Eric Paris
c560f41a4b
Update docs which were incorrectly using _ in flag names
...
Each of these was verified that the actual flag declaration correctly
used -
2015-08-17 11:18:43 -07:00
Eric Paris
86ca88be61
convert cluster/ from --flag_name= --flag-name=
2015-08-07 11:00:13 -04:00
Robert Bailey
8df33bc1a7
Register the kubelet on the master node with an apiserver. This option is
...
separated from the apiserver running locally on the master node so that it
can be optionally enabled or disabled as needed.
Also, fix the healthchecking configuration for the master components, which
was previously only working by coincidence:
If a kubelet doesn't register with a master, it never bothers to figure out
what its local address is. In which case it ends up constructing a URL like
http://:8080/healthz for the http probe. This happens to work on the master
because all of the pods are using host networking and explicitly binding to
127.0.0.1. Once the kubelet is registered with the master and it determines
the local node address, it tries to healthcheck on an address where the pod
isn't listening and the kubelet periodically restarts each master component
when the liveness probe fails.
2015-08-06 13:39:32 -07:00
derekwaynecarr
0de0e3e9f1
Fix salt configuration on systemd setups
2015-08-05 17:01:43 -04:00
gmarek
5bb7eec5ab
Use salt pillars to pass test arguments during cluster creation.
2015-07-31 09:32:01 +02:00
Alex Robinson
94ae0a9a0d
Make the kubelet on a GCE master check instance metadata for manifests.
...
Primary motivation: enable GKE and other cluster-as-a-service folks to
easily run additional logic on the master without having to modify salt
or SSH to the master after it's been created.
2015-07-30 21:04:34 +00:00
Justin Santa Barbara
89900fa19b
AWS: Ubuntu Vivid, set cgroup_root to docker
...
Otherwise libcontainer generates systemd unit file names that start with "-",
which are not valid.
2015-07-08 17:00:43 -04:00
Justin Santa Barbara
60d822435b
Salt: clean daemon_args on RedHat, not systemd
...
I don't think it actually makes a difference based on how we're using it,
but this is now more of a precise change.
2015-07-03 10:24:32 -04:00
Justin Santa Barbara
bcd92c7522
Salt: support systemd (don't assume Redhat <=> systemd)
...
Also work around problems with Salt & systemd services, in particular
that Salt doesn't issue a daemon-reload.
2015-07-03 01:40:15 -04:00
derekwaynecarr
de78898170
Missing file watch on systemd stops kubelet starting on kube-up
2015-07-01 09:59:26 -04:00
Justin Santa Barbara
54d3ac92ea
Don't make kubelet systemd service depend on Docker
...
Fixes #10379
2015-06-26 11:03:09 -04:00
Justin Santa Barbara
a0ae1d90ba
Salt: don't assume that master => cbr-cidr
...
In particular, this is required for vagrant
2015-06-25 09:17:00 -04:00
Maxwell Forbes
3afda5d566
Merge pull request #10312 from dchen1107/cleanup
...
Take 2: Fix the race between configuring cbr0 and restarting static pods
2015-06-24 17:59:50 -07:00
Dawn Chen
6ddfa512de
Revert "Revert "Fix the race between configuring cbr0 and restarting static pods""
...
This reverts commit fd0a95dd12
.
2015-06-24 11:10:10 -07:00
Piotr Szczesniak
fd0a95dd12
Revert "Fix the race between configuring cbr0 and restarting static pods"
2015-06-24 09:56:49 +02:00
derekwaynecarr
db202d4904
Remove nginx from vagrant
2015-06-23 13:07:50 -04:00
Brendan Burns
192ffdfb25
Fix the container bridge so that it can create cbr0
...
Fix the kubelet so that it tries to sync status, even if Docker is down
2015-06-22 23:18:01 -07:00
Justin Santa Barbara
16d6ba8a9d
AWS: Stop the master kubelet from registering as a node (like GCE does)
2015-06-12 18:33:45 -04:00
derekwaynecarr
2168cee414
Upgrade to Fedora 21, Docker 1.6, clean-up SDN
2015-06-04 10:59:23 -04:00
Dawn Chen
1d94348023
Watch kubelet flag file, so restart kubelet upon changes.
2015-06-03 09:13:28 -07:00
Robert Bailey
1dad552edc
Prevent access to the /run and /exec endpoints on the master's kubelet
...
so that users can't run arbitrary code on the master.
2015-06-02 14:42:11 -07:00
Justin Santa Barbara
c4a2631593
Mount logic breaks if /var/lib/kubelet is a symlink
...
Pass the correct kubelet root-dir on AWS
2015-05-29 20:13:09 -04:00
Rohit Jnagal
6274d845b9
Merge pull request #8931 from dchen1107/clean
...
Fix the race when monit is used to monitor services which are also
2015-05-29 11:23:21 -07:00
Dawn Chen
79a2a4f18d
Fix the race when monit is used to monitor services which are also
...
started at boot time via init.d at boot time.
2015-05-28 11:58:33 -07:00
Victor Marmol
c97dda068d
Create a /system system container in Debian.
2015-05-26 20:52:09 -07:00
Victor Marmol
656be14e84
Run Docker containers as top-level containers in Debian.
...
Part of #8215
2015-05-22 13:27:25 -07:00
CJ Cullen
bf646abf8d
Revert "Revert "Modify nodes to register directly with the master.""
...
This reverts commit c53786ab31
.
2015-05-20 14:21:03 -07:00
Quinton Hoole
c53786ab31
Revert "Modify nodes to register directly with the master."
2015-05-20 13:47:51 -07:00
Robert Bailey
8e356f8439
Configure the cloud provider for the kubelet.
2015-05-19 09:55:07 -07:00
Robert Bailey
01467e0bb8
Modify nodes to register directly with the master.
...
- Delete nodes when they are no longer ready and don't exist in the
cloud provider.
- Label each node with it's hostname.
- Add flag to skip node registration.
- Add a test for registering an existing node.
2015-05-19 09:55:07 -07:00
Dawn Chen
309a157665
Merge pull request #7984 from cjcullen/kubelet
...
Kubelet configure cbr0 instead of configure-vm.sh
2015-05-13 17:32:52 -07:00
Robert Bailey
c47b9178b4
Replace the auth config file with a kubeconfig file when
...
starting the kubelet on GCE.
2015-05-13 01:03:28 -07:00
CJ Cullen
31ea7d1295
Put cbr0-modifying stuff behind a flag. Address some other comments.
2015-05-12 23:00:28 -07:00
Justin Santa Barbara
57f7b658bb
AWS: Change apiserver to listen on 443 directly, not through nginx
...
Mirrors changes in GCE. I think the same changes will be needed for vagrant.
2015-05-02 16:59:04 -04:00
Robert Bailey
dc45f7f9e6
Remove nginx and replace basic auth with bearer token auth for GCE.
...
- Configure the apiserver to listen securely on 443 instead of 6443.
- Configure the kubelet to connect to 443 instead of 6443.
- Update documentation to refer to bearer tokens instead of basic auth.
2015-04-22 11:11:20 -07:00
Justin Santa Barbara
29592356f7
Rename salt minion_ip to hostname_override
...
Prep work for making AWS node identifier -> instance id
2015-04-21 06:24:49 -07:00
Eric Tune
955cc1e1df
Remove unused kubelet user from salt.
...
Fixes #1512 .
Cluster creation and validation succeeds with this change.
2015-04-16 07:46:56 -07:00
Justin Santa Barbara
2426366ec8
Update cAdvisor with moved docker root on AWS
...
We set up a symlink now, and we also pass docker_root into the kubelet.
The symlink is probably sufficient, but doing both feels safer.
2015-04-07 10:40:22 -07:00
derekwaynecarr
c6bf46acd7
Fix vagrant with etcd in pod
2015-04-02 16:55:29 -04:00
Robert Bailey
40ebed845f
Remove salt configuration that matches the default settings in
...
the Kubelet.
2015-04-01 12:13:40 -07:00
Zach Loafman
6c219885e0
s/apiservers/api_servers/ in Salt
...
It looks like api_servers finally won this battle. Kill off the
last remaining places passing it, but allow the kubelet Salt to
accept apiservers for a period of time.
(This was bothering my OCD.)
2015-03-31 12:29:46 -07:00
Abhishek Shah
d84ff79cfd
Added a catchall to set api server ip address in kubelet cmd params
2015-03-27 08:44:52 -07:00
Abhishek Shah
f35a352782
Modified salt config to get master ip address correctly
2015-03-26 21:17:06 -07:00
Victor Marmol
1a7f7245e7
Remove cAdvisor manifest from cluster startup.
...
cAdvisor is now integrated into the Kubelet and runs inside of it.
2015-03-13 16:06:42 -07:00
derekwaynecarr
22e559d769
Provision network before kubelet
2015-03-10 10:30:50 -04:00
derekwaynecarr
35ab4ccc6d
Further vagrant reliability improvements.
2015-03-03 06:55:34 -08:00
derekwaynecarr
87a41b0934
Improve vagrant reliablility, fix race condition with openvswitch and docker
2015-02-21 13:31:50 -05:00
Eric Tune
59a06b5073
Don't set --etcd_servers argument for kubelet.
...
This is ignored by all recent kubelet versions when api_servers is
set. And it is set in this salt file.
2015-02-11 15:53:26 -08:00
Zach Loafman
6b3bb763f0
Merge pull request #4287 from derekwaynecarr/docker_group_gone
...
Docker 1.4.1 on Fedora no longer provisions a docker group
2015-02-10 14:28:02 -08:00
derekwaynecarr
46eb657722
docker does not provision a docker group anymore, so do not add vagrant user to it
2015-02-10 11:15:22 -05:00