Zhen Wang
8f40368fb6
Clean up node-problem-detector configuration for GCI
2019-06-13 21:43:05 -07:00
Kubernetes Prow Robot
88da568586
Merge pull request #78406 from losipiuk/lo/split-args-ca
...
Split CA paramters on manifest template expansions
2019-05-30 00:32:46 -07:00
Kubernetes Prow Robot
f4945a81e2
Merge pull request #78314 from Random-Liu/set-containerd-oom-score
...
Set containerd oom score adj to -999.
2019-05-29 07:59:16 -07:00
Łukasz Osipiuk
dda5e49cac
Split CA parameters on manifest template expansion
...
Split arguments to be passed to cluster autoscaler binary,
so each argument is passed separately.
This is preparatory work for migrating CA to disroless base image
and passing multiple arguments together does not work if CA is
not wrapped around with shell script
Change-Id: I26b5a764d2a12079c7f4ed6633ccabf8d623e232
2019-05-29 15:20:34 +02:00
Jake Sanders
5a9af2e0ef
specify additional static auth for components by env var
2019-05-24 12:16:40 -07:00
Lantao Liu
f6aa22e9e3
Set containerd oom score adj to -999.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-24 10:36:54 -07:00
Matt Matejczyk
6ced6491c6
Change etcd's --listen-client-urls to 0.0.0.0 in tests
...
This is to allow scraping etcd metrics in scalability tests.
Ref. https://github.com/kubernetes/perf-tests/issues/522
2019-05-23 15:11:22 +02:00
Kubernetes Prow Robot
0203192970
Merge pull request #78044 from dekkagaijin/patch-6
...
Consolidate logic to ensure kubectl auth
2019-05-17 23:21:37 -07:00
Kubernetes Prow Robot
72f6954614
Merge pull request #77889 from Random-Liu/support-using-containerd-in-cos
...
Support using docker containerd in COS and Ubuntu on GCE.
2019-05-17 20:26:59 -07:00
Kubernetes Prow Robot
47304fbaee
Merge pull request #78039 from mikedanese/execmaster
...
allow exec auth plugin to be pulled on the master
2019-05-17 18:57:30 -07:00
Jake Sanders
9bc3c2af00
Consolidate logic to ensure kubectl auth
2019-05-17 11:32:09 -07:00
Kubernetes Prow Robot
314264aeaf
Merge pull request #78010 from mikedanese/fixdns
...
cluster/gce: fix line 2414: DNS_MEMORY_LIMIT: unbound variable
2019-05-17 10:12:59 -07:00
Kubernetes Prow Robot
20d6b2ff11
Merge pull request #78008 from mikedanese/fixunset
...
cluster/gce: fix unset variable when insecure port is enabled
2019-05-17 10:12:46 -07:00
Mike Danese
5d7aeca63f
cluster/gce: allow exec auth plugin to be pulled on the master
2019-05-17 08:32:34 -07:00
Kubernetes Prow Robot
af692da080
Merge pull request #77844 from grayluck/one-more-ip
...
Add 198.51.100.0/24 to non-masq ranges.
2019-05-17 05:38:19 -07:00
Mike Danese
59f4661b18
cluster/gce: fix line 2414: DNS_MEMORY_LIMIT: unbound variable
2019-05-16 22:58:34 -07:00
Mike Danese
4edec1f3be
cluster/gce: fix unset variable when insecure port is enabled
2019-05-16 19:47:11 -07:00
Lantao Liu
bc1a78d31e
Support using docker containerd in COS and Ubuntu on GCE.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-16 13:53:57 -07:00
Kubernetes Prow Robot
f8d2b6b982
Merge pull request #77918 from mborsz/coredns
...
Make dns memory limit configurable
2019-05-16 08:49:08 -07:00
yankaiz
14015d9ce1
Add 198.51.100.0/24 to non-masq ranges.
...
Groupped the IP ranges by RFC and type.
Change reference for 198.18.0.0/15 from RFC 2544 to RFC 6815.
2019-05-15 16:23:41 -07:00
Maciej Borsz
59af63c687
Make coredns memory limit configurable
2019-05-15 13:35:28 +02:00
Maciej Borsz
9da7db76b7
Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."
2019-05-15 08:31:19 +02:00
Jake Sanders
2576713a40
when disabled, don't create the API server's insecure port mapping
2019-05-09 11:50:59 -07:00
Kubernetes Prow Robot
0befec7fb6
Merge pull request #77447 from dekkagaijin/mip
...
disable the apiserver's insecure port by default
2019-05-07 22:14:32 -07:00
Kubernetes Prow Robot
b34d7ac0ce
Merge pull request #77458 from grayluck/agent-v2.3.0
...
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
2019-05-07 17:52:58 -07:00
yankaiz
1059a71973
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
...
Added the non-masq ranges to configure-helper.sh so that GCE clusters
will have the non-masq IP ranges aligned with GKE clusters.
2019-05-06 22:32:34 -07:00
Jake Sanders
e4d521e825
disable the apiserver insecure port by default in configure-helper
2019-05-06 19:26:57 -07:00
Jake Sanders
ff4c372eaa
ensure that kubectl works when the master insecure port is disabled
2019-05-06 19:25:41 -07:00
Yuwen Ma
b8a8bdb127
[Distroless] Convert the GCE manifests for master containers.
...
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-05-06 08:04:06 -07:00
Mark Wolters
1456979e93
Added function to create kubeconfig for addon-manager
2019-05-03 15:12:16 -07:00
Kubernetes Prow Robot
0b10d1b830
Merge pull request #77140 from dekkagaijin/glbc
...
use static token to authenticate glbc
2019-05-02 16:22:30 -07:00
Jake Sanders
8bd0b45eae
use static token to authenticate glbc
2019-05-01 22:24:48 -07:00
Ling Huang
d3fb7115ab
Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8.
2019-04-29 15:07:10 -04:00
Wojciech Tyczynski
0d77f62c02
Revert "override ETCD_SERVER with https instead http when mTLS is enabled"
2019-04-27 06:50:20 +02:00
Kubernetes Prow Robot
2c2e7a01bb
Merge pull request #76655 from SataQiu/fix-shell-cluster-20190417
...
Fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-23 23:50:04 -07:00
Kubernetes Prow Robot
06bc7e3e00
Merge pull request #76792 from dekkagaijin/insecure-port
...
add option to disable the apiserver's insecure port via env var
2019-04-23 14:02:35 -07:00
SataQiu
903c5a53b3
fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-22 11:46:45 +08:00
Jake Sanders
42fcd5eb63
remove erroneous kube-apiserver.manifest sed line
2019-04-19 17:40:28 +00:00
Kubernetes Prow Robot
e4f9d8fe3f
Merge pull request #76331 from xichengliudui/fixshellcheckfailures-17
...
Fix shellcheck failures in stage-upload.sh
2019-04-19 09:47:55 -07:00
Jake Sanders
113ab741e6
add option to set the value of the apiserver's insecure port
2019-04-18 20:35:08 +00:00
Kubernetes Prow Robot
dc2c9e8bd5
Merge pull request #74690 from wenjiaswe/etcdserverhttp
...
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-15 16:45:07 -07:00
Wenjia Zhang
80c4bccf0f
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-14 22:11:37 -07:00
Kubernetes Prow Robot
ae8a4fcb0d
Merge pull request #76352 from jpbetz/reapply-72062
...
[reapply] Perform GCE log rotation check every 5 minutes
2019-04-12 00:41:14 -07:00
aaa
9768ba9eb3
Fix shellcheck failures in stage-upload.sh
...
update pull request
update pull request
update pull request
update pull request
2019-04-12 02:42:48 -04:00
Kubernetes Prow Robot
39073f0b9f
Merge pull request #74268 from wenjiaswe/fixingNitforetcdapiservertlspath
...
fix nit for etcd_apiserver TLS path
2019-04-11 01:22:11 -07:00
Kubernetes Prow Robot
134ed2e703
Merge pull request #76353 from Random-Liu/add-cni-version-env
...
Add envs for CNI version.
2019-04-10 18:46:22 -07:00
Lantao Liu
ad5b64ca10
Add envs for CNI version.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-09 16:38:53 -07:00
Joe Betz
6297c4f750
Perform GCE log rotation check every 5 minutes
2019-04-09 16:37:38 -07:00
Pengfei Ni
1406e2b70f
Update cri-tools to v1.14.0
2019-04-08 10:59:18 +08:00
Zhen Wang
953677d7a5
Use Node-Problem-Detector v0.6.3 on GCI
2019-04-05 11:08:24 -07:00