Chris Kim
97371fe82d
Add custom flexvolume capabilities to canal and calico
2020-03-05 08:18:40 -08:00
Sebastiaan van Steenis
64f0d7808d
Merge pull request #1872 from Lucaber/fix/cluster-state-log
...
Fix log output of full-cluster-state configmap name
2020-03-05 14:56:56 +01:00
Rajashree Mandaogane
b9b29be0e5
Merge pull request #1943 from mrajashree/rename_label
...
Rename ignore label and return error on controlplane failure
2020-03-04 15:27:16 -08:00
rajashree
c61d531af1
Rename ignore label and return error on controlplane failure
2020-03-04 15:20:48 -08:00
Sebastiaan van Steenis
31a3005733
Add support for nodelocal DNS
2020-03-03 18:09:18 +01:00
rajashree
d420881c41
Check role before including host in inactive host list
2020-03-01 19:03:07 -08:00
kinarashah
12f88f55db
error out if service options are not found
...
it's unexpected to see empty service options, but node plan shouldn't be generated
in those scenarios
2020-02-28 11:21:41 -08:00
rajashree
e27a05f8b1
Attempt upgrade on NotReady hosts
2020-02-26 14:14:42 -08:00
Dax McDonald
d7a4f2d2c3
Fix formatting
2020-02-26 12:08:10 -07:00
Rajashree Mandaogane
6664be5e3b
Merge pull request #1912 from mrajashree/zero_downtime_bugfixes
...
Accept label to ignore nodes during upgrade
2020-02-24 10:06:57 -08:00
Daishan
d2d72767a7
Move rke away from kdm vendor
2020-02-24 10:14:25 -07:00
rajashree
968a399f26
Accept label to ignore nodes during upgrade
...
RKE does a cluster scan to find the unreachable hosts, and if that number
is same as or exceeds maxUnavailable, upgrade won't proceed.
This commit introduces a label users can provide for their nodes so they
don't get counted as unavailable and are excluded from upgrade.
This commit also includes a couple of bug fixes
2020-02-22 14:23:47 -08:00
rajashree
4e38cdf825
Parse updateStrategy, replicas and autoscaler fields
2020-02-18 09:01:29 -08:00
Rajashree Mandaogane
92714e5523
Merge pull request #1800 from mrajashree/workers_upgrade
...
Change RKE upgrade logic for zero downtime
2020-02-06 11:03:29 -08:00
rajashree
11678a3f98
Change RKE upgrade logic for zero downtime
2020-02-05 16:19:47 -08:00
Sebastiaan van Steenis
56d4c1b937
Merge pull request #1888 from superseb/local_s3_snapshots_check
...
Determine etcd s3 snapshots by s3 config presence
2020-02-05 10:40:53 +01:00
Murali Paluru
b7140ab74b
change the apiVersion of eventratelimit
2020-01-30 19:14:34 -08:00
Darren Shepherd
25e7f98777
Use eventratelimit from rancher/types
2020-01-23 16:04:43 -07:00
Sebastiaan van Steenis
23e98603bd
Determine etcd s3 snapshots by s3 config presence
2020-01-20 18:43:35 +01:00
Luca Berneking
1baa4b2efc
Fix log output of full-cluster-state configmap name
...
This PR corrects the log output during `rke up`.
The output still contains the legacy configmap name `cluster-state`.
The new cluster state is saved in `full-cluster-state`.
2020-01-09 14:50:42 +01:00
Sebastiaan van Steenis
ecc658b004
Merge pull request #1845 from superseb/debug_svcoptions
...
Add debug logging for serviceoptions
2020-01-02 12:29:11 +01:00
Brenda Rearden
078f11b8a6
Change MTU from string to int
2019-12-23 14:10:50 -07:00
Sebastiaan van Steenis
1bcaefdacc
Add debug logging for serviceoptions
2019-12-20 14:42:06 +01:00
Benjamin S. Allen
4f2c87fcd0
Remove the prefixPath from the /lib/modules bind mount for kube-proxy IPVS support
2019-12-17 14:10:38 -08:00
Sebastiaan van Steenis
3ac9cad743
Add ability to set MTU for CNI
2019-12-11 13:34:34 -08:00
kinarashah
790a8858f9
respect metadata's service options for etcd
2019-12-09 10:09:16 -08:00
Sebastiaan van Steenis
6b68be717a
Deploy cloud-config file while contents are empty
2019-12-05 10:51:14 -08:00
Prachi Damle
5cf3f1c161
Revert mounting modules for windows
2019-12-04 16:29:59 -08:00
Alena Prokharchyk
2bc68c7118
Correct system image for etcd snapshot removal
...
when removal is executed as a part of restoration
2019-12-03 15:58:31 -08:00
Murali Paluru
b9900f3b9c
change enc provider arg, update defaults for audit log config
2019-11-21 14:08:33 -08:00
Murali Paluru
843e14135f
add null check for audit log config
2019-11-15 14:25:03 -08:00
Murali Paluru
b649664af8
add admission control config file arg, enable plugin
2019-11-15 14:25:03 -08:00
rajashree
c31ee1eb4b
Handle unmarshal of ingressConfig's k8s native fields separately
...
IngressConfig fields ExtraEnvs, ExtraVolumes and ExtraVolumeMounts are k8s types.
The yaml unmarshal done in ParseConfig can't unmarshal these properly because they have
nested fields without yaml tags. This commit adds logic to unmarshal
these fields separately so all nested fields get unmarshaled too.
2019-11-15 10:54:07 -08:00
rajashree
9c1c0ea999
Accept extraEnv, volumes and volumeMounts for ingress addon
...
The fields for ExtraEnv, extraVolumes and extraVolumeMounts for ingress
addon refer the k8s native types EnvVar, Volume and VolumeMounts.
The k8s native types have json tags, so this commit adds a template func to
first marshal and get json encoding and then convert to yaml.
2019-11-14 10:54:00 -08:00
Alena Prokharchyk
6bc2e1e8f8
Restart api/rewrite secrets on config change
2019-11-05 09:34:46 -08:00
Alena Prokharchyk
5eaf28372b
Ability to disable custom encryption
2019-11-05 09:34:46 -08:00
Sebastiaan van Steenis
adc5941fd9
Add per node kubelet server certificate
2019-10-31 15:56:44 -07:00
Murali Paluru
e811e18fb3
review comments, build failure fixes
2019-10-31 13:48:44 -07:00
Murali Paluru
bf8688e709
auditlog and eventratelimit changes
2019-10-31 13:48:44 -07:00
Prachi Damle
a1ec25375c
Bind mount for ipvs provxy mode
2019-10-29 15:03:44 -07:00
moelsayed
372393ac1b
Add Secret Encryption Provider Support
2019-10-29 14:10:32 -07:00
kinarashah
b9bb53ace6
fix applying AlwaysPullImages to commandArgs
...
Earlier we checked for AlwaysPullImages only if PodSecurityPolicy
is true clause, need both checks separately.
2019-10-22 21:48:23 -07:00
Dax McDonald
4579431ece
Catch error on setNetworkOptions
2019-10-22 21:37:34 -07:00
Sebastiaan van Steenis
7c4c1324f9
Provide IP for kube-proxy if cloudprovider is set
...
If cloudprovider is set (not empty), set the bind address because the node will not be able to retrieve it's IP address because the nodename could be set by the cloud provider (e.g. AWS and Openstack)
2019-10-18 09:24:02 -07:00
Dax McDonald
ad678b6a32
Remove dead code
2019-10-04 15:02:14 -07:00
Dax McDonald
8022b815b3
Remove uneeded nil check
2019-10-04 15:01:53 -07:00
Rowan James
9a03d8020b
fix typo: ControlPlan -> ControlPlane
2019-10-03 12:30:04 -07:00
Sebastiaan van Steenis
14827e2cdf
Print proxy env vars when applying authz resources
2019-09-20 09:16:30 -07:00
Frank Mai
f45fc47dca
Adjust Windows worker plan
...
**Issue:**
https://github.com/rancher/rancher/issues/22676
2019-09-17 12:02:22 -07:00
Dan Ramich
ecfab50fce
Update apis for 1.16
2019-09-09 11:20:26 -07:00
kinarashah
9411027476
consider service options based on hostOS info
2019-09-09 11:12:33 -07:00
Frank Mai
0a170b22b7
Support to accpet new Windows service options
...
**Issue:**
https://github.com/rancher/rancher/issues/22470
2019-09-05 17:05:34 -07:00
chentanjun
11c49ae59f
fix-up cluster/cluster.go main.go spelling-mistake
2019-09-03 12:45:20 -07:00
galal-hussein
798632b3a4
Handle missing request header ca in rotate certificate
2019-08-29 13:42:47 -07:00
rajashree
1b4f7939f1
Add nodeSelector in network and monitoring addons
2019-08-29 11:29:57 -07:00
Chris Kim
5cb6699fe3
Adding DNS Policy support for nginx ingress controller
2019-08-23 16:04:52 -07:00
galal-hussein
c5fefd5c77
Add k8s 1.16
2019-08-23 09:50:49 -07:00
orangedeng
0ef3c0849a
Support node taint configuration
...
**Problem:**
We can not set node taints in RKE node config.
**Solution:**
Sync taints from config in `SyncLabelsAndTaints` function
2019-08-22 21:09:05 -07:00
Sebastiaan van Steenis
ac16bd8b33
Configure MCS labels if selinux is enabled
2019-08-22 13:45:04 -07:00
Frank Mai
277797df0f
Support to generate Windows worker plan
...
- Put Windows worker plan generating back to reduce the changing from
Windows on rancher/rancher
- Prepare for rke bootstraps Windows cluster
**Issue:**
https://github.com/rancher/rancher/issues/16460
2019-08-21 20:50:31 -07:00
galal-hussein
9c5de9f577
Handle etcd changing its public IP address
2019-08-21 11:47:42 -07:00
Sebastiaan van Steenis
c3e9492716
Print original error regarding kubeconfig
2019-08-21 11:47:08 -07:00
kinarashah
734c651f16
remove support for default versioned templates
2019-08-20 13:59:03 -07:00
moelsayed
06e87ebabb
Remove uncompressed snapshot after restore
2019-08-20 12:50:25 -07:00
Darren Shepherd
f8bac2c059
Update to new certs package since latest k8s dropped it
2019-08-19 11:02:43 -07:00
Dan Ramich
4902cf71d9
Merge pull request #1539 from superseb/fixcalicolabels
...
Use correct labels to delete calico pods
2019-08-14 10:15:58 -07:00
Denise
0c405cdc88
Revert "Handle changing public ip for etcd member delete"
...
This reverts commit b5d7f5dcd4
.
2019-08-12 11:51:20 -07:00
Rodrigue Cloutier
aff29683b2
Fixed issue 1404: Support of configuration with no node with etcd role
2019-08-09 11:14:10 -07:00
moelsayed
a3e7bef8cd
Fix ingress deployment issue with PSP enabled
2019-08-09 11:11:58 -07:00
galal-hussein
b5d7f5dcd4
Handle changing public ip for etcd member delete
2019-08-09 11:07:30 -07:00
Sebastiaan van Steenis
f1cdff2a3e
Use correct labels to delete calico pods
2019-08-08 20:35:26 +02:00
Sebastiaan van Steenis
3f94e86706
Revert "Add per node kubelet server certificate"
...
This reverts commit b860e634db
.
2019-08-08 09:49:47 -07:00
Sebastiaan van Steenis
b860e634db
Add per node kubelet server certificate
2019-07-31 14:54:43 -07:00
moelsayed
fd237d9eef
Fix constant kubeapi certificate regeneration
2019-07-31 14:52:46 -07:00
moelsayed
688d4aedd7
support etcd custom uid/gid
2019-07-29 17:24:16 -07:00
galal-hussein
2bc960a01c
Add kubeapi proxy cluster role and role binding
2019-07-25 14:16:26 -07:00
kinarashah
b018c756b1
read serviceOptions from minor version first
2019-07-19 13:25:42 -07:00
kinarashah
217e1b41b8
generate correct default rketools
...
always use rke's default k8s's rke-tools, even if rancher's default k8s
changes. This is based on assumption that change in rke-tools would also
require a new rke version.
2019-07-18 14:48:48 -07:00
galal-hussein
55b1b4db7c
use healthz endpoint for kubelet healthcheck
2019-07-18 14:22:07 -07:00
moelsayed
17320083e9
Use etcd service extra_env in backup containers
2019-07-17 16:42:26 -07:00
Sebastiaan van Steenis
958042817a
Add Calico controller image for 3.7.4
2019-07-16 12:57:46 -07:00
moelsayed
7b5797ce18
reconcile node roles
2019-07-11 14:27:55 -07:00
moelsayed
058f196e72
Fix worker/controlplane reconcile logic
2019-07-11 14:27:55 -07:00
Sebastiaan van Steenis
63b6ece7b9
Check if certificates are present in state
...
Problem: If certificates are empty in cluster state (or missing rkestate file), RKE and Rancher would throw NPE.
Solution: Check if certificates are present or error out (for now this situation needs manual intervention)
2019-07-11 14:27:41 -07:00
kinarashah
f360207416
move metadata init to InitClusterObject
2019-07-08 15:40:31 -07:00
kinarashah
116b47b025
rancher pass serviceoptions and addon templates to rke
2019-07-03 10:04:27 -07:00
kinarashah
c191ed6202
use k8s version info from kontainer-driver-metadata
2019-07-03 10:04:27 -07:00
Sebastiaan van Steenis
42c097275a
Add stubdomains to kube-dns
2019-07-01 09:43:31 -07:00
moelsayed
2c907f9f21
rename EndpointCA
2019-06-25 14:17:53 -07:00
Sebastiaan van Steenis
9985bc8bae
Add k8s 1.15
2019-06-25 10:41:27 -07:00
moelsayed
38c31b9766
Add option to pass custom CA certificate for S3 backend
2019-06-20 15:00:00 -07:00
galal-hussein
ffa42ab900
fix file permissions
2019-06-18 12:52:42 -07:00
Sebastiaan van Steenis
88768e2527
CoreDNS default DNS provider for k8s 1.14 and up
2019-06-14 11:50:46 -07:00
Sebastiaan van Steenis
ae44a9510f
Format user addon YAML before concat
2019-06-11 12:52:44 -07:00
kinarashah
1a1080a234
always use DefaultRKETools for etcd snapshot
2019-06-11 12:52:25 -07:00
galal-hussein
870c073c10
Use Internal Addresses to sort the etcd connection string
2019-05-31 09:48:35 -07:00
Erik Wilson
581e3389c4
Reorder etcd servers list
2019-05-28 09:50:29 -07:00
Erik Wilson
e2f7f865ed
Force deploy certs if etcd cert was changed
2019-05-24 09:12:39 -07:00
Alena Prokharchyk
f409da01bd
Revert "Do preliminary KubeAPI port check using HTTP. Resolves rancher#1256."
...
This reverts commit 9c94d6525d
.
2019-05-24 09:12:13 -07:00
jlamillan
9c94d6525d
Do preliminary KubeAPI port check using HTTP. Resolves rancher#1256.
2019-05-22 10:25:36 -07:00