Paco Xu
7038338e0f
Revert "cluster: Use python3 everywhere"
2021-04-26 11:21:44 +08:00
David Porter
3f87f4f278
Use python3 everywhere
2021-04-23 14:33:58 -07:00
Kubernetes Prow Robot
ae35c6f10c
Merge pull request #101255 from basantsa1989/stack-type
...
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
2021-04-22 15:55:28 -07:00
Basant Amarkhed
e15d811652
Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code)
2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610
dnat to 169.254.169.252 for metadata server traffic
2021-04-19 10:47:51 -07:00
Kubernetes Prow Robot
28c877dcb6
Merge pull request #101043 from benhxy/tls-2
...
Use GKE specific configuration for kubeconfig file generation
2021-04-16 11:54:51 -07:00
Maciej Borsz
493adbada9
Do not grep for curl --help for --retry-connrefused
2021-04-14 08:32:21 +02:00
Kubernetes Prow Robot
f1c037889d
Merge pull request #100770 from avrittrohwer/configure-script-logging
...
Add configure script logging instrumentation
2021-04-13 18:06:42 -07:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd
...
Change file owner of /mnt/disks/master-pd/var/etcd instead of /var/etcd
2021-04-13 12:09:47 -07:00
Avritt Rohwer
d4495183c9
Add configure script logging instrumentation.
...
- Add log functions to facilitate debug logging.
- Wrap commands called in main with debug logging.
- Configure a systemd service to forward the logs to the serial port.
- Add a 'retry-forever' function to harden download steps.
- Add default value support to 'get-metadata-value' function.
- Fix some spellcheck lints.
2021-04-13 09:30:49 -07:00
Ben Hu
e3270e532c
GKE specific kubeconfig
2021-04-12 22:47:39 +00:00
Cindy Guo
03f60f4b60
chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd
2021-04-12 08:21:01 +00:00
Antonio Ojea
93f4727aab
gce configure containerd default_runtime_name
...
move config to v2
2021-04-11 00:48:22 +02:00
Cindy Guo
9f058079d2
run etcd as nonroot
...
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com >
2021-04-08 20:51:45 +00:00
varsha teratipally
90983f66e4
Moving docker options to daemon.json
...
As per the new docker guidelines about customizing the options
like adding registry-mirrors, moving the options to daemon.json
2021-03-10 19:14:48 +00:00
Kubernetes Prow Robot
874877fa44
Merge pull request #99216 from ruiwen-zhao/remove_modprobe
...
Remove modprobe configs from configure-helper
2021-02-22 17:24:32 -08:00
Cong Liu
03709c0ece
Add arm64 support for GCE node configuration
...
Fix typo
Add TODO
2021-02-19 14:22:26 -08:00
ruiwen-zhao
c053b232ba
Remove modprobe configs from configure-helper
2021-02-18 22:57:44 +00:00
Benjamin Elder
299c561b10
portably configure tempdir in configure-helper.sh
...
fixes a `make test` failure on macOS
2021-02-12 01:15:14 -08:00
Matthew Cary
9a7dcd36c1
Disallow local loopback for volume hosts
...
Change-Id: Ic356c3f859057153cfad97327f1938792a1a512c
2021-01-26 17:12:51 -08:00
Kubernetes Prow Robot
1a67280508
Merge pull request #98037 from vinayakankugoyal/kube-controller-manager-crp
...
Update configure-helper.sh to early exit from start-kube-controller-m…
2021-01-25 12:38:59 -08:00
Vinayak Goyal
31807032e0
Update configure-helper.sh to early exit from start-kube-controller-manager if kube-controller-manager is deployed through CRP.
2021-01-20 16:22:46 -08:00
Michael Taufen
9f9e235b9d
Mount /var/lib/kubelet/pki on tmpfs
...
This helps avoid some rare instances of corrupt cert files
that cause Kubelet to crash-loop after node reboots, e.g.
if Kubelet opens the file during the shutdown but is unable
to write it.
2021-01-08 18:04:35 -08:00
Jian Zeng
8c1971e17c
chore(gce): pass auth flags to KCM and KS
...
Pass flags `--authentication-kubeconfig` and
`--authorization-kubeconfig` to controller-manager and scheduler,
so that we could grab metrics from their secure ports in tests.
2021-01-06 12:56:39 +08:00
Sergey Kanzhelev
d78db9f161
configure docker on containerd nodes so it wouldn't reserver 172.17 subnet
2020-12-23 18:49:57 +00:00
Ben Hu
9581c40887
Revert "Use host IP instead of localhost for control plane component kubeconfig files."
...
This reverts commit 49afcfa5f2 .
2020-12-11 22:36:39 +00:00
Maciej Borsz
7f09d59215
Migrate etcd's livenessProbe to etcdctl endpoint health.
...
Change-Id: Ie19c844050c75e3d1c4b431d09ba0ac851c5317b
2020-12-11 12:43:02 +01:00
Kubernetes Prow Robot
cad9a8277d
Merge pull request #97127 from liggitt/revert-etcd-host-ip
...
Revert "iAdd host IP to etcd listen client URLs."
2020-12-08 22:01:52 -08:00
Kubernetes Prow Robot
d2e7abb153
Merge pull request #96839 from vinayakankugoyal/crp
...
Update configure-helper.sh to early exit from start-kube-scheduler if…
2020-12-08 20:03:51 -08:00
Kubernetes Prow Robot
56d7f138de
Merge pull request #96622 from vinayakankugoyal/groupfix
...
If the file already exists we need to grant group read permissions ex…
2020-12-08 17:29:59 -08:00
Jordan Liggitt
8820dc4522
Revert "iAdd host IP to etcd listen client URLs."
...
This reverts commit 8b4e164a78 .
2020-12-08 11:37:13 -05:00
Vinayak Goyal
18644cb1b2
Update configure-helper.sh to early exit from start-kube-scheduler if kube-scheduler is deployed through CRP.
2020-11-24 12:01:22 -08:00
Mike Danese
7fc57a207e
gce: move iptables rule to mangle
...
This avoids a conflict with rules that calico installs. Also, acquire
the lock everywhere.
2020-11-18 11:28:03 -08:00
vinayak goyal
c2ea6842a7
If the file already exists we need to grant group read permissions explicitly.
2020-11-16 22:59:30 +00:00
wojtekt
eb63da77ea
Allow for configuring etcd progress notify interval on GCE
2020-10-29 15:43:51 +01:00
Kubernetes Prow Robot
3523555aab
Merge pull request #95771 from vinayakankugoyal/fluentbit
...
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke…
2020-10-27 10:36:48 -07:00
Kubernetes Prow Robot
557885d5d7
Merge pull request #91788 from rahulkjoshi/detect-local-mode
...
Add option to specify detect-local-mode during cluster configuration
2020-10-26 10:25:02 -07:00
Kubernetes Prow Robot
5935fcd704
Merge pull request #95766 from towca/jtuznik/ca-params-fix
...
Properly quote flags passed to Cluster Autoscaler
2020-10-23 20:47:00 -07:00
Kubernetes Prow Robot
1f756e4a37
Merge pull request #92669 from Jefftree/netproxy-configure-helper
...
Separate network proxy flag for apiserver egress and starting pods
2020-10-23 16:47:00 -07:00
Vinayak Goyal
83c1ce0225
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane.
2020-10-23 12:14:26 -07:00
Rahul Joshi
889446810c
Add configuration options to specify --detect-local-mode on kube-proxy.
2020-10-23 12:12:59 -07:00
Kubernetes Prow Robot
e850fa6a6c
Merge pull request #95209 from benhxy/gke/kubeconfig
...
Use host IP instead of localhost for GKE control plane kubeconfig
2020-10-22 22:15:49 -07:00
Jefftree
0e5d057755
Rename flags
2020-10-22 08:43:28 -07:00
Jefftree
ed52ad3f25
Add SETUP_KONNECTIVITY_SERVICE flag
2020-10-22 08:43:28 -07:00
Jefftree
7820b05467
Separate network proxy flag for apiserver egress and starting pods
2020-10-22 08:43:27 -07:00
Jakub Tużnik
236ade027b
Properly quote flags passed to Cluster Autoscaler
...
In the current implementation, the flags are not put between quotes,
and so the Cluster Autoscaler manifest doesn't parse as valid JSON.
2020-10-22 15:10:39 +02:00
Daniel Gutowski
6c8b1ab266
Fix default values for logrotate in /var/log/
2020-10-21 09:18:32 +00:00
Ben Hu
49afcfa5f2
Use host IP instead of localhost for control plane component kubeconfig files.
...
This is a part of work to allow control plane components to be moved off hostNetwork.
2020-10-20 22:47:33 +00:00
Ben Hu
8b4e164a78
iAdd host IP to etcd listen client URLs.
...
Allow kube-apiserver to use host IP to connect to etcd.
Update etcd/migrate to allow additional client listening URLs.
2020-10-20 16:43:52 +00:00
jayunit100
aefe930562
support multiple bind records (fie nodelocaldns test regression), by
...
first replacing PILLAR_ and then replacing other vars.
2020-10-16 14:28:55 -04:00