f0f57c1e44
Allow using built-in modules
...
Signed-off-by: Wenxuan Zhao <viz@linux.com>
6 years ago
galal-hussein
36bab003a3
Make kubeconfig not world readable and issue warning with kubectl wrapper
6 years ago
galal-hussein
930093dfe9
Expose node labels and taints and add node roles
6 years ago
Erik Wilson
b0e4228609
Merge pull request #434 from galal-hussein/add_no_proxy
...
Add no_proxy env to server
6 years ago
Erik Wilson
f7376ad979
Update proxy environment for helm controller
...
Add lowercase no_proxy and all_proxy/ALL_PROXY to environment for helm
6 years ago
galal-hussein
d9f958ceeb
Add no_proxy environment to server
6 years ago
haokang.ke
52f845ec84
Make pause image configurable ( #345 )
6 years ago
Darren Shepherd
ea94b1af77
Merge pull request #433 from erikwilson/fix-0.5.0-cert-upgrade-bug
...
Force upgrade of token node cert
6 years ago
Darren Shepherd
5c62dcbb4b
Merge pull request #435 from galal-hussein/svclb_upgrade
...
handle old service lb deployments
6 years ago
galal-hussein
1e33142f29
handle old service lb deployments
6 years ago
galal-hussein
5d8d9e610b
Add timeout to hostname check
6 years ago
Erik Wilson
d5ce19caae
Force upgrade of token node cert
6 years ago
Darren Shepherd
4ec051d032
Merge pull request #422 from galal-hussein/use_cni_with_docker
...
Add cni plugin to kubelet if docker is used
6 years ago
Darren Shepherd
9005fd5176
Merge pull request #423 from galal-hussein/change_threshold
...
Change the stderr threshold for cli
6 years ago
galal-hussein
7e1699cda0
Check if hostname is resolvable before running agent
6 years ago
galal-hussein
fae6df0df0
Change the stderr threshold for cli
6 years ago
galal-hussein
191ac9371a
Add cni plugin to kubelet if docker is used
6 years ago
Darren Shepherd
2950e81c23
Merge pull request #371 from warmchang/nf_conntrack
...
🔧 modprobe nf_conntrack
6 years ago
Darren Shepherd
9db91d7de3
Merge pull request #369 from erikwilson/node-dns
...
Node DNS & cert registration
6 years ago
Darren Shepherd
875ba289de
Merge pull request #375 from galal-hussein/schedule_svclb
...
Add node selector to service loadbalancer controller
6 years ago
Darren Shepherd
50f405ddfd
Merge pull request #376 from galal-hussein/fix_kubeletarg
...
Fix extra argument with multiple =
6 years ago
Erik Wilson
c9941895d6
Bind kubelet to all interfaces and use webhook auth
6 years ago
galal-hussein
f293e14645
Use NodeSelector when node label is enabled
6 years ago
Erik Wilson
305b596745
Remove node OnCreate
6 years ago
William Zhang
22bd3a3ce7
🔧 nf_conntrack module
...
Signed-off-by: William Zhang <zhang.wanmin@zte.com.cn>
6 years ago
galal-hussein
72d2edc0cb
Fix extra argument with multiple =
6 years ago
Darren Shepherd
9376c39adf
Merge pull request #381 from galal-hussein/containerd_tmpl
...
Add containerd config go template
6 years ago
galal-hussein
bdf8a355e1
Add containerd config go template
6 years ago
Darren Shepherd
6a43f63c70
Merge pull request #388 from galal-hussein/pass_proxy_variable_to_helm
...
Add proxy env to helm controller
6 years ago
Erik Wilson
f584197bba
Save password as text file
6 years ago
galal-hussein
b87684fcb9
Add proxy env to helm controller
6 years ago
Erik Wilson
e64c0298f2
Add cert per-node password authentication
6 years ago
Erik Wilson
055a574fee
Simplify DNS hosts creation
6 years ago
Erik Wilson
1b2db423de
Add node name to node cert generation
6 years ago
Erik Wilson
37dd5cbfd2
Generated data
6 years ago
Erik Wilson
31cf2bc9ee
Add coredns entries for nodes
6 years ago
galal-hussein
c42ea5ec89
Skip any file with no yaml yml or json suffix
6 years ago
Darren Shepherd
be24f837bb
Merge pull request #349 from erikwilson/missing-cgroup-pids-fix
...
Check for cgroup pids support
6 years ago
Erik Wilson
4bba04023d
Check for cgroup pids support
...
If cgroup pids are not supported add a feature-gates flag
SupportPodPidsLimit=false for kubelet.
6 years ago
Darren Shepherd
0e3711b8b7
Merge pull request #339 from km4rcus/cluster-domain-option
...
Add --cluster-domain option
6 years ago
Darren Shepherd
08c3d0d4ef
Merge pull request #250 from yoink00/master
...
Allow flannel interface to be specified on the command line
6 years ago
Stuart Wallace
2268e028a2
Add ability to override flannel interface
6 years ago
Marco Mancini
b445bad171
Add --cluster-domain option
6 years ago
galal-hussein
e5d8d72e59
Fix comment of bind address
6 years ago
Erik Wilson
c48739206a
Enable aggregation layer
...
Configure kube-apiserver, kubelets, and kube-proxy for use with
aggregation layer in order for metrics-server deployment to function
correctly.
6 years ago
Darren Shepherd
046a817818
Add rootless support
6 years ago
galal-hussein
7794528aa1
Add extra flags for server and agent components
6 years ago
Darren Shepherd
a11ac8cc40
Pull in parallel for CRI
6 years ago
Darren Shepherd
8010a24c91
Update generated code for k8s 1.14
6 years ago
Darren Shepherd
841f8d29e6
Ensure CSI is initialized properly when running agent and server combined
6 years ago
Darren Shepherd
3c7e103085
Updates for k8s 1.14
6 years ago
Darren Shepherd
9e80177443
Merge pull request #289 from galal-hussein/add_bind_address
...
Add bind address server config
6 years ago
galal-hussein
e8c5b2498c
Change address to bind-address for scheduler and api
6 years ago
galal-hussein
d255574150
Add bind address server config
6 years ago
Erik Wilson
bb14bcb595
Update generated data
6 years ago
Erik Wilson
a4df9f4ab1
Kubelet resolv.conf DNS update
...
Allow the kubelet resolv-conf flag to be set, or automatically
discovered from /etc/resolv.conf & /run/systemd/resolve/resolv.conf if
no loopback devices are present, or create our own which points to
nameserver 8.8.8.8
6 years ago
Erik Wilson
1d61576e54
Fix linting issues
6 years ago
Darren Shepherd
4463408819
Merge pull request #239 from takmatsu/add-hosts
...
Add tls-san flag
6 years ago
Darren Shepherd
9a57e6fd0f
Merge pull request #257 from mortenlj/master
...
Skip writing manifest when using `--no-deploy`
6 years ago
Erik Wilson
2768f559c1
Fix go fmt error
6 years ago
Morten Lied Johansen
9033891f88
Skip writing manifest when using `--no-deploy`
...
Instead of skipping the manifest when listing the directory, we now skip
creating it in the first place. This allows users to deploy manifests
that replaces the ones bundled, without having to come up with a new
name.
Fixes #230 .
6 years ago
Takeaki Matsumoto
3a6b305455
Change flag name and type
6 years ago
Erik Wilson
9645048a57
Update klipper-helm version
6 years ago
Erik Wilson
8d57fbd430
Change klipper-helm to PullIfNotPresent
...
PullAlways ImagePullPolicy causes issues with offline/airgap support,
so only pull if image is not already present.
6 years ago
Erik Wilson
e75e5171af
Generated bin data
6 years ago
Erik Wilson
ffcc9c0c9c
Package static assets
...
Include static Helm assets in the build process needed for air-gap
6 years ago
Erik Wilson
608f3a4e80
Serve static assets
...
Provide a static assets route for use with helm or other air-gap needs.
6 years ago
Takeaki Matsumoto
9551e1db21
Add advertise-address flag
...
In NAT or LB environment,
we need not just the certs for local ip, but also additional ips.
advertise-address flag enables to add optional ips.
6 years ago
Darren Shepherd
8649243d34
Merge pull request #229 from epicfilemcnulty/Skip-empty-yaml-objects
...
Do not process empty yaml objects (fixes #222 )
6 years ago
Erik Wilson
7e1abf28f1
Short port names for service load balancer
...
If a port name is longer than 15 characters we are unable to create
the associated service load balancer containers. Use our own short
name of `lb-port-{port}` to avoid naming issues.
For rancher/k3s/issues/90
6 years ago
Vladimir Zorin
d1348b9898
Trim whitespaces before checking if line is empty or comment
6 years ago
Vladimir Zorin
567532d74d
Do not process empty yaml objects ( fixes #222 )
6 years ago
Darren Shepherd
2771ae1ba9
Merge pull request #184 from ibuildthecloud/default-ns
...
Assign default namespace if not set in manifests
6 years ago
Darren Shepherd
937b379605
Merge pull request #183 from ibuildthecloud/helm
...
Various helm fixes
6 years ago
Darren Shepherd
9a862610ac
Merge pull request #177 from erikwilson/systemd-notify
...
Enable systemd ready notification for k3s server
6 years ago
Darren Shepherd
a649983228
Any change to helm chart values or values.yaml should upgrade
6 years ago
Darren Shepherd
769c1d5415
Fix manifest polling
6 years ago
Darren Shepherd
bef4115657
Assign default namespace if not set in manifests
6 years ago
Darren Shepherd
6e28ede2f8
Fix containerd debug log env var
6 years ago
Darren Shepherd
fe9a5b1601
Remove spurious error on start
6 years ago
Erik Wilson
107b5f3985
Enable systemd ready notification for k3s server
...
Disables k8s generic api server systemd ready notification and send
our own ready notification after server available and kubeconfig
available.
Make sure we unset the NOTIFY_SOCKET environment variable by passing
`true` to SdNotify so the agent can start containers.
6 years ago
Darren Shepherd
2f3da6af94
Merge pull request #175 from ldez/refactor/load-images
...
refactor: creates preloadImages function.
6 years ago
Fernandez Ludovic
e59bd5d489
refactor: creates loadImages function.
6 years ago
Vladimir Zorin
392cfb1231
Add basic templating support for manifests
6 years ago
Vladimir Zorin
44cce9a76f
Set ClusterDNS to ServiceCIDR network address + 10 when cluster-dns is not provided
6 years ago
Vladimir Zorin
7ad03ad8b0
Add cluster-dns server arg support
6 years ago
Vladimir Zorin
b8c3ff1dab
Add --service-cidr server arg support
6 years ago
Adam Liddell
b430513abf
Enforce lower case hostname for node, references #160
6 years ago
Darren Shepherd
4475456a83
Update pkg/agent/config/config.go
...
Co-Authored-By: juliens <julien.salleyron@gmail.com>
6 years ago
Julien Salleyron
164b89bce4
fix review.
6 years ago
Julien Salleyron
1895eec684
Preload images
6 years ago
Darren Shepherd
0414f97c78
Revert "Enable systemd ready notification for k3s server"
...
This reverts commit c73e9187bb
.
6 years ago
Darren Shepherd
49d0f20e5b
Merge pull request #110 from ibuildthecloud/tokenfile
...
Add --token-file support
6 years ago
Darren Shepherd
ef4e34b289
Remove dead code
6 years ago
Darren Shepherd
8acc17fcf3
Merge branch 'master' into tokenfile
6 years ago
Darren Shepherd
70e6ca4ab8
Support external CRI implementations
6 years ago
Darren Shepherd
3d113ceb2d
Add agent command to server command
6 years ago
Darren Shepherd
964cebb070
Don't return object because double update might revert IP change
6 years ago
Thorsten Schifferdecker
2c398c5d5f
Update server.go
...
fallback to the old --address part and enable the non-tls port to make healthz happy
6 years ago
Thorsten Schifferdecker
35cfc717d3
fix missing ","
6 years ago
Thorsten Schifferdecker
ee2fffb0ca
make the controller-manager and scheduler usable for the
...
componentstatus.
Fixes #126
Signed-off-by: Thorsten Schifferdecker <schifferdecker@b1-systems.de>
6 years ago
Darren Shepherd
91f9472751
Add traefik to no-deploy help text
6 years ago
Darren Shepherd
fdb51c9f53
Cleanup docker cgroup errors in kubelet
6 years ago
Darren Shepherd
e5b7d36c55
Actually pass cluster-cidr on to server
6 years ago
Darren Shepherd
e28e497168
Add --token-file support
6 years ago
Erik Wilson
c73e9187bb
Enable systemd ready notification for k3s server
...
Disables k8s generic api server systemd ready notification and send
our own ready notification after server available and kubeconfig
available.
6 years ago
Sean Duffy
10f1553564
fix 'fannel' typo.
6 years ago
Darren Shepherd
cb5e425457
Set /proc/sys/net/ipv4/ip_forward on agent start
6 years ago
Darren Shepherd
828ce5a24a
Disable watch caching, not needed for sqlite
6 years ago
Darren Shepherd
b07727ae24
Move default config location to /etc/rancher/k3s/k3s.yaml
6 years ago
Darren Shepherd
8690a277ed
Fix ingress
6 years ago
Darren Shepherd
01b3bb315e
Fix version printing on startup
6 years ago
Darren Shepherd
56fae079e5
Update generated code
6 years ago
Darren Shepherd
b6f9045eca
Retry 1000 times on helm failure
6 years ago
Darren Shepherd
91002f1fee
Fix looping on startup while installing addons
6 years ago
Darren Shepherd
5e1ce4aa42
Cache self-signed loopback cert on startup
6 years ago
Darren Shepherd
af96c908da
Disable proxy hostname checks
6 years ago
Darren Shepherd
04c5567346
Validate that memory cgroup exists
6 years ago
Darren Shepherd
8bdd86198c
Fix dest port so it's the same as src port
6 years ago
Darren Shepherd
529aa431d1
Adjust debug logging and write containerd logs to a file
6 years ago
Darren Shepherd
3df9155d02
Monitor endpoint changes to trigger service-lb
6 years ago
Darren Shepherd
793ac4fb89
Add crictl
6 years ago
Darren Shepherd
84756df8a2
Only run two service-lb if there are more than 1 nodes ready
6 years ago
Darren Shepherd
bd269f8d3e
Update generated code
6 years ago
Darren Shepherd
1d666d9515
Add helm controller
6 years ago
Darren Shepherd
e832588662
Add embedded service load balancer
6 years ago
Darren Shepherd
400225e73d
Prepopulate known IPs in TLS
6 years ago
Darren Shepherd
529e22ef80
Disable leader election for now
6 years ago
Darren Shepherd
1826084b24
Add ping handler
6 years ago
Darren Shepherd
1502ad2530
Package serialized version of openapi
6 years ago
Darren Shepherd
93841ffbcb
Support kubectl symlink and avoid data in home dir
6 years ago
Darren Shepherd
3f2a951564
Ensure that br_netfilter module is loaded
6 years ago
Darren Shepherd
84b6c461b9
Fix go vet issue
6 years ago
Darren Shepherd
6fa7f5b3ae
Clean up build scripts
...
Switch binaries to armhf suffix to be more clean on the on
architecture
6 years ago
Darren Shepherd
287e0f44c9
Prepare for initial release
6 years ago
Darren Shepherd
62c62cc7b4
Continued refactoring
6 years ago
Darren Shepherd
9bb7c27c62
Initial Commit
6 years ago