From fadb9e16d4c42aa2e64df8a187b43cab4eb38077 Mon Sep 17 00:00:00 2001
From: Brendan Burns <bburns@google.com>
Date: Tue, 7 Jul 2015 15:39:53 -0700
Subject: [PATCH 1/2] Generate a kubeconfig file for the kubelet.

---
 .../templates/create-dynamic-salt-files.sh    | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/cluster/aws/templates/create-dynamic-salt-files.sh b/cluster/aws/templates/create-dynamic-salt-files.sh
index 361dc696077..af1bd99b6ec 100644
--- a/cluster/aws/templates/create-dynamic-salt-files.sh
+++ b/cluster/aws/templates/create-dynamic-salt-files.sh
@@ -81,6 +81,27 @@ contexts:
 current-context: service-account-context
 EOF
 
+mkdir -p /srv/salt-overlay/salt/kubelet
+kubelet_kubeconfig_file="/srv/salt-overlay/salt/kubelet/kubeconfig"
+cat > "${kubelet_kubeconfig_file}" <<EOF
+apiVersion: v1
+kind: Config
+users:
+- name: kubelet
+  user:
+    token: ${kubelet_token}
+clusters:
+- name: local
+  cluster:
+     insecure-skip-tls-verify: true
+contexts:
+- context:
+    cluster: local
+    user: kubelet
+  name: service-account-context
+current-context: service-account-context
+EOF
+
 # Generate tokens for other "service accounts".  Append to known_tokens.
 #
 # NB: If this list ever changes, this script actually has to

From 2c5e4a95556c0ad08ff54a3523f3bee2681c8bab Mon Sep 17 00:00:00 2001
From: Brendan Burns <bburns@google.com>
Date: Tue, 7 Jul 2015 20:31:48 -0700
Subject: [PATCH 2/2] Don't start Docker by default on AWS

---
 cluster/saltbase/salt/docker/init.sls | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/cluster/saltbase/salt/docker/init.sls b/cluster/saltbase/salt/docker/init.sls
index 7f3b3addbf5..e425f32e708 100644
--- a/cluster/saltbase/salt/docker/init.sls
+++ b/cluster/saltbase/salt/docker/init.sls
@@ -114,11 +114,19 @@ lxc-docker-{{ override_docker_ver }}:
       - lxc-docker-{{ override_docker_ver }}: /var/cache/docker-install/{{ override_deb }}
     - require:
       - file: /var/cache/docker-install/{{ override_deb }}
-{% endif %}
+{% endif %} # end override_docker_ver != ''
 
 docker:
   service.running:
+# Starting Docker is racy on aws for some reason.  To be honest, since Monit
+# is managing Docker restart we should probably just delete this whole thing
+# but the kubernetes components use salt 'require' to set up a dag, and that
+# complicated and scary to unwind.
+{% if grains.cloud is defined and grains.cloud == 'aws' %}
+    - enable: False
+{% else %}
     - enable: True
+{% endif %}
     - watch:
       - file: {{ environment_file }}
 {% if override_docker_ver != '' %}
@@ -126,4 +134,4 @@ docker:
       - pkg: lxc-docker-{{ override_docker_ver }}
 {% endif %}
 
-{% endif %}
+{% endif %} # end grains.os_family != 'RedHat'