Commit Graph

838 Commits

Author SHA1 Message Date
Maciej Borsz
9da7db76b7 Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers." 2019-05-15 08:31:19 +02:00
Jake Sanders
2576713a40 when disabled, don't create the API server's insecure port mapping 2019-05-09 11:50:59 -07:00
Kubernetes Prow Robot
0befec7fb6 Merge pull request #77447 from dekkagaijin/mip
disable the apiserver's insecure port by default
2019-05-07 22:14:32 -07:00
Kubernetes Prow Robot
b34d7ac0ce Merge pull request #77458 from grayluck/agent-v2.3.0
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
2019-05-07 17:52:58 -07:00
yankaiz
1059a71973 Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
Added the non-masq ranges to configure-helper.sh so that GCE clusters
will have the non-masq IP ranges aligned with GKE clusters.
2019-05-06 22:32:34 -07:00
Jake Sanders
e4d521e825 disable the apiserver insecure port by default in configure-helper 2019-05-06 19:26:57 -07:00
Jake Sanders
ff4c372eaa ensure that kubectl works when the master insecure port is disabled 2019-05-06 19:25:41 -07:00
Yuwen Ma
b8a8bdb127 [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-05-06 08:04:06 -07:00
Mark Wolters
1456979e93 Added function to create kubeconfig for addon-manager 2019-05-03 15:12:16 -07:00
Kubernetes Prow Robot
0b10d1b830 Merge pull request #77140 from dekkagaijin/glbc
use static token to authenticate glbc
2019-05-02 16:22:30 -07:00
Jake Sanders
8bd0b45eae use static token to authenticate glbc 2019-05-01 22:24:48 -07:00
Ling Huang
d3fb7115ab Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8. 2019-04-29 15:07:10 -04:00
Wojciech Tyczynski
0d77f62c02 Revert "override ETCD_SERVER with https instead http when mTLS is enabled" 2019-04-27 06:50:20 +02:00
Jake Sanders
42fcd5eb63 remove erroneous kube-apiserver.manifest sed line 2019-04-19 17:40:28 +00:00
Jake Sanders
113ab741e6 add option to set the value of the apiserver's insecure port 2019-04-18 20:35:08 +00:00
Kubernetes Prow Robot
dc2c9e8bd5 Merge pull request #74690 from wenjiaswe/etcdserverhttp
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-15 16:45:07 -07:00
Wenjia Zhang
80c4bccf0f override ETCD_SERVER with https instead http when mTLS is enabled 2019-04-14 22:11:37 -07:00
Kubernetes Prow Robot
39073f0b9f Merge pull request #74268 from wenjiaswe/fixingNitforetcdapiservertlspath
fix nit for etcd_apiserver TLS path
2019-04-11 01:22:11 -07:00
Maciej Borsz
a0b51681c4 Revert "[Distroless] Convert the GCE manifests for master containers." 2019-04-05 12:55:14 +02:00
Kubernetes Prow Robot
1c105e1629 Merge pull request #75624 from yuwenma/gce-manifest
[Distroless] Convert the GCE manifests for master containers.
2019-04-04 16:21:19 -07:00
Yuwen Ma
af2659527f [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-04-04 11:16:23 -07:00
Michelle Au
d2aa8178f2 Remove alpha CRD install 2019-04-02 10:59:11 -07:00
Kubernetes Prow Robot
a213886f9c Merge pull request #74502 from Random-Liu/collect-pod-log
Collect pod log in fluentd-gcp
2019-03-12 01:34:37 -07:00
Lantao Liu
7ffa7da112 Configure logrotate for pod logs. 2019-03-08 16:45:41 -08:00
Tim Allclair
63f61a6714 Migrate RuntimeClass to internal API 2019-03-07 11:07:54 -08:00
Kubernetes Prow Robot
ab7a48d796 Merge pull request #70036 from pbarker/audit-etoe
dynamic audit e2e test
2019-03-06 17:58:58 -08:00
Kubernetes Prow Robot
45e5f6053b Merge pull request #74424 from liggitt/drop-k8s-io-node-labels
Clean up self-set node labels
2019-03-06 08:24:26 -08:00
Patrick Barker
67a245ae61 remove unneeded println 2019-03-05 14:38:58 -07:00
Patrick Barker
45d715cdc6 adds dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Zhen Wang
efa96f7eb8 allows configuring NPD release and flags on GCI and add cluster e2e test 2019-02-26 21:21:54 -08:00
Jordan Liggitt
e1db43ad1b Label old nodes with legacy addon labels 2019-02-26 11:43:10 -05:00
Wenjia Zhang
b9af5b5112 fix nit for etcd_apiserver TLS path 2019-02-19 11:19:49 -08:00
wojtekt
d911ebbc3f Correlate max-inflight values in GCE with master VM sizes 2019-01-24 15:13:36 +01:00
Wenjia Zhang
c17233c41c add mTLS encription between etcd and kube-apiserver in GCE 2019-01-07 13:52:20 -08:00
Kubernetes Prow Robot
cf813b247d Merge pull request #71977 from rramkumar1/kube-dns-ordering
DNS service ordering for addon manager
2018-12-18 01:47:49 -08:00
wojtekt
fc346b2086 Allow for configuring etcd servers addresses in kubemark 2018-12-13 11:50:49 +01:00
Rohit Ramkumar
bc44940835 Modify dns addons dir to prepend 0 on dir name. Ensures proper ordering upon creation by addon manager 2018-12-12 13:15:08 -08:00
Zhen Wang
29de74375a Use Node-Problem-Detector v0.6.0 2018-11-28 11:44:36 -08:00
k8s-ci-robot
396271cf52 Merge pull request #70954 from qingling128/master
Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2.
2018-11-25 23:09:07 -08:00
k8s-ci-robot
2b0212de9c Merge pull request #71206 from stlaz/enc_config_opt
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
2018-11-21 11:30:12 -08:00
Sergei Orlov
21c1bb8830 kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'.
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-19 16:34:09 +01:00
Lantao Liu
1670b4089a Make fluentd container runtime service configurable. 2018-11-16 02:17:55 -08:00
k8s-ci-robot
79dab474c0 Merge pull request #70555 from prameshj/nodelocaldnscache
Support running a nodelocal dns cache
2018-11-14 00:18:56 -08:00
Pavithra Ramesh
6d7c5e90ed Removed .salt template , using .sed template
Removed default config options from yaml.
Removed unused yaml files
2018-11-13 18:33:34 -08:00
Pavithra Ramesh
73b548db06 Support running a nodelocal dns cache
This change includes the yaml files and gce startup script changes
to run this addon. It is disabled by default, can be enabled by setting
KUBE_ENABLE_NODELOCAL_DNS=true
An ip address is required for the cache instance to listen for
requests on, default is a link local ip address of value 169.254.25.10

addressed review comments, updated image location
Picked a different prometheus port so stats port is not same as the
coredns deployment

Removed the nodelocaldns-ready label.
Set memory limit to 30Mi
2018-11-12 14:54:20 -08:00
Mike Danese
f3611a6264 always enable TokenRequest in GCE kube-up.sh 2018-11-12 11:24:52 -08:00
Ling Huang
02b7ed3291 Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2. 2018-11-12 13:21:44 -05:00
saad-ali
4a4176db42 Fix CSI CRD installation for Alpha clusters 2018-11-07 19:46:54 -08:00
k8s-ci-robot
9844baa2ff Merge pull request #70696 from loburm/remove_cluster_autoscaler_spam
Filter out spammy audit logs from cluster autoscaler.
2018-11-07 12:53:19 -08:00
saad-ali
a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00