Bill Maxwell
ad0bc6c0aa
Leverage global SSHAgentAuth setting
...
This addresses users issues in being unable to use RKE command line
using SSH_AUTH_SOCK. On OSX the socket env var is set, but nothing
is listening. Also, Linux users have reported issues. To address this
the default mode is to not use SSH Agent Auth. A user must set it
explicitly in either the config file or on the CLI. The only way
to use a passphrase protected key file is with a properly configured
SSH Agent and using SSH Agent Auth.
2018-03-05 17:52:43 -07:00
Jason
f238dadfbb
Add rprivate parameters to kubelet mounts. Fixed #285 #263 .
...
Such as Docker 1.13, bind mounts propagation doesn't default to `rprivate` which cause problems when kubelet unmount cgroup.
2018-03-05 09:29:38 +00:00
galal-hussein
f76f954b42
Disable kubeapi port check if wrap transport is used
2018-03-04 08:38:37 -07:00
galal-hussein
9511fa54cb
Remove api runtime config
2018-03-03 21:58:41 +02:00
Alena Prokharchyk
3f6c2ba8c7
Merge pull request #391 from moelsayed/ingress_nit
...
Nit fixes for ingress
2018-03-02 16:54:55 -08:00
Darren Shepherd
c3d3d013dc
Add option to use kubectl to deploy
2018-03-01 14:35:58 -07:00
moelsayed
473fe2c259
Nit fixes for ingress
2018-02-28 01:58:43 +02:00
Darren Shepherd
2a72d7057a
Typo
2018-02-26 16:31:34 -07:00
Darren Shepherd
fce6b15f18
Add ability to deploy jobs with kubectl and not job task
...
This API is used solely in rancher local clusters.
2018-02-26 16:31:34 -07:00
galal-hussein
bfa51fd41c
extract apply authz resource function
2018-02-26 16:04:19 -07:00
moelsayed
dcf497add2
Fix etcd process regression
2018-02-26 23:43:24 +02:00
moelsayed
eddb9ec56b
Use default images from types
2018-02-26 21:30:52 +02:00
moelsayed
319c383f13
Use named process map
2018-02-26 12:14:36 -07:00
galal-hussein
9a19de383d
Add node authorizer
2018-02-26 11:56:57 -07:00
galal-hussein
ba7e8bb236
Use k8s datastore with calico and remove ca keys
2018-02-24 01:26:22 +02:00
galal-hussein
1dc9a94021
Change etcd dir
2018-02-22 19:31:31 -07:00
Alena Prokharchyk
4731c01904
Merge pull request #370 from galal-hussein/add_rem_idempotency
...
Add/Remove etcd idempotency
2018-02-22 09:54:34 -08:00
galal-hussein
5a35f47dc5
Add remove etcd idempotency
2018-02-22 19:49:18 +02:00
Alena Prokharchyk
bc8917702c
Merge pull request #344 from galal-hussein/stop_duplicate_nodes
...
Validate Duplicate nodes
2018-02-21 17:00:53 -08:00
galal-hussein
5b9d9a75d0
Validate Duplicate nodes
2018-02-22 02:45:20 +02:00
Alena Prokharchyk
e1aca4f37d
Merge pull request #249 from superseb/configurable_sshport
...
SSH port is configurable
2018-02-21 16:36:07 -08:00
galal-hussein
c02873b8e9
Ignore inactive hosts
2018-02-22 02:16:51 +02:00
Sebastiaan van Steenis
56da1fe849
SSH port is configurable
2018-02-21 13:04:06 +01:00
moelsayed
5cf4ef5f5f
Add ingress controller images to SystemImages
2018-02-20 20:54:48 +02:00
Alena Prokharchyk
97c16857c8
Merge pull request #365 from moelsayed/custom_k8s_dialer
...
Add support for custom WrapTransport for Kubernetes Client
2018-02-20 10:50:09 -08:00
moelsayed
03673b8f22
Add support for custom WrapTransport for Kubernetes Client
2018-02-20 20:45:32 +02:00
Alena Prokharchyk
bd0b021549
Merge pull request #357 from superseb/dockerrootdir
...
Use configured docker daemon root dir on kubelet
2018-02-20 09:24:47 -08:00
galal-hussein
b1c2a5d153
Fix etcd issue with reloading cluster
2018-02-16 16:03:00 -08:00
Sebastiaan van Steenis
086201a5f5
Use configured docker daemon root dir on kubelet
2018-02-16 18:10:14 +01:00
galal-hussein
11d7aa0e16
Start cluster with only etcd nodes
2018-02-16 03:39:13 +02:00
Alena Prokharchyk
5b7e5d9c30
Merge pull request #340 from galal-hussein/fix_duplicate_addresses
...
add /var/lib/cni to kubelet mounts
2018-02-15 16:04:56 -08:00
galal-hussein
289c3d5d20
add /var/lib/cni to kubelet mounts
2018-02-14 23:14:21 +02:00
galal-hussein
c2c1804500
External etcd
2018-02-14 22:58:35 +02:00
moelsayed
e996c1748e
Fix selinux regression
2018-02-13 20:30:15 +02:00
moelsayed
169ac106a5
Add GenetatePlan() and use it internally
2018-02-13 03:33:29 +02:00
galal-hussein
59182cee62
[RKE Refactor] Generate cluster and node certs
2018-02-08 20:15:36 +02:00
galal-hussein
d99efdc60f
rke refactoring - configure cluster method
2018-02-08 05:13:06 +02:00
galal-hussein
c2537737fb
Copy local connection dialer factory on update
2018-02-07 21:39:56 +02:00
Alena Prokharchyk
0e1542a7b3
Merge pull request #328 from galal-hussein/fix_ingress
...
Fix ingress
2018-02-06 16:32:57 -08:00
galal-hussein
dcacd86b32
Change ingress type to ingress provider
2018-02-07 02:30:25 +02:00
moelsayed
d77d034cfa
Kubernetes default version: v1.8.7-rancher1-1
2018-02-07 02:25:31 +02:00
moelsayed
4165510395
Move network plugin images to SystemImages
2018-02-06 22:42:50 +02:00
moelsayed
5521b187a7
Move default system images to rancher
2018-02-03 09:41:37 +02:00
Alena Prokharchyk
313360b11f
Merge pull request #297 from moelsayed/fix_293
...
Refactor saving secrets
2018-02-01 14:12:03 -08:00
Alena Prokharchyk
ebb64ec3f9
Merge pull request #298 from moelsayed/refactor_cert_deploy
...
Refactor certificates deployment
2018-02-01 14:11:55 -08:00
moelsayed
9320a57949
Pre-pull k8s images
2018-02-02 00:05:15 +02:00
moelsayed
ebfc5a7c10
Refactor saving secrets
2018-02-02 00:02:42 +02:00
moelsayed
8ba6413a44
Refactor certificates deployment
2018-02-01 23:57:15 +02:00
galal-hussein
f8f877ba27
Add nginx ingress controller and labels/taints sync
2018-02-01 23:28:31 +02:00
moelsayed
3f3275da6d
Fix panic on empty k8s version
2018-02-01 13:31:33 +02:00
galal-hussein
fb37cc90a9
Fix rolling update of nginx-proxy for worker and etcd
2018-02-01 01:56:12 +02:00
moelsayed
8bf9d3eeea
Add kubernetes version and pin etcd version in cluster.yml
2018-01-31 22:33:48 +02:00
Alena Prokharchyk
cd83583815
Merge pull request #289 from moelsayed/k8s_version
...
Use cluster level k8s version
2018-01-31 11:43:26 -08:00
moelsayed
6c45779abc
Use cluster level k8s version
2018-01-31 19:56:33 +02:00
moelsayed
4159d7f156
Pass private registries list through the function calls
2018-01-31 19:50:55 +02:00
moelsayed
cb290d23e3
Add support for registry authentication
2018-01-31 19:50:44 +02:00
Alena Prokharchyk
b6f4a9032a
Merge pull request #283 from galal-hussein/local_fix
...
Fix network check to allow local deployment
2018-01-30 09:27:44 -08:00
Alena Prokharchyk
18fffaf182
Merge pull request #278 from superseb/network_typo
...
Corrected network typo
2018-01-30 09:27:34 -08:00
galal-hussein
5457e5a8f0
Fix network check to allow local deployment
2018-01-30 19:12:45 +02:00
moelsayed
3a1394e739
Add SystemImages type
2018-01-30 18:33:53 +02:00
Sebastiaan van Steenis
d67e3fad52
Corrected network typo
2018-01-27 12:47:00 +01:00
galal-hussein
0ef0a17010
Add generic generation for pki objects and etcd TLS
2018-01-25 20:38:07 +02:00
galal-hussein
efd9116b80
remove deleted etcd member from k8s and update kube-api with new list
2018-01-24 05:19:44 +02:00
galal-hussein
b78ce89576
Update kubernetes image to v1.8.5-rancher4
2018-01-22 15:14:35 -08:00
galal-hussein
c425298f69
revert back to ignore docker version
2018-01-22 21:31:08 +02:00
moelsayed
572a7ad245
Fix multi-role port-check conflict
2018-01-20 00:59:38 +02:00
galal-hussein
dfe8d8ce6a
Fix check for worker hosts
2018-01-20 00:23:39 +02:00
galal-hussein
9e29b753cb
Add unschedulable kubelet on etcd nodes
2018-01-19 20:18:51 +02:00
moelsayed
7fada001d3
Fix port-check update issue
2018-01-19 01:54:02 +02:00
Alena Prokharchyk
3733987faf
Merge pull request #238 from moelsayed/port_check
...
Add open port checks
2018-01-17 13:53:49 -08:00
moelsayed
c815ef5751
Add open port checks
2018-01-17 23:45:29 +02:00
galal-hussein
3bfa9bd49b
change artifacts versions
2018-01-15 11:58:19 -08:00
galal-hussein
447eb6a479
make cluster.yml optional in --local
2018-01-15 06:36:28 +02:00
moelsayed
4c08db1d53
recoverable provisioning
2018-01-13 05:57:28 +02:00
galal-hussein
8685523038
Add local option to deploy/remove kubernetes on local machine
...
Remove insecure port from kube-api
Use cluster.yml config
Pass config dir to cluster up/remove
2018-01-12 20:46:09 +02:00
galal-hussein
67774f7e30
Handle add/remove for etcd nodes
...
Handle adding more than one etcd at once
2018-01-12 03:57:37 +02:00
Darren Shepherd
9f4bc6f2d6
Merge pull request #214 from ibuildthecloud/master
...
Add context.Context to everything and also make logging pluggable
2018-01-09 22:30:01 +00:00
Darren Shepherd
d8dd29765f
Add context.Context to everything and also make logging pluggable
2018-01-09 15:18:01 -07:00
galal-hussein
203bd005e3
Change Ignore to enforce docker version
2018-01-08 22:25:24 +02:00
galal-hussein
4f0f52b15e
Default services images
2018-01-06 02:14:30 +02:00
Alena Prokharchyk
00ffa8eec7
Merge pull request #185 from galal-hussein/save_cert
...
Save certificates/state after deploying control plane
2018-01-02 13:34:09 -08:00
galal-hussein
bb008ba58a
Save certificate after deploying control plane
2018-01-02 23:27:13 +02:00
moelsayed
e0e185972b
Use go templates for addons, network plugins and other manifests
2018-01-02 22:45:46 +02:00
Alena Prokharchyk
e6c3f50a4d
Merge pull request #170 from galal-hussein/healthcheck_validation
...
Add healthcheck for services components
2017-12-20 13:32:00 -08:00
galal-hussein
ed7ca110b0
Add healtcheck for services components
...
Integrate healthcheck with each service
2017-12-20 23:24:28 +02:00
moelsayed
2011a2cf01
Enable PodSecurityPolicy support
2017-12-20 23:15:21 +02:00
Sebastiaan van Steenis
d74924ea8f
Fix rbac typo
2017-12-16 10:48:42 +01:00
Alena Prokharchyk
68a3ef2a43
Merge pull request #154 from galal-hussein/dialer_factory
...
Add Dialer Factory and receive rkeConfig instead of cluster yaml
2017-12-15 21:28:52 -08:00
galal-hussein
fd47cdc80d
Add Dialer Factory
2017-12-16 07:23:58 +02:00
moelsayed
69ccba0c1a
Make RBAC default authz mode
2017-12-16 07:04:16 +02:00
moelsayed
8ea65915d3
Enable RBAC and needed addons/network plugin configuration
2017-12-16 05:41:18 +02:00
moelsayed
c671552a27
add ignore_docker_version
2017-12-15 05:02:44 +02:00
galal-hussein
b20c0cf419
Change cloud_provider to calico_cloud_provider
2017-12-13 20:14:10 +02:00
Alena Prokharchyk
e58d7685da
Merge pull request #128 from guangbochen/master
...
update misspelled common words
2017-12-13 09:52:25 -08:00
Alena Prokharchyk
d99cd9365b
Merge pull request #118 from moelsayed/fix_115
...
Enable AWS specific configuration for Calico
2017-12-12 15:43:11 -08:00
Alena Prokharchyk
82e9ce3ca3
Merge pull request #132 from galal-hussein/custom_dialer_2
...
Using a custom dialer for cluster hosts
2017-12-12 15:37:21 -08:00
moelsayed
579038a5a2
Enable AWS specific configuration for Calico
2017-12-12 20:26:14 +02:00
galal-hussein
afa3a41614
Add iface option to flannel
2017-12-12 18:14:18 +02:00
galal-hussein
67c4214906
Using a custom dialer for cluster hosts
2017-12-12 01:50:10 +02:00
Guangbo Chen
1cc26ee373
update misspelled common words
2017-12-09 19:53:38 +08:00
