1
0
mirror of https://github.com/rancher/rke.git synced 2025-06-21 13:07:08 +00:00
Commit Graph

563 Commits

Author SHA1 Message Date
Sebastiaan van Steenis
4cbca1e90a Add CoreDNS as addon 2019-01-25 11:12:46 -08:00
Guangbo Chen
c73a58d45c Add port checks for network plugins 2019-01-24 13:29:26 -08:00
galal-hussein
f53e30adec Add disable option for metrics server 2019-01-24 12:15:47 -08:00
Jason Greathouse
a64e8f64fb honor kubernetes_version setting 2019-01-24 11:34:07 -08:00
galal-hussein
556e5bb678 Avoid creating dangling volumes with rke tools 2019-01-21 12:38:58 -08:00
moelsayed
cf037b1ed6 Allow local backup for rancher 2019-01-15 10:07:18 -08:00
galal-hussein
82fa8d6305 Add restart components to custom certs 2019-01-14 11:51:11 -08:00
Jason Greathouse
6d36ba86e9 AlwaysPullImages admission plugin option 2019-01-09 11:49:33 -08:00
galal-hussein
9ee750ec01 Adding csr generation and custom certs 2019-01-09 11:47:53 -08:00
galal-hussein
e79da956e9 Update rke to v1.13 and add versioned templates for calico and canal 2019-01-08 13:52:40 -08:00
Jason Greathouse
7afa6e927e update k8s defaults, CIS recommendations 2019-01-07 12:07:46 -08:00
moelsayed
2bf2cd8f5b Don't remove Ready nodes during restore 2019-01-04 14:26:40 -08:00
Guangbo Chen
9cfe5661d8 add etcd s3 uploading and downloading snapshot feature 2019-01-04 13:54:14 -08:00
Erik Wilson
e04b7d4413 Add support for Kubernetes API Authn Webhook
Allow multiple authn strategies to be defined, including new 'webhook'
strategy. Webhook strategy configuration contains the contents of the
authentication webhook file as well as the cache timeout period.

This change allows a Kubernetes API Auth service to authenticate
user requests without proxying through the Rancher server.
2019-01-03 17:15:23 -07:00
galal-hussein
3c6c7f1b7b Run rebuild cluster certs from clusterup 2018-12-20 14:04:47 -08:00
galal-hussein
4d23fb4288 Return api and client certs to rotate certs 2018-12-18 16:35:20 -08:00
galal-hussein
66fb2c4ac0 Get checksum of the cloud file content 2018-12-06 16:23:20 -08:00
Chris Kim
afaad6c824 Adding ability to set cluster network to none 2018-12-03 11:34:18 -08:00
galal-hussein
ff4c93e179 refactor etcd restoration process 2018-11-30 12:48:41 -08:00
Mike Kelley
5941368767 add support for weave password 2018-11-29 16:39:45 -08:00
galal-hussein
f3bbd81c52 Update etcd save/restore to work with new state managemnet 2018-11-27 11:09:56 -08:00
galal-hussein
11aa0caabc Fix rotate certificates with new state 2018-11-14 05:15:57 +08:00
moelsayed
b67a67c3bb Force lowercase node names 2018-11-14 04:54:35 +08:00
galal-hussein
696b61679c Final fixes and cleanup for state management
Fix dind and local and etcd snapshots

add ExternalFlags and dialer options
2018-11-09 11:16:17 -08:00
moelsayed
6da35256a8 handle upgrade cases
backup state to kubernetes
2018-11-09 11:16:17 -08:00
galal-hussein
8b8870311b refactor the build state
remove extra cert generation for etcd in reconcile

fix reconcile and etcd add and remove cluster state with rke remove

fix add/remove issues

Fix the up command

Fix default paths for kubeconfig and rkestate
2018-11-09 11:16:17 -08:00
moelsayed
90fd13db65 Update main code path to use new state 2018-11-09 11:16:17 -08:00
galal-hussein
f48da22d8e init commit for refactor state
add init test

use rkeconfig for init

reconcile old state file
2018-11-09 11:16:17 -08:00
galal-hussein
631c0725f4 Fix broken etcd rolling snapshot 2018-11-08 13:14:15 -08:00
galal-hussein
f0572f48b4 Fix etcd snapshot 2018-11-07 12:43:25 -08:00
galal-hussein
deb3518d78 Enable etcd snapshot by default 2018-11-02 09:35:57 -07:00
galal-hussein
3551e6e4b6 Add Rotate certificates command to rke 2018-10-31 12:08:31 -07:00
moelsayed
dd4d19a945 Fix remove performance issues 2018-10-24 10:24:14 -07:00
moelsayed
b7d98733cf Run state save in a worker pool 2018-10-19 17:24:02 -07:00
moelsayed
90c426d73e Switch all concurrent tasks to use worker pool 2018-10-18 13:24:59 -07:00
galal-hussein
4fb01ab69e Fix scaling problems with cluster state deployer 2018-10-18 10:34:32 -07:00
Sebastiaan van Steenis
22a339ea33 Update to Golang 1.11 2018-10-18 09:27:46 -07:00
Sebastiaan van Steenis
a161d30f78 Added info in log messages, more consistency in log messages 2018-10-18 09:27:13 -07:00
galal-hussein
c2071495ac use errgroup for tunneling hosts 2018-10-18 09:26:30 -07:00
moelsayed
24a8465941 Fix flannel issue with k8s 1.12 2018-10-18 09:26:17 -07:00
galal-hussein
cf76401978 Change the etcd member add steps 2018-10-18 09:25:59 -07:00
moelsayed
9c85b5b451 Refactor taints and labels sync to improve performance 2018-10-18 09:25:27 -07:00
moelsayed
22dc19205f Handle upgrade from metrics server 0.2.x to 0.3.x 2018-10-04 14:48:00 -07:00
moelsayed
496d1a46a5 Allow replacing a single contorl node 2018-10-04 13:14:28 -07:00
Sebastiaan van Steenis
12559a21c7 Use clusterversion to check supported Docker versions 2018-10-04 11:31:35 -07:00
moelsayed
d4759bcc4f Remove ServiceOption if empty 2018-10-02 12:58:21 -07:00
galal-hussein
ce62c898bb Handle deleting all controlplane nodes when nodes are unreachable 2018-09-26 17:03:53 -07:00
galal-hussein
2bd4577b19 Add default heartbeat and election timeout to etcd
Reload the etcd cluster in the right order
2018-09-25 18:24:52 -07:00
galal-hussein
95ba4ea61f Fix cluster state network port check issue 2018-09-20 10:26:25 -07:00
galal-hussein
925df98ea6 Save state to the nodes backup path 2018-09-14 18:30:40 -07:00
galal-hussein
00e317250d Fix requestheaqder ca certificate regeneration 2018-09-07 18:29:00 -07:00
galal-hussein
67448c38c6 Update ingress nginx template yaml 2018-09-06 15:57:51 -07:00
galal-hussein
453ddd5213 Remove unnecessary output 2018-09-06 12:55:05 -07:00
galal-hussein
f314d1dc96 Avoid panic if cert or key of a secret is not found 2018-09-04 13:10:13 -07:00
galal-hussein
3c76263096 Add default option to private registries 2018-08-31 14:56:57 -07:00
moelsayed
6b6a7803a7 Move admission controller options to ServiceOptions 2018-08-30 14:52:30 -07:00
galal-hussein
6b141295aa update log message for validate node count 2018-08-30 10:00:38 -07:00
moelsayed
d451683abb Add docker config file environment variables for kubelet 2018-08-30 10:00:28 -07:00
moelsayed
4b3068d673 Validate hostname_override values 2018-08-28 11:40:42 +10:00
MaiWJ
bcb6e13618 Extend rke to tolerate the Windows host
1. Support to configure Flannel as "host-gw" backend
2. Define the network component yaml and ingress
   controller yaml only schedule to non-Windows node
3. Support to configure Docker container's port publishing
2018-08-26 18:09:21 -07:00
Sebastiaan van Steenis
4bb01e8f6b Correct metrics YAML variable name 2018-08-14 21:57:43 +03:00
Sebastiaan van Steenis
4f0a191e44 Typo valid 2018-08-14 21:57:31 +03:00
Sebastiaan van Steenis
bff7e0a2c3 Avoid panic in rke-tools entrypoint detection 2018-08-09 09:25:25 -07:00
moelsayed
de617da470 Fix entrypoint bug 2018-08-05 19:57:52 -07:00
moelsayed
4357da7742 handle entrypoint upgrade across versions 2018-08-04 04:30:54 -07:00
Denise
16e63092f9
Merge pull request #836 from moelsayed/change_entrypoint
Fix sidekick upgrade issue and change services entry point
2018-08-03 11:38:45 -07:00
moelsayed
39b5ac1345 Fix resoncile missing taints 2018-08-03 11:38:02 -07:00
moelsayed
010a7977ff Change entrypoint to fix multiple mount problem 2018-08-02 02:33:46 +02:00
moelsayed
28db358ebd Fix nested mounts issue when using default host prefix 2018-08-01 11:26:42 -07:00
moelsayed
5ec490da11 Increase addon delete job timeout 2018-07-27 11:33:38 -07:00
galal-hussein
b71fd3ba35 Fix local port check 2018-07-23 09:10:06 -07:00
Thorsten Schifferdecker
9766b4cbcd fix typo porxy > proxy
Signed-off-by: Thorsten Schifferdecker <ts@systs.org>
2018-07-22 08:36:34 -07:00
galal-hussein
3ce50d28d3 Add etcd snapshot fix and more log messages to certificate bundle
Add function to collect stdout and stderr logs from containers
2018-07-20 14:09:29 -07:00
Chase Bolt
82af829b8c adjust volumeplugins to a non-persistent path that will work oob with default configs 2018-07-20 13:21:36 -07:00
moelsayed
2eeb5cac00 Make sure Binds are unique 2018-07-19 15:12:09 -07:00
David Lewis
ecd92ceff6 Set 644 on cloud-config 2018-07-18 11:43:17 -07:00
galal-hussein
8269c3f301 Add metrics-server addon deployment 2018-07-17 16:51:59 -07:00
orangedeng
9f7a37845e Add support for API aggregation layer
Add API server parameters
`requestheader-client-ca-file`,
`requestheader-allowed-names`,
`proxy-client-key-file` and
`proxy-client-cert-file`.
After we added this parameters into API server, the API aggregation
server will be supported when it is deployed in rke cluster.
2018-07-17 16:51:59 -07:00
moelsayed
241f7857d6 Remove ingress controller when disabled 2018-07-17 15:55:15 -07:00
Sebastiaan van Steenis
af77619859 GetAddonsExcuteJob and ApplySystemAddonExcuteJob typos 2018-07-17 09:49:49 -07:00
Chase Bolt
f9ecba0ab2 adjust kubelet volume-plugin-dir to match root-dir 2018-07-11 12:55:46 -07:00
moelsayed
d155cc8e76 Allow etcd parameters to be overridden 2018-07-06 13:32:08 -07:00
Sebastiaan van Steenis
f7814a5e8a Set cluster-cidr on kube-proxy 2018-06-29 13:19:38 -07:00
moelsayed
48faa8bf35 Remove container dead log links on cluster remove 2018-06-29 11:32:08 -07:00
Sebastiaan van Steenis
1da390d846 Add hostname-override to kube-proxy 2018-06-29 11:31:58 -07:00
Sebastiaan van Steenis
c4f12c8b0d Better error when ssh_key_path can't be opened 2018-06-29 11:27:56 -07:00
moelsayed
39e846442b Fix container log location for ros 2018-06-29 10:49:49 -07:00
moelsayed
fdba4f86e5 Fix reconcile for ros prefix 2018-06-25 17:22:32 -07:00
galal-hussein
a75e3d693c Register controlplane node with taint 2018-06-21 23:41:52 -07:00
galal-hussein
fc48d82392 Change controlplane taint to NoSchedule 2018-06-21 21:08:36 -07:00
galal-hussein
1f8113428e restore certificates to at least on etcd/control plane 2018-06-20 11:01:07 -07:00
moelsayed
4c30f1a28d restart related k8s services when cloud provider config is updated 2018-06-13 09:21:58 -07:00
moelsayed
af9ab4fb94 Add endpoint-reconciler support 2018-06-13 09:19:39 -07:00
moelsayed
2f28cb24ee Add support for addons upgrades 2018-06-12 13:18:19 -07:00
Sebastiaan van Steenis
b72f4b2c70 Ability to add extra environment variables to services 2018-06-08 09:45:45 -07:00
galal-hussein
2da8682463 Add certificate bundle backup with etcd snapshot-save 2018-06-07 16:40:41 -07:00
galal-hussein
f6d391b664 Remove check for control plane to etcd plane on port 2380 2018-06-07 16:25:16 -07:00
Sebastiaan van Steenis
b6ba732816 Improve port check error message 2018-06-07 11:29:28 -07:00
moelsayed
716a776d42 Add service-node-port-range for kube-api 2018-06-06 14:27:06 -07:00
galal-hussein
2142661ea7 Refactor cloud provider support 2018-06-06 10:22:50 -07:00
galal-hussein
3c906a9ed2 Make control node only unschedulable 2018-05-31 15:43:30 -07:00
Sebastiaan van Steenis
aabce06714 Get latest logline if healthcheck fails 2018-05-29 15:27:22 -07:00
galal-hussein
4b4ec352ae Change backup to snapshot in etcd 2018-05-18 00:34:12 +02:00
galal-hussein
08358c85cd Add weave loopback binary 2018-05-16 17:35:17 -07:00
galal-hussein
db3bda1191 fix rhel and centos regression 2018-05-15 14:08:29 -07:00
galal-hussein
21ee619645 Fix override prefix path for ROS, B2D, and CoreOS 2018-05-14 21:14:28 -07:00
galal-hussein
f75ab86027 Fix etcd restore issue 2018-05-14 21:13:36 -07:00
galal-hussein
2c64afeb3e Add prefix path for CoreOS 2018-05-10 18:24:57 -07:00
moelsayed
5fdc6c28cc Override service level defined images 2018-05-10 18:22:41 -07:00
galal-hussein
aff01a9267 Bastion host 2018-05-10 00:16:04 +02:00
moelsayed
9addf796a2 Critical and non-critical addons
Configurable addon job timeout
2018-05-09 23:44:19 +02:00
Alena Prokharchyk
47ddb6ee41
Merge pull request #548 from galal-hussein/etcd_backup
etcd backup/restore
2018-05-09 10:48:34 -07:00
galal-hussein
a3416e6b92 Etcd Backup/restore 2018-05-09 19:39:19 +02:00
moelsayed
b05faf9f4a Fix empty default calico cloud provider 2018-05-09 01:53:51 +02:00
Alena Prokharchyk
9e32c532e8
Merge pull request #574 from moelsayed/container_labels
Container labels
2018-05-08 15:16:22 -07:00
moelsayed
d42ead8e11 Add container name labels 2018-05-08 19:47:12 +02:00
galal-hussein
dd403b2769 Add more log info when deleting k8s nodes 2018-05-05 00:07:30 +02:00
Hussein Galal
6ccf22d912
Merge pull request #561 from galal-hussein/fix_rbac_disabled
Fix health check when RBAC is disabled
2018-05-03 23:13:44 +02:00
Hussein Galal
f81e1d5c16
Merge pull request #570 from superseb/debug_loglength
Fix debug message on count of container log lines
2018-05-03 23:12:41 +02:00
Hussein Galal
1bfd18e0e2
Merge pull request #573 from galal-hussein/add_api_servercount
Add api server count flag to kube-apiserver
2018-05-03 23:11:20 +02:00
galal-hussein
28e167aa5d Add api server count flag to kube api 2018-05-03 21:37:44 +02:00
Sebastiaan van Steenis
516fd63790 Fix debug message on count of container log lines 2018-05-03 01:20:56 +02:00
Sebastiaan van Steenis
9498c80cc7 Add etcd env vars for etcdctl 2018-05-02 13:47:53 +02:00
galal-hussein
35624c98a1 Fix healthcheck when RBAC is disabled 2018-05-01 02:25:52 +02:00
galal-hussein
7cbc978489 Skip cloud config parameter with aws cloud provider 2018-04-27 09:58:27 -07:00
galal-hussein
657f38b9f0 Update canal and calico to 3.1.1 2018-04-26 05:10:53 +02:00
galal-hussein
cefe16eb78 Pass docker info to host in generate plan 2018-04-25 16:28:29 -07:00
moelsayed
a2d985ef46 Handle missing backup kube-etcd gracefully 2018-04-25 11:37:31 -07:00
Sebastiaan van Steenis
6431e8495d Add /usr and /etc readonly to kubelet for os-release 2018-04-24 15:27:16 -07:00
David Lewis
253392a1a6 Always write cloud config 2018-04-24 15:24:04 -07:00
moelsayed
4508d11401 Make cni directories rw 2018-04-24 15:23:39 -07:00
moelsayed
c467584f8f Get certificates for active etcd servers only 2018-04-22 14:32:45 -07:00
moelsayed
e5c2c86b65 Ensure nginx proxy is upgradable if control hosts change 2018-04-22 14:29:13 -07:00
Darren Shepherd
f9200e21bf Grab default from types 2018-04-20 19:07:00 -07:00
moelsayed
0069872976 Fix etcd client endpoint address 2018-04-20 15:46:32 -07:00
moelsayed
fb1fd833ce Deploy backup certificates on full plane instead of single node 2018-04-20 15:46:32 -07:00
moelsayed
f1e39f9b10 Fix etcd listen address edge case when public address is DNATed 2018-04-20 15:46:32 -07:00
moelsayed
d11221c604 Bump default k8s to v1.10 2018-04-20 15:42:06 -07:00
Alena Prokharchyk
71bafd1f08
Merge pull request #505 from superseb/etcd_listenaddress
Let etcd only listen on advertised url
2018-04-19 13:37:07 -07:00
Alena Prokharchyk
dc862ed56d
Merge pull request #523 from superseb/portcheck_timeout
Portcheck timeout
2018-04-19 13:35:58 -07:00
Alena Prokharchyk
d49016714a
Merge pull request #524 from ibuildthecloud/master
WIP Use new rke-tools image
2018-04-19 11:07:22 -07:00
Darren Shepherd
dd9f37dbee Don't mask error 2018-04-19 08:54:15 -07:00
Darren Shepherd
4273d1d874 Use new rke-tools image 2018-04-19 08:53:55 -07:00
Sebastiaan van Steenis
74d38c4552 Set timeout on portchecker 2018-04-19 16:03:14 +02:00
moelsayed
c490a0b989 remove path prefix from /var/lib/rancher bind 2018-04-18 14:45:14 -07:00
moelsayed
a8b0cf052d Handle non-semver k8s images 2018-04-18 00:04:24 -07:00
Darren Shepherd
9ab1035852 Always try to pull 2018-04-17 23:43:06 -07:00
moelsayed
275ba147bc Fix version panic
Fix version confilict
2018-04-17 20:27:21 -07:00
moelsayed
b057fc322a bind /var/lib/rancher in kubelet 2018-04-18 03:29:20 +02:00
Alena Prokharchyk
89e7d8933d
Merge pull request #513 from moelsayed/k8s_image
Kubernetes system image takes precedence over cluster kubernetes version
2018-04-17 16:54:08 -07:00
moelsayed
9a243ac091 Use kubernetes major version for service options 2018-04-18 01:43:58 +02:00
moelsayed
2eda9fe990 Kubernetes system image takes precedence over cluster kubernetes version 2018-04-17 22:46:36 +02:00
rawmind0
14c239c598 Added extra_args type map[string]string to ingress-controller. Added rancher-minimal-ssl.yml and rancher-minimal-passthrough.yml to deploy rancher v2.0 using rke. Updated README.md 2018-04-16 16:46:13 -07:00
Sebastiaan van Steenis
df3e75b1b5 Let etcd only listen on advertised url 2018-04-16 10:08:27 +02:00
galal-hussein
b3f457426c Fix multiple etcd add at runtime 2018-04-14 22:59:33 -07:00
Darren Shepherd
829afa1084 Fix missing image for etcd only nodes 2018-04-14 10:25:50 -07:00
galal-hussein
a4aa5c8192 Change kubelet to rslave 2018-04-11 16:37:56 -07:00
galal-hussein
825bbbdf71 Add prefix path to services and generate plan 2018-04-12 00:54:47 +02:00
moelsayed
493d296c28 Add k8s services options based on k8s version 2018-04-11 19:28:26 +02:00
Sebastiaan van Steenis
2ca8e6421a Change to canal as default network plugin 2018-04-05 19:23:42 -07:00
galal-hussein
4136d82916 Add role labels to node plan 2018-04-04 03:23:26 -07:00
moelsayed
78bff1ebc9 Add AuthConfig to proceses
Refactor registry auth
2018-04-04 00:01:46 +02:00
galal-hussein
915ce9ad29 Add address annotation to the node plan
Adding labels to nod plan
2018-04-03 12:38:37 -07:00
Alena Prokharchyk
0156dbc480
Merge pull request #472 from galal-hussein/fix_aws_node_removal
Add get node for delete and cordon
2018-04-02 15:53:48 -07:00
galal-hussein
7c0f3f6e57 Add get node for delete and cordon 2018-04-03 00:34:15 +02:00
Alena Prokharchyk
0503bb87ec
Merge pull request #470 from galal-hussein/set_cert_paths
Set cluster certificate paths
2018-04-02 15:18:55 -07:00
galal-hussein
79eaedfa26 Update cluster network and cloud provider options 2018-04-02 23:28:40 +02:00
galal-hussein
41599bf24f Set cluster certificate paths 2018-04-02 20:36:40 +02:00
Darren Shepherd
826b75eeaa Fix log message 2018-04-02 04:03:43 -07:00
Darren Shepherd
b841604933 Revert "Make etcd provisioning a public API"
This reverts commit d2c58fb8e6.
2018-04-02 04:03:43 -07:00
Darren Shepherd
aed76eb7e3 Default the docker info 2018-03-31 04:00:50 -07:00
Darren Shepherd
d2c58fb8e6 Make etcd provisioning a public API 2018-03-31 04:00:50 -07:00
Darren Shepherd
149f866c47 Fix panic 2018-03-31 04:00:50 -07:00
Alena Prokharchyk
9a22edbfc3
Merge pull request #463 from galal-hussein/fix_kubeapi_param
fix kubelet and kubeapi params
2018-03-30 15:48:15 -07:00
galal-hussein
fdbb4bb03b fix kubelet and kubeapi params 2018-03-31 00:43:34 +02:00
Alena Prokharchyk
329a946600
Merge pull request #460 from HighwayofLife/waiting_for_container
Add host to wait for container check
2018-03-30 15:23:01 -07:00
moelsayed
30498c4f5b fix typo 2018-03-30 20:00:19 +02:00
David Lewis
c2ad3d5c4d Add host to wait for container check 2018-03-30 10:28:03 -07:00
Alena Prokharchyk
228423358a
Merge pull request #452 from galal-hussein/strong_types
Network and cloud provider types for rke
2018-03-29 14:00:21 -07:00
galal-hussein
b431a22a9c Add cloud and network provider types 2018-03-29 22:58:46 +02:00
galal-hussein
64b8b4a6a1 Change cluster cidr defaults 2018-03-29 21:51:35 +02:00
Alena Prokharchyk
024765a818
Merge pull request #449 from galal-hussein/azure_provider
Add azure cloud provider
2018-03-28 13:46:05 -07:00
galal-hussein
3694d16212 Add Azure cloud provider 2018-03-28 21:46:28 +02:00
David Lewis
ca4908ff69 Fix #447 golint 2018-03-27 14:32:13 -07:00
galal-hussein
5b848a2b45 Set node-ip and addresses annotations 2018-03-27 00:53:28 +02:00
moelsayed
fcdeca19f0 Make sure we properly separate included addon manifests 2018-03-23 20:36:55 -07:00
Alena Prokharchyk
8b8bc8ab8b
Merge pull request #437 from moelsayed/tune_update_only
Update only for pre-pull and log cleanup
2018-03-23 17:49:46 -07:00
galal-hussein
fea23ca9f0 Fix include addons 2018-03-24 02:11:40 +02:00
moelsayed
69b629c115 Update only for pre-pull and log cleanup 2018-03-24 01:47:44 +02:00
Alena Prokharchyk
0751f86e85
Merge pull request #436 from dahendel/addons_include
Adding support for urls and file paths
2018-03-23 15:16:35 -07:00
Alena Prokharchyk
d0a340257f
Merge pull request #433 from HighwayofLife/add_additional_hosts
Add additional hosts to Api Server PKI
2018-03-23 15:03:04 -07:00
dhendel
7875c09966 Adding support for urls and file paths 2018-03-23 16:50:08 -05:00
moelsayed
8188c1c445 Set default allow-untagged-cloud 2018-03-23 22:15:30 +02:00
David Lewis
0efc4fc845 Support additional altnames for PKI certs 2018-03-23 12:39:34 -07:00
Alena Prokharchyk
66f0d1013b
Merge pull request #413 from HighwayofLife/cluster_name
Support Cluster name in Kube Config
2018-03-23 11:35:51 -07:00
David Lewis
34c41c1b05 Add ClusterName support for kube config 2018-03-23 11:28:58 -07:00
galal-hussein
e8571898b4 Add support for AWS cloud provider 2018-03-23 20:14:11 +02:00
David Lewis
4eb733b2b7 Support component command argument overrides
Append podsecuritypolicy to admission-control list
2018-03-23 10:27:12 -07:00
David Lewis
5fcfe95aa0 Add support for additional service binds
Support Additional volume binds

Add basic documentation for extra args and binds
2018-03-23 09:22:04 -07:00
moelsayed
5ea7cdebcb typo 2018-03-23 02:02:46 +02:00
moelsayed
914ca06e2c Error out on unsuppored docker version instead of Warn 2018-03-22 20:33:11 +02:00
Alena Prokharchyk
3824db88a9
Merge pull request #425 from moelsayed/log_links
Log RKE components to a specific location
2018-03-21 13:40:05 -07:00
moelsayed
ef7b997e2a Log RKE components to a specific location 2018-03-21 22:29:09 +02:00
galal-hussein
4d90a1ca79 Disable cadvisor and readonly port in kubelet 2018-03-21 19:59:45 +02:00
Alena Prokharchyk
c299e9c690
Merge pull request #405 from Jason-ZW/master
Add rprivate to fix system break after reboot
2018-03-21 09:31:11 -07:00
galal-hussein
6e7e18ad1e Update workers only option
Disable port check
2018-03-20 15:17:35 +02:00
moelsayed
5dcaf4b573 bump k8s version 2018-03-13 20:02:22 +02:00
Alena Prokharchyk
bc05bc2dcc
Merge pull request #410 from galal-hussein/secure_kubelet
Secure kubelet port access
2018-03-12 13:28:13 -07:00
galal-hussein
fcefbf7016 Secure kubelet port access 2018-03-12 21:04:28 +02:00
Alena Prokharchyk
486cea8464
Merge pull request #403 from cloudnautique/add_sshagent_global_flag
Leverage global SSHAgentAuth setting
2018-03-12 11:25:01 -07:00
Jason
8066b9d806
Add rprivate to fix system break after reboot
System break when restart node, update for PR #401
2018-03-06 10:49:20 +08:00
Bill Maxwell
ad0bc6c0aa Leverage global SSHAgentAuth setting
This addresses users issues in being unable to use RKE command line
using SSH_AUTH_SOCK. On OSX the socket env var is set, but nothing
is listening. Also, Linux users have reported issues. To address this
the default mode is to not use SSH Agent Auth. A user must set it
explicitly in either the config file or on the CLI. The only way
to use a passphrase protected key file is with a properly configured
SSH Agent and using SSH Agent Auth.
2018-03-05 17:52:43 -07:00
Jason
f238dadfbb Add rprivate parameters to kubelet mounts. Fixed #285 #263.
Such as Docker 1.13, bind mounts propagation doesn't default to `rprivate` which cause problems when kubelet unmount cgroup.
2018-03-05 09:29:38 +00:00
galal-hussein
f76f954b42 Disable kubeapi port check if wrap transport is used 2018-03-04 08:38:37 -07:00
galal-hussein
9511fa54cb Remove api runtime config 2018-03-03 21:58:41 +02:00
Alena Prokharchyk
3f6c2ba8c7
Merge pull request #391 from moelsayed/ingress_nit
Nit fixes for ingress
2018-03-02 16:54:55 -08:00
Darren Shepherd
c3d3d013dc Add option to use kubectl to deploy 2018-03-01 14:35:58 -07:00
moelsayed
473fe2c259 Nit fixes for ingress 2018-02-28 01:58:43 +02:00
Darren Shepherd
2a72d7057a Typo 2018-02-26 16:31:34 -07:00
Darren Shepherd
fce6b15f18 Add ability to deploy jobs with kubectl and not job task
This API is used solely in rancher local clusters.
2018-02-26 16:31:34 -07:00
galal-hussein
bfa51fd41c extract apply authz resource function 2018-02-26 16:04:19 -07:00
moelsayed
dcf497add2 Fix etcd process regression 2018-02-26 23:43:24 +02:00
moelsayed
eddb9ec56b Use default images from types 2018-02-26 21:30:52 +02:00
moelsayed
319c383f13 Use named process map 2018-02-26 12:14:36 -07:00
galal-hussein
9a19de383d Add node authorizer 2018-02-26 11:56:57 -07:00
galal-hussein
ba7e8bb236 Use k8s datastore with calico and remove ca keys 2018-02-24 01:26:22 +02:00
galal-hussein
1dc9a94021 Change etcd dir 2018-02-22 19:31:31 -07:00
Alena Prokharchyk
4731c01904
Merge pull request #370 from galal-hussein/add_rem_idempotency
Add/Remove etcd idempotency
2018-02-22 09:54:34 -08:00
galal-hussein
5a35f47dc5 Add remove etcd idempotency 2018-02-22 19:49:18 +02:00
Alena Prokharchyk
bc8917702c
Merge pull request #344 from galal-hussein/stop_duplicate_nodes
Validate Duplicate nodes
2018-02-21 17:00:53 -08:00
galal-hussein
5b9d9a75d0 Validate Duplicate nodes 2018-02-22 02:45:20 +02:00
Alena Prokharchyk
e1aca4f37d
Merge pull request #249 from superseb/configurable_sshport
SSH port is configurable
2018-02-21 16:36:07 -08:00
galal-hussein
c02873b8e9 Ignore inactive hosts 2018-02-22 02:16:51 +02:00
Sebastiaan van Steenis
56da1fe849 SSH port is configurable 2018-02-21 13:04:06 +01:00
moelsayed
5cf4ef5f5f Add ingress controller images to SystemImages 2018-02-20 20:54:48 +02:00
Alena Prokharchyk
97c16857c8
Merge pull request #365 from moelsayed/custom_k8s_dialer
Add support for custom WrapTransport for Kubernetes Client
2018-02-20 10:50:09 -08:00
moelsayed
03673b8f22 Add support for custom WrapTransport for Kubernetes Client 2018-02-20 20:45:32 +02:00
Alena Prokharchyk
bd0b021549
Merge pull request #357 from superseb/dockerrootdir
Use configured docker daemon root dir on kubelet
2018-02-20 09:24:47 -08:00
galal-hussein
b1c2a5d153 Fix etcd issue with reloading cluster 2018-02-16 16:03:00 -08:00
Sebastiaan van Steenis
086201a5f5 Use configured docker daemon root dir on kubelet 2018-02-16 18:10:14 +01:00
galal-hussein
11d7aa0e16 Start cluster with only etcd nodes 2018-02-16 03:39:13 +02:00
Alena Prokharchyk
5b7e5d9c30
Merge pull request #340 from galal-hussein/fix_duplicate_addresses
add /var/lib/cni to kubelet mounts
2018-02-15 16:04:56 -08:00
galal-hussein
289c3d5d20 add /var/lib/cni to kubelet mounts 2018-02-14 23:14:21 +02:00
galal-hussein
c2c1804500 External etcd 2018-02-14 22:58:35 +02:00
moelsayed
e996c1748e Fix selinux regression 2018-02-13 20:30:15 +02:00
moelsayed
169ac106a5 Add GenetatePlan() and use it internally 2018-02-13 03:33:29 +02:00
galal-hussein
59182cee62 [RKE Refactor] Generate cluster and node certs 2018-02-08 20:15:36 +02:00
galal-hussein
d99efdc60f rke refactoring - configure cluster method 2018-02-08 05:13:06 +02:00
galal-hussein
c2537737fb Copy local connection dialer factory on update 2018-02-07 21:39:56 +02:00
Alena Prokharchyk
0e1542a7b3
Merge pull request #328 from galal-hussein/fix_ingress
Fix ingress
2018-02-06 16:32:57 -08:00