Peter Hornyack
cff9751112
Update GCE Windows startup scripts for TPM-based authentication
...
"Shielded" nodes have a virtual TPM attached which is used for
generating the client certificate, instead of using a bootstrap
kubeconfig. Determining which to use happens during node startup based
on the instance metadata.
2019-12-04 13:57:59 -08:00
Lantao Liu
e66f4ca537
Add containerd windows support on GCE for test.
2019-11-27 11:48:58 -08:00
Barni S
b14612e346
Move stackdriver startup block after HNS stabilizes. Stackdriver is not functional if metadata-server doesnt respond. At this stage of the init script, metadata server is available
2019-11-08 17:28:12 -05:00
Yu Liao
6ca8bd4103
moved Pull-InfraContainer to the last
2019-10-29 16:00:39 -07:00
Kubernetes Prow Robot
397ed0e825
Merge pull request #82314 from lzang/master
...
Add dns capability to GCE window cluster
2019-09-05 16:30:58 -07:00
Zang Li
2a3ab18654
Add dns capability to GCE window cluster
2019-09-04 18:45:25 -07:00
Angela Li
1d27242967
rebase
2019-09-04 15:32:25 -07:00
Angela Li
54d9f9a75b
Add comment
2019-09-04 15:30:38 -07:00
Angela Li
f24749594b
Adding ENABLE_STACKDRIVER_WINDOWS
2019-09-04 15:30:38 -07:00
Angela Li
53a2559e24
Install and start logging based on kube env
2019-09-04 15:30:38 -07:00
Peter Hornyack
9282e48ccc
Write the Stackdriver config separately from the installation.
...
This will let us preinstall the Stackdriver logging agent but still
configure it correctly when bringing up new Windows nodes.
The hostname in the config file looks the same before-and-after:
"logging.googleapis.com/local_resource_id" ${"k8s_node.e2e-test-peterhornyack-windows-node-group-6tw6"}
"logging.googleapis.com/local_resource_id" ${"k8s_node.e2e-test-peterhornyack-windows-node-group-mf5r"}
2019-08-29 12:22:33 -07:00
Peter Hornyack
3ac5c1565a
Leave Windows Defender enabled for clusters on GCE
2019-08-19 16:55:00 -07:00
Peter Hornyack
5c32b4bbb2
Windows GCE nodes: pull infra/pause container image during node setup
2019-05-16 11:45:56 -07:00
Yu-Ju Hong
6e12de0744
GCE/Windows: Configure Docker to rotate container logs
2019-04-23 11:53:16 -07:00
Yu-Ju Hong
4cd2625719
GCE/Windows: enable stackdriver logging agent
...
This change bumps the stackdriver logging agent version to v1-9,
re-enable it, and change the script/configuration to:
* Create /var/log in the startup script, since the fluentd
configuration expects the directory to exists
* Add support for collecting kubelet/kube-proxy logs
2019-04-19 15:41:48 -07:00
Yu-Ju Hong
2a37067735
GCE/Windows: disable stackdriver logging agent
...
The logging service could not be stopped at times, causing node startup
failures. Disable it until the issue is fixed.
2019-04-03 10:34:36 -07:00
Michael Taufen
0a21d644f5
Rotate windows logs
2019-03-07 10:42:31 -08:00
Kubernetes Prow Robot
57da888ff4
Merge pull request #75055 from pjh/gce-windows-disable-defender-again
...
Disable Windows Defender in Windows nodes on GCE again.
2019-03-07 01:07:26 -08:00
Kubernetes Prow Robot
a60d44848f
Merge pull request #74748 from pjh/gce-windows-stackdriver
...
Install Stackdriver agent in Windows nodes on GCE.
2019-03-06 17:59:39 -08:00
Peter Hornyack
80c635880d
Disable Windows Defender in Windows nodes on GCE again.
...
This reverts commit fbf4fe4714
. Windows
Defender seems to be causing our Windows nodes to crash and reboot
during e2e tests, e.g.
https://gcsweb.k8s.io/gcs/kubernetes-jenkins/logs/ci-kubernetes-e2e-windows-gce/228/artifacts/e2e-228-36623-windows-node-group-q4 .
2019-03-06 11:42:03 -08:00
Kubernetes Prow Robot
5a89793f8e
Merge pull request #74612 from jingxu97/windows
...
Add GcePD windows support
2019-03-05 21:42:22 -08:00
Peter Hornyack
197513141e
Install Stackdriver agent in Windows test clusters.
2019-03-05 15:14:07 -08:00
Peter Hornyack
fbf4fe4714
Don't disable Windows Defender.
2019-03-04 16:34:21 -08:00
Kubernetes Prow Robot
98c0d15f98
Merge pull request #74762 from pjh/gce-windows-dump-versions
...
Dump Windows version information during cluster bringup.
2019-03-01 01:08:36 -08:00
Peter Hornyack
18a2a98d67
Dump Windows version information during cluster bringup.
2019-02-28 17:22:49 -08:00
Peter Hornyack
43556be50e
Enhance metadata fetching functions.
...
Introduce Get-InstanceMetadata which can be used to fetch
non-"attribute" metadata values.
2019-02-28 17:18:34 -08:00
Kubernetes Prow Robot
4741785d29
Merge pull request #73650 from mtaufen/windows-upload-scripts
...
upload Windows startup scripts to GCS for CI
2019-02-28 11:51:25 -08:00
Jing Xu
5e04d200ee
Add GcePD windows support
...
This PR adds the support for GCEPD volume. For now, it uses a workaround
(https://github.com/pjh/gce-tools ) to get disk number in windows for a given GCE PD name.
2019-02-27 17:00:32 -08:00
Michael Taufen
98edbf41bc
upload Windows startup scripts to GCS for CI
2019-02-25 16:44:57 -08:00
Yu-Ju Hong
b863655faa
GCE: switch to using e2eteam/pause:3.1 for pause containers
...
Stop building pause images on node startup.
2019-02-25 14:36:49 -08:00
Kubernetes Prow Robot
2aacb77374
Merge pull request #74444 from pjh/gce-windows-no-defender
...
Disable Windows Defender on Windows nodes.
2019-02-25 13:54:42 -08:00
Peter Hornyack
621df2cddb
Disable Windows Defender on Windows test nodes.
2019-02-22 18:35:38 -08:00
Kubernetes Prow Robot
46d7e9c784
Merge pull request #74381 from yujuhong/add-key
...
GCE: add EventLog registry key for docker
2019-02-22 17:58:44 -08:00
Yu-Ju Hong
40d0ae311c
GCE: add EventLog registry key for docker
2019-02-21 17:47:32 -08:00
Peter Hornyack
57ca6f007e
Enable OpenSSH on Windows nodes in test clusters.
...
Also switches to the most recent 64-bit version of OpenSSH for Windows.
Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBERNETES_SKIP_CONFIRM=y NUM_NODES=2 \
NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true TEST_CLUSTER=true \
./cluster/kube-up.sh
2019-02-21 14:03:43 -08:00
Peter Hornyack
6d78f2b666
Default to Windows Server version 1809 for Windows nodes.
...
Removes all references to 1803, including moving "win1803" directory to
just "windows". A single Windows directory suffices for now, if
necessary in the future we can shard it into directories for each
Windows version.
We've been running tests with Windows 1809 nodes for a couple days in
our fork without major problems:
https://testgrid.k8s.io/google-windows#windows-prototype&width=20 .
Testing on Azure is already using 1809:
https://testgrid.k8s.io/sig-windows#Conformance%20acs-engine%20on%20Azure&width=20 .
2019-02-21 09:44:44 -08:00