Commit Graph

1566 Commits

Author SHA1 Message Date
CJ Cullen
04cd9b3c75 Make sshproxy use a hostmount on master PD (don't spam sshKeys on upgrade/reboot).
Add comment describing what SSHTunnelList.Close() does.
Simplify util.FileExists.
2015-06-05 15:03:03 -07:00
CJ Cullen
cb317604ab Some refactoring. Only selectively use ssh proxy.
Add NetworkName to gce.Config.
Add locking to uses of master.tunnels.
2015-06-05 14:55:16 -07:00
CJ Cullen
1ae8801387 Fix transport creation logic.
Refactor loadTunnels to allow one path for load, another for refresh.
Make SSHTunnelList.Close sleep for a minute before actually closing each tunnel.
2015-06-05 14:55:16 -07:00
CJ Cullen
de9a5f43bc Specify sshUser, sshKeyfile in kube-apiserver manifest.
Trim space on ssh key so GCE doesn't treat it as 2 lines.
A couple other minor fixes.
2015-06-05 14:55:15 -07:00
CJ Cullen
82afaaf31d Mount cloud-config files for cloudproviders in kube-apiserver & kube-controllermanager. 2015-06-05 14:54:20 -07:00
Justin Santa Barbara
48e8a8b0ec AWS: Set up security groups, to mirror GCE firewalling
Some slightly fussy code to enable load-balancers to talk to
instances, but otherwise relatively simple.
2015-06-05 16:10:08 -04:00
Justin Santa Barbara
33a3d884f2 AWS: Filter by Cluster tag, rationalize EC2 abstraction
Whenever we do a list we now filter on tags so we only see resources relating
to our cluster.

Also, rationalize all the DescribeX calls:
 * They all take a request object (so that we can pass filters)
 * They do paging if that is required (and return the underlying resources)
 * They wrap any error with a "error while listing X: %v" message
2015-06-05 16:09:01 -04:00
Quinton Hoole
4384b57a27 Merge pull request #9327 from ArtfulCoder/srv_doc
README.md updated to explain SRV Record support.
2015-06-05 12:56:20 -07:00
Abhishek Shah
bd36b0d315 README.md updated to explain SRV Record support. 2015-06-05 12:33:22 -07:00
Quinton Hoole
9ebeea1d83 Merge pull request #9303 from doublerr/rackspace/18.1
remove kube-register and update config-default
2015-06-05 11:58:05 -07:00
Quinton Hoole
21db71db1a Merge pull request #9073 from ArtfulCoder/srv_dns
SRV record support
2015-06-05 11:24:32 -07:00
Quinton Hoole
710df2b619 Merge pull request #9294 from justinsb/aws_ssh_key_fingerprint
AWS: Support multiple SSH keys (embed the hash in the name)
2015-06-05 09:37:31 -07:00
Abhishek Shah
7d0adbcb1c SRV record support 2015-06-05 09:31:07 -07:00
Ryan Richard
ab0a3a1f84 remove kube-register and update config-default
* use newer rackspace cloud flavor names
* update coreos (beta) image id
* use NUM_MINIONS instead of RAX_NUM_MINIONS
2015-06-05 10:01:01 -05:00
Justin Santa Barbara
d8dc416b5b AWS: Support multiple SSH keys (embed the hash in the name)
This should eliminate a nasty problem where the script doesn't cope well if
your keys don't match.
2015-06-04 21:40:57 -04:00
Quinton Hoole
eef3283960 Merge pull request #9254 from justinsb/aws_sync_to_s3
AWS: Use s3 sync to optimize upload to s3 when nothing changed
2015-06-04 13:09:08 -07:00
Quinton Hoole
5ac1151c5d Merge pull request #9251 from satnam6502/fix-node-list
Fix node numbers for node list
2015-06-04 12:02:43 -07:00
Quinton Hoole
a39a6013cb Merge pull request #8469 from satnam6502/heapster
Add explicit version to name of monitoring RCs
2015-06-04 10:42:54 -07:00
derekwaynecarr
2168cee414 Upgrade to Fedora 21, Docker 1.6, clean-up SDN 2015-06-04 10:59:23 -04:00
Justin Santa Barbara
c92c63b3a9 AWS: Use s3 sync to optimize upload to s3 when nothing changed 2015-06-04 10:14:45 -04:00
Satnam Singh
a1c2641b53 Fix node numbers for node list 2015-06-04 12:09:58 +01:00
Daniel Smith
1690617ee6 remove ro service 2015-06-03 16:45:54 -07:00
Brian Grant
f8bf996000 Merge pull request #9211 from lavalamp/no-ro-nonbreaking
Nonbreaking pieces of #8155
2015-06-03 16:44:24 -07:00
Daniel Smith
40eb1599dd fix elasticsearch 2015-06-03 15:41:09 -07:00
Daniel Smith
5d6b8d7de6 doc updates 2015-06-03 15:41:09 -07:00
Brian Grant
984b779b05 Merge pull request #9192 from dchen1107/clean
Watch kubelet flag file, so restart kubelet upon changes.
2015-06-03 14:45:07 -07:00
Brian Grant
a72be4667f Merge pull request #9157 from iterion/aws-elb-policy
AWS: Update Master IAM Policy to Include ELB
2015-06-03 12:35:03 -07:00
Brian Grant
d37264edde Merge pull request #9158 from dchen1107/cleanup
stop monit kube-proxy on master node.
2015-06-03 12:13:17 -07:00
Adam Sunderland
2b4d37427e Update Master IAM Policy to Include ELB 2015-06-03 12:20:19 -05:00
Dawn Chen
1d94348023 Watch kubelet flag file, so restart kubelet upon changes. 2015-06-03 09:13:28 -07:00
Prashanth Balasubramanian
f7c0f1c1e3 Set min-request-timeout in test clusters 2015-06-03 08:46:28 -07:00
Brian Grant
d861631f08 Merge pull request #9142 from roberthbailey/kubelet-on-master
Prevent access to the /run and /exec endpoints on the master's kubelet
2015-06-02 22:55:06 -07:00
Brian Grant
36a4ece87a Merge pull request #9080 from thockin/dns-new-search-kubelet
Insert 'svc' into the DNS search paths
2015-06-02 22:54:07 -07:00
Brian Grant
3da686fea5 Merge pull request #8894 from cjcullen/kmaster2
Add an explicit variable to indicate whether an instance is master or not
2015-06-02 20:37:43 -07:00
Brian Grant
e77ded1e84 Merge pull request #8649 from cjcullen/servicefix
Add an advertise-address flag
2015-06-02 19:54:28 -07:00
Brian Grant
21147d784a Merge pull request #9074 from roberthbailey/unbound-var
Don't assume that CA_CERT_BASE64 will be set.
2015-06-02 18:52:49 -07:00
Dawn Chen
301bed535e stop monit kube-proxy on master node.
Fixed #8783
2015-06-02 17:48:24 -07:00
CJ Cullen
dcf5b16cea Add an explicit KUBERNETES_MASTER variable to the kube-env. 2015-06-02 17:17:02 -07:00
CJ Cullen
934c553c04 Clarify description/usage of --advertise-address, Master.PublicAddress 2015-06-02 15:23:32 -07:00
Robert Bailey
1dad552edc Prevent access to the /run and /exec endpoints on the master's kubelet
so that users can't run arbitrary code on the master.
2015-06-02 14:42:11 -07:00
Filip Grzadkowski
98115facfd Revert "Gracefully delete pods from the Kubelet" 2015-06-02 23:40:05 +02:00
CJ Cullen
085a48a70e Add an advertise-address flag. This allows the address that the apiserver binds
to (possibly 0.0.0.0) to be different than the address on which members of the cluster
can reach the apiserver (possibly not a local interface).
2015-06-02 14:33:15 -07:00
Brian Grant
aa2f0be626 Merge pull request #8718 from vishh/kube2sky
Avoid making connections to the apiserver insecure by default in kube2sky
2015-06-02 14:11:58 -07:00
Brian Grant
5e5fe225d8 Merge pull request #9102 from ZJU-SEL/updateK8sversion
bump the ubuntu k8s version to 0.18.0
2015-06-02 10:40:54 -07:00
Brian Grant
b7ae48eb1e Merge pull request #8641 from smarterclayton/gracefully_delete_pods
Gracefully delete pods from the Kubelet
2015-06-02 10:36:27 -07:00
Zach Loafman
6f1d60ed31 gke provider: Fix "gcloud .* describe" checks in util.sh
This basically prevents you from re-running e2es cross-project on the
GKE provider. (The current Jenkins jobs that have been moved to
different projects are working kind of accidentally.)
2015-06-02 07:03:32 -07:00
Filip Grzadkowski
caafd28245 Retry downloading binary tars in case of unpack failure 2015-06-02 14:59:15 +02:00
wizard
73b7128941 bump the k8s version to 0.18.0 2015-06-02 13:18:45 +08:00
Tim Hockin
be4b700ccb Document the supported DNS schema 2015-06-01 17:02:17 -07:00
Vishnu Kannan
404558f29c New release of kube2sky v1.8 2015-06-01 16:59:53 -07:00