github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
13,572 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

198 Commits (f9db614f95bdcbfc0e013a3673fd1f641a2eb43b)

Author SHA1 Message Date
Victor Marmol 4ba22e713a Merge pull request #8296 from jlowdermilk/gen-analytics 
Add ga-beacon analytics to gendocs scripts
 2015-05-18 08:40:02 -07:00
Justin Santa Barbara 87dfddb259 AWS: Set MASTER_RESERVED_IP in config-default.sh 
Otherwise jenkins fails
 2015-05-16 20:32:23 -04:00
Jeff Lowdermilk 553f9f822b Add ga-beacon analytics to gendocs scripts 
hack/run-gendocs.sh puts ga-beacon analytics link into all md files,
hack/verify-gendocs.sh verifies presence of link.
 2015-05-15 18:56:38 -07:00
Daniel Smith ce4b54ec70 Merge pull request #8209 from krousey/v1beta1_cluster 
Removing some v1beta1 uses in cluster/
 2015-05-15 14:56:41 -07:00
Kris Rousey 98c457c397 Updating /cluster to use v1beta 3 specs, and change a lot of polling to 
healthz instead of api endpoints.
 2015-05-15 14:17:55 -07:00
Robert Bailey 9d6c032929 Merge pull request #7888 from madis/associate_aws_elastic_ip_with_master 
Associate master instance with AWS Elastic IP
 2015-05-14 13:18:19 -07:00
Madis Nõmme 15643a2c72 Add 'auto' option for MASTER_RESERVED_IP. No ElasticIP allocation by default. 
Default behaviour when setting up a cluster is using the Amazon-assigned public ip.
It will change between reboots. If MASTER_RESERVED_IP is set to 'auto', new Elastic
IP will be allocated & assigned to master. If MASTER_RESERVED_IP is set to an existing
Elastic IP, it will be used. When something fails, original Amazon-given IP will be used.
 2015-05-14 08:33:07 +03:00
Brian Akins fac4350fa6 Initial addition of CoreOS as minion for AWS cluster 2015-05-13 16:39:22 -04:00
Derek Carr 9454d58547 Merge pull request #8127 from liggitt/service_account_admission 
Add ServiceAccount admission plugin
 2015-05-13 14:03:11 -04:00
Zach Loafman 02f3a32196 Merge pull request #8131 from justinsb/aws_install_salt_gce_style 
Install specific salt version on AWS, based on GCE
 2015-05-13 06:55:32 -07:00
Madis Nõmme eb220f05a6 Properly get return value (considering errexit). Quote variables. 2015-05-13 10:45:51 +03:00
Madis Nõmme d4d02a9028 Optionally associate master instance with AWS Elastic IP 
When MASTER_RESERVED_IP is set to elastic IP from AWS, then aws/util.sh will
associate it with master instance and assign it to KUBE_MASTER_IP. If no MASTER_RESERVED_IP
is set, new elastic ip will be requested from amazon. This allows cluster certificates to
be generated for an IP that doesn't change between stopping & starting cluster instances.

The requested elastic ip is not released when kube-down.sh is run. I think it is good
because user could have created DNS records and it would be bad if the IP was removed.
He can reuse it next time through MASTER_RESERVED_IP when setting up cluster again.
 2015-05-13 10:45:51 +03:00
Justin Santa Barbara 23b1a22203 AWS: Don't use policy-rc.d to prevent starting daemons until we're ready 
It isn't required
 2015-05-12 21:18:48 -04:00
Clayton Coleman 7d620c20b9 Merge pull request #8105 from thockin/dns-domain 
Rename default DNS domain to cluster.local
 2015-05-12 17:18:45 -04:00
Justin Santa Barbara ffb0e7f9b8 Install specific salt version on AWS, based on GCE 
The latest salt version breaks the container_bridge.py _state function

We can lock to the same version as GCE.  This is not a full fix,
because we can't update to the latest salt without breaking GCE,
but this at least unbreaks and sync AWS with GCE.

This isn't a straight copy from GCE, because we still use
the salt master on AWS (for now)

Fixes #8114
 2015-05-12 16:33:56 -04:00
Jordan Liggitt e5d47081a2 Add ServiceAccount admission plugin 2015-05-12 15:19:05 -04:00
Tim Hockin e83e49b076 rename default DNS domain to cluster.local 2015-05-11 23:00:43 -07:00
Jordan Liggitt 7e14a80f63 ServiceAccount admission plugin 2015-05-11 17:18:06 -04:00
Justin Santa Barbara 3cf8d72d96 Copy some new properties from config-default => config.test 
ENABLE_MINION_PUBLIC_IP was causing a failure because the variable wasn't declared.

ADMISSION_CONTROL should just be set the same for both test & default
 2015-05-08 14:30:17 -07:00
Manfred Geiler c5c62f7d57 fixed second missing $ and added curly brackets 2015-05-08 17:18:52 +02:00
Manfred Geiler 1119340260 fixed missing $ 2015-05-08 16:58:49 +02:00
Manfred Geiler 96d34c1106 AWS: added docs for KUBE_ENABLE_MINION_PUBLIC_IP option 2015-05-08 16:56:06 +02:00
Manfred Geiler 205ed2bf6e AWS: make it possible to disable minion public ip association 2015-05-08 00:09:47 +02:00
Zach Loafman 875e83a741 Revert "Revert "Security context - types, kubelet, admission"" 2015-05-05 16:02:13 -07:00
Zach Loafman f48904fd5e Revert "Security context - types, kubelet, admission" 2015-05-05 15:20:39 -07:00
Paul Weil 982bf19c20 security context initial implementation - squash 2015-05-05 13:46:13 -04:00
Robert Bailey c6d4c24f37 Merge pull request #7736 from justinsb/aws_fix_known_tokens_file 
AWS: Fix variable naming that meant not all tokens were written
 2015-05-04 14:34:11 -07:00
Justin Santa Barbara 96f0a39172 AWS: Fix variable naming that meant not all tokens were written 
To resolve the inconsistency, chose to go closer to GCE
 2015-05-04 17:28:24 -04:00
Justin Santa Barbara 57f7b658bb AWS: Change apiserver to listen on 443 directly, not through nginx 
Mirrors changes in GCE.  I think the same changes will be needed for vagrant.
 2015-05-02 16:59:04 -04:00
Eric Paris 6b3a6e6b98 Make copyright ownership statement generic 
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
 2015-05-01 17:49:56 -04:00
Jan Safranek 6e810492fb Fixed name of kube-proxy path in deployment scripts. 2015-04-28 10:10:37 +02:00
CJ Cullen 39c5bf363b Merge pull request #7303 from erictune/kube_env3 
kube-proxy uses token to access port 443 of apiserver
 2015-04-27 14:33:53 -07:00
Brendan Burns 637cd57a25 Merge pull request #6606 from gust1n/aws-existing-vpc 
AWS: Improving getting existing VPC and subnet
 2015-04-27 11:11:25 -07:00
Zach Loafman 5ccfc0a225 Merge pull request #6006 from justinsb/aws_multiple_clusters 
First step to supporting multiple k8s clusters
 2015-04-27 10:11:03 -07:00
Eric Tune 9044177bb6 Generate a token for kube-proxy. 
Tested on GCE.
Includes untested modifications for AWS and Vagrant.
No changes for any other distros.
Probably will work on other up-to-date providers
but beware.  Symptom would be that service proxying
stops working.

 1. Generates a token kube-proxy in AWS, GCE, and Vagrant setup scripts.
 1. Distributes the token via salt-overlay, and salt to /var/lib/kube-proxy/kubeconfig
 1. Changes kube-proxy args:
   - use the --kubeconfig argument
   - changes --master argument from http://MASTER:7080 to https://MASTER
     - http -> https
     - explicit port 7080 -> implied 443

Possible ways this might break other distros:

Mitigation: there is an default empty kubeconfig file.
If the distro does not populate the salt-overlay, then
it should get the empty, which parses to an empty
object, which, combined with the --master argument,
should still work.

Mitigation:
  - azure: Special case to use 7080 in
  - rackspace: way out of date, so don't care.
  - vsphere: way out of date, so don't care.
  - other distros: not using salt.
 2015-04-27 08:59:57 -07:00
Joakim Gustin 645d6d1f26 Use existing subnet when launching AWS cluster in existing VPC 2015-04-23 11:01:17 +02:00
Justin Santa Barbara 9253ae6dca AWS: Fix some bash style problems: variable quoting & locals 2015-04-22 18:30:09 -07:00
CJ Cullen 924015dc94 Merge pull request #7182 from justinsb/aws_fix_hostname 
AWS: Set hostname_override for minions, back to fully-qualified name
 2015-04-22 14:13:53 -07:00
Justin Santa Barbara 4120849cc4 AWS: Set hostname_override for minions, back to fully-qualified name 
This is a stop-gap fix; we'd really like to use EC2 instance ids, but that is
blocked by #7092 or changing that health-check to not assume that the node name
is resolvable.

This stop-gap essentially reverts #7072 for AWS
 2015-04-22 11:28:53 -07:00
Zach Loafman 86468cd29d Revert "Added kube-proxy token." 2015-04-22 10:55:08 -07:00
Zach Loafman b98f93bb4b Merge pull request #7112 from erictune/kubeconfig-secrets 
Extend PR#5470 for AWS and Vagrant
 2015-04-22 09:25:53 -07:00
Eric Tune 2ca8a9d15d Added kube-proxy token. 
Generates the new token on AWS, GCE, Vagrant.
Renames instance metadata from "kube-token" to "kubelet-token".
(Is this okay for GKE?)

Having separate tokens for kubelet and kube-proxy permits
using principle of least privilege, makes it easy to
rate limit the clients separately, allows annotation
of apiserver logs with the client identity at a finer grain
than just source-ip.
 2015-04-21 09:21:31 -07:00
Eric Tune 7475efbcfb Extend PR#5470 for AWS and Vagrant 2015-04-21 08:22:31 -07:00
Justin Santa Barbara 45b658ea7c AWS: don't try to create undefined config_dir 2015-04-20 19:14:16 -07:00
Robert Bailey 82190a58b1 Merge pull request #7026 from justinsb/aws_use_ssl_for_salt 
AWS: master should download salt using SSL
 2015-04-20 11:58:47 -07:00
Jeff Lowdermilk 3787fc5eca set KUBECONFIG in common.sh, default to new location 
and preserve value in ginkgo e2e test driver
 2015-04-20 11:07:35 -07:00
Jeff Lowdermilk 4f6dc99075 Generate kubeconfig for all providers in cluster/ that use auth 2015-04-20 11:07:35 -07:00
Justin Santa Barbara 7d3fe2154e AWS: master should download salt using SSL 
The minion already does, but the master was using plain http.
 2015-04-18 12:38:52 -07:00
Justin Santa Barbara b2bce12b6c AWS: Move /var/lib/kubelet to /mnt 
The backing for empty-dir volumes otherwise consumes all our disk space
 2015-04-17 06:46:08 -07:00
Justin Santa Barbara 72687184b9 Don't always use aws.conf 
We don't usually need it, and it makes it harder to put apiserver into a container.
 2015-04-14 09:30:00 -07:00
Justin Santa Barbara 034412aff1 Support multiple k8s clusters 2015-04-10 13:25:43 -07:00
Justin Santa Barbara 49543aca61 Update IAM permissions for minion, to allow EBS 2015-04-10 13:25:42 -07:00
Jeff Lowdermilk ca6f1a1bc7 Merge pull request #6476 from deads2k/deads-fix-kubeconfig-serialization 
fix kubeconfig serialization
 2015-04-09 09:41:26 -07:00
Justin Santa Barbara 2426366ec8 Update cAdvisor with moved docker root on AWS 
We set up a symlink now, and we also pass docker_root into the kubelet.

The symlink is probably sufficient, but doing both feels safer.
 2015-04-07 10:40:22 -07:00
deads2k 609208b8b5 update scripts with correct templates 2015-04-07 08:07:24 -04:00
Justin Santa Barbara 5d7f86b041 More options documentation 2015-04-03 13:44:06 -07:00
Justin Santa Barbara 2fb573c482 Create instances in the specified AZ 2015-04-03 08:04:53 -07:00
Zach Loafman fc8ba8d77b Merge pull request #6011 from justinsb/aws_specify_zone 
Fix AWS region vs zone
 2015-03-31 12:26:05 -07:00
Justin Santa Barbara edbebd653c Fix S3 location handling for US classic 2015-03-31 05:42:10 -07:00
Justin Santa Barbara 07ffc26a61 Fix typo in docs 2015-03-30 06:01:00 -07:00
Justin Santa Barbara 194143e61b Use the correct region for the S3 bucket 
We may not have created the bucket!
 2015-03-27 12:58:47 -07:00
Justin Santa Barbara 7179f5f004 Change AWS_ZONE to ZONE, for compatibility with e2e tests 2015-03-27 08:53:45 -07:00
Justin Santa Barbara 583892da2d Fix AWS region vs zone 
We were specifying a region, but naming it as a zone in util.sh

The zone matters just as much as the region, e.g. for EBS volumes.

We also change the config to require a Zone, not a Region.
But we fallback to get the information from the metadata service.
 2015-03-26 15:11:05 -07:00
Zach Loafman e5914915b8 Merge pull request #6003 from justinsb/aws_wait_for_instance 
Wait for master to be started on AWS
 2015-03-26 14:06:25 -07:00
Justin Santa Barbara f256d3b77a Wait for ELBs to be deleted 2015-03-26 13:50:35 -07:00
Justin Santa Barbara 53bdbec64e Launch minions in parallel 2015-03-26 10:58:18 -07:00
Justin Santa Barbara 9556318c58 Wait for master instance running before adding route 2015-03-26 10:23:25 -07:00
Saad Ali f3ebe30605 Merge pull request #5940 from justinsb/fix_bash_style 
Fix bash style issues in AWS script
 2015-03-25 14:40:42 -07:00
Justin Santa Barbara 06704bb94f Security group should be scoped to our vpc 
Note that security group names only need to be unique with a VPC as well,
which is handy here.
 2015-03-25 12:53:12 -07:00
Justin Santa Barbara ac12665f48 Quote AWS_SSH_KEY 2015-03-25 12:41:02 -07:00
Justin Santa Barbara 80ba56a371 Fix variable dollar-char errors 2015-03-25 12:36:52 -07:00
Justin Santa Barbara 505488269c Use double-square brackets in if tests 2015-03-25 12:36:20 -07:00
Alex Robinson c22d4c6b3f Merge pull request #5916 from justinsb/aws_cleanup_loadbalancers 
Remove load balancers as part of kube-down.sh
 2015-03-25 10:32:14 -07:00
Justin Santa Barbara 68935e0798 Remove load balancers as part of kube-down.sh 2015-03-25 05:36:47 -07:00
Brendan Burns cf72cf098a Disable validation on AWS where it doesn't work. 
Also add an advanced route for the master which I forgot previously.
 2015-03-24 21:08:04 -07:00
Brendan Burns 8bac135f85 Configure docker and kubelet on AWS master. 2015-03-24 17:19:06 -07:00
Clayton Coleman 97560c409f Merge pull request #5554 from derekwaynecarr/namespace_controller 
Namespace Controller to support Namespace Termination
 2015-03-24 12:59:00 -04:00
Robert Bailey b152d8e884 Merge pull request #5822 from justinsb/aws_idempotent_kube_down 
More idempotent kube-down for AWS, and delete multiple security groups
 2015-03-24 07:58:03 -07:00
derekwaynecarr ee53dfc741 Turn on namespace lifecycle plug-in 2015-03-24 10:36:06 -04:00
Saad Ali b01f1f9baf Merge pull request #5683 from justinsb/aws_ephemeral_disks 
Format ephemeral disks with btrfs, put Docker storage on there
 2015-03-24 07:36:01 -07:00
Justin Santa Barbara 2a042fc423 More idempotent kube-down for AWS, and delete multiple security groups 
There may be multiple security groups if we were using ELB, and
we have to delete them all apart from the default one, which EC2
prevents us from deleting.

Also use the same looping logic to clean up from partial up/downs.
 2015-03-23 13:00:34 -07:00
Zach Loafman 407d1fec45 Both @satnam6502 and E2E tests confirm: This code is no longer needed 
Deletion is wonderful. The only weird thing was where to put the
message about the proxy URLs. Satnam suggested kubectl clusterinfo,
which seemed like a good option to put at the end of cluster turn-up.
 2015-03-19 22:23:11 -07:00
Justin Santa Barbara 6fec242f89 Format ephemeral disks with btrfs, put Docker storage on there 
Docker's default storage has severe bugs with older (stable) kernels.

Use btrfs to bypass those issues.
 2015-03-19 19:23:29 -04:00
Alex Robinson 2537665ecc Merge pull request #5381 from justinsb/aws_s3_in_us_east 
Create S3 bucket in known region (default to us-east-1)
 2015-03-18 09:34:59 -07:00
Justin Santa Barbara 8b535ff17a Fix copy-and-paste error in log message 2015-03-16 14:30:24 -07:00
Justin Santa Barbara 9361b76977 Configure separate IAM roles for master & minion, create roles automatically 2015-03-16 10:37:25 -07:00
Justin Santa Barbara 2413d25d29 Create S3 bucket in us-east-1, unless set by AWS_S3_REGION 
Buckets are globally named, so we want a single bucket for all our regions.
 2015-03-16 08:37:06 -07:00
Alex Robinson f6441a6d2f Merge pull request #5376 from justinsb/aws_customize_s3_bucket 
Allow the S3 bucket name to be specified via AWS_S3_BUCKET
 2015-03-13 13:51:37 -07:00
Justin Santa Barbara e3e6c8377f Allow the S3 bucket name to be specified via AWS_S3_BUCKET 2015-03-13 16:44:26 -04:00
Satnam Singh 4420e0452e Merge pull request #5391 from justinsb/aws_options_doc 
Initial WIP on documenting options for AWS clusters
 2015-03-12 11:42:19 -07:00
Justin Santa Barbara 84314d3206 Initial WIP on documenting options for AWS clusters 
Very incomplete, but a start.
 2015-03-12 13:54:37 -04:00
Alex Robinson 55ed70f723 Merge pull request #5382 from justinsb/aws_image_by_region 
Choose AWS image by region
 2015-03-12 10:31:00 -07:00
Alex Robinson 4ad0ec365e Merge pull request #5378 from justinsb/aws_instance_type 
Allow the AWS instance type to be specified via MASTER_SIZE, MINION_SIZE
 2015-03-12 09:55:06 -07:00
Alex Robinson 9344934637 Merge pull request #5377 from justinsb/aws_s3_not_world_readable 
Don't make the s3 bucket world-readable (just the files)
 2015-03-12 09:52:38 -07:00
roberthbailey d3b0c86624 Merge pull request #5380 from justinsb/clarify_aws_comment 
Clarify comment
 2015-03-12 17:43:43 +01:00
Justin Santa Barbara 70b448b5d0 Choose AWS image by region 
Also update to the latest LTS image (fewer security updates needed)
 2015-03-12 12:05:45 -04:00
Justin Santa Barbara 0330cf616a Don't make the s3 bucket world-readable (just the files) 2015-03-12 11:52:56 -04:00
Justin Santa Barbara f71e0eeb22 Allow the AWS instance type to be specified via MASTER_SIZE, MINION_SIZE 2015-03-12 11:52:06 -04:00
Justin Santa Barbara 41ed9e4fef Clarify comment 2015-03-12 11:50:12 -04:00
Justin Santa Barbara c43e8b192f Don't print a full-stop after the conf filename, it make copy&paste hard 2015-03-12 11:07:44 -04:00