1
0
mirror of https://github.com/rancher/rke.git synced 2025-08-01 15:19:09 +00:00
Commit Graph

433 Commits

Author SHA1 Message Date
jianghang8421
8a219b5c50 Support deploying arm64 k8s and modify cross build script 2019-03-08 14:09:39 -07:00
galal-hussein
cbb7b65643 Fix restart pods for weave plugin 2019-03-07 10:55:57 -08:00
galal-hussein
2aac0e475f Regenerate requestheader ca for legacy clusters 2019-03-06 11:58:24 -08:00
moelsayed
e3d6fb4db9 Restore backup to a new etcd plane 2019-03-06 09:22:52 -08:00
galal-hussein
1926fee1eb Fix weave configmap key 2019-03-05 11:31:05 -08:00
moelsayed
b80785e75e Ensure certs are availaible for restore 2019-03-03 09:14:36 -08:00
galal-hussein
9d85116568 Modify kubernetes version check to allow upgrade 2019-03-01 11:11:16 -08:00
moelsayed
05d19122ac Handle missing backups 2019-02-27 14:46:25 -08:00
moelsayed
eb6116dded Fix versioned templates version check 2019-02-26 15:26:16 -08:00
Sebastiaan van Steenis
40cd80a208 Add node selector for DNS providers 2019-02-20 10:56:36 -08:00
galal-hussein
947b7eeaad Fix Kubedns provider name 2019-02-19 14:07:34 -08:00
moelsayed
f8b6131dd2 Use supported rke-tools for backup and restore in legacy clusters 2019-02-15 14:25:04 -08:00
galal-hussein
30661bc429 Add retries in reconcile when delete hosts 2019-02-15 14:13:46 -08:00
Sebastiaan van Steenis
23aebac488 Add AWS cloudprovider config 2019-02-12 09:10:55 -08:00
orangedeng
642970feb2 Use initContainer for nginx ingress if it is old version
**Problem:**
The nginx ingress daemonSet securityContext can not be applied to
version before 0.16.0

**Solution:**
When the nginx controller version is older than 0.16.0, we use the old
way to set it up.
2019-01-29 14:27:30 -08:00
moelsayed
285ac8d81c Automatically sync local backups 2019-01-28 15:27:58 -08:00
galal-hussein
fa332f7e07 Revert "revert to skip network plugin port checks of udp port"
This reverts commit ea4b16b116.

Revert "Add port checks for network plugins"
This reverts commit c73a58d45c.
2019-01-28 11:12:42 -08:00
Guangbo Chen
ea4b16b116 revert to skip network plugin port checks of udp port 2019-01-28 09:48:06 -08:00
galal-hussein
860058e878 Check if etcd is healthy before running kubeapi 2019-01-25 16:00:04 -08:00
Mark Lee
c0ee3327ba advertise address on kube-apiserver by internal_address 2019-01-25 11:23:14 -08:00
Sebastiaan van Steenis
4cbca1e90a Add CoreDNS as addon 2019-01-25 11:12:46 -08:00
Guangbo Chen
c73a58d45c Add port checks for network plugins 2019-01-24 13:29:26 -08:00
galal-hussein
f53e30adec Add disable option for metrics server 2019-01-24 12:15:47 -08:00
Jason Greathouse
a64e8f64fb honor kubernetes_version setting 2019-01-24 11:34:07 -08:00
galal-hussein
556e5bb678 Avoid creating dangling volumes with rke tools 2019-01-21 12:38:58 -08:00
moelsayed
cf037b1ed6 Allow local backup for rancher 2019-01-15 10:07:18 -08:00
galal-hussein
82fa8d6305 Add restart components to custom certs 2019-01-14 11:51:11 -08:00
Jason Greathouse
6d36ba86e9 AlwaysPullImages admission plugin option 2019-01-09 11:49:33 -08:00
galal-hussein
9ee750ec01 Adding csr generation and custom certs 2019-01-09 11:47:53 -08:00
galal-hussein
e79da956e9 Update rke to v1.13 and add versioned templates for calico and canal 2019-01-08 13:52:40 -08:00
Jason Greathouse
7afa6e927e update k8s defaults, CIS recommendations 2019-01-07 12:07:46 -08:00
moelsayed
2bf2cd8f5b Don't remove Ready nodes during restore 2019-01-04 14:26:40 -08:00
Guangbo Chen
9cfe5661d8 add etcd s3 uploading and downloading snapshot feature 2019-01-04 13:54:14 -08:00
Erik Wilson
e04b7d4413 Add support for Kubernetes API Authn Webhook
Allow multiple authn strategies to be defined, including new 'webhook'
strategy. Webhook strategy configuration contains the contents of the
authentication webhook file as well as the cache timeout period.

This change allows a Kubernetes API Auth service to authenticate
user requests without proxying through the Rancher server.
2019-01-03 17:15:23 -07:00
galal-hussein
3c6c7f1b7b Run rebuild cluster certs from clusterup 2018-12-20 14:04:47 -08:00
galal-hussein
4d23fb4288 Return api and client certs to rotate certs 2018-12-18 16:35:20 -08:00
galal-hussein
66fb2c4ac0 Get checksum of the cloud file content 2018-12-06 16:23:20 -08:00
Chris Kim
afaad6c824 Adding ability to set cluster network to none 2018-12-03 11:34:18 -08:00
galal-hussein
ff4c93e179 refactor etcd restoration process 2018-11-30 12:48:41 -08:00
Mike Kelley
5941368767 add support for weave password 2018-11-29 16:39:45 -08:00
galal-hussein
f3bbd81c52 Update etcd save/restore to work with new state managemnet 2018-11-27 11:09:56 -08:00
galal-hussein
11aa0caabc Fix rotate certificates with new state 2018-11-14 05:15:57 +08:00
moelsayed
b67a67c3bb Force lowercase node names 2018-11-14 04:54:35 +08:00
galal-hussein
696b61679c Final fixes and cleanup for state management
Fix dind and local and etcd snapshots

add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
moelsayed
6da35256a8 handle upgrade cases
backup state to kubernetes
2018-11-09 11:16:17 -08:00
galal-hussein
8b8870311b refactor the build state
remove extra cert generation for etcd in reconcile

fix reconcile and etcd add and remove cluster state with rke remove

fix add/remove issues

Fix the up command

Fix default paths for kubeconfig and rkestate
2018-11-09 11:16:17 -08:00
moelsayed
90fd13db65 Update main code path to use new state 2018-11-09 11:16:17 -08:00
galal-hussein
f48da22d8e init commit for refactor state
add init test

use rkeconfig for init

reconcile old state file
2018-11-09 11:16:17 -08:00
galal-hussein
631c0725f4 Fix broken etcd rolling snapshot 2018-11-08 13:14:15 -08:00
galal-hussein
f0572f48b4 Fix etcd snapshot 2018-11-07 12:43:25 -08:00
galal-hussein
deb3518d78 Enable etcd snapshot by default 2018-11-02 09:35:57 -07:00
galal-hussein
3551e6e4b6 Add Rotate certificates command to rke 2018-10-31 12:08:31 -07:00
moelsayed
dd4d19a945 Fix remove performance issues 2018-10-24 10:24:14 -07:00
moelsayed
b7d98733cf Run state save in a worker pool 2018-10-19 17:24:02 -07:00
moelsayed
90c426d73e Switch all concurrent tasks to use worker pool 2018-10-18 13:24:59 -07:00
galal-hussein
4fb01ab69e Fix scaling problems with cluster state deployer 2018-10-18 10:34:32 -07:00
Sebastiaan van Steenis
22a339ea33 Update to Golang 1.11 2018-10-18 09:27:46 -07:00
Sebastiaan van Steenis
a161d30f78 Added info in log messages, more consistency in log messages 2018-10-18 09:27:13 -07:00
galal-hussein
c2071495ac use errgroup for tunneling hosts 2018-10-18 09:26:30 -07:00
moelsayed
24a8465941 Fix flannel issue with k8s 1.12 2018-10-18 09:26:17 -07:00
galal-hussein
cf76401978 Change the etcd member add steps 2018-10-18 09:25:59 -07:00
moelsayed
9c85b5b451 Refactor taints and labels sync to improve performance 2018-10-18 09:25:27 -07:00
moelsayed
22dc19205f Handle upgrade from metrics server 0.2.x to 0.3.x 2018-10-04 14:48:00 -07:00
moelsayed
496d1a46a5 Allow replacing a single contorl node 2018-10-04 13:14:28 -07:00
Sebastiaan van Steenis
12559a21c7 Use clusterversion to check supported Docker versions 2018-10-04 11:31:35 -07:00
moelsayed
d4759bcc4f Remove ServiceOption if empty 2018-10-02 12:58:21 -07:00
galal-hussein
ce62c898bb Handle deleting all controlplane nodes when nodes are unreachable 2018-09-26 17:03:53 -07:00
galal-hussein
2bd4577b19 Add default heartbeat and election timeout to etcd
Reload the etcd cluster in the right order
2018-09-25 18:24:52 -07:00
galal-hussein
95ba4ea61f Fix cluster state network port check issue 2018-09-20 10:26:25 -07:00
galal-hussein
925df98ea6 Save state to the nodes backup path 2018-09-14 18:30:40 -07:00
galal-hussein
00e317250d Fix requestheaqder ca certificate regeneration 2018-09-07 18:29:00 -07:00
galal-hussein
67448c38c6 Update ingress nginx template yaml 2018-09-06 15:57:51 -07:00
galal-hussein
453ddd5213 Remove unnecessary output 2018-09-06 12:55:05 -07:00
galal-hussein
f314d1dc96 Avoid panic if cert or key of a secret is not found 2018-09-04 13:10:13 -07:00
galal-hussein
3c76263096 Add default option to private registries 2018-08-31 14:56:57 -07:00
moelsayed
6b6a7803a7 Move admission controller options to ServiceOptions 2018-08-30 14:52:30 -07:00
galal-hussein
6b141295aa update log message for validate node count 2018-08-30 10:00:38 -07:00
moelsayed
d451683abb Add docker config file environment variables for kubelet 2018-08-30 10:00:28 -07:00
moelsayed
4b3068d673 Validate hostname_override values 2018-08-28 11:40:42 +10:00
MaiWJ
bcb6e13618 Extend rke to tolerate the Windows host
1. Support to configure Flannel as "host-gw" backend
2. Define the network component yaml and ingress
   controller yaml only schedule to non-Windows node
3. Support to configure Docker container's port publishing
2018-08-26 18:09:21 -07:00
Sebastiaan van Steenis
4bb01e8f6b Correct metrics YAML variable name 2018-08-14 21:57:43 +03:00
Sebastiaan van Steenis
4f0a191e44 Typo valid 2018-08-14 21:57:31 +03:00
Sebastiaan van Steenis
bff7e0a2c3 Avoid panic in rke-tools entrypoint detection 2018-08-09 09:25:25 -07:00
moelsayed
de617da470 Fix entrypoint bug 2018-08-05 19:57:52 -07:00
moelsayed
4357da7742 handle entrypoint upgrade across versions 2018-08-04 04:30:54 -07:00
Denise
16e63092f9
Merge pull request #836 from moelsayed/change_entrypoint
Fix sidekick upgrade issue and change services entry point
2018-08-03 11:38:45 -07:00
moelsayed
39b5ac1345 Fix resoncile missing taints 2018-08-03 11:38:02 -07:00
moelsayed
010a7977ff Change entrypoint to fix multiple mount problem 2018-08-02 02:33:46 +02:00
moelsayed
28db358ebd Fix nested mounts issue when using default host prefix 2018-08-01 11:26:42 -07:00
moelsayed
5ec490da11 Increase addon delete job timeout 2018-07-27 11:33:38 -07:00
galal-hussein
b71fd3ba35 Fix local port check 2018-07-23 09:10:06 -07:00
Thorsten Schifferdecker
9766b4cbcd fix typo porxy > proxy
Signed-off-by: Thorsten Schifferdecker <ts@systs.org>
2018-07-22 08:36:34 -07:00
galal-hussein
3ce50d28d3 Add etcd snapshot fix and more log messages to certificate bundle
Add function to collect stdout and stderr logs from containers
2018-07-20 14:09:29 -07:00
Chase Bolt
82af829b8c adjust volumeplugins to a non-persistent path that will work oob with default configs 2018-07-20 13:21:36 -07:00
moelsayed
2eeb5cac00 Make sure Binds are unique 2018-07-19 15:12:09 -07:00
David Lewis
ecd92ceff6 Set 644 on cloud-config 2018-07-18 11:43:17 -07:00
galal-hussein
8269c3f301 Add metrics-server addon deployment 2018-07-17 16:51:59 -07:00
orangedeng
9f7a37845e Add support for API aggregation layer
Add API server parameters
`requestheader-client-ca-file`,
`requestheader-allowed-names`,
`proxy-client-key-file` and
`proxy-client-cert-file`.
After we added this parameters into API server, the API aggregation
server will be supported when it is deployed in rke cluster.
2018-07-17 16:51:59 -07:00
moelsayed
241f7857d6 Remove ingress controller when disabled 2018-07-17 15:55:15 -07:00
Sebastiaan van Steenis
af77619859 GetAddonsExcuteJob and ApplySystemAddonExcuteJob typos 2018-07-17 09:49:49 -07:00