Commit Graph

11569 Commits

Author SHA1 Message Date
Jason Sommer
d59a8ff7f8 Improve signature consistency for ValidateObjectMetaUpdate
Fixes #9340

Signed-off-by: Jason Sommer <jsdirv@gmail.com>
2015-06-08 02:56:38 -05:00
Masahiro Sano
34849b4476 add unit test for allocator 2015-06-07 15:59:51 +09:00
Justin Santa Barbara
c2caa3f1da AWS: Fix cleanup of security group
The most reliable way seems to be to deauthorize the LB security group from
other groups, then delete the LB itself, then repeatedly retry to delete the LB
security group.

We can't delete the LB security group until the LB is actually completely
deleted, but the LB is hidden from the API during deletion.  So our only real
option is to retry deletion of the LB security group until the expected error
goes away when the LB is fully deleted.
2015-06-06 23:20:34 -04:00
Mike Danese
7b7d8ccb77 print various errors which is useful when ContinueOnError is set on the Resource struct 2015-06-06 15:47:01 -07:00
Justin Santa Barbara
1700259508 AWS: Ignore the UserId when determining whether we can skip revoking a security group
Otherwise we weren't correctly de-authorizing the AWS LB SG from the Node SG
2015-06-06 12:37:01 -04:00
Justin Santa Barbara
8fafefd728 Fix doc for edge-case return from removeSecurityGroupIngress 2015-06-06 12:25:50 -04:00
Justin Santa Barbara
e32c66c6f4 Fix typo: Ingess -> Ingress 2015-06-06 12:22:50 -04:00
Jordan Liggitt
1a3d093d99 Generate tokens for new service accounts without checking secret store 2015-06-06 00:05:36 -04:00
Dawn Chen
f714020a7a Passing memory swap limit -1 by default. Docker remote API never check if memory
swap is enabled by kernel or not, instead by default to set the limit to
memory * 2, and return API error 500 if swap is not enabled.
2015-06-05 18:12:05 -07:00
CJ Cullen
9ab329827a Change sshproxy to poll registry for nodes every 10 seconds (reduces window where closed tunnels from scaling down may exist). 2015-06-05 15:24:17 -07:00
Quinton Hoole
6ff203e9da Merge pull request #9280 from caesarxuchao/make-v1-preferred
Make v1 the preferred api version
2015-06-05 15:23:14 -07:00
Mike Danese
c9bd90a5df Merge pull request #9032 from andronat/fix_7843
Decrease columns and refactor get pods layout
2015-06-05 15:06:53 -07:00
CJ Cullen
04cd9b3c75 Make sshproxy use a hostmount on master PD (don't spam sshKeys on upgrade/reboot).
Add comment describing what SSHTunnelList.Close() does.
Simplify util.FileExists.
2015-06-05 15:03:03 -07:00
Quinton Hoole
1d50e97305 Merge pull request #9333 from krousey/v1_docs
Updating docs/ to v1
2015-06-05 14:58:28 -07:00
CJ Cullen
cb317604ab Some refactoring. Only selectively use ssh proxy.
Add NetworkName to gce.Config.
Add locking to uses of master.tunnels.
2015-06-05 14:55:16 -07:00
CJ Cullen
1ae8801387 Fix transport creation logic.
Refactor loadTunnels to allow one path for load, another for refresh.
Make SSHTunnelList.Close sleep for a minute before actually closing each tunnel.
2015-06-05 14:55:16 -07:00
Brendan Burns
7ea533d871 Add the SSHTunnel transport to the kubelet client. 2015-06-05 14:55:15 -07:00
CJ Cullen
de9a5f43bc Specify sshUser, sshKeyfile in kube-apiserver manifest.
Trim space on ssh key so GCE doesn't treat it as 2 lines.
A couple other minor fixes.
2015-06-05 14:55:15 -07:00
Brendan Burns
5115fd5703 Add key generation. 2015-06-05 14:55:15 -07:00
Brendan Burns
30a89968a4 Initial proxy tunnelling. 2015-06-05 14:54:20 -07:00
Brendan Burns
631cf34d40 Add tunnelling to the proxy API handler. 2015-06-05 14:54:20 -07:00
Kris Rousey
6e83eb2636 Updating docs/ to v1 2015-06-05 14:09:49 -07:00
Prashanth Balasubramanian
50eb9ad598 Use https only for the kubelet port 2015-06-05 14:06:38 -07:00
Chao Xu
e6ffa5bf67 make the meaning of a test in get_test.go clearer 2015-06-05 13:59:30 -07:00
Anastasis Andronidis
68d9313d69 Refactor get pods layout 2015-06-05 22:28:17 +02:00
Justin Santa Barbara
48e8a8b0ec AWS: Set up security groups, to mirror GCE firewalling
Some slightly fussy code to enable load-balancers to talk to
instances, but otherwise relatively simple.
2015-06-05 16:10:08 -04:00
Justin Santa Barbara
33a3d884f2 AWS: Filter by Cluster tag, rationalize EC2 abstraction
Whenever we do a list we now filter on tags so we only see resources relating
to our cluster.

Also, rationalize all the DescribeX calls:
 * They all take a request object (so that we can pass filters)
 * They do paging if that is required (and return the underlying resources)
 * They wrap any error with a "error while listing X: %v" message
2015-06-05 16:09:01 -04:00
Prashanth Balasubramanian
99f8ddf304 Enable profiling endpoints for kubelet 2015-06-05 12:50:57 -07:00
Prashanth Balasubramanian
b678e2ff9e Nodes returns transport and scheme in spite of port requirements 2015-06-05 12:50:57 -07:00
Quinton Hoole
2c54be808e Merge pull request #9302 from brendandburns/fix
Add messages to indicate that opening an external firewall may be necessary.
2015-06-05 12:37:19 -07:00
Quinton Hoole
f048d0dff7 Merge pull request #9105 from anguslees/openstack-provider
Openstack LB improvements
2015-06-05 12:06:12 -07:00
Quinton Hoole
a715fdef95 Merge pull request #9291 from dchen1107/podstatus
Filtered out unfriendly error from docker when registry is not reachable.
2015-06-05 12:01:51 -07:00
Quinton Hoole
bc59e69ff0 Merge pull request #9159 from csrwng/remove_cors_headers
Remove CORS headers from pod proxy responses
2015-06-05 11:40:09 -07:00
Quinton Hoole
8b01ecb53a Merge pull request #9024 from markturansky/recyc_controllers
PersistentVolumeRecycler controller
2015-06-05 11:39:08 -07:00
Dawn Chen
636b40ffa1 Filtered out unfriendly error from docker when registry is not reachable(code: 502, 503, 504) 2015-06-05 11:29:35 -07:00
Quinton Hoole
988a413acf Merge pull request #9058 from deads2k/serialize-with-auth
serialize dockercfg with matching auth field
2015-06-05 11:26:14 -07:00
Quinton Hoole
8f55d9e619 Merge pull request #9317 from nikhiljindal/podnodeName
Updating StatusDetails.ID to Name in internal API
2015-06-05 11:23:09 -07:00
Quinton Hoole
b40ecc4fbc Merge pull request #9282 from markturansky/pv_index_fix
Add available volumes to binder index when not present
2015-06-05 11:06:48 -07:00
deads2k
ac2c43fc87 serialize dockercfg with matching auth field 2015-06-05 11:14:10 -04:00
nikhiljindal
7cc50448e3 Updating StatusDetails.ID to Name in internal API 2015-06-05 07:17:02 -07:00
Angus Lees
75f49b331a Ignore "unspecified" externalIP during LB create
Previously we always passed `Address: externalIP.String()` while
creating a loadbalancer VIP.  This passed "0.0.0.0" when externalIP was
unspecified, effectively making it mandatory to specify an externalIP.

This change correctly leaves `Address` unspecified when externalIP is
unspecified (has a zero value).

(Thanks to @justinsb for the report)
2015-06-05 16:27:45 +10:00
Brendan Burns
380790a8e2 Add messages to indicate that opening an external firewall may be necessary. 2015-06-04 22:31:52 -07:00
Jason Sommer
cea5aaa9d1 Show resource limits with describe
Signed-off-by: Jason Sommer <jsdirv@gmail.com>
2015-06-04 23:49:28 -05:00
Quinton Hoole
d6004a1ced Merge pull request #9279 from yifan-gu/refactor
kubelet: Minor refactors.
2015-06-04 21:47:04 -07:00
Quinton Hoole
502a8d75cc Merge pull request #9000 from jackgr/ui_build_js
Javascript only UI build cleanup
2015-06-04 21:40:03 -07:00
Chao Xu
8a4dffdcee fix 2015-06-04 17:19:41 -07:00
Chao Xu
5a54a0118d fix 2015-06-04 16:35:24 -07:00
Quinton Hoole
fc80fd6860 Merge pull request #9233 from lavalamp/no-ro-nonbreaking
Allow kubectl proxy to proxy everything
2015-06-04 16:22:07 -07:00
Yifan Gu
f197a9db4e kubelet: Minor refactors.
Remove some TODOs.
Unexport DockerManager.Puller and DockerManager.PodInfraContainerImage.
Add "docker" for all "go-dockerclient" imports.
2015-06-04 16:08:45 -07:00
markturansky
627dd86b95 Added available volumes to volumeIndex in binder when not present 2015-06-04 18:29:14 -04:00