130 Commits

Author SHA1 Message Date
Joe Beda
f8505cd286 For GCE, allow insecure registries anywhere in 10.0.0.0/8. 2014-12-01 11:36:08 -08:00
Alen Komljen
249bbd7d9a Remove unused nsinit salt state 2014-11-27 09:59:25 +01:00
Tim Hockin
47141f05c7 standard config opt names: logging 2014-11-25 17:41:53 -08:00
Tim Hockin
52ad94d766 standard config opt names: node monitoring 2014-11-25 17:39:28 -08:00
Joe Beda
4a5a69b520 Upgrade docker to 1.3.2. 2014-11-25 14:46:25 -08:00
Joe Beda
2b712a744a Fix up salt ordering dependencies in kube-apiserver/init.sls. 2014-11-25 14:46:25 -08:00
Joe Beda
802d214ed0 Merge pull request #2461 from MSOpenTech/deploy
Bring Azure deploy scripts up to date
2014-11-20 17:15:44 -08:00
Joe Beda
658c5cdaaa Check in default blank file for kubelet/kubernetes_auth
This lets us eliminate some per-cloud stuff in our salt.  This is an alternate fix for #2475.
2014-11-20 17:01:28 -08:00
derekwaynecarr
1a894741b2 Fix vagrant regression 2014-11-20 10:39:09 -05:00
Brendan Burns
927088de83 Fix etcd unpack by adding a explicit x flag. 2014-11-19 11:33:50 -08:00
Jeff Mendoza
9934a0ace4 Update cert generation for Azure. 2014-11-18 14:10:50 -08:00
Eric Tune
67adf6473e Don't reference non-existent token file if not GCE. 2014-11-18 00:23:41 -08:00
Eric Tune
46dcacfa93 Kubelet talks securely to apiserver.
Configure apiserver to serve Securely on port 6443.
Generate token for kubelets during master VM startup.
Put token into file apiserver can get and another file the kubelets can get.
Added e2e test.
2014-11-18 00:23:41 -08:00
Brendan Burns
5122e4cc3a Remove deprecated nsinit from the node definition. 2014-11-17 22:20:57 -08:00
Abhishek Gupta
65a4041d26 Fixing systemd service files to point to correct config/executors 2014-11-17 12:24:10 -08:00
Joe Beda
66d287f7e4 Merge branch 'rename-to-kube' of https://github.com/eparis/kubernetes into eparis-rename-to-kube
* 'rename-to-kube' of https://github.com/eparis/kubernetes:
  rename kube server binaries to kube-

Conflicts:
	docs/salt.md
2014-11-17 09:52:10 -08:00
Joe Beda
06d838ffb1 Merge pull request #2369 from jbeda/vagrant-fix
Vagrant fixes
2014-11-14 16:43:06 -08:00
Brendan Burns
c2485a4056 Merge pull request #2147 from justinsb/ipv6
Initial ipv6 / iptables work
2014-11-14 10:34:37 -08:00
Joe Beda
5a0159ea00 Get Vagrant to start using TLS client certs.
Also fix up cert generation. It was failing during the first salt highstate when trying to chown the certs as the apiserver user didn't exist yet.  Fix this by creating a 'kube-cert' group and chgrping the files to that.  Then make the apiserver a member of that group.

Fixes #2365
Fixes #2368
2014-11-13 22:16:45 -08:00
Eric Paris
a99c3c7963 rename kube server binaries to kube-
apiserver becomes kube-apiserver
controller-manager -> kube-controller-manager
scheduler and proxy similarly.

Only thing I promise is that right now hack/build-go.sh and
build/release.sh exit with 0.  That's it.  Who knows if any of this
actually works....
2014-11-13 20:08:26 -05:00
Richard Larocque
63d6e7cd9f make-cert.sh: Create directory before writing cert
Adds a "mkdir -p" to the make-cert.sh.  This fixes an issue where the
script could fail if /srv/kubernetes did not exist previously.
2014-11-13 16:39:09 -08:00
Eric Tune
19ec2234f9 Make server certs accessible to apiserver user. 2014-11-13 13:02:48 -08:00
Joe Beda
ee2f030623 Give the API server access to TLS certs.
Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).
2014-11-12 18:14:24 -08:00
Brendan Burns
62bd634c07 Update the AWS config. 2014-11-10 13:33:43 -08:00
Brendan Burns
bdc4ab62c7 Merge pull request #2245 from jbeda/gcs-deps
Start pulling external dependencies from GCS where possible
2014-11-10 11:00:41 -08:00
bgrant0607
6c70227a2e Merge pull request #2249 from satnam6502/salt
Make Docker container dirs writable for pos file
2014-11-08 11:56:48 -08:00
Satnam Singh
9fac9949b2 Make Docker container dirs writable for pos file 2014-11-07 17:42:48 -08:00
Joe Beda
a839599883 Install client tools on master.
We now include kubecfg and kubectl in "server binary" tar and place them into /usr/local/bin on the master.
2014-11-07 17:13:18 -08:00
Joe Beda
d033dfcc2b Load etcd tarball from GCS.
Also fix up comment about how to cache docker debs.
2014-11-07 13:43:07 -08:00
Justin SB
ddaa716de1 Allow specification of docker daemon args 2014-11-04 14:12:59 -08:00
Justin SB
8e70a664e8 Extend container_bridge.py (salt lib) to support IPv6 2014-11-04 06:33:34 -08:00
Brendan Burns
f44bb9d673 Merge pull request #2104 from jbeda/gcs-docker-install
Get docker deb from GCS
2014-10-31 21:15:06 -07:00
Joe Beda
29455398e6 Get docker deb from GCS.
Also lock to 1.3.0 due to issues in 1.3.1 (docker/docker#8889)
2014-10-31 16:27:00 -07:00
Deyuan Deng
019b7fc74c Separate minion controller from master. 2014-10-30 20:24:15 -04:00
Pieter Noordhuis
918c8e2b96 Limit GCE specific mods to GCE 2014-10-29 12:39:07 -07:00
Pieter Noordhuis
1152471db7 Split reactor files
There now are reactor files to run highstate on:

* New nodes only
* Master nodes
* Minion nodes
2014-10-29 11:30:09 -07:00
Pieter Noordhuis
e90f98a52c Make vSphere scripts work for binary deploys
Fixes #1732.
2014-10-29 11:30:08 -07:00
Brendan Burns
c4d6f3a1cd Fix the etcd md5 since they uploaded a new binary. 2014-10-29 11:18:37 -07:00
Joe Beda
8100c063b8 Turn on auto security updates for debian based systems.
Fixes #2008
2014-10-27 13:49:51 -07:00
Joe Beda
25b1eea116 Merge pull request #1832 from doublerr/rackspace_switch_to_coreos
Rackspace - Switch to CoreOS for standard cluster
2014-10-22 09:30:55 -07:00
derekwaynecarr
b836e31cf4 Fixup docker configuration for sdn 2014-10-22 11:32:38 -04:00
Satnam Singh
39212f5e2e Flunentd to GCP logging node level configuration 2014-10-20 18:05:00 -07:00
Satnam Singh
b7722a631d Adjust test in salt file to use boolean value 2014-10-20 15:52:28 -07:00
derekwaynecarr
0d86be680b Do not require a writeable /vagrant 2014-10-20 16:59:15 -04:00
Ryan Richard
a8bae68865 Rackspace - Switch to CoreOS for standard cluster
The Rackspace setup for Kubernetes now leverages CoreOS instead of Ubuntu. We've dropped Salt completely for our cluster.
2014-10-20 12:14:20 -05:00
Dawn Chen
baf3bea79a Set --ip-masq to false 2014-10-16 12:17:18 -07:00
Tim Hockin
e907011111 Core support for ip-per-service 2014-10-16 08:36:47 -07:00
Joe Beda
9bb20b41ee Break out dynamic salt files to enable clean kube-push.
This lets us blow away salt files and replace them with a new version while keeping a tree of "overlay" files that are cluster specific and generated at cluster up time.

Fixes #1783
2014-10-14 15:01:43 -07:00
Joe Beda
96c1bc17ca Set shell options for reliability.
Tweak a few other small things in our shell scripts.
2014-10-10 12:33:36 -07:00
Joe Beda
d43a6ec5a3 Standardize how we refer to the kubernetes root.
Now use $KUBE_ROOT as the variable pretty much everywhere.
2014-10-10 12:33:36 -07:00