Commit Graph

79 Commits

Author SHA1 Message Date
Eric Paris
c560f41a4b Update docs which were incorrectly using _ in flag names
Each of these was verified that the actual flag declaration correctly
used -
2015-08-17 11:18:43 -07:00
Eric Paris
86ca88be61 convert cluster/ from --flag_name= --flag-name= 2015-08-07 11:00:13 -04:00
Robert Bailey
8df33bc1a7 Register the kubelet on the master node with an apiserver. This option is
separated from the apiserver running locally on the master node so that it
can be optionally enabled or disabled as needed.

Also, fix the healthchecking configuration for the master components, which
was previously only working by coincidence:

If a kubelet doesn't register with a master, it never bothers to figure out
what its local address is. In which case it ends up constructing a URL like
http://:8080/healthz for the http probe. This happens to work on the master
because all of the pods are using host networking and explicitly binding to
127.0.0.1. Once the kubelet is registered with the master and it determines
the local node address, it tries to healthcheck on an address where the pod
isn't listening and the kubelet periodically restarts each master component
when the liveness probe fails.
2015-08-06 13:39:32 -07:00
derekwaynecarr
0de0e3e9f1 Fix salt configuration on systemd setups 2015-08-05 17:01:43 -04:00
gmarek
5bb7eec5ab Use salt pillars to pass test arguments during cluster creation. 2015-07-31 09:32:01 +02:00
Alex Robinson
94ae0a9a0d Make the kubelet on a GCE master check instance metadata for manifests.
Primary motivation: enable GKE and other cluster-as-a-service folks to
easily run additional logic on the master without having to modify salt
or SSH to the master after it's been created.
2015-07-30 21:04:34 +00:00
Justin Santa Barbara
89900fa19b AWS: Ubuntu Vivid, set cgroup_root to docker
Otherwise libcontainer generates systemd unit file names that start with "-",
which are not valid.
2015-07-08 17:00:43 -04:00
Justin Santa Barbara
60d822435b Salt: clean daemon_args on RedHat, not systemd
I don't think it actually makes a difference based on how we're using it,
but this is now more of a precise change.
2015-07-03 10:24:32 -04:00
Justin Santa Barbara
bcd92c7522 Salt: support systemd (don't assume Redhat <=> systemd)
Also work around problems with Salt & systemd services, in particular
that Salt doesn't issue a daemon-reload.
2015-07-03 01:40:15 -04:00
derekwaynecarr
de78898170 Missing file watch on systemd stops kubelet starting on kube-up 2015-07-01 09:59:26 -04:00
Justin Santa Barbara
54d3ac92ea Don't make kubelet systemd service depend on Docker
Fixes #10379
2015-06-26 11:03:09 -04:00
Justin Santa Barbara
a0ae1d90ba Salt: don't assume that master => cbr-cidr
In particular, this is required for vagrant
2015-06-25 09:17:00 -04:00
Maxwell Forbes
3afda5d566 Merge pull request #10312 from dchen1107/cleanup
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Dawn Chen
6ddfa512de Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
This reverts commit fd0a95dd12.
2015-06-24 11:10:10 -07:00
Piotr Szczesniak
fd0a95dd12 Revert "Fix the race between configuring cbr0 and restarting static pods" 2015-06-24 09:56:49 +02:00
derekwaynecarr
db202d4904 Remove nginx from vagrant 2015-06-23 13:07:50 -04:00
Brendan Burns
192ffdfb25 Fix the container bridge so that it can create cbr0
Fix the kubelet so that it tries to sync status, even if Docker is down
2015-06-22 23:18:01 -07:00
Justin Santa Barbara
16d6ba8a9d AWS: Stop the master kubelet from registering as a node (like GCE does) 2015-06-12 18:33:45 -04:00
derekwaynecarr
2168cee414 Upgrade to Fedora 21, Docker 1.6, clean-up SDN 2015-06-04 10:59:23 -04:00
Dawn Chen
1d94348023 Watch kubelet flag file, so restart kubelet upon changes. 2015-06-03 09:13:28 -07:00
Robert Bailey
1dad552edc Prevent access to the /run and /exec endpoints on the master's kubelet
so that users can't run arbitrary code on the master.
2015-06-02 14:42:11 -07:00
Justin Santa Barbara
c4a2631593 Mount logic breaks if /var/lib/kubelet is a symlink
Pass the correct kubelet root-dir on AWS
2015-05-29 20:13:09 -04:00
Rohit Jnagal
6274d845b9 Merge pull request #8931 from dchen1107/clean
Fix the race when monit is used to monitor services which are also
2015-05-29 11:23:21 -07:00
Dawn Chen
79a2a4f18d Fix the race when monit is used to monitor services which are also
started at boot time via init.d at boot time.
2015-05-28 11:58:33 -07:00
Victor Marmol
c97dda068d Create a /system system container in Debian. 2015-05-26 20:52:09 -07:00
Victor Marmol
656be14e84 Run Docker containers as top-level containers in Debian.
Part of #8215
2015-05-22 13:27:25 -07:00
CJ Cullen
bf646abf8d Revert "Revert "Modify nodes to register directly with the master.""
This reverts commit c53786ab31.
2015-05-20 14:21:03 -07:00
Quinton Hoole
c53786ab31 Revert "Modify nodes to register directly with the master." 2015-05-20 13:47:51 -07:00
Robert Bailey
8e356f8439 Configure the cloud provider for the kubelet. 2015-05-19 09:55:07 -07:00
Robert Bailey
01467e0bb8 Modify nodes to register directly with the master.
- Delete nodes when they are no longer ready and don't exist in the
cloud provider.
 - Label each node with it's hostname.
 - Add flag to skip node registration.
 - Add a test for registering an existing node.
2015-05-19 09:55:07 -07:00
Dawn Chen
309a157665 Merge pull request #7984 from cjcullen/kubelet
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-13 17:32:52 -07:00
Robert Bailey
c47b9178b4 Replace the auth config file with a kubeconfig file when
starting the kubelet on GCE.
2015-05-13 01:03:28 -07:00
CJ Cullen
31ea7d1295 Put cbr0-modifying stuff behind a flag. Address some other comments. 2015-05-12 23:00:28 -07:00
Justin Santa Barbara
57f7b658bb AWS: Change apiserver to listen on 443 directly, not through nginx
Mirrors changes in GCE.  I think the same changes will be needed for vagrant.
2015-05-02 16:59:04 -04:00
Robert Bailey
dc45f7f9e6 Remove nginx and replace basic auth with bearer token auth for GCE.
- Configure the apiserver to listen securely on 443 instead of 6443.
 - Configure the kubelet to connect to 443 instead of 6443.
 - Update documentation to refer to bearer tokens instead of basic auth.
2015-04-22 11:11:20 -07:00
Justin Santa Barbara
29592356f7 Rename salt minion_ip to hostname_override
Prep work for making AWS node identifier -> instance id
2015-04-21 06:24:49 -07:00
Eric Tune
955cc1e1df Remove unused kubelet user from salt.
Fixes #1512.

Cluster creation and validation succeeds with this change.
2015-04-16 07:46:56 -07:00
Justin Santa Barbara
2426366ec8 Update cAdvisor with moved docker root on AWS
We set up a symlink now, and we also pass docker_root into the kubelet.

The symlink is probably sufficient, but doing both feels safer.
2015-04-07 10:40:22 -07:00
derekwaynecarr
c6bf46acd7 Fix vagrant with etcd in pod 2015-04-02 16:55:29 -04:00
Robert Bailey
40ebed845f Remove salt configuration that matches the default settings in
the Kubelet.
2015-04-01 12:13:40 -07:00
Zach Loafman
6c219885e0 s/apiservers/api_servers/ in Salt
It looks like api_servers finally won this battle. Kill off the
last remaining places passing it, but allow the kubelet Salt to
accept apiservers for a period of time.

(This was bothering my OCD.)
2015-03-31 12:29:46 -07:00
Abhishek Shah
d84ff79cfd Added a catchall to set api server ip address in kubelet cmd params 2015-03-27 08:44:52 -07:00
Abhishek Shah
f35a352782 Modified salt config to get master ip address correctly 2015-03-26 21:17:06 -07:00
Victor Marmol
1a7f7245e7 Remove cAdvisor manifest from cluster startup.
cAdvisor is now integrated into the Kubelet and runs inside of it.
2015-03-13 16:06:42 -07:00
derekwaynecarr
22e559d769 Provision network before kubelet 2015-03-10 10:30:50 -04:00
derekwaynecarr
35ab4ccc6d Further vagrant reliability improvements. 2015-03-03 06:55:34 -08:00
derekwaynecarr
87a41b0934 Improve vagrant reliablility, fix race condition with openvswitch and docker 2015-02-21 13:31:50 -05:00
Eric Tune
59a06b5073 Don't set --etcd_servers argument for kubelet.
This is ignored by all recent kubelet versions when api_servers is
set.  And it is set in this salt file.
2015-02-11 15:53:26 -08:00
Zach Loafman
6b3bb763f0 Merge pull request #4287 from derekwaynecarr/docker_group_gone
Docker 1.4.1 on Fedora no longer provisions a docker group
2015-02-10 14:28:02 -08:00
derekwaynecarr
46eb657722 docker does not provision a docker group anymore, so do not add vagrant user to it 2015-02-10 11:15:22 -05:00