Joe Beda
f8505cd286
For GCE, allow insecure registries anywhere in 10.0.0.0/8.
2014-12-01 11:36:08 -08:00
Alen Komljen
249bbd7d9a
Remove unused nsinit salt state
2014-11-27 09:59:25 +01:00
Tim Hockin
47141f05c7
standard config opt names: logging
2014-11-25 17:41:53 -08:00
Tim Hockin
52ad94d766
standard config opt names: node monitoring
2014-11-25 17:39:28 -08:00
Tim Hockin
fad806d1d1
standard config opt names: cluster monitoring
2014-11-25 17:38:30 -08:00
Tim Hockin
e359ad5902
Change tabs to spaces
2014-11-25 17:36:41 -08:00
Joe Beda
6d65805508
fixup! Convert gcutil to gcloud compute
2014-11-25 15:20:01 -08:00
Joe Beda
6ba07b38fc
Convert gcutil to gcloud compute
2014-11-25 15:17:00 -08:00
Joe Beda
4a5a69b520
Upgrade docker to 1.3.2.
2014-11-25 14:46:25 -08:00
Joe Beda
2b712a744a
Fix up salt ordering dependencies in kube-apiserver/init.sls.
2014-11-25 14:46:25 -08:00
Joe Beda
12add3bc66
Merge pull request #2579 from brendandburns/e2e
...
Add an e2e test for gce pd.
2014-11-25 09:08:40 -08:00
Brendan Burns
e1764e2e01
Add an e2e test for gce pd.
...
Add an example for gce pd.
Add an extra log message.
2014-11-25 09:02:00 -08:00
Tim Hockin
f24ea5ce59
Merge pull request #2592 from dchen1107/mirror-registry
...
Enable Docker Cache for OSS on gce.
2014-11-25 09:23:40 +08:00
Dawn Chen
1900f0db98
Enable Docker Cache for OSS on gce.
2014-11-24 16:51:17 -08:00
Brendan Burns
ab3cfc5f75
Update the ubuntu AMI
2014-11-24 16:34:48 -08:00
Tim Hockin
b6d8215f3a
Merge pull request #2537 from dchen1107/mirror-registry
...
Enable docker registry cache. By default it is off
2014-11-25 03:46:35 +08:00
Dawn Chen
e13ce48676
Enable docker registry cache. By default it is off
2014-11-21 17:13:22 -08:00
Joe Beda
802d214ed0
Merge pull request #2461 from MSOpenTech/deploy
...
Bring Azure deploy scripts up to date
2014-11-20 17:15:44 -08:00
Joe Beda
658c5cdaaa
Check in default blank file for kubelet/kubernetes_auth
...
This lets us eliminate some per-cloud stuff in our salt. This is an alternate fix for #2475 .
2014-11-20 17:01:28 -08:00
Jeff Mendoza
d0586ed066
Azure review fixes.
2014-11-20 16:40:35 -08:00
derekwaynecarr
1a894741b2
Fix vagrant regression
2014-11-20 10:39:09 -05:00
Brendan Burns
927088de83
Fix etcd unpack by adding a explicit x flag.
2014-11-19 11:33:50 -08:00
Jeff Mendoza
5d62ac1a56
Fix Azure util.sh boilerplate.
2014-11-19 10:25:27 -08:00
Jeff Mendoza
8b0f263c00
Rearrange cluster sanity checks for Azure.
2014-11-18 22:37:06 -08:00
Jeff Mendoza
9934a0ace4
Update cert generation for Azure.
2014-11-18 14:10:50 -08:00
Jeff Mendoza
1ee5ab5e5e
Updates and formatting to azure scripts.
2014-11-18 14:10:18 -08:00
Eric Tune
67adf6473e
Don't reference non-existent token file if not GCE.
2014-11-18 00:23:41 -08:00
Eric Tune
46dcacfa93
Kubelet talks securely to apiserver.
...
Configure apiserver to serve Securely on port 6443.
Generate token for kubelets during master VM startup.
Put token into file apiserver can get and another file the kubelets can get.
Added e2e test.
2014-11-18 00:23:41 -08:00
Brendan Burns
5122e4cc3a
Remove deprecated nsinit from the node definition.
2014-11-17 22:20:57 -08:00
Brendan Burns
cea52d7e4f
Merge pull request #2409 from mattmoor/master
...
Implements a credentialprovider library for use by DockerPuller.
2014-11-17 21:53:25 -08:00
Matt Moore
0c5d9ed0d2
Implements a credentialprovider library for use by DockerPuller.
...
This change refactors the way Kubelet's DockerPuller handles the docker config credentials to utilize a new credentialprovider library.
The credentialprovider library is based on several of the files from the Kubelet's dockertools directory, but supports a new pluggable model for retrieving a .dockercfg-compatible JSON blob with credentials.
With this change, the Kubelet will lazily ask for the docker config from a set of DockerConfigProvider extensions each time it needs a credential.
This change provides common implementations of DockerConfigProvider for:
- "Default": load .dockercfg from disk
- "Caching": wraps another provider in a cache that expires after a pre-specified lifetime.
GCP-only:
- "google-dockercfg": reads a .dockercfg from a GCE instance's metadata
- "google-dockercfg-url": reads a .dockercfg from a URL specified in a GCE instance's metadata.
- "google-container-registry": reads an access token from GCE metadata into a password field.
2014-11-17 21:46:54 -08:00
Richard Larocque
914c5eb1f1
Chmod the right file in cluster/vagrant/util.sh
...
Most of platforms use ~/.kubernetes_auth, but Vagrant is different.
This commit fixes one instance where a setup script did not take this
difference into account.
2014-11-17 17:14:35 -08:00
Abhishek Gupta
65a4041d26
Fixing systemd service files to point to correct config/executors
2014-11-17 12:24:10 -08:00
Joe Beda
7b5a77c56c
Fix breakage when bringing down cluster.
2014-11-17 11:26:25 -08:00
Joe Beda
66d287f7e4
Merge branch 'rename-to-kube' of https://github.com/eparis/kubernetes into eparis-rename-to-kube
...
* 'rename-to-kube' of https://github.com/eparis/kubernetes :
rename kube server binaries to kube-
Conflicts:
docs/salt.md
2014-11-17 09:52:10 -08:00
Vladimir Shcherbakov
6ea7191592
deploy update
2014-11-16 23:56:15 -08:00
Joe Beda
c82bd2127f
Fix up formatting and sed usage for heapster deploy.
...
Also, 'sed -i' isn't supported well across BSD and GNU versions of sed. See http://stackoverflow.com/questions/5694228/sed-in-place-flag-that-works-both-on-mac-bsd-and-linux . And we were editing files that were checked in to git with a password. Instead, do this with class sed redirection in a temp dir.
Fixes #2400 .
2014-11-16 17:13:02 -08:00
Joe Beda
06d838ffb1
Merge pull request #2369 from jbeda/vagrant-fix
...
Vagrant fixes
2014-11-14 16:43:06 -08:00
Eric Tune
13345953e3
Merge pull request #2371 from dchen1107/upstream
...
Don't show Kubernetes username & password to console for heapster.
2014-11-14 10:50:36 -08:00
Brendan Burns
c2485a4056
Merge pull request #2147 from justinsb/ipv6
...
Initial ipv6 / iptables work
2014-11-14 10:34:37 -08:00
Dawn Chen
a9defc413a
Don't show Kubernetes username & password to console for heapster.
2014-11-13 23:08:55 -08:00
Joe Beda
5a0159ea00
Get Vagrant to start using TLS client certs.
...
Also fix up cert generation. It was failing during the first salt highstate when trying to chown the certs as the apiserver user didn't exist yet. Fix this by creating a 'kube-cert' group and chgrping the files to that. Then make the apiserver a member of that group.
Fixes #2365
Fixes #2368
2014-11-13 22:16:45 -08:00
Eric Paris
a99c3c7963
rename kube server binaries to kube-
...
apiserver becomes kube-apiserver
controller-manager -> kube-controller-manager
scheduler and proxy similarly.
Only thing I promise is that right now hack/build-go.sh and
build/release.sh exit with 0. That's it. Who knows if any of this
actually works....
2014-11-13 20:08:26 -05:00
Richard Larocque
63d6e7cd9f
make-cert.sh: Create directory before writing cert
...
Adds a "mkdir -p" to the make-cert.sh. This fixes an issue where the
script could fail if /srv/kubernetes did not exist previously.
2014-11-13 16:39:09 -08:00
Dawn Chen
8c358f0cae
Merge pull request #2357 from filbranden/monitoring
...
Fix bugs and improve monitoring support
2014-11-13 13:59:58 -08:00
Vishnu Kannan
46a22b3c44
Fix monitoring setup script.
...
Remove the firewall rule created for monitoring as part of kube-down.
Reuse master auth for Grafana.
2014-11-13 16:43:05 -05:00
Eric Tune
19ec2234f9
Make server certs accessible to apiserver user.
2014-11-13 13:02:48 -08:00
Joe Beda
ee2f030623
Give the API server access to TLS certs.
...
Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).
2014-11-12 18:14:24 -08:00
Dawn Chen
5ab6947bdd
Merge pull request #2307 from satnam6502/logbydefault
...
Turn on Elasticsearch logging by default for GCE platform
2014-11-12 10:03:06 -08:00
Dawn Chen
d71408f465
Merge pull request #2321 from jimmydivvy/fix_linux_md5sum
...
Strip extra '-' from md5sum output when creating S3 bucket
2014-11-12 10:00:13 -08:00
