Commit Graph

871 Commits

Author SHA1 Message Date
Paco Xu
7038338e0f Revert "cluster: Use python3 everywhere" 2021-04-26 11:21:44 +08:00
David Porter
3f87f4f278 Use python3 everywhere 2021-04-23 14:33:58 -07:00
Kubernetes Prow Robot
ae35c6f10c Merge pull request #101255 from basantsa1989/stack-type
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
2021-04-22 15:55:28 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610 dnat to 169.254.169.252 for metadata server traffic 2021-04-19 10:47:51 -07:00
Kubernetes Prow Robot
28c877dcb6 Merge pull request #101043 from benhxy/tls-2
Use GKE specific configuration for kubeconfig file generation
2021-04-16 11:54:51 -07:00
Maciej Borsz
493adbada9 Do not grep for curl --help for --retry-connrefused 2021-04-14 08:32:21 +02:00
Kubernetes Prow Robot
f1c037889d Merge pull request #100770 from avrittrohwer/configure-script-logging
Add configure script logging instrumentation
2021-04-13 18:06:42 -07:00
Kubernetes Prow Robot
318db993c8 Merge pull request #101020 from cindy52/bugfix/etcd
Change file owner of /mnt/disks/master-pd/var/etcd  instead of /var/etcd
2021-04-13 12:09:47 -07:00
Avritt Rohwer
d4495183c9 Add configure script logging instrumentation.
- Add log functions to facilitate debug logging.
- Wrap commands called in main with debug logging.
- Configure a systemd service to forward the logs to the serial port.
- Add a 'retry-forever' function to harden download steps.
- Add default value support to 'get-metadata-value' function.
- Fix some spellcheck lints.
2021-04-13 09:30:49 -07:00
Ben Hu
e3270e532c GKE specific kubeconfig 2021-04-12 22:47:39 +00:00
Cindy Guo
03f60f4b60 chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd 2021-04-12 08:21:01 +00:00
Antonio Ojea
93f4727aab gce configure containerd default_runtime_name
move config to v2
2021-04-11 00:48:22 +02:00
Cindy Guo
9f058079d2 run etcd as nonroot
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
2021-04-08 20:51:45 +00:00
varsha teratipally
90983f66e4 Moving docker options to daemon.json
As per the new docker guidelines about customizing the options
like adding registry-mirrors, moving the options to daemon.json
2021-03-10 19:14:48 +00:00
Kubernetes Prow Robot
874877fa44 Merge pull request #99216 from ruiwen-zhao/remove_modprobe
Remove modprobe configs from configure-helper
2021-02-22 17:24:32 -08:00
Cong Liu
03709c0ece Add arm64 support for GCE node configuration
Fix typo

Add TODO
2021-02-19 14:22:26 -08:00
ruiwen-zhao
c053b232ba Remove modprobe configs from configure-helper 2021-02-18 22:57:44 +00:00
Benjamin Elder
299c561b10 portably configure tempdir in configure-helper.sh
fixes a `make test` failure on macOS
2021-02-12 01:15:14 -08:00
Matthew Cary
9a7dcd36c1 Disallow local loopback for volume hosts
Change-Id: Ic356c3f859057153cfad97327f1938792a1a512c
2021-01-26 17:12:51 -08:00
Kubernetes Prow Robot
1a67280508 Merge pull request #98037 from vinayakankugoyal/kube-controller-manager-crp
Update configure-helper.sh to early exit from start-kube-controller-m…
2021-01-25 12:38:59 -08:00
Vinayak Goyal
31807032e0 Update configure-helper.sh to early exit from start-kube-controller-manager if kube-controller-manager is deployed through CRP. 2021-01-20 16:22:46 -08:00
Michael Taufen
9f9e235b9d Mount /var/lib/kubelet/pki on tmpfs
This helps avoid some rare instances of corrupt cert files
that cause Kubelet to crash-loop after node reboots, e.g.
if Kubelet opens the file during the shutdown but is unable
to write it.
2021-01-08 18:04:35 -08:00
Jian Zeng
8c1971e17c chore(gce): pass auth flags to KCM and KS
Pass flags `--authentication-kubeconfig` and
`--authorization-kubeconfig` to controller-manager and scheduler,
so that we could grab metrics from their secure ports in tests.
2021-01-06 12:56:39 +08:00
Sergey Kanzhelev
d78db9f161 configure docker on containerd nodes so it wouldn't reserver 172.17 subnet 2020-12-23 18:49:57 +00:00
Ben Hu
9581c40887 Revert "Use host IP instead of localhost for control plane component kubeconfig files."
This reverts commit 49afcfa5f2.
2020-12-11 22:36:39 +00:00
Maciej Borsz
7f09d59215 Migrate etcd's livenessProbe to etcdctl endpoint health.
Change-Id: Ie19c844050c75e3d1c4b431d09ba0ac851c5317b
2020-12-11 12:43:02 +01:00
Kubernetes Prow Robot
cad9a8277d Merge pull request #97127 from liggitt/revert-etcd-host-ip
Revert "iAdd host IP to etcd listen client URLs."
2020-12-08 22:01:52 -08:00
Kubernetes Prow Robot
d2e7abb153 Merge pull request #96839 from vinayakankugoyal/crp
Update configure-helper.sh to early exit from start-kube-scheduler if…
2020-12-08 20:03:51 -08:00
Kubernetes Prow Robot
56d7f138de Merge pull request #96622 from vinayakankugoyal/groupfix
If the file already exists we need to grant group read permissions ex…
2020-12-08 17:29:59 -08:00
Jordan Liggitt
8820dc4522 Revert "iAdd host IP to etcd listen client URLs."
This reverts commit 8b4e164a78.
2020-12-08 11:37:13 -05:00
Vinayak Goyal
18644cb1b2 Update configure-helper.sh to early exit from start-kube-scheduler if kube-scheduler is deployed through CRP. 2020-11-24 12:01:22 -08:00
Mike Danese
7fc57a207e gce: move iptables rule to mangle
This avoids a conflict with rules that calico installs. Also, acquire
the lock everywhere.
2020-11-18 11:28:03 -08:00
vinayak goyal
c2ea6842a7 If the file already exists we need to grant group read permissions explicitly. 2020-11-16 22:59:30 +00:00
wojtekt
eb63da77ea Allow for configuring etcd progress notify interval on GCE 2020-10-29 15:43:51 +01:00
Kubernetes Prow Robot
3523555aab Merge pull request #95771 from vinayakankugoyal/fluentbit
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke…
2020-10-27 10:36:48 -07:00
Kubernetes Prow Robot
557885d5d7 Merge pull request #91788 from rahulkjoshi/detect-local-mode
Add option to specify detect-local-mode during cluster configuration
2020-10-26 10:25:02 -07:00
Kubernetes Prow Robot
5935fcd704 Merge pull request #95766 from towca/jtuznik/ca-params-fix
Properly quote flags passed to Cluster Autoscaler
2020-10-23 20:47:00 -07:00
Kubernetes Prow Robot
1f756e4a37 Merge pull request #92669 from Jefftree/netproxy-configure-helper
Separate network proxy flag for apiserver egress and starting pods
2020-10-23 16:47:00 -07:00
Vinayak Goyal
83c1ce0225 Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane. 2020-10-23 12:14:26 -07:00
Rahul Joshi
889446810c Add configuration options to specify --detect-local-mode on kube-proxy. 2020-10-23 12:12:59 -07:00
Kubernetes Prow Robot
e850fa6a6c Merge pull request #95209 from benhxy/gke/kubeconfig
Use host IP instead of localhost for GKE control plane kubeconfig
2020-10-22 22:15:49 -07:00
Jefftree
0e5d057755 Rename flags 2020-10-22 08:43:28 -07:00
Jefftree
ed52ad3f25 Add SETUP_KONNECTIVITY_SERVICE flag 2020-10-22 08:43:28 -07:00
Jefftree
7820b05467 Separate network proxy flag for apiserver egress and starting pods 2020-10-22 08:43:27 -07:00
Jakub Tużnik
236ade027b Properly quote flags passed to Cluster Autoscaler
In the current implementation, the flags are not put between quotes,
and so the Cluster Autoscaler manifest doesn't parse as valid JSON.
2020-10-22 15:10:39 +02:00
Daniel Gutowski
6c8b1ab266 Fix default values for logrotate in /var/log/ 2020-10-21 09:18:32 +00:00
Ben Hu
49afcfa5f2 Use host IP instead of localhost for control plane component kubeconfig files.
This is a part of work to allow control plane components to be moved off hostNetwork.
2020-10-20 22:47:33 +00:00
Ben Hu
8b4e164a78 iAdd host IP to etcd listen client URLs.
Allow kube-apiserver to use host IP to connect to etcd.
Update etcd/migrate to allow additional client listening URLs.
2020-10-20 16:43:52 +00:00
jayunit100
aefe930562 support multiple bind records (fie nodelocaldns test regression), by
first replacing PILLAR_ and then replacing other vars.
2020-10-16 14:28:55 -04:00