Commit Graph

66 Commits (f5d5befe17f4e6355c962164637b8b63f9740de6)

Author SHA1 Message Date
Veres Lajos 9f77e49109 typofix - https://github.com/vlajos/misspell_fixer 2015-08-08 22:31:48 +01:00
Eric Paris f9d4a0a34d Convert contrib/ from --flag_name= to --flag-name=
All binaries in kubenretes show `-` for help and seem to expect `-`. Although
`_` also works. The inconsistencies across the codebase using - and _
result in difficultly using things like grep to find things that need to
be changed.
2015-08-07 10:58:25 -04:00
Avesh Agarwal 0d4851a4ef Ansible updates for Atomic. 2015-07-24 18:29:55 -04:00
Eric Paris 1253ca52cd Ansible: start to support debian 2015-07-24 09:58:31 -04:00
Eric Paris 8ba4d85fa9 Ansible: Add kube-ui kube-addon support 2015-07-24 09:58:31 -04:00
Eric Paris 217f8eef95 Ansible: convert DNS from kube_config_dir to kube_addons_dir 2015-07-24 09:58:31 -04:00
Eric Paris 9aed89f816 Ansible: fast update of binaries
If you are using locally build binaries as a developer you likely will
want to just push those binaries to an existing cluster, not rerun the
entire playbook.  Add a tag to do just that.
2015-07-24 09:58:31 -04:00
Jeff Bean 29980851f7 Ansible: Adding variable for kubernetes apiserver port 2015-07-24 09:58:31 -04:00
Jeff Bean 90b1318168 Ansible: Adding variable for kubernetes addon dir 2015-07-24 09:58:30 -04:00
Eric Paris fd1024baa2 Install openssl when using make-ca-certs.sh
easyrsa requires openssl. So make sure it is installed.
2015-07-24 09:56:42 -04:00
Eric Paris 90ecd96f84 Ansible: Run from locally built binaries
Instead of from distro packages
2015-07-24 09:48:36 -04:00
Eric Paris c3849fd240 Ansible: Minor typo in play text (no functional change) 2015-07-24 09:48:36 -04:00
Eric Paris 605437f811 Ansible: Support new upstream non-default namespace for addons 2015-07-24 09:48:35 -04:00
Eric Paris 165aa56c1a Ansible: Do not fail flannel restart is docker not installed
On first install flannel runs before docker is installed. So do not fail
if docker is not installed
2015-07-24 09:48:35 -04:00
Eric Paris 8b57cc8918 Ansible: cert gen: use inventory hostname not ip address 2015-07-24 09:48:35 -04:00
Vish Kannan 6306ad1bce Merge pull request #11736 from thockin/cleanup-dns-legacy
Stop populating legacy DNS names
2015-07-23 17:30:00 -07:00
Tim Hockin 89e9851ac5 Update examples to not use old DNS names 2015-07-23 13:51:09 -07:00
Avesh Agarwal e507dbe7b8 Fixed ansible syntax error. 2015-07-23 15:26:11 -04:00
Wojciech Tyczynski 5988d30da0 Merge pull request #10715 from justinsb/spelling_octects
Spelling fix (in code): octects -> octets
2015-07-23 09:00:39 +02:00
Justin Santa Barbara 1ece037555 Spelling fix (in code): octects -> octets 2015-07-04 10:37:57 -04:00
Jeffrey Bean f7b5d0db61 [Ansible] Adding new CentOS repo for newest Kubernetes packages.
This is the game we play until Kubernetes GA packages are out.
2015-07-02 15:06:27 -07:00
Zach Loafman acf6fc6e24 Merge pull request #10627 from eparis/total-ansible
Ansible: Get DNS working - Add kubectl kubeconfig file
2015-07-01 16:07:53 -07:00
Eric Paris c66bafaa18 Generate a kubeconfig for kubectl which can be taken off the masterA
/etc/kubernetes/kuectl.kubeconfig
2015-07-01 13:19:06 -04:00
Eric Paris 88087decb4 Fix certs in ansible 2015-07-01 13:09:22 -04:00
nikhiljindal 2e9e46dd08 Updating scripts to use v1 instead of v1beta3 2015-07-01 00:23:16 -07:00
Eric Paris ddf52a854e Make sure serviceaccount tokens are created and recognized 2015-06-30 13:05:59 -04:00
Eric Paris 3cacc42985 Hide DNS variables away from the user
Fewer knobs == more winning. Also rename from kube.local to
cluster.local. Some e2e tests really want that.
2015-06-30 13:05:59 -04:00
Eric Paris 3a78104267 Add cluster logging with fluentd and elastic search 2015-06-30 13:05:59 -04:00
Eric Paris 7d7d5d4c4e Add influxdb cluster monitoring 2015-06-30 13:05:59 -04:00
Eric Paris a127ce7266 Use slurp to get the ca.crt 2015-06-30 13:05:59 -04:00
Eric Paris 9f4bfd144f Per master tokens for the scheduler and controller-manager 2015-06-30 13:05:58 -04:00
Eric Paris c6f2841839 Place a different token for every node/daemon combination
We can now revoke one token at a time!
2015-06-30 13:05:58 -04:00
Eric Paris bb179b6a4c Use a token for the scheduler, controller-manager, proxy and kubelet
Before we used the kubecfg certificate for everything. Mint one token
for each service and push it around where it belongs.
2015-06-30 13:05:55 -04:00
Jeff Bean a0c312f224 Changing CentOS install of master and nodes
The testing repo now had updated packages for kubernetes
Also adding some options to rsync task to work with different users ssh settings
2015-06-25 18:45:49 -07:00
Eric Paris 52999cd292 Check for rpm directly, don't imply from ansible_pkg_manager
Atomic host have neither dnf nor yum. So we cannot use that as a
hueristic if they have rpm.
2015-06-24 17:07:13 -04:00
Eric Paris 97b88fa563 Set SELinux permissive to allow DNS to work 2015-06-24 17:07:12 -04:00
Eric Paris 8cf36d7402 Declare etcd roles in meta rather then top level playbook 2015-06-24 17:07:12 -04:00
Eric Paris 83bd4d0903 Install python-firewall as ansible needs python2 firewalld support 2015-06-24 17:07:12 -04:00
Eric Paris fc5c063a2d Support Fedora Rawhide
Fedora rawhide has neither yum, nor python2, nor python2 libselinux
bindings. Ansible needs all of these.

This adds a new play which can be used to get machines setup so they can
then be managed with ansible.
2015-06-24 17:07:12 -04:00
Jeff Bean 7b8ed5a12c support dns in particular 2015-06-24 17:07:12 -04:00
Jeff Bean 374658ef01 support the upstream 'addons' nonsense 2015-06-24 17:07:12 -04:00
Eric Paris c2e4df7c87 Create, distribute, and use certificates for TLS and identity 2015-06-24 17:07:11 -04:00
Eric Paris 3d10f00401 Give kube-apiserver CAP_NET_BIND_SERVICE
It is needed to bind on port 443
2015-06-24 17:07:08 -04:00
Jeff Bean e08bd6f3c3 Configure docker daemon 2015-06-24 13:45:46 -04:00
Jeff Bean 45bdfeac0c Packge install on CentOS 7 2015-06-24 13:45:46 -04:00
Jeff Bean f259892cc9 Basic Generic File Cleanups
No major changes, just renaming, whitespace, etc
2015-06-24 13:45:46 -04:00
Eric Paris 9816488179 Do not restart etcd quickly
https://github.com/coreos/etcd/pull/2878

etcd destroys itself if you start and then restart etcd very rapidly.
So don't do that any more.
2015-06-24 13:45:46 -04:00
Eric Paris 70b7358d00 If multiple etcd servers defined, point at all of them
(we still can only set up a single server though)
2015-06-24 13:45:46 -04:00
Eric Paris a95243450e Set up flannel in your cluster! 2015-06-24 13:45:42 -04:00
Eric Paris bc6c425ab4 Use 'command' not 'shell' even thought it doesn't matter 2015-06-24 13:45:42 -04:00