Commit Graph

78 Commits

Author SHA1 Message Date
Kubernetes Submit Queue
4c36d487f0
Merge pull request #57337 from wwwtyro/rye/wait-kube-dns
Automatic merge from submit-queue (batch tested with PRs 55751, 57337, 56406, 56864, 57347). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Wait for kubedns to be ready when collecting the cluster IP.

**What this PR does / why we need it**: Wait for kubedns to be ready when collecting the cluster IP.

**Release note**:
```release-note
Wait for kubedns to be ready when collecting the cluster IP.
```
2017-12-18 18:50:40 -08:00
Rye Terrell
23c81bb3d4 wait for kubedns to be ready 2017-12-18 09:28:03 -06:00
Kubernetes Submit Queue
3492467178
Merge pull request #57113 from wwwtyro/rye/optional-kube-dns
Automatic merge from submit-queue (batch tested with PRs 56676, 57050, 54881, 56822, 57113). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

make kube-dns addon optional

**What this PR does / why we need it**: Makes the kube-dns addon optional so that users can deploy their own DNS solution.

**Release note**:
```release-note
Makes the kube-dns addon optional so that users can deploy their own DNS solution.
```
2017-12-16 19:19:49 -08:00
Kubernetes Submit Queue
7a3fa9d58e
Merge pull request #56633 from juju-solutions/bug/restarts
Automatic merge from submit-queue (batch tested with PRs 56337, 56546, 56550, 56633, 56635). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Remove do-restart states

**What this PR does / why we need it**: Simplify juju reactive part of the master.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/448

**Special notes for your reviewer**:

**Release note**:

```NONE```
2017-12-16 01:53:52 -08:00
Rye Terrell
6559e4dede make kube-dns addon optional 2017-12-12 14:33:38 -06:00
Konstantinos Tsakalozos
0f591aeabc Fix flake8 error 2017-12-01 16:28:32 +02:00
Konstantinos Tsakalozos
85ac2dc9fa Remove do-restart states 2017-11-30 16:50:40 +02:00
Konstantinos Tsakalozos
f0ace95218 Handling the case of an upgrade from a non-rolling master with resource change 2017-11-29 09:56:42 +02:00
Konstantinos Tsakalozos
61d9848438 Improve handling of snap resources 2017-11-28 20:47:19 +02:00
Konstantinos Tsakalozos
1550df99eb The change in channels will be caught config change after the upgrade. 2017-11-28 12:24:40 +02:00
Konstantinos Tsakalozos
280b833f39 Fix master upgrade cornercases 2017-11-27 21:53:22 +02:00
Mike Wilson
c8f6eaccba Master now supports delayed upgrades. It will wait until specifically told to upgrade with an action unless the configuration option require-manual-upgrade is false. 2017-11-18 01:04:13 -05:00
George Kraft
9036d07cb8 Add extra-args configs to kubernetes-worker charm 2017-11-08 12:49:37 -06:00
George Kraft
18a42bee37 Add extra-args configs for scheduler and controller-manager 2017-11-06 15:56:43 -06:00
Konstantinos Tsakalozos
dce7a87d26 Removing flush_auth_for_departed 2017-11-03 23:24:57 +02:00
Konstantinos Tsakalozos
b134ce7621 New master takes over 2017-11-03 20:47:43 +02:00
Mike Wilson
21c8253dfe Changing the way we clear the certificate written flag to use a helper function in the tls layer. 2017-11-01 17:53:29 -04:00
Mike Wilson
b77b2b91c7 Merge branch 'master' into lb 2017-11-01 12:00:28 -04:00
Mike Wilson
b25805f01c Adding extra_sans option to load balancer to allow custom SAN entries on the certificate
Adding support for restarting nginx on the load balancer
Added better support for knowing when certificates are written. This helps the master restart the apiserver appropriately.
2017-11-01 11:56:58 -04:00
Konstantinos Tsakalozos
42702518a1 Address lint errors 2017-10-25 10:34:20 +03:00
Kubernetes Submit Queue
df9e32b219 Merge pull request #53820 from juju-solutions/feature/rbac
Automatic merge from submit-queue (batch tested with PRs 53820, 53971). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add support for RBAC support to Kubernetes via Juju

**What this PR does / why we need it**: This PR add RBAC to the Juju deployment of Kubernetes

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: 

**Special notes for your reviewer**:

**Release note**:

```Canonical Distribution of Kubernetes offers configurable RBAC 
```
2017-10-24 09:32:15 -07:00
Mike Wilson
16036c3fd4 Change config.changed to config.changed.extra_sans so we only try to update certificates when the SAN entries change 2017-10-20 10:38:26 -04:00
Mike Wilson
d0a88264d8 Fixing spacing issue 2017-10-19 19:39:09 -04:00
Mike Wilson
73e8af34af Adding config option to add additional SANs to the master's certificate.
Regenerate certificate if data on certificate changes. This includes IP address and SANs.
Restart API server after updating certificate.
2017-10-19 09:44:58 -04:00
Konstantinos Tsakalozos
9a28e9b125 Addressing review comments 2017-10-17 22:31:22 +03:00
Konstantinos Tsakalozos
95fec2dc3f Work on upgrade path 2017-10-11 17:13:19 +03:00
Konstantinos Tsakalozos
50354896b6 Fix trimmed files comming from leadership 2017-10-09 11:05:42 +03:00
Konstantinos Tsakalozos
b8a4fa6d81 Move ingress to kube-system. Rename enable-rbac to authorization-mode. 2017-10-09 11:05:42 +03:00
Konstantinos Tsakalozos
eb698629df Use the updated (RBAC enabled) cdk-addons 2017-10-09 11:04:47 +03:00
Konstantinos Tsakalozos
ca7f8973f7 RBAC work on PoC 2017-10-09 11:03:52 +03:00
Konstantinos Tsakalozos
90e15b4bea Fix oversized comment line, lint error 2017-09-25 16:33:19 +03:00
Jacek Nykis
d6f5acc41a Rebase runtime-config branch on top of master 2017-08-29 15:06:53 +01:00
Konstantinos Tsakalozos
61ed067e63 Removing push_api_data on kube-api.connected seems to be dead code 2017-08-23 17:23:24 +03:00
Rye Terrell
809a0abb31 set k8s master charm state to blocked if the services appear to be failing 2017-07-27 08:13:15 -05:00
Kubernetes Submit Queue
0af4306695 Merge pull request #49296 from juju-solutions/feature/report-failing-services
Automatic merge from submit-queue (batch tested with PRs 49420, 49296, 49299, 49371, 46514)

Update status to show failing services.

**What this PR does / why we need it**: Report on charm status any services that are not running.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/341

**Special notes for your reviewer**:

**Release note**:

```Report failing services in Juju deployed clusters.
```
2017-07-21 22:23:17 -07:00
Konstantinos Tsakalozos
53f00722e2 Do not try to restart services 2017-07-21 12:39:42 +03:00
Konstantinos Tsakalozos
685dff99ab Update status to show failing services. 2017-07-20 14:57:02 +03:00
Konstantinos Tsakalozos
d5a71eb2d1 Simplify master-worker relation missing message 2017-07-20 11:47:50 +03:00
Konstantinos Tsakalozos
280ea7f485 Set default CIDR to /16 2017-07-19 09:34:23 +03:00
Kubernetes Submit Queue
3823270b9e Merge pull request #48446 from Cynerva/gkk/stop-snaps
Automatic merge from submit-queue (batch tested with PRs 47043, 48448, 47515, 48446)

Fix charms leaving services running after remove-unit

**What this PR does / why we need it**:

This fixes a case where removed charm units can sometimes leave behind running services that interfere with the rest of the cluster.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Fix charms leaving services running after remove-unit
```
2017-07-04 09:12:57 -07:00
Kubernetes Submit Queue
e1d9ab205a Merge pull request #48440 from Cynerva/gkk/snap-upgrades-restart-services
Automatic merge from submit-queue (batch tested with PRs 48439, 48440, 48394)

Fix kubernetes charms not restarting services after snap upgrades

**What this PR does / why we need it**:

This fixes a problem where the Kubernetes charms don't restart services after upgrading snaps. This can cause certain fixes not to be picked up (for example https://github.com/juju-solutions/release/pull/10)

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Fixed kubernetes charms not restarting services after snap upgrades
```
2017-07-03 13:05:28 -07:00
George Kraft
f0e08818d8 Fix charms leaving services running after unit removal 2017-07-03 14:55:07 -05:00
George Kraft
c21b305fe9 Fix kubernetes charms not restarting services after snap upgrades 2017-07-03 09:47:08 -05:00
Konstantinos Tsakalozos
e2571a853a Non leaders should overwrite any local copies of keys they have with what the leader has. 2017-07-03 17:45:43 +03:00
Konstantinos Tsakalozos
cd34d8f80d Ensure get_password is accessing a file that exists. 2017-06-30 20:24:35 +03:00
Kubernetes Submit Queue
d19773d855 Merge pull request #47835 from juju-solutions/feature/security
Automatic merge from submit-queue (batch tested with PRs 47850, 47835, 46197, 47250, 48284)

Securing the cluster created by Juju

**What this PR does / why we need it**: This PR secures the deployments done with Juju master. Works around certain security issues inherent to kubernetes (see for example dashboard access)

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```
Securing Juju kubernetes dashboard
```
2017-06-29 15:16:39 -07:00
Konstantinos Tsakalozos
0b01cd743b Improve security of Juju deployed clusters 2017-06-27 12:19:21 +03:00
Konstantinos Tsakalozos
b3a1115796 Add a failsafe for etcd not returning a connection string 2017-06-26 13:00:17 +03:00
George Kraft
02d0830594 Fix Juju kubernetes-master idle_status never being called 2017-06-16 14:48:31 -05:00
Kubernetes Submit Queue
e72c64b7e3 Merge pull request #46987 from Cynerva/gkk/rm-initializers-before-1.7
Automatic merge from submit-queue

Remove Initializers from admission-control in kubernetes-master charm for pre-1.7

**What this PR does / why we need it**:

This fixes a problem with the kubernetes-master charm where kube-apiserver never comes up:

```
failed to initialize admission: Unknown admission plugin: Initializers
```

The Initializers plugin does not exist before Kubernetes 1.7. The charm needs to support 1.6 as well.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #47062

**Special notes for your reviewer**:

This fixes a problem introduced by https://github.com/kubernetes/kubernetes/pull/36721

**Release note**:

```release-note
Remove Initializers from admission-control in kubernetes-master charm for pre-1.7
```
2017-06-08 09:00:57 -07:00