Commit Graph

7117 Commits

Author SHA1 Message Date
Justin Santa Barbara
eb1d9d0a46 Add missing = to --machines arg 2015-01-29 20:35:36 -05:00
Justin Santa Barbara
5d864b006a Add aws to list of clouds that use tokens 2015-01-29 20:35:36 -05:00
Justin Santa Barbara
51225c76da Apply jbeda's conditional tar fix 2015-01-29 20:35:36 -05:00
Justin Santa Barbara
3fb61912aa Quote args in /srv/salt-overlay/pillar, add new vars 2015-01-29 20:35:36 -05:00
Justin Santa Barbara
bb406ce87f Allow # of minions to be configured 2015-01-29 20:35:36 -05:00
Justin Santa Barbara
8058632f5f Move tag creation & retry logic to a function 2015-01-29 20:35:36 -05:00
Justin Santa Barbara
2f195578cc Create /srv/kuberentes/known_tokens.csv on AWS 2015-01-29 20:35:35 -05:00
Justin Santa Barbara
d20188c6d4 Create shared secret in AWS scripts 2015-01-29 20:35:35 -05:00
Justin Santa Barbara
bb0431dce8 Pass cloud & cloud_config to kube-apiserver for AWS 2015-01-29 20:35:35 -05:00
Tim Hockin
a1b51d9165 Maybe make services e2e test more resilient to GCE errors 2015-01-29 15:50:46 -08:00
Tim Hockin
35d59e6219 Merge pull request #3851 from satnam6502/bigcluster
Generate IP addresses for minions of large GCE clusters
2015-01-29 14:34:13 -08:00
Tim Hockin
d01ea11a6e Merge pull request #3856 from smarterclayton/validation_logic_needs_cleanup
Validation of ObjectMeta is inconsistently applied
2015-01-29 14:12:44 -08:00
Clayton Coleman
053c2b2100 Fix grafana and heapster RC names 2015-01-29 16:26:39 -05:00
Brendan Burns
ca6576d060 Add a simple script for running go e2e tests against existing clusters.
Also add an even simpler script for testing the network setup.
2015-01-28 16:39:21 -08:00
Brendan Burns
bd802c41ff Merge pull request #3863 from roberthbailey/get-kube
Add GKE as a provider to get-kube.sh.
2015-01-28 10:15:04 -08:00
Robert Bailey
83c8cda243 Add GKE as a provider to get-kube.sh.
Bump the default version from 0.7.2 to 0.8.1.
2015-01-27 22:08:22 -08:00
Brendan Burns
c7c11d7731 Add monit support for restarting etcd to the master. 2015-01-27 20:15:24 -08:00
Satnam Singh
72c1820055 Generate IP addresses for minions of large GCE clusters
Use env for for subnet size
2015-01-27 16:11:39 -08:00
Rob Landers
6461928e6b fixes azure provisioning with portal created vnets 2015-01-23 22:04:00 -05:00
Vish Kannan
35d0042ccf Merge pull request #3767 from vmarmol/clean
Update cAdvisor to 0.8.0.
2015-01-23 15:00:17 -08:00
Victor Marmol
94988aece2 Update cAdvisor to 0.8.0. 2015-01-23 11:11:15 -08:00
Vishnu Kannan
82bbb3e78b Update monitoring components to the latest released versions. 2015-01-23 18:59:05 +00:00
Tim Hockin
61293afad6 better DNS docs 2015-01-22 12:18:25 -08:00
Zach Loafman
a305269e18 Deferred creation of SkyDNS, monitoring and logging objects
This implements phase 1 of the proposal in #3579, moving the creation
of the pods, RCs, and services to the master after the apiserver is
available.

This is such a wide commit because our existing initial config story
is special:

* Add kube-addons service and associated salt configuration:
** We configure /etc/kubernetes/addons to be a directory of objects
that are appropriately configured for the current cluster.
** "/etc/init.d/kube-addons start" slurps up everything in that dir.
(Most of the difficult is the business logic in salt around getting
that directory built at all.)
** We cheat and overlay cluster/addons into saltbase/salt/kube-addons
as config files for the kube-addons meta-service.
* Change .yaml.in files to salt templates
* Rename {setup,teardown}-{monitoring,logging} to
{setup,teardown}-{monitoring,logging}-firewall to properly reflect
their real purpose now (the purpose of these functions is now ONLY to
bring up the firewall rules, and possibly to relay the IP to the user).
* Rework GCE {setup,teardown}-{monitoring,logging}-firewall: Both
functions were improperly configuring global rules, yet used
lifecycles tied to the cluster. Use $NODE_INSTANCE_PREFIX with the
rule. The logging rule needed a $NETWORK specifier. The monitoring
rule tried gcloud describe first, but given the instancing, this feels
like a waste of time now.
* Plumb ENABLE_CLUSTER_MONITORING, ENABLE_CLUSTER_LOGGING,
ELASTICSEARCH_LOGGING_REPLICAS and DNS_REPLICAS down to the master,
since these are needed there now.

(Desperately want just a yaml or json file we can share between
providers that has all this crap. Maybe #3525 is an answer?)

Huge caveats: I've gone pretty firm testing on GCE, including
twiddling the env variables and making sure the objects I expect to
come up, come up. I've tested that it doesn't break GKE bringup
somehow. But I haven't had a chance to test the other providers.
2015-01-21 12:25:50 -08:00
Joe Beda
d20b9d4567 Merge pull request #3666 from thockin/golang-static
Fix static builds in go1.4
2015-01-21 10:07:41 -08:00
Tim Hockin
4061de1ef2 Merge pull request #3510 from thockin/dns
Update DNS doc
2015-01-21 08:46:58 -08:00
Tim Hockin
0a538132cf Fix static builds in go1.4
https://github.com/golang/go/issues/9344
2015-01-20 21:04:04 -08:00
Joe Beda
4357e9b154 Fix SSH for vagrant.
This is used as part of the services.sh test.
2015-01-20 16:47:51 -08:00
Joe Beda
ae06ebc8ee Fix iptables rule from when vagrant was reorganized. 2015-01-20 16:47:09 -08:00
Joe Beda
611be41aa5 Set VAGRANT_CWD so commands work from anywhere 2015-01-20 09:11:29 -08:00
Joe Beda
c5634e90ba Verify cluster size before e2e 2015-01-20 09:11:29 -08:00
Andrew Seidl
6dee1d7fa4 Fix typos in user-facing strings 2015-01-18 01:32:34 -06:00
Tim Hockin
2367360321 Update DNS doc 2015-01-17 19:42:09 -08:00
Vishnu Kannan
50c32fbba4 Adding a replication controller for all monitoring pods.
Removed auth for Grafana to facilitate usage via service proxy on the api-server.
Added a grafana service
Removed elasticsearch dependency for monitoring - faster startup times.
2015-01-16 18:37:46 +00:00
Zach Loafman
43cd9e91f6 Revert "Adding a replication controller for all monitoring pods." 2015-01-16 07:16:54 -08:00
Satnam Singh
d443dd8ea6 Merge pull request #3489 from vishh/monitoring_rc
Adding a replication controller for all monitoring pods.
2015-01-15 18:18:54 -08:00
Vishnu Kannan
ca2267e3e9 Adding a replication controller for all monitoring pods.
Removed auth for Grafana to facilitate usage via service proxy on the api-server.
Added a grafana service
Removed elasticsearch dependency for monitoring - faster startup times.
2015-01-16 00:56:51 +00:00
derekwaynecarr
123c96164e Disable defaults plugin 2015-01-15 19:42:20 -05:00
roberthbailey
5caeac7460 Merge pull request #3534 from satnam6502/validate-cluster
Fix Kubelet check in validate-cluster
2015-01-15 14:53:35 -08:00
bgrant0607
97c7758131 Merge pull request #3506 from satnam6502/kibana
Remove curl check from Kibana image
2015-01-15 13:45:20 -08:00
roberthbailey
0b9f6bc8bb Merge pull request #3528 from satnam6502/fixoutput
Report project and zone only once for GCE
2015-01-15 13:35:48 -08:00
Satnam Singh
3765e83110 Fix Kubelet check in GCE validate-cluster 2015-01-15 12:55:21 -08:00
Satnam Singh
1bff012c36 Convert basic.sh e2e test to Go 2015-01-15 11:41:29 -08:00
Joe Beda
224ffa4567 Merge pull request #3480 from jbeda/all_pflag
Convert all main binaries to pflag library
2015-01-15 11:26:41 -08:00
Satnam Singh
9ba6525597 Report project and zone only once 2015-01-15 11:21:42 -08:00
Eric Tune
bc25748b36 Merge pull request #3472 from derekwaynecarr/default_cpu_mem
Admission control plugin for resource defaults
2015-01-15 09:35:17 -08:00
Joe Beda
7ee327146a Fix typo in initd scripts 2015-01-15 09:12:20 -08:00
Joe Beda
228659a177 Fix up for posix flags 2015-01-15 09:12:19 -08:00
Satnam Singh
cd5a44e381 Remove curl check from Kibana image 2015-01-14 21:32:29 -08:00
Dawn Chen
ba8b4518c1 Upgrade OSS k8s on GCE to latest containervm image: container-vm-v20150112 2015-01-14 16:17:57 -08:00
Daniel Smith
4e539001df Merge pull request #3473 from zmerlynn/fix_pd_sh
GKE: Fix unbound variable when pd.sh fails
2015-01-14 13:43:54 -08:00
derekwaynecarr
7f724867c2 Admission control plugin for resource defaults 2015-01-14 15:28:59 -05:00
Zach Loafman
8cf93288fa GKE: Fix unbound variable when pd.sh fails
In the other providers, MINION_NAMES is bound early and detect_minions
is actually only used to detect the IPs of the minions, which is why I
didn't expect to need to call it. Move the initialization to
config-common.sh in GKE as well.

This follows the pattern of cluster/gce/config-{default,test}.sh
2015-01-14 12:18:47 -08:00
Robert Bailey
df03cc3e0c Remove unnecessary loop. 2015-01-13 16:03:30 -08:00
Satnam Singh
295bd3768d Launch Elasticsearch and Kibana automatically 2015-01-09 13:41:46 -08:00
derekwaynecarr
2d9977cf1a Reduce number of minions to improve user experience 2015-01-09 13:00:48 -05:00
Brendan Burns
59aae065ac Address comments. 2015-01-08 15:57:35 -08:00
derekwaynecarr
f6eb020198 Missing config vars in vagrant provision 2015-01-08 16:53:45 -05:00
Max Forbes
c3322bc97d Make an 'allow-ssh-on-all-nodes' firewall rule when on a non-default network. 2015-01-07 18:08:38 -08:00
Zach Loafman
fbda9f4663 Merge pull request #3297 from mbforbes/addNet
GKE: Create network if needed.
2015-01-07 16:53:17 -08:00
Eric Tune
c2b3d678c0 Merge pull request #3248 from derekwaynecarr/admission_control_hooks
Implement basic admission control framework
2015-01-07 16:52:49 -08:00
Max Forbes
67f3414ede GKE: Create network if needed. 2015-01-07 16:44:06 -08:00
Maxwell Forbes
c48536304a Merge pull request #3296 from zmerlynn/fix_gke_network_sigh
GKE: Also need to muck with the firewall rule here
2015-01-07 16:30:19 -08:00
Zach Loafman
36e2886d95 GKE: Also need to muck with the firewall rule here 2015-01-07 16:12:20 -08:00
Tim Hockin
2c54dd5cb0 Merge pull request #3291 from zmerlynn/disable_gke_cluster_dns
Revert "GKE: Add ENABLE_CLUSTER_DNS, compute appropriate DNS_SERVER_IP"
2015-01-07 16:06:50 -08:00
Zach Loafman
a203410f15 Revert "GKE: Add ENABLE_CLUSTER_DNS, compute appropriate DNS_SERVER_IP"
We actually can't yet support cluster DNS inside GKE yet; it conflicts
with how we handle startup internally.

This reverts commit fdccfe970d.
2015-01-07 14:50:10 -08:00
Daniel Smith
f5c179f83d Merge pull request #3288 from dchen1107/cleanup
Using google/cadvisor:0.7.1 instead of :latest
2015-01-07 14:47:38 -08:00
Dawn Chen
6cb7f0451c Using google/cadvisor:0.7.1 instead of :latest 2015-01-07 14:14:20 -08:00
Zach Loafman
15f0068c7d Allow specifying GCE network in GKE provider, default to "e2e" for tests 2015-01-07 12:18:11 -08:00
derekwaynecarr
520ae3ef27 Implement basic admission control framework 2015-01-07 14:42:31 -05:00
Brendan Burns
3d8289258a Merge pull request #3106 from brendandburns/simple
Add a script suitable for wget https://get.k8s.io | sh installation
2015-01-07 10:05:26 -08:00
Brendan Burns
1091744a5f Address comments. 2015-01-06 15:02:32 -08:00
Satnam Singh
8ab2e9c61a Use DNS for Elasticsearch 2015-01-06 07:33:48 -08:00
Brendan Burns
ab429598e7 Update to 0.7.2, forgot to push... 2015-01-05 21:40:46 -08:00
Zach Loafman
b8d3938e3a Merge pull request #3193 from zmerlynn/fix_gke_unbound
GKE: Add ENABLE_CLUSTER_DNS, compute appropriate DNS_SERVER_IP
2015-01-05 16:38:11 -08:00
Joe Beda
943ed6d289 Merge pull request #3146 from zmerlynn/limit_liveness_gke
GKE: Limit liveness.sh to server version >0.7.2
2015-01-05 14:41:39 -08:00
Zach Loafman
e965fc1f79 GKE: Limit liveness.sh to server version >0.7.2
What I really want is
https://github.com/GoogleCloudPlatform/kubernetes/issues/2953, but
haven't had a chance to code that yet. Maybe it's time. (Then I'd
remove the provider-specific test and just say "is it > 0.7.2, or does
it claim to be capable of something from the future?" The latter
covers the HEAD server case .. though just bumping the server version
immediately after release might also accomplish that, too.)
2015-01-05 14:21:21 -08:00
Joe Beda
9aa48b7628 Move heapster data files to cluster/addons.
Also pretty up the JSON (make it real JSON) and streamline the sed in cluster/gce/init.sh.
2015-01-05 12:32:35 -08:00
Joe Beda
6df6aab077 Move DNS from contrib to cluster/addons
This fixes #3190.
2015-01-05 12:32:35 -08:00
Tim Hockin
c908fbe59e Merge pull request #3199 from a-robinson/disk-size
Allow for easily specifying the type and size of minion disks on GCE.
2015-01-05 12:07:18 -08:00
derekwaynecarr
9203e4143b Put skydns in portalip range 2015-01-05 13:09:31 -05:00
Alex Robinson
8b38453501 Allow for easily specifying the type and size of minion disks on GCE.
Issue #3192
2015-01-03 16:57:16 -08:00
Zach Loafman
fdccfe970d GKE: Add ENABLE_CLUSTER_DNS, compute appropriate DNS_SERVER_IP
Fixes https://github.com/GoogleCloudPlatform/kubernetes/issues/3191
2015-01-03 07:41:09 -08:00
Dawn Chen
86aa38547c Remove duplicate volumes type. 2014-12-30 14:40:16 -08:00
Tim Hockin
7dec65f535 Merge pull request #3156 from evenemento/master
Add missign network flag
2014-12-29 14:06:01 -08:00
Joe Beda
a2e58d490e Merge pull request #2224 from thockin/dns
Enable DNS for services
2014-12-29 10:27:57 -08:00
Justin Santa Barbara
e682997b3d Remove erroneous . from wget commands
wget always downloads into current directory
2014-12-29 12:19:45 -05:00
Tim Hockin
59164ca844 Make DNS an option for cluster turnup 2014-12-29 09:18:12 -08:00
Maciej Chmielarski
d6a747481c Add missign network flag 2014-12-29 12:59:02 +01:00
Vishnu Kannan
2d5432bc91 update cadvisor static manifest file completely. 2014-12-25 18:22:59 +00:00
Brendan Burns
bbb6d97bb5 Add a script suitable for wget https://get.k8s.io | sh installation 2014-12-23 11:34:16 -08:00
Vishnu Kannan
9a4476a60c Update cadvisor manifest to bind mount "/sys" from global namespace. 2014-12-22 23:49:22 +00:00
roberthbailey
9b6aec5e22 Merge pull request #3092 from zmerlynn/gke-kubectl-path
GKE: Adjust the PATH to the right kubectl for gcloud
2014-12-22 10:37:56 -08:00
Zach Loafman
e71798df3f Adjust the PATH to the right kubectl for gcloud, add KUBECTL_PATH override
Force kubectl to the git repo version if we detect a built version.
Add a KUBECTL_PATH override so that system/home directory versions of
kubectl can be used if desired. Remove existing $HOME inference.
2014-12-22 10:14:32 -08:00
Zach Loafman
b3ce311fd8 Fix binary detection on GKE
* kubectl is kubectl.sh in the e2es, so not needed in the path
* Use the environment variable, and try to make sure the preview
component is installed.
2014-12-21 08:03:49 -08:00
saadali
ec6d4c6078 Fix kube-controller-manager failing to start because "Jinja variable 'cloud_config' is undefined" 2014-12-19 17:20:22 -08:00
Daniel Smith
55ad41b4f3 Merge pull request #3073 from rlarocque2/kubectl_scripts
Replace kubecfg with kubectl in setup scripts
2014-12-19 16:30:07 -08:00
Daniel Smith
3072453c83 Merge pull request #3072 from rlarocque2/remove_kubectl_echo
Remove debug print in kubectl.sh
2014-12-19 16:28:50 -08:00
Richard Larocque
9ac9c69534 Replace kubecfg with kubectl in setup scripts
Replaces two instances of kubecfg with kubectl in cluster startup and
validation scripts.
2014-12-19 16:10:21 -08:00
Richard Larocque
2bc41e1602 Remove debug print in kubectl.sh
Removes a debug print that (it seems to me) was added in erro
as part of PR #3046 / commit c3efef8.
2014-12-19 16:09:04 -08:00
Joe Beda
d8efaab679 Merge pull request #3068 from brendandburns/dutchcoders-master
Fix up AWS support...
2014-12-19 15:14:26 -08:00
Joe Beda
5038fc0ffa Merge pull request #3056 from zmerlynn/testtar
Allow parameterization by environment in cluster/gce/config-test.sh
2014-12-19 14:38:03 -08:00
Brendan Burns
2369f0d50d Update aws. 2014-12-19 14:16:57 -08:00
Zach Loafman
94545889fc Allow parameterization by environment in cluster/gce/config-test.sh
Between this and careful use of "export HOME=/somewhere_else_for_auth/",
you can effectively get ghetto CLI profiles (for GCE tests).
2014-12-19 13:38:33 -08:00
Brendan Burns
824122f410 Merge pull request #2651 from justinsb/specify_zone_to_ec2
Specify AWS_DEFAULT_REGION to match configured region
2014-12-19 12:26:40 -08:00
Max Forbes
c3efef86d0 Add GKE as a provider. 2014-12-19 11:47:06 -08:00
Brendan Burns
bd712b61e6 Merge branch 'master' of https://github.com/dutchcoders/kubernetes into dutchcoders-master
Conflicts:
	cluster/aws/config-default.sh
	cluster/saltbase/salt/kube-controller-manager/default
2014-12-19 11:45:46 -08:00
bgrant0607
4943ee7b65 Merge pull request #3034 from a-robinson/pd-up
Store all of the master's persistent data on a separate "data" PD when running on GCE
2014-12-18 16:05:47 -08:00
Daniel Smith
cd2432891d Merge pull request #3038 from vishh/fix_monitoring
Fix bug in gce monitoring setup.
2014-12-18 13:07:18 -08:00
Vishnu Kannan
aa7a311c34 Fix bug in gce monitoring setup. 2014-12-18 20:47:41 +00:00
Alex Robinson
f892e84e0a Store all of the master's persistent data on a separate "data"
persistent disk when running on GCE.

I'll follow up soon with a second PR that enables kube-push to
completely bring down the master VM and replace it with a new one.
2014-12-18 20:24:57 +00:00
Jordan Liggitt
2de478f16c Make cert CN unique to avoid certificate serial number clashes 2014-12-18 15:13:32 -05:00
Joe Beda
eed5252993 Merge pull request #3023 from tozd/fix-salt-deps
Add missing Salt requisites
2014-12-18 09:16:16 -08:00
Jernej Kos
430a04af45 Added missing Salt requisites. 2014-12-18 10:29:39 +01:00
CJ Cullen
90364b30b0 Only create a single firewall rule for all minions. 2014-12-17 17:10:07 -08:00
Joe Beda
428aeacf6d Rework vagrant cluster set up.
* Have a single config file that mirrors other cluster providers
* Warn users not to use 'vagrant up' directly
* Allow 'extra' parameters to the docker daemon.  Fixes #2685
* Renumbers things so that they are more sane.  Master/minions are 10.245.1.x, container subnets are 10.246.x.1/24, portal is 10.247.0.0/16
2014-12-17 13:23:39 -08:00
Daniel Smith
8e33229792 Merge pull request #2991 from dchen1107/newdocker
Move salt based clusters to Docker 1.4.1
2014-12-16 16:57:31 -08:00
Filipe Brandenburger
da4967fe38 Merge pull request #2988 from jbeda/yaml-quote
Quote strings in bash populated YAML files.
2014-12-16 16:26:22 -08:00
Joe Beda
2fc02cb06a Quote strings in bash populated YAML files.
Quoting is hard.  When writing strings into YAML files, wrap them in single quotes.  Also escape any embedded single quotes in those strings via a double signle quote ('').
2014-12-16 16:13:46 -08:00
Dawn Chen
c053ec63c5 Move salt based clusters to Docker 1.4.1 2014-12-16 15:54:26 -08:00
Joe Beda
911a437c1b Make the test for the 'docker_opts' grain more robust.
Fixes #2982
2014-12-16 14:26:36 -08:00
Brendan Burns
58ba3c7faa Merge pull request #2976 from dchen1107/newdocker
Move salt based clusters to Docker 1.4.0
2014-12-16 12:14:54 -08:00
Dawn Chen
04b136a7db Move salt based clusters to Docker 1.4.0 2014-12-16 11:58:45 -08:00
Joe Beda
308b078ee7 Merge pull request #2857 from jainvipin/master
ubuntu getting started guide
2014-12-15 16:13:25 -08:00
Vipin Jain
cf24c77e78 ubuntu getting started guide 2014-12-15 15:43:35 -08:00
Brendan Burns
f2a5457296 Merge pull request #2952 from satnam6502/colour
Avoid redeclaration errors for kube-up.sh
2014-12-15 15:33:33 -08:00
Satnam Singh
c928c43a15 Avoid redeclaration errors for kube-up.sh 2014-12-15 15:23:04 -08:00
Steve Reed
eb0a11717f Look up master node IP address in a loop 2014-12-15 14:38:30 -08:00
Joe Beda
056fdbb9b8 Merge pull request #2943 from brendandburns/flags
Add a log level flag.
2014-12-15 12:59:08 -08:00
Brendan Burns
878d85df0c Add a log level flag. 2014-12-15 12:00:29 -08:00
Max Forbes
bea37d5b17 Fix up e2e tests. 2014-12-15 11:53:51 -08:00
Brendan Burns
19c88643b8 Merge pull request #2923 from satnam6502/kubelet-log
Collect Kubelet logs with Fluentd->(Elasticsearch|Cloud Logging)
2014-12-15 11:46:33 -08:00
Brendan Burns
68c1ac210b Merge pull request #2940 from deads2k/deads-validate-cluster-broken
validate-cluster is broken for vagrant
2014-12-15 11:44:58 -08:00
deads2k
81e01e5099 validate-cluster is broken 2014-12-15 14:07:38 -05:00
deads2k
fd53795bc9 fix e2e for all providers except gce 2014-12-15 11:04:13 -05:00
Satnam Singh
b4fcdd7e47 Collect Kubelet logs with Fluentd->Elasticsearch and Fluentd->Cloud Logging 2014-12-14 01:47:48 -08:00
Satnam Singh
91a75c7620 Add missing detect-project to detect-minions 2014-12-12 15:29:58 -08:00
Filipe Brandenburger
d762dc46e9 Merge pull request #2816 from satnam6502/robust
Make multiple attempts to sanity check (GCE) and validate (ALL) cluster
2014-12-12 14:26:07 -08:00
Satnam Singh
1ce71d1e33 Make multiple attempts to sanity check (GCE) and validate (ALL) cluster 2014-12-12 13:53:57 -08:00
Joe Beda
c9acafc98a Move salt based clusters to Docker 1.3.3
Part of #2896
2014-12-12 12:18:07 -08:00
Brendan Burns
9742911697 Only delete attached boot disks, don't delete other attached disks. 2014-12-11 17:09:53 -08:00
Filipe Brandenburger
45dbf16be7 Merge pull request #2803 from satnam6502/cluster
Make kube-down more robust for GCE provider
2014-12-11 15:39:22 -08:00
Satnam Singh
d0eeebaa66 Make kube-down more robust for GCE provider 2014-12-11 14:47:38 -08:00
Brendan Burns
6e397cfe31 Merge pull request #2870 from zulily/fix-rackspace-cloud-files-url
Fixes malformed OBJECT_URL in rackspace setup script
2014-12-11 13:18:26 -08:00
Steve Reed
4c312caeb0 Fixes the minion yaml as well 2014-12-11 13:01:05 -08:00
Steve Reed
d4f71b7d4a Fixes malformed OBJECT_URL in rackspace setup script 2014-12-11 12:18:45 -08:00
Brendan Burns
149881e13e Actually set repository QPS in the kubelet. 2014-12-11 12:06:40 -08:00
Joe Beda
89011f26f4 remove SSLv3 support in nginx config 2014-12-10 13:17:02 -08:00
Eric Tune
edeb96dca9 Merge pull request #2772 from rlarocque2/apiserver_auth
Implement apiserver communication for Vagrant
2014-12-10 07:13:40 -08:00
Daniel Smith
0f88d149cd Merge pull request #2818 from dchen1107/containervm
Using container-vm-v20141208 as the default image on GCE.
2014-12-09 17:55:19 -08:00
Dawn Chen
d767e71475 Using container-vm-v20141208 as the default image on GCE. 2014-12-09 17:11:23 -08:00
Brendan Burns
3a7dd589d5 Merge pull request #2735 from erictune/proxy_no_etcd
Use apiserver instead of etcd for kube-proxy.
2014-12-09 15:27:20 -08:00
Joe Beda
09a8efefe9 Merge pull request #2791 from derekwaynecarr/salt_api_missing_cherrypy
Vagrant fix - Add python-cherrypy as explicit install for salt-api
2014-12-09 12:12:37 -08:00
Joe Beda
90f71ea4d9 Merge pull request #2805 from jlowdermilk/fix-salt
Fix conditional docker_opts in salt/docker/docker-defaults
2014-12-09 10:16:55 -08:00
Jeff Lowdermlk
0007257bce Fix conditional on grains.docker_opts in docker-defaults 2014-12-08 16:42:41 -08:00
Brendan Burns
5b33534dcf Merge pull request #2652 from justinsb/default_vpc_has_no_tags
Don't assume every AWS VPC has tags
2014-12-08 15:53:47 -08:00
Brendan Burns
30656d7522 Merge pull request #2653 from justinsb/default_cluster_monitoring
Default ENABLE_CLUSTER_MONITORING to false
2014-12-08 15:53:35 -08:00
derekwaynecarr
aacf2c2780 Add python-cherrypy as explicit install for salt-api 2014-12-08 11:36:26 -05:00
Brendan Burns
8364fa5c93 Fix detect-minions. 2014-12-05 15:42:28 -08:00
Richard Larocque
7d37b24cc7 Implement apiserver communication for Vagrant
This implementation is based on the GCE impementation from
618a367dbb48dbaa9c3b50e877858d854322fd0b.
2014-12-05 12:49:51 -08:00
Jeff Lowdermilk
a1faab9ffe Merge pull request #2730 from satnam6502/scripting
Add missing project argument to gcloud commands
2014-12-04 14:30:20 -08:00
Satnam Singh
fcfdd48f8d Add missing project argument to gcloud commands 2014-12-03 15:38:40 -08:00
Eric Tune
65b38e7af7 Use apiserver instead of etcd for kube-proxy.
For cloud-providers that use salt, have kube-proxy use
apiserver instead of etcd as a config source.
2014-12-02 22:21:01 -08:00
Satnam Singh
c2348052b0 Fix the addition of the logging.write scope to the MINION_SCOPES array 2014-12-02 20:25:26 -08:00
Brendan Burns
346dbc6de7 Merge pull request #2716 from zulily/fix-gce-provision-with-gcp-logging
Fix GCE scopes when using GCP Logging
2014-12-02 12:40:56 -08:00
Brendan Burns
b07515c5ea Add some backward compatability for GKE. 2014-12-02 11:32:45 -08:00
Steve Reed
d229c5ba51 Proper appending of logging.write scope to array 2014-12-02 10:29:10 -08:00
Alen Komljen
d83d269c27 Remove empty lines when file is generated from jinja template 2014-12-02 15:00:58 +01:00
Joe Beda
f8505cd286 For GCE, allow insecure registries anywhere in 10.0.0.0/8. 2014-12-01 11:36:08 -08:00
Justin Santa Barbara
0b05068f40 Default ENABLE_CLUSTER_MONITORING to false
Otherwise kube-down fails because the variable is not defined
2014-11-27 18:07:51 -08:00
Justin Santa Barbara
a549468853 Specify AWS_DEFAULT_REGION to match configured region
The AWS CLI is configured with a default region, but it might not match
the configured Kubernetes region.  Specify the region to be sure.
2014-11-27 17:56:14 -08:00
Justin Santa Barbara
f9a9c75697 Don't assume every AWS VPC has tags
The default VPC has no tags (by default), so we should use get()
2014-11-27 17:32:38 -08:00
Alen Komljen
249bbd7d9a Remove unused nsinit salt state 2014-11-27 09:59:25 +01:00
Remco
83f3982eee fix(aws): cloud provider wasn't set, corrected cloud config syntax 2014-11-26 17:30:35 +01:00
Remco
1265db9686 fix(aws): fix with non us standard region 2014-11-26 16:18:57 +01:00
Remco
6d79fab0c2 enhancement(aws): added logging variable and more verbose output 2014-11-26 16:18:26 +01:00
Remco
cbaa48bbc2 enhancement(aws): using iam role to pass aws credentials 2014-11-26 16:16:57 +01:00
Remco
2118c31bdb enhancement(aws): checks for existing kubernetes vpc first
without this check, kube-up creates a new vpc every time. Now it will
reuse the vpc tagged Kubernetes.
2014-11-26 12:17:14 +01:00
Remco
72bd5311bf fix(aws): error with other instances without tags
while starting the cluster, and having already other non-kubernetes
instances active without tags, an KeyError throwed.
2014-11-26 12:15:51 +01:00
Tim Hockin
47141f05c7 standard config opt names: logging 2014-11-25 17:41:53 -08:00
Tim Hockin
52ad94d766 standard config opt names: node monitoring 2014-11-25 17:39:28 -08:00
Tim Hockin
fad806d1d1 standard config opt names: cluster monitoring 2014-11-25 17:38:30 -08:00
Tim Hockin
e359ad5902 Change tabs to spaces 2014-11-25 17:36:41 -08:00
Joe Beda
6d65805508 fixup! Convert gcutil to gcloud compute 2014-11-25 15:20:01 -08:00
Joe Beda
6ba07b38fc Convert gcutil to gcloud compute 2014-11-25 15:17:00 -08:00
Joe Beda
4a5a69b520 Upgrade docker to 1.3.2. 2014-11-25 14:46:25 -08:00
Joe Beda
2b712a744a Fix up salt ordering dependencies in kube-apiserver/init.sls. 2014-11-25 14:46:25 -08:00
Joe Beda
12add3bc66 Merge pull request #2579 from brendandburns/e2e
Add an e2e test for gce pd.
2014-11-25 09:08:40 -08:00
Brendan Burns
e1764e2e01 Add an e2e test for gce pd.
Add an example for gce pd.
Add an extra log message.
2014-11-25 09:02:00 -08:00
Tim Hockin
f24ea5ce59 Merge pull request #2592 from dchen1107/mirror-registry
Enable Docker Cache for OSS on gce.
2014-11-25 09:23:40 +08:00
Dawn Chen
1900f0db98 Enable Docker Cache for OSS on gce. 2014-11-24 16:51:17 -08:00
Brendan Burns
ab3cfc5f75 Update the ubuntu AMI 2014-11-24 16:34:48 -08:00
Tim Hockin
b6d8215f3a Merge pull request #2537 from dchen1107/mirror-registry
Enable docker registry cache. By default it is off
2014-11-25 03:46:35 +08:00
Dawn Chen
e13ce48676 Enable docker registry cache. By default it is off 2014-11-21 17:13:22 -08:00
Joe Beda
802d214ed0 Merge pull request #2461 from MSOpenTech/deploy
Bring Azure deploy scripts up to date
2014-11-20 17:15:44 -08:00
Joe Beda
658c5cdaaa Check in default blank file for kubelet/kubernetes_auth
This lets us eliminate some per-cloud stuff in our salt.  This is an alternate fix for #2475.
2014-11-20 17:01:28 -08:00
Jeff Mendoza
d0586ed066 Azure review fixes. 2014-11-20 16:40:35 -08:00
derekwaynecarr
1a894741b2 Fix vagrant regression 2014-11-20 10:39:09 -05:00
Brendan Burns
927088de83 Fix etcd unpack by adding a explicit x flag. 2014-11-19 11:33:50 -08:00
Jeff Mendoza
5d62ac1a56 Fix Azure util.sh boilerplate. 2014-11-19 10:25:27 -08:00
Jeff Mendoza
8b0f263c00 Rearrange cluster sanity checks for Azure. 2014-11-18 22:37:06 -08:00
Jeff Mendoza
9934a0ace4 Update cert generation for Azure. 2014-11-18 14:10:50 -08:00
Jeff Mendoza
1ee5ab5e5e Updates and formatting to azure scripts. 2014-11-18 14:10:18 -08:00
Eric Tune
67adf6473e Don't reference non-existent token file if not GCE. 2014-11-18 00:23:41 -08:00
Eric Tune
46dcacfa93 Kubelet talks securely to apiserver.
Configure apiserver to serve Securely on port 6443.
Generate token for kubelets during master VM startup.
Put token into file apiserver can get and another file the kubelets can get.
Added e2e test.
2014-11-18 00:23:41 -08:00
Brendan Burns
5122e4cc3a Remove deprecated nsinit from the node definition. 2014-11-17 22:20:57 -08:00
Brendan Burns
cea52d7e4f Merge pull request #2409 from mattmoor/master
Implements a credentialprovider library for use by DockerPuller.
2014-11-17 21:53:25 -08:00
Matt Moore
0c5d9ed0d2 Implements a credentialprovider library for use by DockerPuller.
This change refactors the way Kubelet's DockerPuller handles the docker config credentials to utilize a new credentialprovider library.

The credentialprovider library is based on several of the files from the Kubelet's dockertools directory, but supports a new pluggable model for retrieving a .dockercfg-compatible JSON blob with credentials.

With this change, the Kubelet will lazily ask for the docker config from a set of DockerConfigProvider extensions each time it needs a credential.

This change provides common implementations of DockerConfigProvider for:
 - "Default": load .dockercfg from disk
 - "Caching": wraps another provider in a cache that expires after a pre-specified lifetime.

GCP-only:
 - "google-dockercfg": reads a .dockercfg from a GCE instance's metadata
 - "google-dockercfg-url": reads a .dockercfg from a URL specified in a GCE instance's metadata.
 - "google-container-registry": reads an access token from GCE metadata into a password field.
2014-11-17 21:46:54 -08:00
Richard Larocque
914c5eb1f1 Chmod the right file in cluster/vagrant/util.sh
Most of platforms use ~/.kubernetes_auth, but Vagrant is different.
This commit fixes one instance where a setup script did not take this
difference into account.
2014-11-17 17:14:35 -08:00
Abhishek Gupta
65a4041d26 Fixing systemd service files to point to correct config/executors 2014-11-17 12:24:10 -08:00
Joe Beda
7b5a77c56c Fix breakage when bringing down cluster. 2014-11-17 11:26:25 -08:00
Joe Beda
66d287f7e4 Merge branch 'rename-to-kube' of https://github.com/eparis/kubernetes into eparis-rename-to-kube
* 'rename-to-kube' of https://github.com/eparis/kubernetes:
  rename kube server binaries to kube-

Conflicts:
	docs/salt.md
2014-11-17 09:52:10 -08:00
Vladimir Shcherbakov
6ea7191592 deploy update 2014-11-16 23:56:15 -08:00
Joe Beda
c82bd2127f Fix up formatting and sed usage for heapster deploy.
Also, 'sed -i' isn't supported well across BSD and GNU versions of sed.  See http://stackoverflow.com/questions/5694228/sed-in-place-flag-that-works-both-on-mac-bsd-and-linux.  And we were editing files that were checked in to git with a password.  Instead, do this with class sed redirection in a temp dir.

Fixes #2400.
2014-11-16 17:13:02 -08:00
Joe Beda
06d838ffb1 Merge pull request #2369 from jbeda/vagrant-fix
Vagrant fixes
2014-11-14 16:43:06 -08:00
Eric Tune
13345953e3 Merge pull request #2371 from dchen1107/upstream
Don't show Kubernetes username & password to console for heapster.
2014-11-14 10:50:36 -08:00
Brendan Burns
c2485a4056 Merge pull request #2147 from justinsb/ipv6
Initial ipv6 / iptables work
2014-11-14 10:34:37 -08:00
Dawn Chen
a9defc413a Don't show Kubernetes username & password to console for heapster. 2014-11-13 23:08:55 -08:00
Joe Beda
5a0159ea00 Get Vagrant to start using TLS client certs.
Also fix up cert generation. It was failing during the first salt highstate when trying to chown the certs as the apiserver user didn't exist yet.  Fix this by creating a 'kube-cert' group and chgrping the files to that.  Then make the apiserver a member of that group.

Fixes #2365
Fixes #2368
2014-11-13 22:16:45 -08:00
Eric Paris
a99c3c7963 rename kube server binaries to kube-
apiserver becomes kube-apiserver
controller-manager -> kube-controller-manager
scheduler and proxy similarly.

Only thing I promise is that right now hack/build-go.sh and
build/release.sh exit with 0.  That's it.  Who knows if any of this
actually works....
2014-11-13 20:08:26 -05:00
Richard Larocque
63d6e7cd9f make-cert.sh: Create directory before writing cert
Adds a "mkdir -p" to the make-cert.sh.  This fixes an issue where the
script could fail if /srv/kubernetes did not exist previously.
2014-11-13 16:39:09 -08:00
Dawn Chen
8c358f0cae Merge pull request #2357 from filbranden/monitoring
Fix bugs and improve monitoring support
2014-11-13 13:59:58 -08:00
Vishnu Kannan
46a22b3c44 Fix monitoring setup script.
Remove the firewall rule created for monitoring as part of kube-down.
Reuse master auth for Grafana.
2014-11-13 16:43:05 -05:00
Eric Tune
19ec2234f9 Make server certs accessible to apiserver user. 2014-11-13 13:02:48 -08:00
Joe Beda
ee2f030623 Give the API server access to TLS certs.
Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).
2014-11-12 18:14:24 -08:00
Dawn Chen
5ab6947bdd Merge pull request #2307 from satnam6502/logbydefault
Turn on Elasticsearch logging by default for GCE platform
2014-11-12 10:03:06 -08:00
Dawn Chen
d71408f465 Merge pull request #2321 from jimmydivvy/fix_linux_md5sum
Strip extra '-' from md5sum output when creating S3 bucket
2014-11-12 10:00:13 -08:00
James Davies
ff5a425b67 Strip extra '-' from md5sum output when creating GCE projects 2014-11-12 17:04:01 +10:00
James Davies
945339362f Strip extra '-' from md5sum output when creating S3 bucket
md5sum prints out the hash, followed by the filename. When piped in from
stdin, this equates to a '-' character.

cluster/aws/util.sh was incorrect including this '-' character as part
of the S3 bucket name, causing the script to fail on Linux machines with
the md5sum binary.

i.e. "s3://kubernetes-staging-0ac68d8c77915cc1069a9e2f5e1f1d2d -"

Fixed by using `awk` to return only the first column (up to the space)
2014-11-12 16:56:50 +10:00
Brendan Burns
4faefda415 Really fix the gce turn up script. 2014-11-11 20:55:12 -08:00
Joe Beda
21ff53c70b Merge pull request #2311 from pietern/vsphere-curl
Use curl exclusively in vSphere deployment
2014-11-11 17:32:09 -08:00
Pieter Noordhuis
1df6f9ce6a Use curl exclusively in vSphere deployment
This fixes #2295.
2014-11-11 17:22:02 -08:00
Joe Beda
4f62efcc23 Fix kube-push.sh 2014-11-11 17:10:56 -08:00
Brendan Burns
fa8e0f6a6f Merge pull request #2296 from brendandburns/fix
Fix paths for kubectl
2014-11-11 16:23:11 -08:00
Satnam Singh
d837f16045 Turn on Elasticsearch logging by default for GCE platform 2014-11-11 14:49:42 -08:00
Haney Maxwell
fae27e2f17 Clean up e2e test 2014-11-11 11:03:07 -08:00
Brendan Burns
0393212624 Fix paths for kubectl 2014-11-11 10:49:44 -08:00
Brendan Burns
48498cf9bb Fix docs somewhat, add monitoring hooks. 2014-11-10 17:17:25 -08:00
Brendan Burns
62bd634c07 Update the AWS config. 2014-11-10 13:33:43 -08:00
Andriy Yurchuk
1ff79fdeb0 AWS support draft
Fix calling function before declaration

Set Name tags on instances

Hide import-key-pair error

Fix instances names resolution

Implement kube-down for AWS provider

Add cluster validation routines. Make changes according to #1255

Implement post-deployment cluster validation

Set proper master name in userdata scripts

Fix kube-down path in hint

Add getting started for AWS
2014-11-10 13:32:52 -08:00
Joe Beda
dba0f2d661 Fix typo in README 2014-11-10 13:09:58 -08:00
Brendan Burns
bdc4ab62c7 Merge pull request #2245 from jbeda/gcs-deps
Start pulling external dependencies from GCS where possible
2014-11-10 11:00:41 -08:00
bgrant0607
6c70227a2e Merge pull request #2249 from satnam6502/salt
Make Docker container dirs writable for pos file
2014-11-08 11:56:48 -08:00
Satnam Singh
9fac9949b2 Make Docker container dirs writable for pos file 2014-11-07 17:42:48 -08:00
Joe Beda
a839599883 Install client tools on master.
We now include kubecfg and kubectl in "server binary" tar and place them into /usr/local/bin on the master.
2014-11-07 17:13:18 -08:00
Daniel Smith
d5c6499d93 Update scripts to expect versioned output in templates. 2014-11-07 16:47:22 -08:00
Joe Beda
887c9b18d6 Install Salt from debs on GCS.
Also make downloading more reliable and run 'highstate' after install for good measure.  As part of this we no longer use gsutil to download and have to make 'staged' binaries in GCS publicly readable.
2014-11-07 16:16:45 -08:00
Joe Beda
d033dfcc2b Load etcd tarball from GCS.
Also fix up comment about how to cache docker debs.
2014-11-07 13:43:07 -08:00
Vishnu Kannan
37af9210ba Improve the monitoring setup script and fix bugs in the monitoring config. 2014-11-07 19:27:52 +00:00
Vishnu Kannan
ad9cb982e5 Add an option for enabling monitoring in gce/config-default.sh and disable it
for tests.
Updated heapster readme.
2014-11-07 00:47:56 +00:00
Vishnu Kannan
edf6d8ee3f Use Heapster as an in-built monitoring solution for Kubernetes in GCE.
Users will have an option to enable it when they setup their cluster (kube-up).
2014-11-07 00:47:56 +00:00
Justin SB
ddaa716de1 Allow specification of docker daemon args 2014-11-04 14:12:59 -08:00
Justin SB
8e70a664e8 Extend container_bridge.py (salt lib) to support IPv6 2014-11-04 06:33:34 -08:00
Deyuan Deng
a7bdb362da Fix local cluster scripts 2014-11-02 23:30:14 -05:00
Brendan Burns
8d34231381 Fix a bunch of places where the -machines flag was still attached to the apiserver. 2014-11-01 20:38:45 -07:00
Joe Beda
bbb66af3db Merge pull request #2092 from jbeda/1729-hack-build
Rationalize `build` and `hack` directories
2014-11-01 18:02:12 -07:00
Joe Beda
5d33ce46cc Rework hack/ and build/ directories.
* Rewrite a bunch of the hack/ directory with modular reusable bash libraries.
* Have 'build/*' build on 'hack/*'.  The stuff in build now just runs hack/* in a docker container.
* Use a docker data container to enable faster incremental builds.
* Standardize output to _output/{local,dockerized}/bin/OS/ARCH/*.  This regularized placement makes cross compilation work.
* Move travis specific scripts under hack/travis

With new dockerized incremental builds, I can do a no-op `make quick-release` in ~30s.  This is a significant improvement.
2014-11-01 17:56:41 -07:00
Brendan Burns
f44bb9d673 Merge pull request #2104 from jbeda/gcs-docker-install
Get docker deb from GCS
2014-10-31 21:15:06 -07:00
Joe Beda
29455398e6 Get docker deb from GCS.
Also lock to 1.3.0 due to issues in 1.3.1 (docker/docker#8889)
2014-10-31 16:27:00 -07:00
Deyuan Deng
019b7fc74c Separate minion controller from master. 2014-10-30 20:24:15 -04:00
Joe Beda
4c8dbbc346 Use the Container VM image in the google-cloud project.
Fixes #2078
2014-10-30 11:29:25 -07:00
Joe Beda
78df01172a Merge pull request #1747 from pietern/vsphere-binary-deploy
vSphere support for binary deploys
2014-10-29 16:52:12 -07:00
Filipe Brandenburger
5619fb2f45 Merge pull request #2046 from dchen1107/containervm
Using containervm image for gce by default
2014-10-29 14:49:17 -07:00
Pieter Noordhuis
918c8e2b96 Limit GCE specific mods to GCE 2014-10-29 12:39:07 -07:00
Pieter Noordhuis
5b22dd7631 Move customizations of /srv/salt to overlay
Also see #1783.
2014-10-29 11:30:09 -07:00
Pieter Noordhuis
5ba3a551f9 Fix kube-push 2014-10-29 11:30:09 -07:00
Pieter Noordhuis
fa24face8c Add 'portal_net' parameter to pillar
In preparation for #1402.
2014-10-29 11:30:09 -07:00
Pieter Noordhuis
4a13d752ed Copy release tars with scp
This displays a progress report, so any slowness can be attributed.
2014-10-29 11:30:09 -07:00
Pieter Noordhuis
a1c40922e0 Rely on ssh-agent for key management 2014-10-29 11:30:09 -07:00
Pieter Noordhuis
1152471db7 Split reactor files
There now are reactor files to run highstate on:

* New nodes only
* Master nodes
* Minion nodes
2014-10-29 11:30:09 -07:00
Pieter Noordhuis
e90f98a52c Make vSphere scripts work for binary deploys
Fixes #1732.
2014-10-29 11:30:08 -07:00
Brendan Burns
74998eead4 Merge pull request #2061 from brendandburns/master
Fix the etcd md5 since they uploaded a new binary.
2014-10-29 11:20:49 -07:00
Brendan Burns
c4d6f3a1cd Fix the etcd md5 since they uploaded a new binary. 2014-10-29 11:18:37 -07:00
Dawn Chen
18685d49ed Using containervm image for gce by default 2014-10-29 09:42:50 -07:00
Dawn Chen
03503a5627 Always check default-internal firewall absent or not; if not, create it
anyway.
2014-10-28 13:55:52 -07:00
Joe Beda
8100c063b8 Turn on auto security updates for debian based systems.
Fixes #2008
2014-10-27 13:49:51 -07:00
Clayton Coleman
bd1b3fb245 Vagrant util has minion query for ID, not Name
Related to the ID->Name refactor, noticed while running e2e
2014-10-23 23:12:04 -04:00
Daniel Smith
bfabb41604 New e2e script (in go this time) that doesn't completely suck 2014-10-23 11:03:30 -07:00
Joe Beda
33763d07b2 Fix e2e test for .ID->.Name change 2014-10-22 17:19:53 -07:00
Joe Beda
25b1eea116 Merge pull request #1832 from doublerr/rackspace_switch_to_coreos
Rackspace - Switch to CoreOS for standard cluster
2014-10-22 09:30:55 -07:00
derekwaynecarr
b836e31cf4 Fixup docker configuration for sdn 2014-10-22 11:32:38 -04:00
Brendan Burns
86e67c0fe2 Fix GCE since KUBE_ADMIN_TOKEN is never set, since get-admin-token is never called. 2014-10-21 21:13:24 -07:00
Satnam Singh
605314ff62 Second attempt at correctly unspecting FLUENTD_GCP 2014-10-21 14:58:03 -07:00
Joe Beda
da6866c720 Merge pull request #1931 from derekwaynecarr/fix_kubectl_for_vagrant
Fix kubectl flags for vagrant
2014-10-21 14:43:46 -07:00
derekwaynecarr
c929ec5a44 Fix kubectl flags for vagrant 2014-10-21 15:29:35 -04:00
Satnam Singh
ed58d024ca Check to see if FLUENTD_GCP is defined before use 2014-10-21 12:18:42 -07:00
Clayton Coleman
fa4e186e54 Merge pull request #1911 from erictune/token_client
Handle auth files with BearerToken sections.
2014-10-21 14:08:42 -04:00
Satnam Singh
39212f5e2e Flunentd to GCP logging node level configuration 2014-10-20 18:05:00 -07:00
Eric Tune
21dae01005 Handle auth files with BearerToken sections. 2014-10-20 17:02:03 -07:00
Satnam Singh
b7722a631d Adjust test in salt file to use boolean value 2014-10-20 15:52:28 -07:00
Joe Beda
893e897d9b Merge pull request #1913 from derekwaynecarr/move_network_closure
Do not require a writeable /vagrant
2014-10-20 15:04:43 -07:00
Joe Beda
60a8249bdf Merge pull request #1891 from jbeda/vagrant-bash-fix
Make vagrant scripts work with bash 3
2014-10-20 14:52:12 -07:00
Joe Beda
ea95cefb91 Make vagrant scripts work with bash 3
Fixes #1890
2014-10-20 14:50:09 -07:00
derekwaynecarr
0d86be680b Do not require a writeable /vagrant 2014-10-20 16:59:15 -04:00
Robert Bailey
216cc64975 Bump up the default machine size on GCP. 2014-10-20 13:02:28 -07:00
Daniel Smith
bf942e859f remove old proxy code. 2014-10-20 11:28:12 -07:00
Ryan Richard
d513854851 Remove extra newline and update comments in util.sh 2014-10-20 12:18:34 -05:00
Ryan Richard
a26aefaa2e Migrate Rackspace upload scripts to util.sh
The functions to upload built k8s tars to Cloud Files were incorrectly
placed in build/common.sh. These have been migrated to
cluster/rackspace/util.sh
2014-10-20 12:14:20 -05:00
Ryan Richard
0bfb5ae772 remove hardcoded cloudfiles path and fix PORTAL_NET 2014-10-20 12:14:20 -05:00
Ryan Richard
f2838483a1 Add Rackspace to build/release.sh
Updates to the build/release.sh scripts to upload build binaries to
Cloud Files.
2014-10-20 12:14:20 -05:00
Ryan Richard
a8bae68865 Rackspace - Switch to CoreOS for standard cluster
The Rackspace setup for Kubernetes now leverages CoreOS instead of Ubuntu. We've dropped Salt completely for our cluster.
2014-10-20 12:14:20 -05:00
bgrant0607
75e2cf8e12 Merge pull request #1826 from thockin/kubectl
add kubectl.sh
2014-10-16 13:02:13 -07:00
Mrunal Patel
f8845147f6 Need not add --ip-masq flag till fedora ships docker 1.3 2014-10-16 12:40:01 -07:00
Tim Hockin
bad0b72926 add kubectl.sh 2014-10-16 12:30:08 -07:00
Dawn Chen
a8a036a9e6 Disable --ip-masq for vagrand. 2014-10-16 12:17:18 -07:00
Dawn Chen
baf3bea79a Set --ip-masq to false 2014-10-16 12:17:18 -07:00
Tim Hockin
5c4bd55273 Add vagrant support 2014-10-16 08:36:47 -07:00
Tim Hockin
1c2f04b8b7 Add e2e test 2014-10-16 08:36:47 -07:00
Tim Hockin
e907011111 Core support for ip-per-service 2014-10-16 08:36:47 -07:00
Joe Beda
3701c2ac0e Add kubectl to build/release scripts.
Also Refactor build helpers into client/cross and server/linux.  This make it easier to tell users what to build to get just the client binaries.
2014-10-15 16:50:17 -07:00
Joe Beda
81635a2549 Remove duplicate code for GCE cluster start 2014-10-15 10:21:22 -07:00
Joe Beda
9bb20b41ee Break out dynamic salt files to enable clean kube-push.
This lets us blow away salt files and replace them with a new version while keeping a tree of "overlay" files that are cluster specific and generated at cluster up time.

Fixes #1783
2014-10-14 15:01:43 -07:00
derekwaynecarr
b8d2f08192 Fix race condition in start-up of salt-minion and salt-master 2014-10-14 12:41:45 -04:00
Joe Beda
b2395c76f2 Have build/make-cross.sh copy binaries back over if using boot2docker.
Also clarified error message in cluster/kubecfg.sh.
2014-10-11 07:24:12 -07:00
Joe Beda
e397371b95 Fix up project hash on linux
Somehow this got dropped!
2014-10-10 14:24:35 -07:00
Joe Beda
96c1bc17ca Set shell options for reliability.
Tweak a few other small things in our shell scripts.
2014-10-10 12:33:36 -07:00
Joe Beda
d43a6ec5a3 Standardize how we refer to the kubernetes root.
Now use $KUBE_ROOT as the variable pretty much everywhere.
2014-10-10 12:33:36 -07:00
Joe Beda
38d5906044 Clean up READMEs and broken stuff.
Move all support for clouds that are broken with this change into an `icebox` directory.  We'll move that stuff back out as we fix it up.
2014-10-10 12:33:36 -07:00
Joe Beda
db14944f61 Fix up kubecfg.sh script to find correct binary. 2014-10-10 12:30:12 -07:00
Joe Beda
881cf80182 Vagrant now using pre-built binaries. 2014-10-10 12:30:12 -07:00
Joe Beda
15cd6f07d6 Use binary releases for cluster push scripts.
This is for GCE right now.  Other clouds/clusters are probably broken.
2014-10-10 12:30:11 -07:00
Joe Beda
9a8807b033 get.docker.com is now the preferred place to get Docker
Update salt configs
2014-10-09 12:31:53 -07:00
Danny Jones
4ec25f3b81 Adds support for attaching GCEPersitentDisks
Adds GCEPersistentDisk volume struct
Adds gce-utils to attach disk to kubelet's VM.
Updates config to give compute-rw to every minion.
Adds GCEPersistentDisk to API
Adds ability to mount attached disks
Generalizes PD and adds tests.
PD now uses an pluggable API interface.
Unit Tests more cleanly separates TearDown and SetUp
Modify boilerplate hook to omit build tags
Adds Mounter interface; mount is now built by OS
TearDown() for PD now detaches disk on final refcount
Un-generalized PD; GCE calls moved to cloudprovider

Address comments.
2014-10-08 20:03:59 -07:00
Joe Beda
0de2ef496e Merge pull request #1595 from thockin/flageq
Use '=' for flags or else parsing gets confused sometimes
2014-10-06 13:14:35 -07:00
Tim Hockin
440d14c239 Use '=' for flags or else parsing gets confused sometimes 2014-10-06 12:25:56 -07:00
Deyuan Deng
253907ab04 Add etcdctl in master 2014-10-04 11:26:01 -04:00
Joe Beda
90800bdc43 Merge pull request #1544 from justinlindh/configurable-sleep-interval
Add configurable sleep between polling intervals for GCE status
2014-10-03 09:36:39 -07:00
derekwaynecarr
1567ac0d74 Do not verify certs against vagrant 2014-10-02 15:38:16 -04:00
Justin Lindh
4f31b1918f Add configurable sleep between polling intervals for GCE status 2014-10-02 12:47:40 -06:00
Joe Beda
c323179d9b Don't print Kubernetes username/password to console.
It is too easy to copy/paste this on-line.

Fixes #1483
2014-09-29 13:18:29 -07:00
Joe Beda
648a400e36 Merge pull request #1492 from jbeda/backports-fix
Change back to generic image description now that GCE is fixed.
2014-09-29 12:27:51 -07:00
Jeff Mendoza
9eefbab575 Update default image used for Azure.
Fixes CVE-2014-6271.
Still vulnerable to CVE-2014-7169.
2014-09-29 11:43:10 -07:00
Joe Beda
7cadeb2af3 Change back to generic image description now that GCE is fixed. 2014-09-29 11:30:39 -07:00
Joe Beda
4ae3fa521e For GCE hard code backports image version as autodetection is currently broken. 2014-09-29 10:31:34 -07:00
Joe Beda
81e91db697 Grab images as part of update e2e test 2014-09-26 14:31:12 -07:00
Brendan Burns
77d13db307 Fix the vagrant build. 2014-09-26 14:02:56 -07:00
Joe Beda
b3e7fd4209 Be more robust in how we pass flags.
Using the '=' form of a flag makes things better if we have an empty list of machines.
2014-09-25 11:52:18 -07:00
Brendan Burns
511ec280b9 Add a new network for e2e tests, to isolate it from any other cluster. 2014-09-24 22:37:19 -07:00
Brendan Burns
e21f5f7c8f Fix the scripts. 2014-09-24 11:04:25 -07:00
Brendan Burns
8398dbd367 Fix the scripts. 2014-09-24 09:57:24 -07:00
Brendan Burns
cafd20b233 Complete the mitm prevention on GCE. 2014-09-23 16:51:04 -07:00
Brendan Burns
d38b498b0f Add a script for generating CA signed certs, and a client cert. 2014-09-23 11:38:29 -07:00
Brian Grant
b9eee0f0c7 Replace --lines= with -n to fix tail on mac os. 2014-09-23 14:16:43 +00:00
Brian Grant
cf60f4fa7d Fixes #1392. Redirects error messages to stderr so users can see them. 2014-09-22 17:25:25 +00:00
Yves Junqueira
412aab302a Fix typo in cluster/local/config-default.sh 2014-09-19 00:36:54 +02:00
Brendan Burns
bb829ce8f6 fix salt. 2014-09-17 17:13:41 -07:00
Brendan Burns
ffa4500e09 Add a salt flag for enabling privileged containers. 2014-09-17 14:25:28 -07:00
brendandburns
c74060d465 Merge pull request #1282 from derekwaynecarr/add_vagrant_to_docker_group
Add vagrant user to docker group
2014-09-15 17:07:02 -07:00
Brendan Burns
61e90fdaff Fix the logrotate cron job. 2014-09-11 20:56:31 -07:00
Brendan Burns
76c0ce374d Start log rolling for docker containers too. Fix logrotate for other daemons. 2014-09-11 15:47:06 -07:00
derekwaynecarr
63bd987561 Add vagrant user to docker group 2014-09-11 16:48:17 -04:00
derekwaynecarr
0c20fffa06 No DNS in vagrant cross minions, need explicit IP as host 2014-09-11 13:38:50 -04:00
Daniel Smith
b5c6edcd79 Merge pull request #1189 from simon3z/ovirt-cloud
Add support for oVirt cloud provider
2014-09-11 09:50:31 -07:00
Federico Simoncelli
320fd528e2 Add support for oVirt cloud provider
This patch adds the initial support for the oVirt cloud provider.

Signed-off-by: Federico Simoncelli <fsimonce@redhat.com>
2014-09-11 13:08:46 +00:00
Pieter Noordhuis
63ac1dc213 Update vSphere getting started doc 2014-09-10 00:17:41 +00:00
Brendan Burns
686c3bec84 Add initial logrotate support. 2014-09-09 13:35:06 -07:00
derekwaynecarr
f42fcef620 Add explicit flag to use openvswitch 2014-09-08 15:31:22 -04:00
Joe Beda
2978c9923e Merge pull request #1203 from brendandburns/nginx
Update nginx to support websockets and not buffer watches.
2014-09-06 11:15:08 -07:00
Brendan Burns
e8afebf1e1 Update nginx to support websockets and not buffer watches. 2014-09-05 21:46:01 -07:00
Joe Beda
77488835fe Merge pull request #1190 from derekwaynecarr/vagrant_cluster_hostname
Improve vagrant hostname support across cluster
2014-09-05 14:30:09 -07:00
Joe Beda
2edbfcf25d Merge pull request #1188 from carlossg/detect-zone
[GCE] detect-master and detect-minions api calls should specify the zone
2014-09-05 14:24:49 -07:00
derekwaynecarr
7f75aae8ab Improve vagrant hostname support across cluster 2014-09-05 16:39:39 -04:00
Daniel Smith
ee1c0838d8 Merge pull request #1142 from jbeda/tweak-demo
Improve update demo, support rolling template update
2014-09-05 10:07:58 -07:00
Joe Beda
ccfdf14097 Merge pull request #1155 from derekwaynecarr/improve_vagrant_startup
Improve kube-up to validate salt provisioned each machine
2014-09-04 13:39:34 -07:00
Joe Beda
c47b405841 Use KUBECFG instead of CLOUDCFG in scripts 2014-09-04 13:25:39 -07:00
Brendan Burns
4a934427db Exclude vendored etcd. 2014-09-04 12:05:34 -07:00
Brendan Burns
3864cf453a Fix travis and cluster installs. 2014-09-04 10:31:09 -07:00
derekwaynecarr
4b4be926f5 Improve kube-up to validate salt provisioned 2014-09-03 16:36:21 -05:00
Joe Beda
847c87faa8 Fix docker start after minion reboot on GCE/debian
Uncomment docker service state as it should no longer be affected by race bug in docker init.d start script.  Also make sure that the docker service state depends on the cbr state.

Fixes #802
2014-09-03 11:11:28 -07:00
Ryan Richard
58b9b2fb88 switch kubelets to connect to etcd on cloud network
Previously we were connecting across the public interfaces. This will connect across eth2 and send communication over a private network.
2014-09-02 19:05:57 -05:00
Ryan Richard
0fed66a667 add sanity checking steps and fix KUBE_MASTER_IP 2014-09-02 19:05:56 -05:00
Ryan Richard
0b50244c72 workaround lack of jinja2.7 support 2014-09-02 19:05:56 -05:00
Carlos Sanchez
588a428175 [GCE] detect-master and detect-minions api calls should specify the zone
Otherwise KUBE_MASTER_IP and KUBE_MINION_IP_ADDRESSES may contain 'external-ip'

    $ detect-master
    Using master: kubernetes-master (external IP: external-ip)'
2014-09-02 13:47:26 +02:00
Filipe Brandenburger
54b2ed0078 Suppress non-error output of systemctl enable
The `systemctl enable` command ordinarily prints the `ln` command used
to enable the unit to stderr, but that's not ideal in the vagrant setup
because it gets printed in red, which should be reserved for errors, but
it's not a real error.

Set an environment variable to raise the log level to prevent `info`
messages from being printed to stderr (as they are not actually errors.)

I looked into the `systemctl` calls happening from the Salt setup script
to understand why they were not going to stderr, and it turns out the
Salt script will redirect all messages to stdout so they will all be
green regardless...

Tested:
- Started a fresh Vagrant cluster, confirmed no red messages in output
  when creating the cluster successfully. Successfully started nginx
  through Kubernetes using cluster/kubecfg.sh.
- Confirmed that the salt-api service was up after `vagrant up`:
  $ vagrant ssh master -c 'systemctl status salt-api.service'
  salt-api.service - The Salt API
     Loaded: loaded (/usr/lib/systemd/system/salt-api.service; enabled)
     Active: active (running) since Fri 2014-08-29 23:19:47 UTC; 11min ago
   Main PID: 2090 (salt-api)
     CGroup: /system.slice/salt-api.service
             +-2090 /usr/bin/python /usr/bin/salt-api
             +-2110 /usr/bin/python /usr/bin/salt-api

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
2014-08-29 16:44:05 -07:00
Joe Beda
843ae1fbe2 Rename output/ directory to _output/
go build ./... will ignore any directory starting with an underscore.
2014-08-29 14:44:55 -07:00
Filipe Brandenburger
c5520dd39d Remove workaround for salt-minion startup in vagrant/provision-minion.sh
The workaround was not needed, as salt-minion was always correctly
started in the Vagrant minion setup.

The issue reported in #270 was clearly specific do System V style init
scripts and will not affect systemd.

Also remove the inaccurate comment from provision-master.sh, since -X
was not even really in use there.

Tested:
- Performed 3 full `vagrant up` and `vagrant destroy -f` cycles with at
  least 3 minions and up to 6 minions in one case. Checked that
  salt-minion was up in each of the minions using a `systemctl status
  salt-minion` command.
- Started nginx on the cluster using cluster/kubecfg.sh, confirmed it
  was up with `list /pods` and confirmed it was reachable using wget on
  port 8080 of the minions.

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
2014-08-29 08:50:10 -07:00
Daniel Smith
93818a9ce0 Merge pull request #1095 from dchen1107/cleanup
Fixed kubelet /healthz by using healthz package
2014-08-28 17:25:56 -07:00
Joe Beda
2ac0770694 Make salt configs work with Jinja 2.6.
Fixes #1089
2014-08-28 16:54:14 -07:00
Dawn Chen
223fb6e610 Fixed kubelet /healthz by using healthz package
Fixed #1094
2014-08-28 15:34:39 -07:00
Clayton Coleman
2f74a15a7b Merge pull request #1080 from filbranden/vagrant_salt_master1
Fix `which salt-master` warning in Vagrant startup
2014-08-28 13:17:34 -04:00
Ryan Richard
2565164a8d Add Rackspace support for dev-build-and-up 2014-08-28 10:36:58 -05:00
Filipe Brandenburger
86c1ddc121 Fix which salt-master warning in Vagrant startup
The `which` command in Fedora 20 (differently from the one in Debian)
prints to stderr when the binary is not found. Redirect both stdout and
stderr to /dev/null to prevent messages from being printed by `which`.

Check whether the binary exists or not by the exit status of `which`
(non-zero means the binary does not exist) instead of checking for empty
output.

Tested:
- Started a Vagrant cluster with `vagrant up` and confirmed these
  messages were gone. Checked master and minions for Kubernetes
  components using the systemd status commands.
- Confirmed that the same error message for salt-minion is also
  suppressed from the output with this patch.

Fixes: Issue #1079

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
2014-08-27 23:15:08 -07:00
Clayton Coleman
f5a835b067 Merge pull request #978 from rajatchopra/podnet
Add IP per pod with Open vSwitch in Vagrant
2014-08-26 19:29:42 -04:00
Joe Beda
5722eba780 Propagate version info into salt config and use to build.
Fixes #1043.
2014-08-26 16:17:06 -07:00
Rajat Chopra
a0b88e2f2d add test to check minion to master reachability; logfiling and some cosmetification. 2014-08-26 12:52:02 -07:00
Rajat Chopra
2dd57898d4 add ip per pod across vagrant minions 2014-08-26 11:29:35 -07:00
Joe Beda
831a0d7e50 Merge pull request #1027 from MSOpenTech/azure-scripts
Add salt configuration for openvpn for use on Azure.
2014-08-26 11:04:03 -07:00
brendandburns
8a8e124d0d Merge pull request #1034 from jbeda/vagrant-auth
Hard code auth for vagrant.
2014-08-25 21:13:38 -07:00
Joe Beda
9a2e867350 Hard code auth for vagrant.
This simplifies things when switching between providers.  Fixes #1033.
2014-08-25 16:47:42 -07:00
Jeff Mendoza
adace2ccf5 Remove commented lines from openvpn config files. 2014-08-25 16:29:32 -07:00
Pieter Noordhuis
65bb90ffef Update apiserver defaults template
Set "cloud" grain to "vsphere".

The "minion_ips" grain doesn't seem to be used anymore.
2014-08-25 15:20:19 -07:00
Jeff Mendoza
13989794f8 Add salt configuration for openvpn for use on Azure.
Sets up openvpn for container to container communication. Azure
deploy scripts create certs used for openvpn conneciton. Salt
installs and configures openvpn.
2014-08-25 14:56:54 -07:00
Joe Beda
3af9655c36 Merge pull request #1011 from pietern/vsphere-squash
Deploy k8s to vSphere
2014-08-25 11:50:00 -07:00
Pieter Noordhuis
181337137d Implement kube-up for vsphere 2014-08-25 11:17:48 -07:00
Pieter Noordhuis
7cf48d81b6 Remove unused env vars 2014-08-25 11:17:33 -07:00
Pieter Noordhuis
c535d6d30b Incorporate comments 2014-08-25 10:01:25 -07:00
Pieter Noordhuis
ad7f131a5b Deploy k8s to vSphere 2014-08-24 20:27:05 -07:00
Jeff Mendoza
d8d09ace41 Refactor Azure deploy scripts.
Refactored to work with cluster/* scripts which require
actions to be defined as methods in cluster/azure/util.sh
2014-08-22 15:48:06 -07:00
Clayton Coleman
1c68247954 Merge pull request #909 from lavalamp/scheduler3
Scheduler plugin v1
2014-08-21 19:04:51 -04:00
derekwaynecarr
a6e87e786d Fix logic errors in validate cluster and make it work for vagrant again 2014-08-21 10:58:09 -04:00
Brendan Burns
514f443854 Move healthz checking to cluster validation. Switch to code == 200 2014-08-20 15:52:29 -07:00
Daniel Smith
79f60da6c4 add salt files to make scheduler run 2014-08-20 15:32:49 -07:00
Tim Hockin
7c7273eed3 Merge pull request #884 from eflynn/patch-1
Remove duplicate shebang
2014-08-20 08:18:49 -07:00
Brendan Burns
aa9d0d774c Uniquify the http firewall rule between different runs of the e2e tests. 2014-08-19 16:35:11 -07:00
Daniel Smith
9bafb8c541 Merge pull request #957 from brendandburns/shell_sucks
Add quotes to preserve more sane quoting in what we pass through.
2014-08-19 16:23:50 -07:00
Brendan Burns
3c5d2c0846 Add quotes to preserve more sane quoting in what we pass through. 2014-08-19 14:47:24 -07:00
Brendan Burns
dc1de2bc0e Remove a duplicate flag. 2014-08-19 09:48:41 -07:00
brendandburns
bd53643647 Merge pull request #851 from derekwaynecarr/cloud_provider
Vagrant supports a cloud provider
2014-08-18 18:23:49 -07:00
brendandburns
2d84987c11 Merge pull request #885 from thockin/net
Proper ip-per-pod on GCE.
2014-08-18 18:22:05 -07:00
Brendan Burns
a779102924 Fix the installation of nsinit 2014-08-18 16:40:12 -07:00
Tim Hockin
e472752ff9 Merge pull request #875 from brendandburns/exec
Add a in container exec based health check.
2014-08-18 12:19:22 -07:00
Brendan Burns
0caae9c1d4 Add a in container exec based health check. 2014-08-18 12:00:11 -07:00
derekwaynecarr
8df21b84a1 Add vagrant cloudprovider 2014-08-18 14:30:31 -04:00
Daniel Smith
82d1f8d4f6 Merge pull request #932 from derekwaynecarr/issue_923
Revert to latest salt bootstrap and force SSL
2014-08-18 10:14:23 -07:00
derekwaynecarr
967c2552e7 Revert to latest salt bootstrap and force SSL 2014-08-18 11:39:23 -04:00
Manuel Amador (Rudd-O)
7b2d0d29e4 Please set up SaltStack using SSL. MITM is a thing these days. 2014-08-18 00:10:43 -07:00
Tim Hockin
03ade159c3 Proper ip-per-pod on GCE.
Back out the second iptables rule, now that we know what the problem was - we
need to open a firewal rule on each minion.
2014-08-15 15:54:20 -07:00
Brendan Burns
0fda53ea1c Remove a print that is confusing jq in the e2e tests. 2014-08-14 16:31:52 -07:00
brendandburns
bf7f8a2297 Merge pull request #867 from derekwaynecarr/apiserver_loopback
Vagrant: apiserver doesn't bind to 127.0.0.1, inaccessible through master nginx
2014-08-14 14:35:49 -07:00
brendandburns
25352c56d9 Merge pull request #886 from brendandburns/shell_sucks
Fix kubecfg.sh
2014-08-14 14:33:43 -07:00
Joe Beda
629f964791 Fix e2e teardown 2014-08-14 13:57:50 -07:00
Daniel Smith
43e1c14e8b Merge pull request #892 from brendandburns/teardown
Add a teardown option to the e2e, that just tears down the cluster, also make gce teardown synchronous.
2014-08-14 10:11:13 -07:00
Brendan Burns
9f49650fba Add a tear down option to the e2e, that just tears down the cluster
Useful for cleaning state after failed runs.
2014-08-14 09:58:40 -07:00
derekwaynecarr
10be80295c apiserver listen on 0.0.0.0 in vagrant 2014-08-14 10:02:04 -04:00
Joe Beda
70c6c75ae3 Fix release and salt scripts for godep 2014-08-13 15:57:41 -07:00
Brendan Burns
34b240f17a Fix kubecfg.sh 2014-08-13 14:11:43 -07:00
Evan Flynn
7839033588 Remove duplicate shebang 2014-08-13 15:44:21 -04:00
Brendan Burns
5d0291ae0e Fix kubecfg.sh 2014-08-12 16:46:34 -07:00
derekwaynecarr
7db42a7b73 Fix nsinit on Vagrant 2014-08-12 16:35:01 -04:00
derekwaynecarr
ba7345d967 Do not always look for latest pkg 2014-08-12 16:10:59 -04:00
derekwaynecarr
fea7b61b81 Add local scripts, simplify kubecfg.sh 2014-08-11 13:02:52 -04:00
derekwaynecarr
c8c5435656 Enforce --address flag is set on all Linux flavors 2014-08-07 17:54:49 -05:00
Tim Hockin
7e9c142392 Remove duplicate -config param
This is duplicated in cluster/saltbase/salt/kubelet/default
cluster/saltbase/salt/kubelet/initd
2014-08-07 10:53:08 -07:00
Victor Marmol
c501e09d14 Merge pull request #820 from brendandburns/nsenter
Install nsinit that is vendored into docker.
2014-08-07 08:36:49 -07:00
Clayton Coleman
4123a44653 Merge pull request #819 from thockin/restarts
Disable docker restarts, for now
2014-08-07 10:41:56 -04:00
Brendan Burns
22586c87fe Install nsinit that is vendored into docker. 2014-08-06 22:45:18 -07:00
Tim Hockin
92f13ceb52 Disable docker restarts, for now
If the docker daemon goes down and comes up, it will try to restart
containers.  This will race with our own restart loop.  Only one loop should
be controlling restarts, probably.
2014-08-06 22:41:09 -07:00
brendandburns
71bfa4cd74 Merge pull request #810 from derekwaynecarr/less_verbose
Run go-build on each kubepush and vagrant log only states that change or error to improve readability
2014-08-06 22:41:09 -07:00
Tim Hockin
b0ffa8c8f6 Set kubelet -address flag to 0.0.0.0 via salt
Currently it binds to the eth0 IP only, this includes localhost.  The flag
default is localhost only, but we need it looser than that.
2014-08-06 18:11:35 -07:00
Amy Unruh
f9bbddf892 minor docs/error msg cleanup 2014-08-06 15:43:27 -07:00
Daniel Smith
aa3ac324bc Merge pull request #803 from brendandburns/nsenter
Install nsinit on hosts.
2014-08-06 15:12:49 -07:00
derekwaynecarr
b9dc38e617 Log only states that change or error to improve readability 2014-08-06 14:47:41 -04:00
Daniel Smith
ea47ca7aa0 Stop passing etcd_servers to controller manager 2014-08-05 17:46:39 -07:00
Brendan Burns
abb754c00d Install nsinit on hosts. 2014-08-05 15:57:39 -07:00
derekwaynecarr
d8af1da2f6 Pull golang from golang 2014-08-05 14:24:10 -04:00
Tim Hockin
4c58752684 Make container-to-container IP work across VMs. 2014-08-04 20:52:13 -07:00
brendandburns
a06d6726d4 Merge pull request #762 from jdef/master
add retries to salt bootstrap download
2014-08-04 11:55:00 -07:00
James DeFelice
2f500b3b07 add retries to salt bootstrap download 2014-08-04 14:46:52 -04:00
Tim Hockin
f9f8db5171 Fix indents 2014-08-04 11:42:33 -07:00
Filipe Brandenburger
d7396acced Remove executable permissions of files that do not need it.
In particular, .gitignore, *.go, *.sls and etcd.conf are files that
should not be marked as executable.

Tested: built it with hack/build-go.sh, called all binaries with
  the -version flag to confirm they work.

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
2014-08-01 08:22:46 -07:00
Michal Fojtik
264eebb997 Disable curl progress bar when running vagrant up 2014-08-01 15:08:17 +02:00
Victor Marmol
4de48613e7 Change cAdvisor port to 4194.
This is so it doesn't conflict with the default registry address of
5000.
2014-07-31 13:14:00 -07:00
Daniel Smith
fcbd365814 Merge pull request #678 from brendandburns/fix
Add some initial validation logic.
2014-07-29 15:22:57 -07:00
brendandburns
1ab9f6ebae Merge pull request #689 from Sarsate/salt-kubelet-dir
Set kubelet user home directory to /var/lib/kubelet
2014-07-29 15:06:30 -07:00
Danny Jones
bc11e8c57b Set kubelet user home directory to /var/lib/kubelet
The kubelet user does not have permissions to create directories in
/var/lib. This sets the home directory to /var/lib/kubelet so that the
directory is made prior to running the kubelet. This matches the
default root directory path (/var/lib/kubelet) and allows kubelet to
us that directory.
2014-07-29 14:44:01 -07:00
Michal Fojtik
18f32cf03f Allow to set global KUBERNETES_PROVIDER env var 2014-07-29 19:57:09 +02:00
Brendan Burns
21ceb380c8 Add some initial validation logic. 2014-07-29 07:51:40 -07:00
brendandburns
3d03c853d4 Merge pull request #666 from erictune/remove_etcd_proxying
Stopy proxying etcd (localhost:4001) on https:/$MASTER_IP/etcd.
2014-07-28 14:34:54 -07:00
brendandburns
fd35c28ef4 Merge pull request #667 from brendandburns/debian
Disable early error exit, since the salt script is broken for now.
2014-07-28 14:02:06 -07:00
Brendan Burns
1530da0053 Disable early error exit, since the salt script is broken for now.
See: https://github.com/saltstack/salt-bootstrap/pull/436
2014-07-28 13:32:00 -07:00
Eric Tune
10a61d05a1 Stopy proxying etcd (localhost:4001) on https:/$MASTER_IP/etcd. 2014-07-28 12:21:06 -07:00
Clayton Coleman
37e5f96074 Merge pull request #661 from csrwng/fix_salt_stack
Temporarily point to older bootstrap script
2014-07-28 15:00:05 -04:00
csrwng
d9ae72d1f0 Temporarily point to older bootstrap script
The most recent saltstack bootstrap file expects a salt-api service to
exist. The most recent Fedora salt-master rpm doesn't include this
service yet. Pointing to the previous version of the bootstrap script.
2014-07-28 12:51:01 -04:00
Albert Zhang
0375709fa3 Use 'go install' to build all commands at the same time.
'go build' compiles the packages but discards the results if multiple packages specified.
2014-07-27 22:20:13 -04:00
Daniel Smith
a6668f625b Fix kube-push.sh 2014-07-24 17:50:19 -07:00
Jonathan Boulle
c43035088b assorted formatting and typo fixes 2014-07-24 15:10:36 -07:00
derekwaynecarr
69ae2fe4bb Initial vagrant setup and e2e testing support 2014-07-24 16:32:36 -04:00
Daniel Smith
b87ae144ea Merge pull request #552 from MSOpenTech/azure-scripts
Update salt config for apiserver to support Azure.
2014-07-24 12:46:53 -07:00
Dawn Chen
eb6d0238d4 query minion's /healthz for sanity checking. Removing gcutil ssh to
VM, and check kubelet's status.
2014-07-23 17:08:24 -07:00
Victor Marmol
db38b114fe Update the cAdvisor manifest for the new volume type.
Closes #559
2014-07-23 08:38:38 -07:00
Jeff Mendoza
cc471c29f3 Add gce grain to salt config, change apiserver salt config. 2014-07-22 10:30:00 -07:00
Jeff Mendoza
6cebe4443a Update salt config for apiserver to support Azure. 2014-07-21 16:50:47 -07:00
Daniel Smith
05f01a3654 Revert "assorted formatting and typo fixes" 2014-07-18 17:16:30 -07:00
Daniel Smith
211f6b312f Merge pull request #520 from jonboulle/master
assorted formatting and typo fixes
2014-07-18 17:15:30 -07:00
Tim Hockin
7b905709d9 Merge pull request #521 from MSOpenTech/azure-scripts
Azure scripts
2014-07-18 16:43:20 -07:00
Jeff Mendoza
95ec94514b Rename and move Azure scripts. 2014-07-18 16:13:05 -07:00
Jeff Mendoza
0d618788c3 Fix kube up azure templates 2014-07-18 13:16:49 -07:00
Jeff Mendoza
b4183409ab Comment and whitespace fixes. 2014-07-18 13:11:50 -07:00
Jeff Mendoza
3ff6b0f8a6 First draft of shell scripts for deploying kube to Azure. 2014-07-18 13:11:50 -07:00
Jonathan Boulle
9e63c3a633 assorted formatting and typo fixes 2014-07-18 13:02:59 -07:00
Brendan Burns
bf0cbac7ec Add a sleep to work around apparent races with salt. 2014-07-18 12:53:43 -07:00
Brendan Burns
a9723d059a Turn off error checking prior to sanity checking. 2014-07-18 09:47:13 -07:00
Tim Hockin
e0b6222ebf Revert "Retry failed release downloads" 2014-07-16 17:22:05 -07:00
Ryan Fowler
6bef460bdf Retry failed release downloads
gsutil cp is prone to failure during initial creation of a Kubernetes
cluster. This 'until' loop will keep trying as suggested in the 'gsutil
cp' documentation.
2014-07-16 16:24:11 -05:00
Tim Hockin
02ee27c133 Merge pull request #459 from rrreeeyyy/fix-kubeup-curl-timeout
Fix: cluster/kube-up.sh curl timeout a little bit short.
2014-07-15 11:43:25 -07:00
Victor Marmol
d9962946fc Use latest cAdvisor image.
This keeps us from downloading all cAdvisor images just to use "latest".
2014-07-15 10:16:52 -07:00
YOSHIKAWA Ryota
665a4254c2 Fix: cluster/kube-up.sh curl timeout a little bit short. 2014-07-15 16:58:21 +09:00
Brendan Burns
ba5cadef59 Add some sanity checks to the kube-up script. 2014-07-11 16:12:09 -07:00
Brendan Burns
41c6680943 add http health checks. 2014-07-09 12:01:43 -07:00
Yuki Yugui Sonoda
cf9ee4d9dd Allows adding custom api scopes to service accounts available in
minions.
2014-07-09 15:02:57 +09:00
Daniel Smith
212a393404 Merge pull request #293 from brendandburns/minion
Activate cloud minion registry.
2014-07-01 12:11:22 -07:00
Daniel Smith
6473177f3b Merge pull request #324 from vmarmol/add-cadvisor
Run cAdvisor on all minions.
2014-07-01 12:00:17 -07:00
Victor Marmol
842907613b Run cAdvisor on all minions. 2014-07-01 11:36:33 -07:00
Brendan Burns
d5516e4cdc Activate gce minion list. 2014-07-01 11:33:58 -07:00
Brendan Burns
4d6a783e5f Initial add of an environment variable for the kubernetes master. 2014-07-01 10:12:38 -07:00
Brendan Burns
4eccd64e0f Remove the dependency on apache htpasswd. 2014-06-27 14:54:49 -07:00
brendandburns
60e2d4b258 Merge pull request #250 from lavalamp/fix
Make boilerplate hook work for .sh files, too.
2014-06-26 10:01:46 -07:00
Daniel Smith
c97c514742 Rename cloudcfg to kubecfg 2014-06-25 18:01:37 -07:00
Daniel Smith
260af3017b Make boilerplate hook work for .sh files, too. 2014-06-25 17:11:48 -07:00
Brendan Burns
2759b2367f Add load balancing support to services. 2014-06-17 12:37:39 -07:00
Daniel Smith
cba453d72b Fix basic test the other way. 2014-06-13 17:31:57 -07:00
Daniel Smith
5626703634 Add a new e2e test; fix some bugs/usability problems 2014-06-13 16:30:26 -07:00
Daniel Smith
d937f6f776 working on a better e2e test 2014-06-13 11:26:55 -07:00
Joe Beda
110a390c97 Switch from gcloud compute to gcutil.
We'll switch back to the future once the interface has settled down.
2014-06-12 15:43:00 -07:00
Chris Soyars
76e0391ad3 Allow the use of a network other than default 2014-06-12 15:00:48 -07:00
Joe Beda
9d50a76922 Fix up version string for gcloud compute version.
This might break again as the version that this change will land isn't stable.  I'm going to switch back to gcutil until we know we won't break again.  That will come in a future PR.
2014-06-12 11:35:46 -07:00
Daniel Norberg
c74e04efea cluster: allow providing KUBE_MASTER_IP env var
To avoid overhead of always querying gcloud.
2014-06-12 13:05:37 -04:00
Daniel Smith
88b9c7ba79 Move storage of password 2014-06-11 17:20:16 -07:00
mmdriley
d482673bcb Use a CSPRNG to generate passwords. 2014-06-10 15:58:51 -07:00
Seth House
e01adf3ec1 Switch from the deprecated bootstrap.saltstack.org to the .com redirect
As per saltstack/salt#12105
2014-06-10 13:35:03 -06:00
Joe Beda
196d0965ec Add warnings about self signed certs and MitM attacks.
Also put in pointers for IRC and mailing lists.
2014-06-09 16:46:16 -07:00
Brendan Burns
5cb4444176 Task -> Pod #4, the final chapter 2014-06-08 23:00:12 -07:00
Joe Beda
81629733e1 Handle breaking change in 'gcloud compute routes create' with version check. 2014-06-08 08:10:31 -07:00
Joe Beda
156ebe2ce2 Set 'auto restart' bit on VMs. 2014-06-08 07:31:12 -07:00
Joe Beda
c5683eb7f1 Don't use scopes we don't need when creating VMs 2014-06-08 07:30:43 -07:00
Joe Beda
2e5be7c4e5 Minimize metadata when creating startup scripts.
Strip all comments when creating the omnibus startup scripts for starting the VMs.  This reduces some noise and may prevent us from hitting the eventual limits there.
2014-06-07 07:32:28 -07:00
Joe Beda
894a7e3282 Move everything out of src and reorganize scripts.
Fixed up some scripts to be more robust.  Changed the e2e test setup to use g1-small instances.  Fixed up documentation to reflect the new script locations.  Disabled the "curl | bash" cluster launch as it hasn't been well tested and doesn't include the cloudcfg tool yet.
2014-06-06 21:41:19 -07:00