jianghang8421
8a219b5c50
Support deploying arm64 k8s and modify cross build script
2019-03-08 14:09:39 -07:00
galal-hussein
cbb7b65643
Fix restart pods for weave plugin
2019-03-07 10:55:57 -08:00
galal-hussein
2aac0e475f
Regenerate requestheader ca for legacy clusters
2019-03-06 11:58:24 -08:00
moelsayed
e3d6fb4db9
Restore backup to a new etcd plane
2019-03-06 09:22:52 -08:00
galal-hussein
1926fee1eb
Fix weave configmap key
2019-03-05 11:31:05 -08:00
moelsayed
b80785e75e
Ensure certs are availaible for restore
2019-03-03 09:14:36 -08:00
galal-hussein
9d85116568
Modify kubernetes version check to allow upgrade
2019-03-01 11:11:16 -08:00
moelsayed
05d19122ac
Handle missing backups
2019-02-27 14:46:25 -08:00
moelsayed
eb6116dded
Fix versioned templates version check
2019-02-26 15:26:16 -08:00
Sebastiaan van Steenis
40cd80a208
Add node selector for DNS providers
2019-02-20 10:56:36 -08:00
galal-hussein
947b7eeaad
Fix Kubedns provider name
2019-02-19 14:07:34 -08:00
moelsayed
f8b6131dd2
Use supported rke-tools for backup and restore in legacy clusters
2019-02-15 14:25:04 -08:00
galal-hussein
30661bc429
Add retries in reconcile when delete hosts
2019-02-15 14:13:46 -08:00
Sebastiaan van Steenis
23aebac488
Add AWS cloudprovider config
2019-02-12 09:10:55 -08:00
orangedeng
642970feb2
Use initContainer for nginx ingress if it is old version
...
**Problem:**
The nginx ingress daemonSet securityContext can not be applied to
version before 0.16.0
**Solution:**
When the nginx controller version is older than 0.16.0, we use the old
way to set it up.
2019-01-29 14:27:30 -08:00
moelsayed
285ac8d81c
Automatically sync local backups
2019-01-28 15:27:58 -08:00
galal-hussein
fa332f7e07
Revert "revert to skip network plugin port checks of udp port"
...
This reverts commit ea4b16b116
.
Revert "Add port checks for network plugins"
This reverts commit c73a58d45c
.
2019-01-28 11:12:42 -08:00
Guangbo Chen
ea4b16b116
revert to skip network plugin port checks of udp port
2019-01-28 09:48:06 -08:00
galal-hussein
860058e878
Check if etcd is healthy before running kubeapi
2019-01-25 16:00:04 -08:00
Mark Lee
c0ee3327ba
advertise address on kube-apiserver by internal_address
2019-01-25 11:23:14 -08:00
Sebastiaan van Steenis
4cbca1e90a
Add CoreDNS as addon
2019-01-25 11:12:46 -08:00
Guangbo Chen
c73a58d45c
Add port checks for network plugins
2019-01-24 13:29:26 -08:00
galal-hussein
f53e30adec
Add disable option for metrics server
2019-01-24 12:15:47 -08:00
Jason Greathouse
a64e8f64fb
honor kubernetes_version setting
2019-01-24 11:34:07 -08:00
galal-hussein
556e5bb678
Avoid creating dangling volumes with rke tools
2019-01-21 12:38:58 -08:00
moelsayed
cf037b1ed6
Allow local backup for rancher
2019-01-15 10:07:18 -08:00
galal-hussein
82fa8d6305
Add restart components to custom certs
2019-01-14 11:51:11 -08:00
Jason Greathouse
6d36ba86e9
AlwaysPullImages admission plugin option
2019-01-09 11:49:33 -08:00
galal-hussein
9ee750ec01
Adding csr generation and custom certs
2019-01-09 11:47:53 -08:00
galal-hussein
e79da956e9
Update rke to v1.13 and add versioned templates for calico and canal
2019-01-08 13:52:40 -08:00
Jason Greathouse
7afa6e927e
update k8s defaults, CIS recommendations
2019-01-07 12:07:46 -08:00
moelsayed
2bf2cd8f5b
Don't remove Ready nodes during restore
2019-01-04 14:26:40 -08:00
Guangbo Chen
9cfe5661d8
add etcd s3 uploading and downloading snapshot feature
2019-01-04 13:54:14 -08:00
Erik Wilson
e04b7d4413
Add support for Kubernetes API Authn Webhook
...
Allow multiple authn strategies to be defined, including new 'webhook'
strategy. Webhook strategy configuration contains the contents of the
authentication webhook file as well as the cache timeout period.
This change allows a Kubernetes API Auth service to authenticate
user requests without proxying through the Rancher server.
2019-01-03 17:15:23 -07:00
galal-hussein
3c6c7f1b7b
Run rebuild cluster certs from clusterup
2018-12-20 14:04:47 -08:00
galal-hussein
4d23fb4288
Return api and client certs to rotate certs
2018-12-18 16:35:20 -08:00
galal-hussein
66fb2c4ac0
Get checksum of the cloud file content
2018-12-06 16:23:20 -08:00
Chris Kim
afaad6c824
Adding ability to set cluster network to none
2018-12-03 11:34:18 -08:00
galal-hussein
ff4c93e179
refactor etcd restoration process
2018-11-30 12:48:41 -08:00
Mike Kelley
5941368767
add support for weave password
2018-11-29 16:39:45 -08:00
galal-hussein
f3bbd81c52
Update etcd save/restore to work with new state managemnet
2018-11-27 11:09:56 -08:00
galal-hussein
11aa0caabc
Fix rotate certificates with new state
2018-11-14 05:15:57 +08:00
moelsayed
b67a67c3bb
Force lowercase node names
2018-11-14 04:54:35 +08:00
galal-hussein
696b61679c
Final fixes and cleanup for state management
...
Fix dind and local and etcd snapshots
add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
moelsayed
6da35256a8
handle upgrade cases
...
backup state to kubernetes
2018-11-09 11:16:17 -08:00
galal-hussein
8b8870311b
refactor the build state
...
remove extra cert generation for etcd in reconcile
fix reconcile and etcd add and remove cluster state with rke remove
fix add/remove issues
Fix the up command
Fix default paths for kubeconfig and rkestate
2018-11-09 11:16:17 -08:00
moelsayed
90fd13db65
Update main code path to use new state
2018-11-09 11:16:17 -08:00
galal-hussein
f48da22d8e
init commit for refactor state
...
add init test
use rkeconfig for init
reconcile old state file
2018-11-09 11:16:17 -08:00
galal-hussein
631c0725f4
Fix broken etcd rolling snapshot
2018-11-08 13:14:15 -08:00
galal-hussein
f0572f48b4
Fix etcd snapshot
2018-11-07 12:43:25 -08:00
galal-hussein
deb3518d78
Enable etcd snapshot by default
2018-11-02 09:35:57 -07:00
galal-hussein
3551e6e4b6
Add Rotate certificates command to rke
2018-10-31 12:08:31 -07:00
moelsayed
dd4d19a945
Fix remove performance issues
2018-10-24 10:24:14 -07:00
moelsayed
b7d98733cf
Run state save in a worker pool
2018-10-19 17:24:02 -07:00
moelsayed
90c426d73e
Switch all concurrent tasks to use worker pool
2018-10-18 13:24:59 -07:00
galal-hussein
4fb01ab69e
Fix scaling problems with cluster state deployer
2018-10-18 10:34:32 -07:00
Sebastiaan van Steenis
22a339ea33
Update to Golang 1.11
2018-10-18 09:27:46 -07:00
Sebastiaan van Steenis
a161d30f78
Added info in log messages, more consistency in log messages
2018-10-18 09:27:13 -07:00
galal-hussein
c2071495ac
use errgroup for tunneling hosts
2018-10-18 09:26:30 -07:00
moelsayed
24a8465941
Fix flannel issue with k8s 1.12
2018-10-18 09:26:17 -07:00
galal-hussein
cf76401978
Change the etcd member add steps
2018-10-18 09:25:59 -07:00
moelsayed
9c85b5b451
Refactor taints and labels sync to improve performance
2018-10-18 09:25:27 -07:00
moelsayed
22dc19205f
Handle upgrade from metrics server 0.2.x to 0.3.x
2018-10-04 14:48:00 -07:00
moelsayed
496d1a46a5
Allow replacing a single contorl node
2018-10-04 13:14:28 -07:00
Sebastiaan van Steenis
12559a21c7
Use clusterversion to check supported Docker versions
2018-10-04 11:31:35 -07:00
moelsayed
d4759bcc4f
Remove ServiceOption if empty
2018-10-02 12:58:21 -07:00
galal-hussein
ce62c898bb
Handle deleting all controlplane nodes when nodes are unreachable
2018-09-26 17:03:53 -07:00
galal-hussein
2bd4577b19
Add default heartbeat and election timeout to etcd
...
Reload the etcd cluster in the right order
2018-09-25 18:24:52 -07:00
galal-hussein
95ba4ea61f
Fix cluster state network port check issue
2018-09-20 10:26:25 -07:00
galal-hussein
925df98ea6
Save state to the nodes backup path
2018-09-14 18:30:40 -07:00
galal-hussein
00e317250d
Fix requestheaqder ca certificate regeneration
2018-09-07 18:29:00 -07:00
galal-hussein
67448c38c6
Update ingress nginx template yaml
2018-09-06 15:57:51 -07:00
galal-hussein
453ddd5213
Remove unnecessary output
2018-09-06 12:55:05 -07:00
galal-hussein
f314d1dc96
Avoid panic if cert or key of a secret is not found
2018-09-04 13:10:13 -07:00
galal-hussein
3c76263096
Add default option to private registries
2018-08-31 14:56:57 -07:00
moelsayed
6b6a7803a7
Move admission controller options to ServiceOptions
2018-08-30 14:52:30 -07:00
galal-hussein
6b141295aa
update log message for validate node count
2018-08-30 10:00:38 -07:00
moelsayed
d451683abb
Add docker config file environment variables for kubelet
2018-08-30 10:00:28 -07:00
moelsayed
4b3068d673
Validate hostname_override values
2018-08-28 11:40:42 +10:00
MaiWJ
bcb6e13618
Extend rke to tolerate the Windows host
...
1. Support to configure Flannel as "host-gw" backend
2. Define the network component yaml and ingress
controller yaml only schedule to non-Windows node
3. Support to configure Docker container's port publishing
2018-08-26 18:09:21 -07:00
Sebastiaan van Steenis
4bb01e8f6b
Correct metrics YAML variable name
2018-08-14 21:57:43 +03:00
Sebastiaan van Steenis
4f0a191e44
Typo valid
2018-08-14 21:57:31 +03:00
Sebastiaan van Steenis
bff7e0a2c3
Avoid panic in rke-tools entrypoint detection
2018-08-09 09:25:25 -07:00
moelsayed
de617da470
Fix entrypoint bug
2018-08-05 19:57:52 -07:00
moelsayed
4357da7742
handle entrypoint upgrade across versions
2018-08-04 04:30:54 -07:00
Denise
16e63092f9
Merge pull request #836 from moelsayed/change_entrypoint
...
Fix sidekick upgrade issue and change services entry point
2018-08-03 11:38:45 -07:00
moelsayed
39b5ac1345
Fix resoncile missing taints
2018-08-03 11:38:02 -07:00
moelsayed
010a7977ff
Change entrypoint to fix multiple mount problem
2018-08-02 02:33:46 +02:00
moelsayed
28db358ebd
Fix nested mounts issue when using default host prefix
2018-08-01 11:26:42 -07:00
moelsayed
5ec490da11
Increase addon delete job timeout
2018-07-27 11:33:38 -07:00
galal-hussein
b71fd3ba35
Fix local port check
2018-07-23 09:10:06 -07:00
Thorsten Schifferdecker
9766b4cbcd
fix typo porxy > proxy
...
Signed-off-by: Thorsten Schifferdecker <ts@systs.org>
2018-07-22 08:36:34 -07:00
galal-hussein
3ce50d28d3
Add etcd snapshot fix and more log messages to certificate bundle
...
Add function to collect stdout and stderr logs from containers
2018-07-20 14:09:29 -07:00
Chase Bolt
82af829b8c
adjust volumeplugins to a non-persistent path that will work oob with default configs
2018-07-20 13:21:36 -07:00
moelsayed
2eeb5cac00
Make sure Binds are unique
2018-07-19 15:12:09 -07:00
David Lewis
ecd92ceff6
Set 644 on cloud-config
2018-07-18 11:43:17 -07:00
galal-hussein
8269c3f301
Add metrics-server addon deployment
2018-07-17 16:51:59 -07:00
orangedeng
9f7a37845e
Add support for API aggregation layer
...
Add API server parameters
`requestheader-client-ca-file`,
`requestheader-allowed-names`,
`proxy-client-key-file` and
`proxy-client-cert-file`.
After we added this parameters into API server, the API aggregation
server will be supported when it is deployed in rke cluster.
2018-07-17 16:51:59 -07:00
moelsayed
241f7857d6
Remove ingress controller when disabled
2018-07-17 15:55:15 -07:00
Sebastiaan van Steenis
af77619859
GetAddonsExcuteJob and ApplySystemAddonExcuteJob typos
2018-07-17 09:49:49 -07:00