github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
13,898 Commits 1 Branch 31 Tags 1,019 MiB
2d0fa393b5
Commit Graph

208 Commits

Author SHA1 Message Date
Justin Santa Barbara
2a8d46864b AWS: Use the SSH key fingerprint, not the AWS fingerprint 
This is unfortunate, because it means we have two fingerprints,
although arguably the OpenSSH key fingerprint is much more common.
However, the OSX Mavericks version of ssh-keygen can't compute
the AWS fingerprint correctly (e.g. https://www.netmeister.org/blog/ssh2pkcs8.html)

So we work on OSX Mavericks, we use the more common OpenSSH fingerprint.
 2015-07-01 04:10:48 -07:00
Robert Bailey
1c0b765df6 Merge pull request #10359 from justinsb/aws_fix_options 
Fix AWS options doc
 2015-06-26 23:16:51 -07:00
Robert Bailey
e6f14a21ce Merge pull request #10403 from justinsb/ebs-for-master-data-2 
AWS: Use persistent disk on master
 2015-06-26 21:52:10 -07:00
Justin Santa Barbara
a3cb84fa56 AWS: Wait for disk to be attached in setup-master-pd.sh 2015-06-26 11:52:45 -04:00
Justin Santa Barbara
6e09cd3ffd AWS: Create/reuse master pd directly 2015-06-26 11:52:45 -04:00
Justin Santa Barbara
0a4f03f235 AWS: Mount ephemeral on /mnt/ephemeral 
If we're going to have a persistent disk on /mnt/master-pd, it seems risky
sometimes to have /mnt be a mounted volume.

A new consistent approach: we mount volumes under /mnt/<name>.
 2015-06-26 11:52:45 -04:00
Justin Santa Barbara
7059f379a4 AWS: Mount persistent disk as sdb on master 2015-06-26 11:52:44 -04:00
Adam Sunderland
66e0c5432f Use EBS for Master Data 
Signed-off-by: Adam Sunderland <iterion@gmail.com>
 2015-06-26 11:52:44 -04:00
Justin Santa Barbara
3ef028148d Fix AWS options doc 
Fix formatting, and ZONE should have been KUBE_AWS_ZONE.
 2015-06-26 11:16:44 -04:00
Eric Paris
58df58f3d7 Remove unused enable_node_monitoring option 
Back in 1a7f7245e7 we dropped the one
place this was used, but left all of the variable and definitions and
garbage around cluster/
 2015-06-25 20:57:56 -04:00
Tim Hockin
280f99afd9 EOL our registry caching mirror 
Docker's v1 registry has gotten slower and slower, and they have no
interest in fixing it.  Using a mirror forces v1 mode.  Measurements
show that v1 with our mirror is slower than v2 with docker's registry in
just about all metrics.
 2015-06-24 09:56:59 -07:00
Jeff Lowdermilk
e2d496e45d Merge pull request #9737 from iterion/use-openssl-rsa 
AWS: Use RSA to Generate Fingerprint
 2015-06-23 10:14:27 -07:00
Justin Santa Barbara
2a5ed2f086 AWS: Use auto-scaling group to run minions 
This uses the dynamic CIDR work, and we set source-dest-check to false
when we configure the route (which kind-of makes sense)
 2015-06-19 10:22:15 -04:00
Justin Santa Barbara
a4e15cdf3e AWS: Configure minion routes dynamically 
We need to implement the Routes interface, and then enable the functionality in the cluster scripts.
 2015-06-18 14:59:37 -07:00
Saad Ali
4d25121206 Merge pull request #9769 from brendandburns/secure 
Revert the revert of https://github.com/GoogleCloudPlatform/kubernetes/pull/9761
 2015-06-16 14:21:54 -07:00
Fabio Yeon
c4d040c720 Merge pull request #9745 from justinsb/aws_manage_route_table 
AWS: Create our own route table & tag it for management
 2015-06-15 15:18:39 -07:00
Fabio Yeon
f033349bea Merge pull request #9746 from justinsb/aws_faster_tagging 
AWS: delay less when creating tags
 2015-06-15 13:34:44 -07:00
Brendan Burns
51b20b35e2 Revert "Revert "Optionalize (default false) --insecure-registry."" 
This reverts commit 1645c9a9b8.
 2015-06-12 21:00:16 -07:00
Dawn Chen
1645c9a9b8 Revert "Optionalize (default false) --insecure-registry." 2015-06-12 17:50:38 -07:00
Abhi Shah
a6bed65f06 Merge pull request #9685 from brendandburns/secure 
Optionalize (default false) --insecure-registry.
 2015-06-12 17:06:32 -07:00
Justin Santa Barbara
6839ae9a44 AWS: delay less when creating tags 
This is important because tag creation isn't atomic, and we want to minimize
the window in which we can leave 'dangling' resources around.
 2015-06-12 18:32:55 -04:00
Justin Santa Barbara
1f04284508 AWS: Create our own route table & tag it for management 2015-06-12 18:32:10 -04:00
Adam Sunderland
7760d079ae Update SSH User For Master SSH Check 2015-06-12 15:38:48 -05:00
Adam Sunderland
d82bfffe9d Use RSA to Generate Fingerprint 2015-06-12 15:29:37 -05:00
Brendan Burns
675d8378f2 Optionalize (default false) --insecure-registry. 2015-06-11 16:33:14 -07:00
Abhi Shah
82aa8f9984 Merge pull request #9371 from justinsb/aws_support_wheezy 
AWS: Support wheezy, for parity with GCE
 2015-06-11 15:08:32 -07:00
Abhi Shah
064e7146e1 Merge pull request #9481 from justinsb/aws_fix_push 
AWS: Include (idempotent) ensure-temp-dir in upload-server-tars
 2015-06-11 11:24:18 -07:00
Justin Santa Barbara
4db5b6f465 AWS: Don't change the default OS 
It may be that we should change the default, but that is a big move,
late in the day, and it warrants its own discussion.
 2015-06-11 13:02:33 -04:00
Justin Santa Barbara
8aae864784 AWS: Support wheezy, for parity with GCE 2015-06-09 23:45:41 -04:00
krousey
fba6462c0b Merge pull request #9377 from justinsb/aws_persistent_mounts 
AWS: add mounts to fstab
 2015-06-09 12:57:43 -07:00
krousey
82f922b61d Merge pull request #9378 from justinsb/aws_no_thin_on_wheezy 
AWS: Disable thin LVM provisioning on wheezy
 2015-06-09 10:01:04 -07:00
krousey
e19e4bcd12 Merge pull request #9365 from justinsb/fix_9246 
AWS: Only log "Starting cluster using os distro..." in kube-up
 2015-06-09 09:51:22 -07:00
krousey
37ed34261e Merge pull request #9364 from justinsb/fix_aws_local_not_in_function 
AWS: Fix script issue where local used outside of function
 2015-06-09 09:50:43 -07:00
Justin Santa Barbara
d92863523f AWS: Include (idempotent) ensure-temp-dir in upload-server-tars 
This way we won't forget it.  Fixes kube-push, where I forgot it.
 2015-06-09 11:10:15 -04:00
krousey
e14d9038fe Merge pull request #9367 from justinsb/aws_ssh_check 
AWS: Check for SSH connectivity & better logging on failure
 2015-06-08 16:48:04 -07:00
Justin Santa Barbara
d955e532f9 AWS: Add mounts to fstab, to survive reboot 2015-06-08 18:07:22 -04:00
Justin Santa Barbara
f6440247ca AWS: Don't thin provision LVM volume on wheezy 
Thin provisioning isn't supported (unless you backport from jessie).

Just use normal LVM volumes with aufs.
 2015-06-08 18:06:24 -04:00
Justin Santa Barbara
1c229e5284 Removed extra blank line in aws util.sh 2015-06-08 16:59:03 -04:00
Justin Santa Barbara
2619b6198a AWS: Mount ephemeral devices, even if not specified in the AMI 
We mount up to 4; this covers almost all instance types.
 2015-06-08 16:59:03 -04:00
Justin Santa Barbara
72496e7368 AWS: Check for SSH connectivity & better logging on failure 2015-06-06 14:27:41 -04:00
Justin Santa Barbara
a9e1e1033b AWS: Only log "Starting cluster using os distro..." in kube-up 
Fixes #9246
 2015-06-06 12:48:49 -04:00
Justin Santa Barbara
24de0b4598 AWS: Fix script issue where local used outside of function 2015-06-06 12:19:30 -04:00
Justin Santa Barbara
112a013567 AWS: Support different docker storage mechanism by setting DOCKER_STORAGE 
For parity with GCE, we really want to support aufs.

But we previously supported btrfs, so we want to expose that.

Most of the work here is required for aufs, and we let advanced users choose
devicemapper/btrfs if they have a setup that works for those configurations.
 2015-06-06 12:13:51 -04:00
Justin Santa Barbara
48e8a8b0ec AWS: Set up security groups, to mirror GCE firewalling 
Some slightly fussy code to enable load-balancers to talk to
instances, but otherwise relatively simple.
 2015-06-05 16:10:08 -04:00
Justin Santa Barbara
33a3d884f2 AWS: Filter by Cluster tag, rationalize EC2 abstraction 
Whenever we do a list we now filter on tags so we only see resources relating
to our cluster.

Also, rationalize all the DescribeX calls:
 * They all take a request object (so that we can pass filters)
 * They do paging if that is required (and return the underlying resources)
 * They wrap any error with a "error while listing X: %v" message
 2015-06-05 16:09:01 -04:00
Quinton Hoole
710df2b619 Merge pull request #9294 from justinsb/aws_ssh_key_fingerprint 
AWS: Support multiple SSH keys (embed the hash in the name)
 2015-06-05 09:37:31 -07:00
Justin Santa Barbara
d8dc416b5b AWS: Support multiple SSH keys (embed the hash in the name) 
This should eliminate a nasty problem where the script doesn't cope well if
your keys don't match.
 2015-06-04 21:40:57 -04:00
Justin Santa Barbara
c92c63b3a9 AWS: Use s3 sync to optimize upload to s3 when nothing changed 2015-06-04 10:14:45 -04:00
Adam Sunderland
2b4d37427e Update Master IAM Policy to Include ELB 2015-06-03 12:20:19 -05:00
Eric Tune
3c067b766a Merge pull request #8996 from manolitto/aws_cluster_monitoring_fix 
aws: fix cluster monitoring (new option "influxdb" instead of "true")
 2015-06-01 13:43:43 -07:00