Commit Graph

873 Commits

Author SHA1 Message Date
Jake Sanders
2576713a40 when disabled, don't create the API server's insecure port mapping 2019-05-09 11:50:59 -07:00
Kubernetes Prow Robot
0befec7fb6
Merge pull request #77447 from dekkagaijin/mip
disable the apiserver's insecure port by default
2019-05-07 22:14:32 -07:00
Kubernetes Prow Robot
b34d7ac0ce
Merge pull request #77458 from grayluck/agent-v2.3.0
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
2019-05-07 17:52:58 -07:00
yankaiz
1059a71973 Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
Added the non-masq ranges to configure-helper.sh so that GCE clusters
will have the non-masq IP ranges aligned with GKE clusters.
2019-05-06 22:32:34 -07:00
Jake Sanders
e4d521e825 disable the apiserver insecure port by default in configure-helper 2019-05-06 19:26:57 -07:00
Jake Sanders
ff4c372eaa ensure that kubectl works when the master insecure port is disabled 2019-05-06 19:25:41 -07:00
Yuwen Ma
b8a8bdb127 [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-05-06 08:04:06 -07:00
Mark Wolters
1456979e93 Added function to create kubeconfig for addon-manager 2019-05-03 15:12:16 -07:00
Kubernetes Prow Robot
0b10d1b830
Merge pull request #77140 from dekkagaijin/glbc
use static token to authenticate glbc
2019-05-02 16:22:30 -07:00
Jake Sanders
8bd0b45eae use static token to authenticate glbc 2019-05-01 22:24:48 -07:00
Ling Huang
d3fb7115ab Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8. 2019-04-29 15:07:10 -04:00
Wojciech Tyczynski
0d77f62c02
Revert "override ETCD_SERVER with https instead http when mTLS is enabled" 2019-04-27 06:50:20 +02:00
Kubernetes Prow Robot
2c2e7a01bb
Merge pull request #76655 from SataQiu/fix-shell-cluster-20190417
Fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-23 23:50:04 -07:00
Kubernetes Prow Robot
06bc7e3e00
Merge pull request #76792 from dekkagaijin/insecure-port
add option to disable the apiserver's insecure port via env var
2019-04-23 14:02:35 -07:00
SataQiu
903c5a53b3 fix shellcheck failures of cluster/gce/gci/shutdown.sh 2019-04-22 11:46:45 +08:00
Jake Sanders
42fcd5eb63 remove erroneous kube-apiserver.manifest sed line 2019-04-19 17:40:28 +00:00
Kubernetes Prow Robot
e4f9d8fe3f
Merge pull request #76331 from xichengliudui/fixshellcheckfailures-17
Fix shellcheck failures in stage-upload.sh
2019-04-19 09:47:55 -07:00
Jake Sanders
113ab741e6 add option to set the value of the apiserver's insecure port 2019-04-18 20:35:08 +00:00
Kubernetes Prow Robot
dc2c9e8bd5
Merge pull request #74690 from wenjiaswe/etcdserverhttp
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-15 16:45:07 -07:00
Wenjia Zhang
80c4bccf0f override ETCD_SERVER with https instead http when mTLS is enabled 2019-04-14 22:11:37 -07:00
Kubernetes Prow Robot
ae8a4fcb0d
Merge pull request #76352 from jpbetz/reapply-72062
[reapply] Perform GCE log rotation check every 5 minutes
2019-04-12 00:41:14 -07:00
aaa
9768ba9eb3 Fix shellcheck failures in stage-upload.sh
update pull request

update pull request

update pull request

update pull request
2019-04-12 02:42:48 -04:00
Kubernetes Prow Robot
39073f0b9f
Merge pull request #74268 from wenjiaswe/fixingNitforetcdapiservertlspath
fix nit for etcd_apiserver TLS path
2019-04-11 01:22:11 -07:00
Kubernetes Prow Robot
134ed2e703
Merge pull request #76353 from Random-Liu/add-cni-version-env
Add envs for CNI version.
2019-04-10 18:46:22 -07:00
Lantao Liu
ad5b64ca10 Add envs for CNI version.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-09 16:38:53 -07:00
Joe Betz
6297c4f750 Perform GCE log rotation check every 5 minutes 2019-04-09 16:37:38 -07:00
Pengfei Ni
1406e2b70f Update cri-tools to v1.14.0 2019-04-08 10:59:18 +08:00
Zhen Wang
953677d7a5 Use Node-Problem-Detector v0.6.3 on GCI 2019-04-05 11:08:24 -07:00
Maciej Borsz
a0b51681c4
Revert "[Distroless] Convert the GCE manifests for master containers." 2019-04-05 12:55:14 +02:00
Kubernetes Prow Robot
1c105e1629
Merge pull request #75624 from yuwenma/gce-manifest
[Distroless] Convert the GCE manifests for master containers.
2019-04-04 16:21:19 -07:00
Yuwen Ma
af2659527f [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-04-04 11:16:23 -07:00
Michelle Au
d2aa8178f2 Remove alpha CRD install 2019-04-02 10:59:11 -07:00
Kubernetes Prow Robot
aa5fda22f2
Merge pull request #75269 from javier-b-perez/gce-configure
gce: configure: validate SA has storage scope
2019-03-19 11:06:22 -07:00
Dan Williams
bfd8ad3268 build/gci: bump CNI version to 0.7.5 2019-03-18 17:16:42 -05:00
Kubernetes Prow Robot
a213886f9c
Merge pull request #74502 from Random-Liu/collect-pod-log
Collect pod log in fluentd-gcp
2019-03-12 01:34:37 -07:00
Javier Pérez Hernández
e783f0bcd4 gce: configure: validate SA has storage scope
If the VM SA doesn't have storage scope associated, don't use the
token in the curl request or the request will fail with 403.
2019-03-11 12:04:01 -07:00
Lantao Liu
7ffa7da112 Configure logrotate for pod logs. 2019-03-08 16:45:41 -08:00
Tim Allclair
63f61a6714 Migrate RuntimeClass to internal API 2019-03-07 11:07:54 -08:00
Kubernetes Prow Robot
ab7a48d796
Merge pull request #70036 from pbarker/audit-etoe
dynamic audit e2e test
2019-03-06 17:58:58 -08:00
Kubernetes Prow Robot
45e5f6053b
Merge pull request #74424 from liggitt/drop-k8s-io-node-labels
Clean up self-set node labels
2019-03-06 08:24:26 -08:00
Patrick Barker
67a245ae61 remove unneeded println 2019-03-05 14:38:58 -07:00
Patrick Barker
45d715cdc6 adds dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Joe Betz
add956f00f Revert "Perform GCE log rotation check every 5 minutes"
This reverts commit 1ba05d51a6.
2019-03-04 14:10:20 -08:00
Zhen Wang
efa96f7eb8 allows configuring NPD release and flags on GCI and add cluster e2e test 2019-02-26 21:21:54 -08:00
Jordan Liggitt
e1db43ad1b Label old nodes with legacy addon labels 2019-02-26 11:43:10 -05:00
SataQiu
9cda80e836 fix shellcheck lint errors in cluster and hack scripts 2019-02-24 11:15:35 +08:00
Xiang Dai
36065c6dd7 delete all duplicate empty blanks
Signed-off-by: Xiang Dai <764524258@qq.com>
2019-02-23 10:28:04 +08:00
Wenjia Zhang
b9af5b5112 fix nit for etcd_apiserver TLS path 2019-02-19 11:19:49 -08:00
Javier Pérez Hernández
708d7df561 k8s: gci: configure: add token to curl calls
Modify script to use curl to get metadata and Service Account token.
When the SA doesn't have 'Storage Read' scope, it can only read
public files.
2019-02-15 11:00:35 -08:00
Jeff Grafton
e216995ef1 Update repo-infra, bazel-skylib, rules_docker, and rules_go dependencies
Also require bazel 0.18.0+
2019-02-12 17:55:10 -08:00