Commit Graph

1155 Commits

Author SHA1 Message Date
Zach Loafman
33b3d99b96 Fix the fix for GKE kube-down
Fixes issue in #7565

(cherry picked from commit 6a0fab3d34)
2015-05-01 15:39:08 -07:00
Jeff Lowdermilk
3aaf51fa77 fix kube-down for provider gke
(cherry picked from commit 996168dced)
2015-05-01 15:38:40 -07:00
Victor Marmol
fc34277d8e Merge pull request #7445 from dchen1107/rkt-support
Bring up a kuberenetes cluster using coreos image as worker nodes
2015-04-28 18:04:42 -07:00
Zach Loafman
89195b0a14 Merge pull request #7461 from cjcullen/dns
Revert kube2sky from 1.2 back to 1.1 until we figure out why it's flaky.
2015-04-28 17:23:55 -07:00
Satnam Singh
dc31c58443 Upgrade Elasticsearch to 1.5.2 for cluster logging 2015-04-28 16:20:03 -07:00
Dawn Chen
876f8beec9 Remove unused node-name attribute 2015-04-28 16:13:26 -07:00
Dawn Chen
13a0b033e2 Bring up a cluster using coreos image for worker nodes. 2015-04-28 16:13:26 -07:00
Dawn Chen
5fa11322f8 Factory out debian e.g. ContainerVM image specific support to its own
helper utility library.
2015-04-28 16:07:57 -07:00
Fabio Yeon
0a8d8c1579 Merge pull request #7460 from roberthbailey/validate-cluster
Make validate cluster more reliable
2015-04-28 15:57:43 -07:00
Dawn Chen
8963347b9e Introduce MASTER_IMAGE, MINION_IMAGE and OS_DISTRIBUTION to config-default
for enable coreos and rocket support
2015-04-28 15:31:09 -07:00
CJ Cullen
2b50ee53e0 Revert the change that bumped kube2sky from 1.1->1.2 until we figure out why it's flaky. 2015-04-28 14:57:44 -07:00
Robert Bailey
a7e62d17ff Make validate cluster more reliable (it should retry checking the
server if a subshell returns a non-zero exit status).
2015-04-28 14:57:14 -07:00
Robert Bailey
8206aa9eac Salt configuration to add basic auth to GCE. 2015-04-28 14:07:54 -07:00
Alex Robinson
566f0d4724 Fix GCE logging scope name. 2015-04-28 13:44:30 -07:00
Alex Robinson
3e841510de Merge pull request #7393 from satnam6502/fluentd-gcp-image
New Fluentd to Cloud Logging Dockerfile with args
2015-04-28 11:01:14 -07:00
Alex Robinson
5b5525dca5 Merge pull request #7324 from vishh/log_scope
Enable logging.write scope for minions.
2015-04-28 11:00:10 -07:00
Vishnu Kannan
9c66305f8c Enable logging.write scope by default for nodes. This is required for storing events in
Google Cloud Logging via heapster.
2015-04-28 10:55:06 -07:00
Satnam Singh
20a0905d61 New Fluentd to Cloud Logging Dockerfile with args 2015-04-28 10:30:32 -07:00
Victor Marmol
094e5545d2 Merge pull request #7310 from rjnagal/node
Fix the binary path reported by get-kube script.
2015-04-28 08:24:37 -07:00
Derek Carr
824d830747 Merge pull request #7427 from jsafrane/devel/fix-vagrant2
Fixed name of kube-proxy path in deployment scripts.
2015-04-28 10:24:52 -04:00
Wojciech Tyczynski
92a0b385c7 Merge pull request #7274 from satnam6502/v1beta3
Convert node level logging agents to v1beta3
2015-04-28 10:32:37 +02:00
Jan Safranek
6e810492fb Fixed name of kube-proxy path in deployment scripts. 2015-04-28 10:10:37 +02:00
Satnam Singh
4a0cc7905d Convert node level logging agents to v1beta3 2015-04-27 17:21:42 -07:00
Alex Robinson
743945f3aa Merge pull request #7384 from a-robinson/opts
Remove unused env variable from the fluentd dockerfiles
2015-04-27 17:18:17 -07:00
CJ Cullen
39c5bf363b Merge pull request #7303 from erictune/kube_env3
kube-proxy uses token to access port 443 of apiserver
2015-04-27 14:33:53 -07:00
derekwaynecarr
81e9395533 Fix vagrant regression due to #7326 2015-04-27 17:18:30 -04:00
Alex Robinson
ada9242155 Remove unused env variable from the fluentd dockerfiles and make their apt-get
arguments consistent.
2015-04-27 20:47:38 +00:00
Brendan Burns
a02823c0db Merge pull request #7344 from roberthbailey/google-storage-ssl
Fetch resources from storage.googleapis.com over SSL.
2015-04-27 12:24:46 -07:00
Brendan Burns
637cd57a25 Merge pull request #6606 from gust1n/aws-existing-vpc
AWS: Improving getting existing VPC and subnet
2015-04-27 11:11:25 -07:00
Zach Loafman
b8de4960ac Merge pull request #7367 from erictune/cleanupkubadmintoken
Remove apparently dead code from Azure scripts.
2015-04-27 10:13:40 -07:00
Zach Loafman
5ccfc0a225 Merge pull request #6006 from justinsb/aws_multiple_clusters
First step to supporting multiple k8s clusters
2015-04-27 10:11:03 -07:00
Eric Tune
9b31a76651 Remove apparently dead code from Azure scripts. 2015-04-27 10:08:50 -07:00
Eric Tune
9044177bb6 Generate a token for kube-proxy.
Tested on GCE.
Includes untested modifications for AWS and Vagrant.
No changes for any other distros.
Probably will work on other up-to-date providers
but beware.  Symptom would be that service proxying
stops working.

 1. Generates a token kube-proxy in AWS, GCE, and Vagrant setup scripts.
 1. Distributes the token via salt-overlay, and salt to /var/lib/kube-proxy/kubeconfig
 1. Changes kube-proxy args:
   - use the --kubeconfig argument
   - changes --master argument from http://MASTER:7080 to https://MASTER
     - http -> https
     - explicit port 7080 -> implied 443

Possible ways this might break other distros:

Mitigation: there is an default empty kubeconfig file.
If the distro does not populate the salt-overlay, then
it should get the empty, which parses to an empty
object, which, combined with the --master argument,
should still work.

Mitigation:
  - azure: Special case to use 7080 in
  - rackspace: way out of date, so don't care.
  - vsphere: way out of date, so don't care.
  - other distros: not using salt.
2015-04-27 08:59:57 -07:00
Zach Loafman
df1cfae368 Merge pull request #7326 from roberthbailey/client-cert-auth
Pass the CA root cert into the apiserver
2015-04-27 07:48:59 -07:00
Robert Bailey
a9f8f17299 Fetch the kibana tar.gz over SSL. 2015-04-26 21:57:49 -07:00
Robert Bailey
225da3f88f Fetch resources from storage.googleapis.com over SSL. 2015-04-26 21:51:37 -07:00
Robert Bailey
846ffcff83 Pass the CA root cert into the apiserver so that the apiserver will
perform client cert checks for authorization. Only enable on GCE where
the apiserver is terminating SSL connections from end users.
2015-04-24 22:01:56 -07:00
saadali
acbd3d78f1 Specify host/container ports for InfluxDB, so that the UI is accessible. 2015-04-24 16:22:50 -07:00
Rohit Jnagal
d60c86a3a7 Fix the binary path reported by get-kube script. 2015-04-24 21:31:21 +00:00
Brian Grant
60d7bad147 Merge pull request #7128 from nikhiljindal/fixbeta1tests
Removing more references to v1beta1 from pkg/
2015-04-24 11:07:53 -07:00
Satnam Singh
b6bee06c20 Merge pull request #7269 from zmerlynn/lose_one_sanity
Remove buggy GCE post turn-up cluster validation code (rely on validate-cluster.sh)
2015-04-24 10:56:20 -07:00
Brendan Burns
49977e6a47 Revert "Update docker examples to 0.15.0" 2015-04-24 10:05:27 -07:00
Dawn Chen
2128d4e251 Merge pull request #7261 from erictune/kube_env
Pass KUBELET_TOKEN in kube-env metadata.
2015-04-24 10:03:34 -07:00
Nikhil Jindal
84cb48be11 Merge pull request #7246 from satnam6502/es
Convert Elasticsearch logging to v1beta3 and de-salt
2015-04-24 09:21:41 -07:00
nikhiljindal
dcc368c781 Removing more references to v1beta1 from pkg/ 2015-04-24 00:45:17 -07:00
CJ Cullen
80af1c9e40 kube2sky using kubeconfig secret: take 2. Point system secrets at https://kubernetes. Override in clients that can't use DNS. 2015-04-23 18:13:16 -07:00
David Oppenheimer
dda010b572 Merge pull request #7240 from satnam6502/v1beta3
Update Kibana RC and service to v1beta3
2015-04-23 17:09:27 -07:00
Zach Loafman
ad829dead7 Remove buggy GCE post turn-up cluster validation code (rely on validate-cluster.sh)
Fixes #7266
2015-04-23 16:28:44 -07:00
Eric Tune
e8a83b23d1 Pass KUBELET_TOKEN in kube-env metadata.
ensure-kube-token is not needed anymore because
the token passed in kube-env.

In the up case it is set, in the push case it is an empty string
but not used.

Allow unset KUBELET_TOKEN (for push case).

Fix comment.
2015-04-23 15:21:27 -07:00
Satnam Singh
c9b9e7651e Convert Elasticsearch logging to v1beta and de-salt 2015-04-23 13:06:15 -07:00