Commit Graph

1340 Commits

Author SHA1 Message Date
Ryan Richard
16a448082f add functions to generate tokens 2015-05-13 21:33:25 -05:00
Ryan Richard
6968074c90 remove manifest config and bump rax coreos image 2015-05-13 21:33:25 -05:00
Ryan Richard
6ae14b3630 add initial support for flannel 2015-05-13 21:33:24 -05:00
Ryan Richard
b2aa089df0 fix download-release.sh
Download-release.sh was overwriting previous downloads
even if the temp URL had expired which resulted in the
release and binaries being overriden.
2015-05-13 21:33:24 -05:00
Ryan Richard
75dac16c34 leverage $public_ip4 for apiserver communication 2015-05-13 21:33:24 -05:00
Eric Tune
936f9cc95d WIP: Update Rackspace so node talks to apiserver
Kubernetes project has decided that it is better if kubelet
and kube-proxy use the apiserver REST interface to get and
set resources instead of accessing resource keys in etcd directly.
This is necessary to support kubelet reporting of events,
and also encapsulates the apiserver store details.

This means that the kubelet and kube-proxy need to know the
apiserver host(s) via a flag.

Since the Rackspace config already used etcd to advertise the
minions to the controller-manager, I used the same pattern to advertise
the apiserver(s) to the minions.

Setting --public_address_override=$private_ipv4 is intended to ensure that
the master serves its http interface on the right ethernet device, since I think
there are two on a droplet.

The new apiserver-advertiser.service puts the IPs of any apiservers in etcd.

The kubelet and kube-proxy now take an environment file which contains
the list of apiserver IPs, and that env var goes into a flag.  The
etcd_servers argument is removed -- the point is for these binaries
to not access etcd.

The new apiserver-finder.service watches for changes in etcd and
restarts kubelet and kube proxy when there are new apiservers.
2015-05-13 21:33:23 -05:00
Dawn Chen
309a157665 Merge pull request #7984 from cjcullen/kubelet
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-13 17:32:52 -07:00
Vish Kannan
f49757cba5 Merge pull request #8221 from ArtfulCoder/use_https
Use https to access apiserver from kube2sky
2015-05-13 17:21:41 -07:00
Abhishek Shah
71a10c2044 Use https 2015-05-13 17:03:29 -07:00
Robert Bailey
a61baf6a74 Merge pull request #8208 from saad-ali/fixTemplateUpDown2
Fix GCE kube-down incorrect MIG delete OpID
2015-05-13 15:28:52 -07:00
saadali
c118b6d603 Fix GCE kube-down incorrect MIG delete OpID 2015-05-13 15:06:43 -07:00
Vish Kannan
5b8e70181f Merge pull request #8199 from satnam6502/es
Revert to using emptyDir for Elasticsearch data
2015-05-13 14:47:03 -07:00
Rohit Jnagal
a1ef8585da Merge pull request #8168 from brendandburns/docker
Update single node docker to 0.16.2
2015-05-13 13:25:27 -07:00
Quinton Hoole
d114945b90 Merge pull request #8181 from thockin/dns-health
Fix DNS health check
2015-05-13 13:08:37 -07:00
Satnam Singh
ca121ee98d Revert to using emptyDir for Elasticsearch data 2015-05-13 12:52:56 -07:00
Yu-Ju Hong
ad83197c63 Merge pull request #8187 from satnam6502/nosecret
Remove the use of secrets from node level logging agents
2015-05-13 11:12:08 -07:00
Jeff Lowdermilk
f8ebc4e21e Merge pull request #8104 from roberthbailey/kubelet-using-kubeconfig
Replace the auth config file with a kubeconfig file when starting the kubelet on GCE.
2015-05-13 11:09:27 -07:00
Derek Carr
9454d58547 Merge pull request #8127 from liggitt/service_account_admission
Add ServiceAccount admission plugin
2015-05-13 14:03:11 -04:00
Zach Loafman
abd1f89ba7 Merge pull request #8189 from dchen1107/clean
Monit watch kubelet and kube-proxy on master node too.
2015-05-13 10:57:41 -07:00
Dawn Chen
e32daf4229 Monit watch kubelet and kube-proxy on master node too. 2015-05-13 10:36:00 -07:00
Satnam Singh
53ec5e38c7 Remove the use of secrets from node level logging agents 2015-05-13 10:11:07 -07:00
Tim Hockin
ab30484a4f Fix DNS health check 2015-05-13 08:51:06 -07:00
Zach Loafman
02f3a32196 Merge pull request #8131 from justinsb/aws_install_salt_gce_style
Install specific salt version on AWS, based on GCE
2015-05-13 06:55:32 -07:00
Brendan Burns
48d7604f4e Update single node docker to 0.16.2 2015-05-13 11:15:56 +01:00
Robert Bailey
c47b9178b4 Replace the auth config file with a kubeconfig file when
starting the kubelet on GCE.
2015-05-13 01:03:28 -07:00
CJ Cullen
31ea7d1295 Put cbr0-modifying stuff behind a flag. Address some other comments. 2015-05-12 23:00:28 -07:00
CJ Cullen
5e3d2b9138 Kubelet configure cbr0 instead of configure-vm.sh 2015-05-12 23:00:12 -07:00
Justin Santa Barbara
23b1a22203 AWS: Don't use policy-rc.d to prevent starting daemons until we're ready
It isn't required
2015-05-12 21:18:48 -04:00
Nikhil Jindal
c2fecff3d5 Merge pull request #8067 from piosz/kubectl
Added label kubernetes.io/name to cluster services
2015-05-12 17:09:22 -07:00
Quinton Hoole
de0d59be05 Merge pull request #8096 from saad-ali/fixTemplateUpDown
Make MIG deletion during GCE kube down blocking, so that subsequent template deletion doesn't fail.
2015-05-12 17:05:13 -07:00
saadali
932cdd954d Clean up GCE kube-down script by using set e 2015-05-12 16:58:22 -07:00
Nikhil Jindal
5e11830e13 Merge pull request #7988 from satnam6502/es-image
Make the Elasticsearch logging pods discover each other
2015-05-12 16:19:57 -07:00
Satnam Singh
7cff506c93 Make the Elasticsearch logging pods discover each other 2015-05-12 15:26:09 -07:00
Alex Robinson
a98d883134 Merge pull request #8121 from satnam6502/fluentd-gcp
Convert node level logging to Cloud Logging to use token-system-logging
2015-05-12 14:26:46 -07:00
Alex Robinson
96cb4360fa Merge pull request #8120 from satnam6502/fluentd-es
Convert nodel level logging to ES to use token-system-logging
2015-05-12 14:26:28 -07:00
Clayton Coleman
7d620c20b9 Merge pull request #8105 from thockin/dns-domain
Rename default DNS domain to cluster.local
2015-05-12 17:18:45 -04:00
Zach Loafman
0b0bace006 Merge pull request #8009 from mbforbes/refactorEnv
Refactor master vs node kube-env and salt auth
2015-05-12 13:37:54 -07:00
Justin Santa Barbara
ffb0e7f9b8 Install specific salt version on AWS, based on GCE
The latest salt version breaks the container_bridge.py _state function

We can lock to the same version as GCE.  This is not a full fix,
because we can't update to the latest salt without breaking GCE,
but this at least unbreaks and sync AWS with GCE.

This isn't a straight copy from GCE, because we still use
the salt master on AWS (for now)

Fixes #8114
2015-05-12 16:33:56 -04:00
Max Forbes
76c89db5a8 Master vs node salt auth refactor in configure-vm.sh 2015-05-12 13:26:11 -07:00
Max Forbes
0acf8f9a00 Refactor GCE kube-env for both OSes. 2015-05-12 13:26:10 -07:00
Jordan Liggitt
e5d47081a2 Add ServiceAccount admission plugin 2015-05-12 15:19:05 -04:00
Nikhil Jindal
d75bd8bf2a Merge pull request #7101 from liggitt/service_account
ServiceAccounts
2015-05-12 10:23:41 -07:00
Satnam Singh
ade18e4ff3 Conver node level logging to Cloud Logging to use token-system-logging 2015-05-12 10:17:45 -07:00
Satnam Singh
f9af0658fa Convert nodel level logging to ES to use token-system-logging 2015-05-12 10:07:49 -07:00
Tim Hockin
e83e49b076 rename default DNS domain to cluster.local 2015-05-11 23:00:43 -07:00
saadali
c5b1508774 Make MIG deletion during GCE kube down blocking, so that subseqent template deletion doesn't fail. 2015-05-11 18:51:59 -07:00
Alex Robinson
e2b7ef8d2c Merge pull request #8078 from satnam6502/fluentd-gcp
Convert Fluentd to Cloud Logging pod specs to YAML
2015-05-11 16:55:14 -07:00
Satnam Singh
e246685468 Convert Fluentd to Cloud Logging pod specs to YAML 2015-05-11 14:55:46 -07:00
Satnam Singh
2f5ba28a17 Switch Fluentd to ES manifest back to YAML 2015-05-11 14:37:41 -07:00
Jordan Liggitt
7e14a80f63 ServiceAccount admission plugin 2015-05-11 17:18:06 -04:00