Joe Beda
f8505cd286
For GCE, allow insecure registries anywhere in 10.0.0.0/8.
2014-12-01 11:36:08 -08:00
Alen Komljen
249bbd7d9a
Remove unused nsinit salt state
2014-11-27 09:59:25 +01:00
Tim Hockin
47141f05c7
standard config opt names: logging
2014-11-25 17:41:53 -08:00
Tim Hockin
52ad94d766
standard config opt names: node monitoring
2014-11-25 17:39:28 -08:00
Joe Beda
4a5a69b520
Upgrade docker to 1.3.2.
2014-11-25 14:46:25 -08:00
Joe Beda
2b712a744a
Fix up salt ordering dependencies in kube-apiserver/init.sls.
2014-11-25 14:46:25 -08:00
Joe Beda
802d214ed0
Merge pull request #2461 from MSOpenTech/deploy
...
Bring Azure deploy scripts up to date
2014-11-20 17:15:44 -08:00
Joe Beda
658c5cdaaa
Check in default blank file for kubelet/kubernetes_auth
...
This lets us eliminate some per-cloud stuff in our salt. This is an alternate fix for #2475 .
2014-11-20 17:01:28 -08:00
derekwaynecarr
1a894741b2
Fix vagrant regression
2014-11-20 10:39:09 -05:00
Brendan Burns
927088de83
Fix etcd unpack by adding a explicit x flag.
2014-11-19 11:33:50 -08:00
Jeff Mendoza
9934a0ace4
Update cert generation for Azure.
2014-11-18 14:10:50 -08:00
Eric Tune
67adf6473e
Don't reference non-existent token file if not GCE.
2014-11-18 00:23:41 -08:00
Eric Tune
46dcacfa93
Kubelet talks securely to apiserver.
...
Configure apiserver to serve Securely on port 6443.
Generate token for kubelets during master VM startup.
Put token into file apiserver can get and another file the kubelets can get.
Added e2e test.
2014-11-18 00:23:41 -08:00
Brendan Burns
5122e4cc3a
Remove deprecated nsinit from the node definition.
2014-11-17 22:20:57 -08:00
Abhishek Gupta
65a4041d26
Fixing systemd service files to point to correct config/executors
2014-11-17 12:24:10 -08:00
Joe Beda
66d287f7e4
Merge branch 'rename-to-kube' of https://github.com/eparis/kubernetes into eparis-rename-to-kube
...
* 'rename-to-kube' of https://github.com/eparis/kubernetes :
rename kube server binaries to kube-
Conflicts:
docs/salt.md
2014-11-17 09:52:10 -08:00
Joe Beda
06d838ffb1
Merge pull request #2369 from jbeda/vagrant-fix
...
Vagrant fixes
2014-11-14 16:43:06 -08:00
Brendan Burns
c2485a4056
Merge pull request #2147 from justinsb/ipv6
...
Initial ipv6 / iptables work
2014-11-14 10:34:37 -08:00
Joe Beda
5a0159ea00
Get Vagrant to start using TLS client certs.
...
Also fix up cert generation. It was failing during the first salt highstate when trying to chown the certs as the apiserver user didn't exist yet. Fix this by creating a 'kube-cert' group and chgrping the files to that. Then make the apiserver a member of that group.
Fixes #2365
Fixes #2368
2014-11-13 22:16:45 -08:00
Eric Paris
a99c3c7963
rename kube server binaries to kube-
...
apiserver becomes kube-apiserver
controller-manager -> kube-controller-manager
scheduler and proxy similarly.
Only thing I promise is that right now hack/build-go.sh and
build/release.sh exit with 0. That's it. Who knows if any of this
actually works....
2014-11-13 20:08:26 -05:00
Richard Larocque
63d6e7cd9f
make-cert.sh: Create directory before writing cert
...
Adds a "mkdir -p" to the make-cert.sh. This fixes an issue where the
script could fail if /srv/kubernetes did not exist previously.
2014-11-13 16:39:09 -08:00
Eric Tune
19ec2234f9
Make server certs accessible to apiserver user.
2014-11-13 13:02:48 -08:00
Joe Beda
ee2f030623
Give the API server access to TLS certs.
...
Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).
2014-11-12 18:14:24 -08:00
Brendan Burns
62bd634c07
Update the AWS config.
2014-11-10 13:33:43 -08:00
Brendan Burns
bdc4ab62c7
Merge pull request #2245 from jbeda/gcs-deps
...
Start pulling external dependencies from GCS where possible
2014-11-10 11:00:41 -08:00
bgrant0607
6c70227a2e
Merge pull request #2249 from satnam6502/salt
...
Make Docker container dirs writable for pos file
2014-11-08 11:56:48 -08:00
Satnam Singh
9fac9949b2
Make Docker container dirs writable for pos file
2014-11-07 17:42:48 -08:00
Joe Beda
a839599883
Install client tools on master.
...
We now include kubecfg and kubectl in "server binary" tar and place them into /usr/local/bin on the master.
2014-11-07 17:13:18 -08:00
Joe Beda
d033dfcc2b
Load etcd tarball from GCS.
...
Also fix up comment about how to cache docker debs.
2014-11-07 13:43:07 -08:00
Justin SB
ddaa716de1
Allow specification of docker daemon args
2014-11-04 14:12:59 -08:00
Justin SB
8e70a664e8
Extend container_bridge.py (salt lib) to support IPv6
2014-11-04 06:33:34 -08:00
Brendan Burns
f44bb9d673
Merge pull request #2104 from jbeda/gcs-docker-install
...
Get docker deb from GCS
2014-10-31 21:15:06 -07:00
Joe Beda
29455398e6
Get docker deb from GCS.
...
Also lock to 1.3.0 due to issues in 1.3.1 (docker/docker#8889 )
2014-10-31 16:27:00 -07:00
Deyuan Deng
019b7fc74c
Separate minion controller from master.
2014-10-30 20:24:15 -04:00
Pieter Noordhuis
918c8e2b96
Limit GCE specific mods to GCE
2014-10-29 12:39:07 -07:00
Pieter Noordhuis
1152471db7
Split reactor files
...
There now are reactor files to run highstate on:
* New nodes only
* Master nodes
* Minion nodes
2014-10-29 11:30:09 -07:00
Pieter Noordhuis
e90f98a52c
Make vSphere scripts work for binary deploys
...
Fixes #1732 .
2014-10-29 11:30:08 -07:00
Brendan Burns
c4d6f3a1cd
Fix the etcd md5 since they uploaded a new binary.
2014-10-29 11:18:37 -07:00
Joe Beda
8100c063b8
Turn on auto security updates for debian based systems.
...
Fixes #2008
2014-10-27 13:49:51 -07:00
Joe Beda
25b1eea116
Merge pull request #1832 from doublerr/rackspace_switch_to_coreos
...
Rackspace - Switch to CoreOS for standard cluster
2014-10-22 09:30:55 -07:00
derekwaynecarr
b836e31cf4
Fixup docker configuration for sdn
2014-10-22 11:32:38 -04:00
Satnam Singh
39212f5e2e
Flunentd to GCP logging node level configuration
2014-10-20 18:05:00 -07:00
Satnam Singh
b7722a631d
Adjust test in salt file to use boolean value
2014-10-20 15:52:28 -07:00
derekwaynecarr
0d86be680b
Do not require a writeable /vagrant
2014-10-20 16:59:15 -04:00
Ryan Richard
a8bae68865
Rackspace - Switch to CoreOS for standard cluster
...
The Rackspace setup for Kubernetes now leverages CoreOS instead of Ubuntu. We've dropped Salt completely for our cluster.
2014-10-20 12:14:20 -05:00
Dawn Chen
baf3bea79a
Set --ip-masq to false
2014-10-16 12:17:18 -07:00
Tim Hockin
e907011111
Core support for ip-per-service
2014-10-16 08:36:47 -07:00
Joe Beda
9bb20b41ee
Break out dynamic salt files to enable clean kube-push.
...
This lets us blow away salt files and replace them with a new version while keeping a tree of "overlay" files that are cluster specific and generated at cluster up time.
Fixes #1783
2014-10-14 15:01:43 -07:00
Joe Beda
96c1bc17ca
Set shell options for reliability.
...
Tweak a few other small things in our shell scripts.
2014-10-10 12:33:36 -07:00
Joe Beda
d43a6ec5a3
Standardize how we refer to the kubernetes root.
...
Now use $KUBE_ROOT as the variable pretty much everywhere.
2014-10-10 12:33:36 -07:00