Commit Graph

67 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
397ed0e825
Merge pull request #82314 from lzang/master
Add dns capability to GCE window cluster
2019-09-05 16:30:58 -07:00
Zang Li
2a3ab18654 Add dns capability to GCE window cluster 2019-09-04 18:45:25 -07:00
Angela Li
1d27242967 rebase 2019-09-04 15:32:25 -07:00
Angela Li
54d9f9a75b Add comment 2019-09-04 15:30:38 -07:00
Angela Li
f24749594b Adding ENABLE_STACKDRIVER_WINDOWS 2019-09-04 15:30:38 -07:00
Angela Li
53a2559e24 Install and start logging based on kube env 2019-09-04 15:30:38 -07:00
Peter Hornyack
9282e48ccc Write the Stackdriver config separately from the installation.
This will let us preinstall the Stackdriver logging agent but still
configure it correctly when bringing up new Windows nodes.

The hostname in the config file looks the same before-and-after:
  "logging.googleapis.com/local_resource_id" ${"k8s_node.e2e-test-peterhornyack-windows-node-group-6tw6"}
  "logging.googleapis.com/local_resource_id" ${"k8s_node.e2e-test-peterhornyack-windows-node-group-mf5r"}
2019-08-29 12:22:33 -07:00
Yu-Ju Hong
48cc836717 GCE/Windows: use "return" as "continue" for ForEach-Object
Using `continue` would exit the current processing scope.
https://blogs.technet.microsoft.com/msftcam/2015/03/17/powershell-gotcha-foreach-object-and-continue/
2019-08-21 15:44:40 -07:00
Peter Hornyack
3ac5c1565a Leave Windows Defender enabled for clusters on GCE 2019-08-19 16:55:00 -07:00
Kubernetes Prow Robot
2974adff27
Merge pull request #81337 from YangLu1031/master
Add instruction for "Application Default Credentials" to run e2e tests locally
2019-08-15 16:18:47 -07:00
Yang Lu
9d68d44e1f Add instruction for "Application Default Credentials" 2019-08-14 10:27:58 -07:00
draveness
495faa22db feat: cleanup pod critical pod annotations feature 2019-08-09 08:41:23 +08:00
draveness
d83526d253 Revert "feat: cleanup pod critical pod annotations feature"
This reverts commit b6d41ee5cc.
2019-07-18 13:31:12 +08:00
Kubernetes Prow Robot
5be1efe9bd
Merge pull request #79447 from almos98/start-stackdriver-workaround
Wait for StackdriverLogging service to stop before restarting it.
2019-07-12 14:11:06 -07:00
Alexion Ramos
6edbb95f53 Wait for StackdriverLogging service to stop before restarting it. 2019-07-11 17:54:38 -07:00
draveness
b6d41ee5cc feat: cleanup pod critical pod annotations feature 2019-07-11 08:54:19 +08:00
Vallery Lancey
dc0f14312e Removed deprecated --resource-container flag from kube-proxy. 2019-06-16 08:36:42 -07:00
Yu-Ju Hong
b300267a57 Add more approvers/reviewers to cluster/gce/windows 2019-06-04 11:42:55 -07:00
Yu-Ju Hong
4a7be385a1 Update README for GCE/Windows
Add instructions to create e2e clusters without building binaries
locally. Also update the instructions to build the binaries locally.
2019-06-03 11:17:50 -07:00
Kubernetes Prow Robot
b82d7cabf4
Merge pull request #78552 from mtaufen/use-auth-header
Windows startup scripts should use Authorization header for GCS requests
2019-06-01 12:12:41 -07:00
Michael Taufen
e2116ef572 Windows startup scripts should use Authorization header for GCS requests
Requests against private buckets will fail unless the VM has storage
scope and the default service account token is provided in the request
header.

This PR replicates the following Linux changes for Windows:
- https://github.com/kubernetes/kubernetes/pull/74142
- https://github.com/kubernetes/kubernetes/pull/75269
2019-05-30 16:55:55 -07:00
Peter Hornyack
d47dd75df8 GCE Windows nodes: leave firewall enabled. 2019-05-29 18:08:52 -07:00
Yu-Ju Hong
3b58a5d89f GCE: Disable the Windows defender
This is a workaround for https://github.com/kubernetes/kubernetes/issues/75148
2019-05-23 17:51:32 -07:00
Kubernetes Prow Robot
3ba4111abe
Merge pull request #77958 from pjh/pause-image-official
Windows GCE nodes: pull infra/pause container image during node setup
2019-05-17 05:38:45 -07:00
Kubernetes Prow Robot
c48c3f400b
Merge pull request #77954 from pjh/cni-release-v0.8.0
Windows GCE nodes: use CNI plugins v0.8.0 release.
2019-05-17 02:04:45 -07:00
Peter Hornyack
5c32b4bbb2 Windows GCE nodes: pull infra/pause container image during node setup 2019-05-16 11:45:56 -07:00
Yu-Ju Hong
abed7cc0a9 GCE/Windows: add instructions about stackdriver logging in README
Setting LOGGING_STACKDRIVER_RESOURCE_TYPES ensures that the both Linux
and Windows nodes send logs to the same resources with the same tags.
2019-05-15 11:59:37 -07:00
Peter Hornyack
5d669f2946 Use CNI plugins v0.8.0 release. 2019-05-15 10:59:46 -07:00
Yu-Ju Hong
eadacaf058 GCE/Windows: ignore stopping errors for stackdriver 2019-05-07 17:17:34 -07:00
Yu-Ju Hong
9f65407833 GCE/Windows: send container logs to the proper resource
This PR fixes a bug where all container logs are sent to the "k8s_node"
resource by adding a "match" directive that applies only to container
logs.
2019-05-03 11:32:19 -07:00
Yu-Ju Hong
bee570a2f0 GCE/Windows: force kill the stackdriver processes when necessary
StackdriverLogging service sometimes cannot be stopped properly. This
work around the bug by force killing the processes.
2019-05-02 18:52:31 -07:00
Yu-Ju Hong
6e12de0744 GCE/Windows: Configure Docker to rotate container logs 2019-04-23 11:53:16 -07:00
Yu-Ju Hong
4cd2625719 GCE/Windows: enable stackdriver logging agent
This change bumps the stackdriver logging agent version to v1-9,
re-enable it, and change the script/configuration to:
  * Create /var/log in the startup script, since the fluentd
    configuration expects the directory to exists
  * Add support for collecting kubelet/kube-proxy logs
2019-04-19 15:41:48 -07:00
Yu-Ju Hong
05074e9dde GCE/Windows: add cluster-location to instance metadata
This will be used by stackdriver to annotate the logs.
2019-04-19 15:41:48 -07:00
Yu-Ju Hong
2a37067735 GCE/Windows: disable stackdriver logging agent
The logging service could not be stopped at times, causing node startup
failures. Disable it until the issue is fixed.
2019-04-03 10:34:36 -07:00
Peter Hornyack
1814b0c495 Disable GCE agent address management on Windows nodes.
With this metadata key set, "GCEWindowsAgent: GCE address manager
status: disabled" will appear in the VM's serial port output during
boot.

Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBE_GCE_ENABLE_IP_ALIASES=true NUM_WINDOWS_NODES=2 NUM_NODES=2 KUBERNETES_NODE_PLATFORM=windows go run ./hack/e2e.go -- --up
cluster/gce/windows/smoke-test.sh

cat > iis.yaml <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: iis
  labels:
    app: iis
spec:
  containers:
  - image: mcr.microsoft.com/windows/servercore/iis
    imagePullPolicy: IfNotPresent
    name: iis-server
    ports:
    - containerPort: 80
      protocol: TCP
  nodeSelector:
    beta.kubernetes.io/os: windows
  tolerations:
  - effect: NoSchedule
    key: node.kubernetes.io/os
    operator: Equal
    value: windows1809
EOF

kubectl create -f iis.yaml
kubectl expose pod iis --type=LoadBalancer --name=iis
kubectl get services
curl http://<service external IP address>
2019-03-28 17:28:18 -07:00
Peter Hornyack
0fbb246c30 Update GCE Windows README steps for running e2e tests. 2019-03-08 13:47:41 -08:00
Kubernetes Prow Robot
cf439192fb
Merge pull request #75139 from mtaufen/windows-kube-proxy-args
Windows kubeproxy flags cleanup
2019-03-08 00:53:28 -08:00
Michael Taufen
0d59d2a43e Windows kubeproxy flags cleanup
- Pass most of the flags via kube-env, similar to Kubelet, to make it
  easier to reconfigure.
- Use kube-proxy's kubeconfig file to pass the API server address,
  rather than the --master flag.
- Make KUBEPROXY_ARGS a required variable in Windows kube-env, similar
  to KUBELET_ARGS.
2019-03-07 14:45:34 -08:00
Michael Taufen
0a21d644f5 Rotate windows logs 2019-03-07 10:42:31 -08:00
Kubernetes Prow Robot
57da888ff4
Merge pull request #75055 from pjh/gce-windows-disable-defender-again
Disable Windows Defender in Windows nodes on GCE again.
2019-03-07 01:07:26 -08:00
Kubernetes Prow Robot
a60d44848f
Merge pull request #74748 from pjh/gce-windows-stackdriver
Install Stackdriver agent in Windows nodes on GCE.
2019-03-06 17:59:39 -08:00
Peter Hornyack
80c635880d Disable Windows Defender in Windows nodes on GCE again.
This reverts commit fbf4fe4714. Windows
Defender seems to be causing our Windows nodes to crash and reboot
during e2e tests, e.g.
https://gcsweb.k8s.io/gcs/kubernetes-jenkins/logs/ci-kubernetes-e2e-windows-gce/228/artifacts/e2e-228-36623-windows-node-group-q4.
2019-03-06 11:42:03 -08:00
Kubernetes Prow Robot
5a89793f8e
Merge pull request #74612 from jingxu97/windows
Add GcePD windows support
2019-03-05 21:42:22 -08:00
Peter Hornyack
197513141e Install Stackdriver agent in Windows test clusters. 2019-03-05 15:14:07 -08:00
Kubernetes Prow Robot
365c504e2b
Merge pull request #74928 from pjh/gce-windows-reenable-defender
Don't disable Windows Defender.
2019-03-05 11:10:25 -08:00
Peter Hornyack
fbf4fe4714 Don't disable Windows Defender. 2019-03-04 16:34:21 -08:00
Kubernetes Prow Robot
e001276b1d
Merge pull request #74836 from yujuhong/update-win-cni-config
GCE/Windows: exclude gateways from the IPAM subnet
2019-03-01 20:35:03 -08:00
Yu-Ju Hong
1f86bce95e GCE/Windows: exclude gateways from the IPAM subnet
Exclude IPs assigned for gateways in the IPAM configuration.
2019-03-01 16:35:26 -08:00
Kubernetes Prow Robot
b8e05af7bf
Merge pull request #74736 from mtaufen/windows-kube-proxy-config
Stop setting --hostname-override on Windows kube-proxy and allow args  to be extended remotely if necessary
2019-03-01 16:12:23 -08:00