Ryan Richard
16a448082f
add functions to generate tokens
2015-05-13 21:33:25 -05:00
Ryan Richard
6968074c90
remove manifest config and bump rax coreos image
2015-05-13 21:33:25 -05:00
Ryan Richard
6ae14b3630
add initial support for flannel
2015-05-13 21:33:24 -05:00
Ryan Richard
b2aa089df0
fix download-release.sh
...
Download-release.sh was overwriting previous downloads
even if the temp URL had expired which resulted in the
release and binaries being overriden.
2015-05-13 21:33:24 -05:00
Ryan Richard
75dac16c34
leverage $public_ip4 for apiserver communication
2015-05-13 21:33:24 -05:00
Eric Tune
936f9cc95d
WIP: Update Rackspace so node talks to apiserver
...
Kubernetes project has decided that it is better if kubelet
and kube-proxy use the apiserver REST interface to get and
set resources instead of accessing resource keys in etcd directly.
This is necessary to support kubelet reporting of events,
and also encapsulates the apiserver store details.
This means that the kubelet and kube-proxy need to know the
apiserver host(s) via a flag.
Since the Rackspace config already used etcd to advertise the
minions to the controller-manager, I used the same pattern to advertise
the apiserver(s) to the minions.
Setting --public_address_override=$private_ipv4 is intended to ensure that
the master serves its http interface on the right ethernet device, since I think
there are two on a droplet.
The new apiserver-advertiser.service puts the IPs of any apiservers in etcd.
The kubelet and kube-proxy now take an environment file which contains
the list of apiserver IPs, and that env var goes into a flag. The
etcd_servers argument is removed -- the point is for these binaries
to not access etcd.
The new apiserver-finder.service watches for changes in etcd and
restarts kubelet and kube proxy when there are new apiservers.
2015-05-13 21:33:23 -05:00
Dawn Chen
309a157665
Merge pull request #7984 from cjcullen/kubelet
...
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-13 17:32:52 -07:00
Vish Kannan
f49757cba5
Merge pull request #8221 from ArtfulCoder/use_https
...
Use https to access apiserver from kube2sky
2015-05-13 17:21:41 -07:00
Abhishek Shah
71a10c2044
Use https
2015-05-13 17:03:29 -07:00
Robert Bailey
a61baf6a74
Merge pull request #8208 from saad-ali/fixTemplateUpDown2
...
Fix GCE kube-down incorrect MIG delete OpID
2015-05-13 15:28:52 -07:00
saadali
c118b6d603
Fix GCE kube-down incorrect MIG delete OpID
2015-05-13 15:06:43 -07:00
Vish Kannan
5b8e70181f
Merge pull request #8199 from satnam6502/es
...
Revert to using emptyDir for Elasticsearch data
2015-05-13 14:47:03 -07:00
Rohit Jnagal
a1ef8585da
Merge pull request #8168 from brendandburns/docker
...
Update single node docker to 0.16.2
2015-05-13 13:25:27 -07:00
Quinton Hoole
d114945b90
Merge pull request #8181 from thockin/dns-health
...
Fix DNS health check
2015-05-13 13:08:37 -07:00
Satnam Singh
ca121ee98d
Revert to using emptyDir for Elasticsearch data
2015-05-13 12:52:56 -07:00
Yu-Ju Hong
ad83197c63
Merge pull request #8187 from satnam6502/nosecret
...
Remove the use of secrets from node level logging agents
2015-05-13 11:12:08 -07:00
Jeff Lowdermilk
f8ebc4e21e
Merge pull request #8104 from roberthbailey/kubelet-using-kubeconfig
...
Replace the auth config file with a kubeconfig file when starting the kubelet on GCE.
2015-05-13 11:09:27 -07:00
Derek Carr
9454d58547
Merge pull request #8127 from liggitt/service_account_admission
...
Add ServiceAccount admission plugin
2015-05-13 14:03:11 -04:00
Zach Loafman
abd1f89ba7
Merge pull request #8189 from dchen1107/clean
...
Monit watch kubelet and kube-proxy on master node too.
2015-05-13 10:57:41 -07:00
Dawn Chen
e32daf4229
Monit watch kubelet and kube-proxy on master node too.
2015-05-13 10:36:00 -07:00
Satnam Singh
53ec5e38c7
Remove the use of secrets from node level logging agents
2015-05-13 10:11:07 -07:00
Tim Hockin
ab30484a4f
Fix DNS health check
2015-05-13 08:51:06 -07:00
Zach Loafman
02f3a32196
Merge pull request #8131 from justinsb/aws_install_salt_gce_style
...
Install specific salt version on AWS, based on GCE
2015-05-13 06:55:32 -07:00
Brendan Burns
48d7604f4e
Update single node docker to 0.16.2
2015-05-13 11:15:56 +01:00
Robert Bailey
c47b9178b4
Replace the auth config file with a kubeconfig file when
...
starting the kubelet on GCE.
2015-05-13 01:03:28 -07:00
CJ Cullen
31ea7d1295
Put cbr0-modifying stuff behind a flag. Address some other comments.
2015-05-12 23:00:28 -07:00
CJ Cullen
5e3d2b9138
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-12 23:00:12 -07:00
Justin Santa Barbara
23b1a22203
AWS: Don't use policy-rc.d to prevent starting daemons until we're ready
...
It isn't required
2015-05-12 21:18:48 -04:00
Nikhil Jindal
c2fecff3d5
Merge pull request #8067 from piosz/kubectl
...
Added label kubernetes.io/name to cluster services
2015-05-12 17:09:22 -07:00
Quinton Hoole
de0d59be05
Merge pull request #8096 from saad-ali/fixTemplateUpDown
...
Make MIG deletion during GCE kube down blocking, so that subsequent template deletion doesn't fail.
2015-05-12 17:05:13 -07:00
saadali
932cdd954d
Clean up GCE kube-down script by using set e
2015-05-12 16:58:22 -07:00
Nikhil Jindal
5e11830e13
Merge pull request #7988 from satnam6502/es-image
...
Make the Elasticsearch logging pods discover each other
2015-05-12 16:19:57 -07:00
Satnam Singh
7cff506c93
Make the Elasticsearch logging pods discover each other
2015-05-12 15:26:09 -07:00
Alex Robinson
a98d883134
Merge pull request #8121 from satnam6502/fluentd-gcp
...
Convert node level logging to Cloud Logging to use token-system-logging
2015-05-12 14:26:46 -07:00
Alex Robinson
96cb4360fa
Merge pull request #8120 from satnam6502/fluentd-es
...
Convert nodel level logging to ES to use token-system-logging
2015-05-12 14:26:28 -07:00
Clayton Coleman
7d620c20b9
Merge pull request #8105 from thockin/dns-domain
...
Rename default DNS domain to cluster.local
2015-05-12 17:18:45 -04:00
Zach Loafman
0b0bace006
Merge pull request #8009 from mbforbes/refactorEnv
...
Refactor master vs node kube-env and salt auth
2015-05-12 13:37:54 -07:00
Justin Santa Barbara
ffb0e7f9b8
Install specific salt version on AWS, based on GCE
...
The latest salt version breaks the container_bridge.py _state function
We can lock to the same version as GCE. This is not a full fix,
because we can't update to the latest salt without breaking GCE,
but this at least unbreaks and sync AWS with GCE.
This isn't a straight copy from GCE, because we still use
the salt master on AWS (for now)
Fixes #8114
2015-05-12 16:33:56 -04:00
Max Forbes
76c89db5a8
Master vs node salt auth refactor in configure-vm.sh
2015-05-12 13:26:11 -07:00
Max Forbes
0acf8f9a00
Refactor GCE kube-env for both OSes.
2015-05-12 13:26:10 -07:00
Jordan Liggitt
e5d47081a2
Add ServiceAccount admission plugin
2015-05-12 15:19:05 -04:00
Nikhil Jindal
d75bd8bf2a
Merge pull request #7101 from liggitt/service_account
...
ServiceAccounts
2015-05-12 10:23:41 -07:00
Satnam Singh
ade18e4ff3
Conver node level logging to Cloud Logging to use token-system-logging
2015-05-12 10:17:45 -07:00
Satnam Singh
f9af0658fa
Convert nodel level logging to ES to use token-system-logging
2015-05-12 10:07:49 -07:00
Tim Hockin
e83e49b076
rename default DNS domain to cluster.local
2015-05-11 23:00:43 -07:00
saadali
c5b1508774
Make MIG deletion during GCE kube down blocking, so that subseqent template deletion doesn't fail.
2015-05-11 18:51:59 -07:00
Alex Robinson
e2b7ef8d2c
Merge pull request #8078 from satnam6502/fluentd-gcp
...
Convert Fluentd to Cloud Logging pod specs to YAML
2015-05-11 16:55:14 -07:00
Satnam Singh
e246685468
Convert Fluentd to Cloud Logging pod specs to YAML
2015-05-11 14:55:46 -07:00
Satnam Singh
2f5ba28a17
Switch Fluentd to ES manifest back to YAML
2015-05-11 14:37:41 -07:00
Jordan Liggitt
7e14a80f63
ServiceAccount admission plugin
2015-05-11 17:18:06 -04:00