Commit Graph

13639 Commits

Author SHA1 Message Date
krousey
afb9a7e362 Merge pull request #9373 from justinsb/aws_lb_cleanup
Make deletion of an AWS load balancer clean
2015-06-08 16:49:21 -07:00
Daniel Smith
aa9bdcbc4a add missing endpoints field label conversion function 2015-06-08 16:23:21 -07:00
krousey
ab4c725975 Merge pull request #9328 from liggitt/token_controller_process_new
Generate tokens for service accounts with no secrets
2015-06-08 15:15:44 -07:00
Jason Sommer
aa892b7143 Replace meta with new 2015-06-08 17:06:56 -05:00
Justin Santa Barbara
6f3879e3bb Actually pass down ServiceNodePortRange so it is used
Also fix default range to match what we've documented (off-by-one)

Fix #9318
2015-06-08 18:03:42 -04:00
krousey
5aa0219ada Merge pull request #9292 from cjcullen/test_pull_8946
Add an ssh tunnel option to the /proxy endpoint
2015-06-08 14:30:12 -07:00
Brendan Burns
4546cbbb56 Revert "Cut release 0.18.2 with the fix for Docker + memory limits" 2015-06-08 13:49:48 -07:00
Brendan Burns
cfcc6553a5 Merge pull request #9426 from brendandburns/release-0.18
Cut release 0.18.2 with the fix for Docker + memory limits
2015-06-08 13:40:07 -07:00
Brendan Burns
56134d57e4 Kubernetes version v0.18.2-dev 2015-06-08 13:08:53 -07:00
Brendan Burns
1f12b89387 Kubernetes version v0.18.2 2015-06-08 13:08:10 -07:00
Dawn Chen
a90d47da60 Passing memory swap limit -1 by default. Docker remote API never check if memory
swap is enabled by kernel or not, instead by default to set the limit to
memory * 2, and return API error 500 if swap is not enabled.

(cherry picked from commit f714020a7a)
2015-06-08 13:06:32 -07:00
Tomás Senart
2a3ffe4038 kubelet: Use assert.EqualValues instead of assert.Equal
The last update to github.com/stretchr/testify makes `assert.Equal`
consider the type of its arguments. This commit makes this test pass
again by only testing for value equality using `assert.EqualValues`.
2015-06-08 22:01:48 +02:00
Mike Danese
627b2f9a24 kubectl should use UnstructuredJSONScheme to decode version and kind, as it throws errors if either are missing] 2015-06-08 11:51:37 -07:00
krousey
8ce921ed33 Merge pull request #9357 from mikedanese/kubectl-kind-err
improve kubectl error message when an object with no kind is passed to the resource builder
2015-06-08 11:34:43 -07:00
CJ Cullen
be0d24824d Add a RateLimiter for the gce altTokenSource. 2015-06-08 11:16:52 -07:00
BC Broussard
4efa564c7b Update web ui to v1 api 2015-06-08 10:49:29 -07:00
krousey
66d2e1cb92 Merge pull request #9358 from dchen1107/podstatus
Passing memory swap limit -1 by default. Docker remote API never chec…
2015-06-08 10:19:28 -07:00
krousey
49a6b629f8 Merge pull request #9171 from jdef/parse_prefix_from_server
parse apiserver prefix from client config host spec
2015-06-08 10:17:41 -07:00
krousey
a7edbedcb9 Merge pull request #9262 from bprashanth/minion_proxy
Apiserver can proxy to nodes
2015-06-08 10:17:06 -07:00
Anastasis Andronidis
bf87f0ec68 Print multiple validation errors 2015-06-08 14:06:20 +02:00
Jason Sommer
d59a8ff7f8 Improve signature consistency for ValidateObjectMetaUpdate
Fixes #9340

Signed-off-by: Jason Sommer <jsdirv@gmail.com>
2015-06-08 02:56:38 -05:00
Masahiro Sano
34849b4476 add unit test for allocator 2015-06-07 15:59:51 +09:00
Justin Santa Barbara
c2caa3f1da AWS: Fix cleanup of security group
The most reliable way seems to be to deauthorize the LB security group from
other groups, then delete the LB itself, then repeatedly retry to delete the LB
security group.

We can't delete the LB security group until the LB is actually completely
deleted, but the LB is hidden from the API during deletion.  So our only real
option is to retry deletion of the LB security group until the expected error
goes away when the LB is fully deleted.
2015-06-06 23:20:34 -04:00
Mike Danese
7b7d8ccb77 print various errors which is useful when ContinueOnError is set on the Resource struct 2015-06-06 15:47:01 -07:00
Justin Santa Barbara
1700259508 AWS: Ignore the UserId when determining whether we can skip revoking a security group
Otherwise we weren't correctly de-authorizing the AWS LB SG from the Node SG
2015-06-06 12:37:01 -04:00
Justin Santa Barbara
8fafefd728 Fix doc for edge-case return from removeSecurityGroupIngress 2015-06-06 12:25:50 -04:00
Justin Santa Barbara
e32c66c6f4 Fix typo: Ingess -> Ingress 2015-06-06 12:22:50 -04:00
Jordan Liggitt
1a3d093d99 Generate tokens for new service accounts without checking secret store 2015-06-06 00:05:36 -04:00
Dawn Chen
f714020a7a Passing memory swap limit -1 by default. Docker remote API never check if memory
swap is enabled by kernel or not, instead by default to set the limit to
memory * 2, and return API error 500 if swap is not enabled.
2015-06-05 18:12:05 -07:00
CJ Cullen
9ab329827a Change sshproxy to poll registry for nodes every 10 seconds (reduces window where closed tunnels from scaling down may exist). 2015-06-05 15:24:17 -07:00
Quinton Hoole
6ff203e9da Merge pull request #9280 from caesarxuchao/make-v1-preferred
Make v1 the preferred api version
2015-06-05 15:23:14 -07:00
Mike Danese
c9bd90a5df Merge pull request #9032 from andronat/fix_7843
Decrease columns and refactor get pods layout
2015-06-05 15:06:53 -07:00
CJ Cullen
04cd9b3c75 Make sshproxy use a hostmount on master PD (don't spam sshKeys on upgrade/reboot).
Add comment describing what SSHTunnelList.Close() does.
Simplify util.FileExists.
2015-06-05 15:03:03 -07:00
Quinton Hoole
1d50e97305 Merge pull request #9333 from krousey/v1_docs
Updating docs/ to v1
2015-06-05 14:58:28 -07:00
CJ Cullen
cb317604ab Some refactoring. Only selectively use ssh proxy.
Add NetworkName to gce.Config.
Add locking to uses of master.tunnels.
2015-06-05 14:55:16 -07:00
CJ Cullen
1ae8801387 Fix transport creation logic.
Refactor loadTunnels to allow one path for load, another for refresh.
Make SSHTunnelList.Close sleep for a minute before actually closing each tunnel.
2015-06-05 14:55:16 -07:00
Brendan Burns
7ea533d871 Add the SSHTunnel transport to the kubelet client. 2015-06-05 14:55:15 -07:00
CJ Cullen
de9a5f43bc Specify sshUser, sshKeyfile in kube-apiserver manifest.
Trim space on ssh key so GCE doesn't treat it as 2 lines.
A couple other minor fixes.
2015-06-05 14:55:15 -07:00
Brendan Burns
5115fd5703 Add key generation. 2015-06-05 14:55:15 -07:00
Brendan Burns
30a89968a4 Initial proxy tunnelling. 2015-06-05 14:54:20 -07:00
Brendan Burns
631cf34d40 Add tunnelling to the proxy API handler. 2015-06-05 14:54:20 -07:00
Kris Rousey
6e83eb2636 Updating docs/ to v1 2015-06-05 14:09:49 -07:00
Prashanth Balasubramanian
50eb9ad598 Use https only for the kubelet port 2015-06-05 14:06:38 -07:00
Chao Xu
e6ffa5bf67 make the meaning of a test in get_test.go clearer 2015-06-05 13:59:30 -07:00
Anastasis Andronidis
68d9313d69 Refactor get pods layout 2015-06-05 22:28:17 +02:00
Justin Santa Barbara
48e8a8b0ec AWS: Set up security groups, to mirror GCE firewalling
Some slightly fussy code to enable load-balancers to talk to
instances, but otherwise relatively simple.
2015-06-05 16:10:08 -04:00
Justin Santa Barbara
33a3d884f2 AWS: Filter by Cluster tag, rationalize EC2 abstraction
Whenever we do a list we now filter on tags so we only see resources relating
to our cluster.

Also, rationalize all the DescribeX calls:
 * They all take a request object (so that we can pass filters)
 * They do paging if that is required (and return the underlying resources)
 * They wrap any error with a "error while listing X: %v" message
2015-06-05 16:09:01 -04:00
Prashanth Balasubramanian
99f8ddf304 Enable profiling endpoints for kubelet 2015-06-05 12:50:57 -07:00
Prashanth Balasubramanian
b678e2ff9e Nodes returns transport and scheme in spite of port requirements 2015-06-05 12:50:57 -07:00
Quinton Hoole
2c54be808e Merge pull request #9302 from brendandburns/fix
Add messages to indicate that opening an external firewall may be necessary.
2015-06-05 12:37:19 -07:00