Commit Graph

1871 Commits

Author SHA1 Message Date
Vyacheslav Semushin 1404d1a02b staging/podsecuritypolicy/rbac/README.md: update to use PSP from policy API group. (#208) 2018-03-21 13:46:02 -07:00
Ahmet Alp Balkan cca6ae38bb
https-nginx: Correct tls.[crt|key] mount (#217)
Fixes #194.
2018-03-20 13:00:47 -07:00
Marek Siarkowicz 188c3d9b92 [guestbook-go] Use multi-stage build (#211) 2018-03-20 09:10:35 -07:00
Marek Siarkowicz e4cc298ab6 Import kubernetes updates (#210)
* Admin Can Specify in Which GCE Availability Zone(s) a PV Shall Be Created

An admin wants to specify in which GCE availability zone(s) users may create persistent volumes using dynamic provisioning.

That's why the admin can now configure in StorageClass object a comma separated list of zones. Dynamically created PVs for PVCs that use the StorageClass are created in one of the configured zones.

* Admin Can Specify in Which AWS Availability Zone(s) a PV Shall Be Created

An admin wants to specify in which AWS availability zone(s) users may create persistent volumes using dynamic provisioning.

That's why the admin can now configure in StorageClass object a comma separated list of zones. Dynamically created PVs for PVCs that use the StorageClass are created in one of the configured zones.

* move hardPodAffinitySymmetricWeight to scheduler policy config

* Added Bind method to Scheduler Extender

- only one extender can support the bind method
- if an extender supports bind, scheduler delegates the pod binding to the extender

* examples/podsecuritypolicy/rbac: allow to use projected volumes in restricted PSP.

* fix typo

* SPBM policy ID support in vsphere cloud provider

* fix the invalid link

* DeamonSet-DaemonSet

* Update GlusterFS examples readme.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>

* fix some typo in example/volumes

* Fix  spelling in example/spark

* Correct spelling in quobyte

* Support custom domains in the cockroachdb example's init container

This switches from using v0.1 of the peer-finder image to a version that
includes https://github.com/kubernetes/contrib/pull/2013

While I'm here, switch the version of cockroachdb from 1.0 to 1.0.1

* Update docs/ URLs to point to proper locations

* Adds --insecure to cockroachdb client command

Cockroach errors out when using said command:

```shell
▶  kubectl run -it --rm cockroach-client --image=cockroachdb/cockroach --restart=Never --command -- ./cockroach sql --host cockroachdb-public
Waiting for pod default/cockroach-client to be running, status is Pending, pod ready: false
Waiting for pod default/cockroach-client to be running, status is Pending, pod ready: false
Waiting for pod default/cockroach-client to be running, status is Pending, pod ready: false
If you don't see a command prompt, try pressing enter.
                                                      Error attaching, falling back to logs: unable to upgrade connection: container cockroach-client not found in pod cockroach-client_default
Error: problem using security settings, did you mean to use --insecure?: problem with CA certificate: not found
Failed running "sql"
Waiting for pod default/cockroach-client to terminate, status is Running
pod "cockroach-client" deleted
```

This PR updates the README.md to include --insecure in the client command

* Add StorageOS volume plugin

* examples/volumes/flexvolume/nfs: check for jq and simplify quoting.

* Remove broken getvolumename and pass PV or volume name to attach call

* Remove controller node plugin driver dependency for non-attachable flex volume drivers (Ex: NFS).

* Add `imageFeatures` parameter for RBD volume plugin, which is used to
customize RBD image format 2 features.
Update RBD docs in examples/persistent-volume-provisioning/README.md.

* Only `layering` RBD image format 2 feature should be supported for now.

* Formatted Dockerfile to be cleaner and precise

* Update docs for user-guide

* Make the Quota creation optional

* Remove duplicated line from ceph-secret-admin.yaml

* Update CockroachDB tag to v1.0.3

* Correct the comment in PSP examples.

* Update wordpress to 4.8.0

* Cassandra example, use nodetool drain in preStop

* Add termination gracePeriod

* Use buildozer to remove deprecated automanaged tags

* Use buildozer to delete licenses() rules except under third_party/

* NR Infrastructure agent example daemonset

Copy of previous newrelic example, then modified to use the new agent
"newrelic-infra" instead of "nrsysmond".

Also maps all of host node's root fs into /host in the container (ro,
but still exposes underlying node info into a container).

Updates to README

* Reduce one time url direction

Reduce one time url direction

* update to rbac v1 in yaml file

* Replicate the persistent volume label admission plugin in a controller in
the cloud-controller-manager

* update related files

* Paramaterize stickyMaxAgeMinutes for service in API

* Update example to CockroachDB v1.0.5

* Remove storage-class annotations in examples

* PodSecurityPolicy.allowedCapabilities: add support for using * to allow to request any capabilities.

Also modify "privileged" PSP to use it and allow privileged users to use
any capabilities.

* Add examples pods to demonstrate CPU manager.

* Tag broken examples test as manual

* bazel: use autogenerated all-srcs rules instead of manually-curated sources rules

* Update CockroachDB tag to v1.1.0

* update BUILD files

* pkg/api/legacyscheme: fixup imports

* Update bazel

* [examples.storage/minio] update deploy config version

* Volunteer to help review examples

I would like to do some code review for examples about how to run real applications with Kubernetes

* examples/podsecuritypolicy/rbac: fix names in comments and sync with examples repository.

* Update storageclass version to v1 in examples

* pkg/apis/core: mechanical import fixes in dependencies

* Use k8s.gcr.io vanity domain for container images

* Update generated files

* gcloud docker now auths k8s.gcr.io by default

* -Add scheduler optimization options, short circuit all predicates if one predicate fails

* Revert k8s.gcr.io vanity domain

This reverts commit eba5b6092afcae27a7c925afea76b85d903e87a9.

Fixes https://github.com/kubernetes/kubernetes/issues/57526

* Autogenerate BUILD files

* Move scheduler code out of plugin directory.

This moves plugin/pkg/scheduler to pkg/scheduler and
plugin/cmd/kube-scheduler to cmd/kube-scheduler.

Bulk of the work was done with gomvpkg, except for kube-scheduler main
package.

* Fix scheduler refs in BUILD files.

Update references to moved scheduler code.

* Switch to k8s.gcr.io vanity domain

This is the 2nd attempt.  The previous was reverted while we figured out
the regional mirrors (oops).

New plan: k8s.gcr.io is a read-only facade that auto-detects your source
region (us, eu, or asia for now) and pulls from the closest.  To publish
an image, push k8s-staging.gcr.io and it will be synced to the regionals
automatically (similar to today).  For now the staging is an alias to
gcr.io/google_containers (the legacy URL).

When we move off of google-owned projects (working on it), then we just
do a one-time sync, and change the google-internal config, and nobody
outside should notice.

We can, in parallel, change the auto-sync into a manual sync - send a PR
to "promote" something from staging, and a bot activates it.  Nice and
visible, easy to keep track of.

* Remove apiVersion from scheduler extender example configuration

* Update examples to use PSPs from the policy API group.

* fix all the typos across the project

* Autogenerated: hack/update-bazel.sh

* Modify PodSecurityPolicy admission plugin to additionally allow authorizing via "use" verb in policy API group.

* fix todo: add validate method for &schedulerapi.Policy

* examples/podsecuritypolicy: add owners.

* Adding dummy and dummy-attachable example Flexvolume drivers; adding DaemonSet deployment example

* Fix relative links in README
2018-03-14 11:26:26 -07:00
Noel Bundick 3c8adbf5d6 Add details on mounting existing Azure Managed Disks 2018-03-09 16:36:17 -08:00
Gerardo Saca dfc12dd772 elasticsearch prod: Add Role and RoleBinding for RBAC (#207)
Replicating #106 for the elastic search production cluster.
2018-03-05 14:46:47 -08:00
Vyacheslav Semushin 980a1490b7 staging/podsecuritypolicy/rbac: use PSP from policy API group. (#206) 2018-02-28 09:59:50 -08:00
Harry Zhang 07c7db0888 Add preempt verb for scheduler 2018-02-27 14:55:32 -08:00
Jason Dillaman bb68db0963 rbd: default image format to v2 instead of deprecated v1 (#88)
Image format v1 has been deprecated since the Infernalis release of
Ceph over two years ago.
2018-02-27 10:30:53 -08:00
Ahmet Alp Balkan c8816cee62
Update owners for k/examples (#203) 2018-02-26 14:53:51 -08:00
Manuel Alejandro de Brito Fontes 23e957d104 Add owners file to cassandra example (#202) 2018-02-26 12:00:52 -08:00
Manuel de Brito Fontes cabf8b8e47
Use docker to build cassandra jar file 2018-02-25 09:18:31 -03:00
Manuel Alejandro de Brito Fontes 2845293915 Improve cassandra deployment (#199) 2018-02-21 09:45:27 -08:00
Aurélien Pupier b8bf4f4e9a Remove unused Java import package (#142)
Signed-off-by: Aurélien Pupier <apupier@redhat.com>
2018-02-20 19:16:45 -08:00
Manuel Alejandro de Brito Fontes 37aa34b68b Replace deprecated ubuntu-slim image with debian-base from k8s (#198) 2018-02-20 18:35:28 -08:00
Aurélien Pupier a141ee9c9b Provide xsd configuration for pom files (#143)
it allows to provide completion and validation when editing the files in
most IDEs

Signed-off-by: Aurélien Pupier <apupier@redhat.com>
2018-02-19 12:04:04 -08:00
Humble Devassy Chirammal b4af758995 Update README with new supported SC parameters. (#196)
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2018-02-16 09:54:18 -08:00
jheyduk 173927b551 add missing comment (#195) 2018-02-12 14:12:14 -08:00
david 011284134a update all Deployment API version to apps/v1 in k8s v1.9.0 and add accurate (#193)
Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>
2018-02-11 18:24:00 -08:00
sebgoa a9514d789c
Merge pull request #191 from Davidchinacloud/dev
[storm] fix broken and outdated links in readme
2018-02-08 17:55:54 +01:00
LinWengang a442e47dc9 [storm] add annotations
Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>
2018-02-08 10:59:00 +08:00
LinWengang fe6c23733c [strom] fix broken links and update rc to deployment
Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>
2018-02-08 10:48:51 +08:00
sebgoa 7eacdbb93c
Merge pull request #156 from chanchikwan/master
Minor typesetting fix
2018-02-07 18:54:55 +01:00
sebgoa b390883671
Merge pull request #160 from kovyrin/patch-1
Small typo fix
2018-02-07 18:54:00 +01:00
sebgoa 867025324d
Merge pull request #167 from misterikkit/schedulerMove
Update scheduler code locations
2018-02-07 18:53:18 +01:00
sebgoa 45d84447fb
Merge pull request #180 from taoyu27/dev
typo error in 'Ceph RBD' segment of readme
2018-02-07 18:51:34 +01:00
david 7ab1089fdd [cassandra staging ] update workloads API version to apps/v1 in k8s v1.9.0 (#192)
* [cassandra] update workloads API version to apps/v1 in k8s v1.9.0

Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>

* [cassandra staging] update StatefulSet API version to apps/v1 in k8s v1.9.0

Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>

* [staging] fix readme

Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>
2018-02-07 09:38:40 -08:00
LinWengang 56d77eddf8 [storm] fix broken and outdated links in readme
Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>
2018-02-05 12:18:38 +08:00
JounQin b8e39a119f fix broken and outdated links (#188) 2018-02-03 10:09:28 -08:00
david f20b1f8d76 [https-nginx and spark ] broken link in readme (#189)
Signed-off-by: LinWengang <linwengang@chinacloud.com.cn>
2018-02-03 10:09:05 -08:00
Kai Chen 8774c894fa Update the workloads API version for the Guestbook example to 1.9 (#181)
* Update the workloads API version for the Guestbook example to 1.9

* Update the workloads API version for rest of the examples
2018-02-01 11:07:32 -08:00
John Eismeier 826d825c0b Propose small spelling changes (#184) 2018-01-31 09:17:25 -08:00
XiaoLiang Hu cee89cecb7 Improve k8s DNS example usability (#164)
the command in example should be straightforward asap, user just
do copy and paste to move on. This change is align with spark
example to set CLUSTER_NAME and USER_NAME, refer to below link for
the details:

https://github.com/kubernetes/examples/tree/master/staging/spark
2018-01-30 22:19:20 -08:00
Bin Liu 0b2b574d31 Fix typo (#182) 2018-01-26 10:14:51 -08:00
yutao d773ff0ce6 typo error in 'Ceph RBD' segment of readme
Signed-off-by: yutao <yutao@chinacloud.com.cn>
2018-01-26 11:41:57 +08:00
Humble Devassy Chirammal fccdb8004b Update README with changes introduced by PR#58513 (#177)
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2018-01-25 10:44:14 -08:00
Jonathan Basseri 2ee16080bc Update scheduler code locations 2018-01-19 17:41:34 -08:00
Tim Hockin 5530ef928b Pushes go to staging-k8s.gcr.io (#174) 2018-01-19 09:25:41 -08:00
Jonathan Basseri f2cf69e3b3 Delete all BUILD files. (#168)
There is no CI set up for the examples repo, so BUILD files are not
needed. They can be easily regenerated in the future, and it's one less
thing to keep up to date.
2018-01-18 15:31:56 -08:00
Saverio Proto 52c1d665cf There is now a easier solution to create TLS certs. (#176)
* There is now a easier solution to create TLS certs.

https://github.com/kubernetes/kubernetes/issues/14017

* Change secret target from Makefile. Use keys target

* Remove BUILD file
2018-01-18 13:46:46 -08:00
sebgoa cfc0109723
Merge pull request #172 from humblec/glusterlinks
Correct GlusterFS description with proper upstream URLs.
2018-01-16 18:09:32 +01:00
Humble Chirammal 43c9edd2c9 Correct GlusterFS description with proper upstream URLs.
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2018-01-16 22:31:46 +05:30
sebgoa 3930ecc7ff
Merge pull request #170 from humblec/volnameprefix
Add `volumenameprefix` storageclass parameter in GlusterFS dynamic PV provisioning example section.
2018-01-16 17:44:59 +01:00
Humble Chirammal 7f00f3efe6 Add `volumenameprefix` storageclass parameter in GlusterFS
dynamic PV provisioning example section.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2018-01-16 22:01:24 +05:30
Tim Hockin 3c2ef9e0d5
Merge pull request #163 from thockin-tmp/gcr-vanity
Convert registry to k8s.gcr.io
2017-12-23 10:22:35 -08:00
Tim Hockin 40f5426f1e Convert registry to k8s.gcr.io 2017-12-22 09:55:16 -08:00
Aaron Crickenberger 4e6b5f092a Add code-of-conduct.md (#161)
Refer to kubernetes/community as authoritative source for code of conduct
2017-12-20 11:35:20 -08:00
Ahmet Alp Balkan 559c64edb3
delete kubectl-container (#136)
This is not an example and was here when we were releasing the
gcr.io/google_containers/kubectl image actively (stopped doing that in 2015).
This is now unused and does not work, therefore removing.

Signed-off-by: Ahmet Alp Balkan <ahmetb@google.com>
2017-12-20 00:17:29 -08:00
pashok2398 97e22b575b Fix yaml path based on the new location (#159) 2017-12-17 23:13:06 -08:00
Oleksiy Kovyrin e1a9c764df
Small typo fix 2017-12-17 09:51:43 -05:00