Commit Graph

1516 Commits

Author SHA1 Message Date
Prachetas Prabhu 8f13944ac3 Bumps calico versions to mitigate taint stripping issue 2017-08-04 21:23:23 -05:00
Prachetas Prabhu 32502ad54f Adds wider tolerations to Canal Daemonset to allow scheduling on nodes with strict taints 2017-08-04 21:23:23 -05:00
Igor Canadi 7323e5f26c added wider toleration to calico-node daemonset 2017-07-31 18:17:31 +00:00
BradErz e6d0aba9bf Updating flannel networking to use ClusterRole so its not broken when deploying with RBAC 2017-07-22 17:38:55 +01:00
Justin Santa Barbara 8055fe506a Mark kops 1.7.0-beta.1 2017-07-19 22:53:31 -04:00
Justin Santa Barbara 1d5c3fcf45 Dedent weave manifest, for easier diffing
Still some changes to order, but should be much easier to audit now.
2017-07-15 12:30:00 -04:00
Justin Santa Barbara 0044a323af Merge pull request #2829 from marccarre/weave-net-2.0.1
Update weave to 2.0.1
2017-07-15 12:23:55 -04:00
Justin Santa Barbara 9a8fcd64e4 Simplify how we build addon manifests, support image redirection 2017-07-08 18:33:00 -04:00
Justin Santa Barbara 8bde5317c1 Bump dns-controller & kops for 1.7.0-alpha.1 2017-07-07 00:57:10 -04:00
Chris Love 24c0bc19ed Merge pull request #2768 from ottoyiu/calico_cidr
Update calico to use the correct CIDR for pods
2017-07-06 14:29:18 -06:00
Chris Love 20535248b4 Merge pull request #2773 from justinsb/authn_integration
Initial support for authentication (kopeio)
2017-07-06 14:11:22 -06:00
Marc CARRE 77d7ad9f42 Update weave to 2.0.1 2017-07-04 15:16:17 +01:00
Justin Santa Barbara ea838efde6 Upgrade kube-dns for 1.7
A version bump from 1.14.1 -> 1.14.4; we don't update kube-dns for k8s <= 1.5
2017-06-30 10:14:24 -04:00
Otto Yiu 8674309565 Update calico to use the correct CIDR for pods
Currently, we are using .NonMasqueradeCIDR in the wrong fashion. We
should be using .KubeControllerManager.ClusterCIDR to prevent IP
collision with Service IPs.
2017-06-26 13:47:31 -07:00
Justin Santa Barbara 752150ef22 Initial support for authentication (kopeio)
Still experimental, so not doing a flag yet.
2017-06-20 00:15:39 -04:00
Justin Santa Barbara 8571924843 Bump dns-controller version for fixes 2017-06-19 14:16:36 -04:00
Chris Love f9f64e3fb3 Merge pull request #2760 from justinsb/weave_198
Update weave to 1.9.8
2017-06-16 09:42:34 -06:00
Justin Santa Barbara 8fb99a87e2 Merge pull request #2680 from murali-reddy/kube-router
add support for kube-router as CNI networking provider
2017-06-16 10:37:49 -04:00
Justin Santa Barbara f4cb670edc Update weave to 1.9.8
Includes the nodeport fixes
2017-06-16 00:08:37 -04:00
Jordan Jennings 767a8a6395 Update weave to use the correct CIDR for pods 2017-06-12 20:25:33 -04:00
Justin Santa Barbara d0213a5a0b Apply weave-NPC fix for NodeName != hostname
cf https://github.com/weaveworks/weave/pull/2996
2017-06-11 15:35:17 -04:00
Justin Santa Barbara 8afdfc3157 Update weave to 1.9.7
This includes the hairpin fix
2017-06-11 14:04:21 -04:00
Murali Reddy e872dbcb86 add support for kube-router as CNI networking provider
fixes #2606

Most part of the changes are similar to current supported CNI networking
provider. Kube-router also support IPVS bassed service proxy which can
be used as replacement for kube-proxy. So the manifest for kube-router
included with this patch enables kube-router to provide pod-to-pod
networking, IPVS based service proxy and ingress pod firewall.
2017-06-09 17:01:31 +05:30
Chris Love 0b7ed89cb9 Merge pull request #2539 from andreychernih/calico-critical
Mark calico-node pods as critical
2017-06-04 12:04:49 -07:00
Chris Love 96e490bef1 Merge pull request #2640 from ottoyiu/kops_srcdst
Add ability to set cross-subnet mode in Calico
2017-06-04 09:37:34 -07:00
Otto Yiu 3e281626a7 bump version of k8s-ec2-srcdst to v0.1.0 for kubernetes 1.6 support 2017-06-02 16:59:56 -07:00
Chris Love 8040c74f08 Merge pull request #2613 from jordanjennings/weave-networking-config
Make Weave MTU configurable and configure jumbo frame support for new clusters on AWS
2017-05-30 17:54:38 -06:00
Jordan Jennings 6213c519e1 Make Weave MTU configurable and set AWS default config for jumbo frames 2017-05-30 06:36:09 -04:00
Otto Yiu 2e1a024b9f Add ability to set cross-subnet mode in Calico
This gives the ability to a user to enable cross-subnet mode in Calico.
Also introduces a new addon that, full disclosure, I wrote.

[ottoyiu/k8s-ec2-srcdst](https://github.com/ottoyiu/k8s-ec2-srcdst)
2017-05-29 18:54:37 -07:00
Seth Pollack c0781e9869
add EnableExternalDNS feature flag 2017-05-28 19:20:06 -04:00
Otto Yiu cba3990adc change k8s 1.6 calico manifest ordering for creation of service account first
This fixes the behaviour described in #2529 which was fixed by #2590, by
avoiding the configure-calico job all together.
2017-05-25 18:10:43 -07:00
heschlie 63bd8762ce Updating Canal
- Updated manifests to the latest versions
- Added RBAC to k8s 1.6 manifest
2017-05-24 14:19:42 -07:00
Andrey Chernih c7168937a3 Mark calico-node pods as critical
When system is low on resources, it is possible that calico-node will be
evicted by kubernetes. That's what happened today in our cluster
bringing down all containers.
2017-05-23 12:09:19 -07:00
Justin Santa Barbara d9ba671097 Set hairpinMode for flannel
Fix #2601
2017-05-18 22:53:21 -04:00
Dan Osborne c3a7b671b8 replace calico ipip-configure job with node env 2017-05-18 14:28:14 -07:00
Alexander Brandstedt 9a1083e824 update to latest release of calico 2017-05-18 21:47:13 +02:00
Chris Love c6e334f1e5 Merge pull request #2544 from justinsb/add_critical_pod_annotations_kopeio
Add critical pod annotations to kopeio networking
2017-05-10 11:48:11 -06:00
Justin Santa Barbara 043f0aaa25 Add critical pod annotations to kopeio
Should prevent eviction, which would (best case) stop us discovering new
nodes.
2017-05-10 11:53:45 -04:00
Blake 056c76beda Also update pre-k8s-1.6 2017-05-09 12:00:56 -07:00
Blake 158253068b Update calico to 2.1.5 for k8s 1.6+ bugfixes 2017-05-09 11:48:50 -07:00
Justin Santa Barbara 81e8a90478 Tag 1.6.0-beta.1
Bumping dns-controller also to 1.6.1, for the gossip DNS support.
2017-05-02 10:25:33 -04:00
Chris Love b16b1c8b3e Merge pull request #2465 from justinsb/bump_canal_flannel_version
Bump version of flannel embedded in canal to 0.7.1
2017-04-29 21:18:42 -06:00
Justin Santa Barbara a950e0970f Bump version of flannel embedded in canal 2017-04-29 17:46:15 -04:00
Justin Santa Barbara ccee94ef72 Update flannel to 0.7.1
Includes some important fixes for taints in 1.6
2017-04-29 12:26:43 -04:00
Miao Luo c5519c0009 Add CoreDNS support into DNS controller addon image. 2017-04-20 23:33:21 -07:00
Justin Santa Barbara cf51bd943b Fix weave daemonset labels to be backwards compatible
Otherwise the kops 1.5 -> kops 1.6 upgrade was failing with:

The DaemonSet "weave-net" is invalid: spec.template.metadata.labels:
Invalid value: {"name":"weave-net"}: `selector` does not match template
`labels`

Fix #2345
2017-04-13 03:27:42 -04:00
Justin Santa Barbara f7edd0b3f9 Merge pull request #2335 from justinsb/kopeionetworking_16_manifest
Update kopeio-networking
2017-04-11 00:52:34 -04:00
Justin Santa Barbara e36c055cd8 Merge pull request #2337 from justinsb/calico_16_configuration
Split calico configuration into 1.5 and 1.6
2017-04-11 00:52:26 -04:00
Justin Santa Barbara 67eb0ab597 Merge pull request #2339 from justinsb/split_canal_manifests
Split canal manifests to 1.5 & 1.6
2017-04-11 00:52:05 -04:00
Justin Santa Barbara ae03e0252c Split canal manifests to 1.5 & 1.6 2017-04-11 00:02:40 -04:00
Justin Santa Barbara 0fcfd9e486 Update kopeio-networking 2017-04-10 23:49:53 -04:00
Justin Santa Barbara 3c9c082e6e Add RBAC roles for calico 2017-04-10 16:30:54 -04:00
Felipe Cavalcanti 314756460a fix flannel setup on 1.6 cluster 2017-04-10 15:38:41 -03:00
Justin Santa Barbara 2f5d3eb811 Add toleration to calico DS 2017-04-10 12:24:26 -04:00
Justin Santa Barbara 2e4830423e Split calico configuration into 1.5 and 1.6 2017-04-10 12:24:10 -04:00
Justin Santa Barbara 460c0be944 Merge pull request #2286 from ottoyiu/calico-2.1.1
Update Project Calico from 2.0.2 to 2.1.1
2017-04-10 11:23:11 -04:00
Justin Santa Barbara 5368737c2a Use version-selection for weave 2017-04-09 23:41:58 -04:00
Eric Hole 650b5d2131 Merge pull request #2244 from justinsb/dns_controller_permissions
Add the ingress permission to the dns-controller
2017-04-09 09:50:36 -04:00
Justin Santa Barbara 080f061b1e Use our new version selection capabilities for kube-dns & dns-controller 2017-04-08 21:36:51 -04:00
Justin Santa Barbara 6201e924c7 Merge pull request #2245 from justinsb/be_tolerant
Keep the 1.5 tolerations around, in case of a downgrade
2017-04-06 01:53:19 -04:00
Otto Yiu 0f40de4c12 Update Project Calico from 2.0.2 to 2.1.1 2017-04-05 04:29:27 -07:00
Justin Santa Barbara 88829c89a0 Add weave manifest labels
We label all the resources we would delete when we switch networking
providers.
2017-04-03 10:19:18 -04:00
dima 70f1d7247a added weave 1.9.4. used default template. https://github.com/kubernetes/kops/issues/2180 2017-03-31 17:05:22 +02:00
Justin Santa Barbara 39fff5e4ac Keep the 1.5 tolerations around, in case of a downgrade
The annotation should be ignored in 1.6, but in case of a downgrade to
1.5, it means we will still correctly tolerate the master taints.

We can remove in 1.7
2017-03-30 23:02:17 -04:00
Justin Santa Barbara da28a792a3 Add the ingress permission to the dns-controller
This is so that if users enable ingress records, it will still work.
2017-03-30 22:53:43 -04:00
Justin Santa Barbara 5a539882b0 Version updates for kops 1.6.0-alpha.1 2017-03-30 01:08:55 -04:00
Justin Santa Barbara 3ddc1dd939 Merge pull request #2226 from justinsb/rbac_for_dnscontroller
Add RBAC permissions for dns-controller
2017-03-29 11:41:22 -04:00
Justin Santa Barbara 67c9683b75 Add RBAC permissions for dns-controller 2017-03-29 00:43:43 -04:00
Justin Santa Barbara c6b4288e61 Pull fixes from the integration branch 2017-03-28 20:42:15 -04:00
Justin Santa Barbara 4c28bd30e4 Enable RBAC on 1.6 2017-03-28 20:14:13 -04:00
Justin Santa Barbara 4006741a5d Update for new taints / labels names 2017-03-27 23:13:39 -04:00
Justin Santa Barbara 07f6e7eba9 Set toleration on dns-controller
But only for >= k8s 1.6.  Unclear if our version of kubectl can actually
do this!
2017-03-27 23:08:15 -04:00
Marc CARRE d7686ce47d Add Weave Net v1.9.3. 2017-03-07 16:58:04 +00:00
Justin Santa Barbara 03b08530cb Upgrade kubectl embedded in protokube to 1.6.0
Also revert #2037

This was causing tests to fail.  The dns manifest is only used on 1.6
and above.  This PR should _not_ be cherry-picked to a release branch,
at least not until kubectl is verified stable.
2017-03-05 22:57:27 -05:00
Zihong Zheng 285383ae8f Fix outdated arg in dns-horizontal-autoscaler 2017-03-02 18:37:00 -08:00
Justin Santa Barbara 128d0c52b2 Add kube-dns configmap
Optional volume mounting is not supported until we have kubectl 1.6
2017-03-02 12:14:57 -05:00
Justin Santa Barbara b0254a4800 Merge pull request #2010 from mihok/flannel-guarenteed
Adding equal resource requests/limits to flannel for guarenteed QoS
2017-03-01 22:14:44 -05:00
chrislovecnm c6f4f48572 bumping weave to 1.9.2 2017-03-01 10:25:01 -07:00
Bowei Du 3c8c6d8f4b Updates kube-dns cluster addon YAML to match Kubernetes 1.6 2017-02-27 22:49:41 -08:00
Matthew Mihok 43a2848a07 adding equal resource requests/limits to flannel for guarenteed QoS
lowering memory constraint for flannel process
2017-02-27 18:47:26 -05:00
Justin Santa Barbara ef1d366564 Bump dns-controller to 1.5.2 2017-02-23 09:59:21 -05:00
Bryan Boreham 05e0346ce3 Apply requests and limits so Weave Net runs in Guaranteed Quality of Service
See https://github.com/kubernetes/community/blob/master/contributors/design-proposals/resource-qos.md
for a description of how requests and limits relate to QOS.
2017-02-20 10:55:09 +00:00
Bryan Boreham 8504a9029d Bump Weave Net version to 1.9.0 2017-02-20 10:55:09 +00:00
Chris Love 069a917b78 Merge pull request #1857 from justinsb/calico_version_bump
Update calico manifest version
2017-02-14 11:06:42 -07:00
Matthew Mihok bc235765d1 Adding basic flannel support 2017-02-11 16:26:18 -05:00
Justin Santa Barbara 8c7d683698 Update calico manifest version 2017-02-11 11:25:00 -05:00
Justin Santa Barbara c0c8471047 Merge pull request #1753 from heschlie/calico-2.0.2
Calico 2.0.2 released, updating kops manifest
2017-02-11 11:22:22 -05:00
Stephen Schlie 991fc5bc7c Integrating Canal (Flannel + Calico) for CNI (#1459)
* Integrating Canal (Flannel + Calico) for CNI

Initial steps to integrate Canal as a CNI provider for kops

Removed CNI in help as per chrislovecnm

* Integration tests, getting closer to working

- Added some integration tests for Canal
- Finding more places Canal needed to be added
- Sneaking in update to Calico Policy Controller

* Add updated conversion file

* turned back on canal integration tests

* fixed some rebase issues

* Fixed tests and flannel version

* Fixed canal yaml, and some rebasing errors

- Added some env vars to the install-cni container to get the proper
  node name handed off

* Added resource limits

- set resource limits on containers for Canal
- Ran through basic calico tutorials to verify functionality

* Updating Calico parts to Calico 2.0.2
2017-02-11 11:03:23 -05:00
heschlie 34c278e07f Calico 2.0.2 released 2017-02-01 09:41:35 -08:00
Chris Love 412d4d3d5e Merge pull request #1630 from heschlie/calico-2.0.1
bumping Calico versions to 2.0.1
2017-01-29 01:40:32 -07:00
heschlie 51c585bd54 bumping Calico versions to 2.0.1 2017-01-25 14:39:49 -08:00
Justin Santa Barbara 7899864409 kube-dns autoscaler: set min replicas to 2
Issue https://github.com/kubernetes/kubernetes/issues/40063

Having a single pod would be a single point of failure.  Multiple pods
should be spread across AZs & nodes by k8s automatically.
2017-01-24 12:19:31 -05:00
Justin Santa Barbara a60d7982e0 Tag alpha4, dns-controller 1.5.1 2017-01-21 15:20:31 -05:00
Justin Santa Barbara 0464a26612 Update to dns-controller 1.5.0 2017-01-09 01:41:13 -05:00
Justin Santa Barbara 8afba37f0a Create a role for networking addons; use as selector
role.kubernetes.io/networking

This ensures that when we switch networking providers, we replace all
the components of the prior tool.
2017-01-08 21:33:13 -05:00
Justin Santa Barbara 2b06a635cd Fix AWS storage manifest location 2017-01-05 01:34:41 -05:00
Kris Nova 67d6e90da4 Merge pull request #1304 from justinsb/storage_class
Create storage class on AWS
2017-01-04 21:10:43 -07:00
Justin Santa Barbara aa3128ef96 Update to kubedns 1.5 (including autoscaler)
Also harmonize the way we build addons
2016-12-30 11:18:17 -05:00
Justin Santa Barbara 4025c788d7 Create storage class on AWS 2016-12-29 00:20:50 -05:00
Chris Love 344e544615 Merge pull request #1290 from justinsb/hostnetwork_for_dns_controller
Run dnscontroller in host network, for faster bringup
2016-12-28 10:31:45 -07:00
Justin Santa Barbara 0f0089ece2 Reduce CPU request for kopeio vxlan 2016-12-28 11:41:05 -05:00
Justin Santa Barbara bd334cdceb Run dnscontroller in host network, for faster bringup 2016-12-28 11:18:05 -05:00
King'ori Maina 66f430c71e
Prefer Semantic Versioning
See:

* http://semver.org
* https://github.com/kubernetes/kops/issues/1081
2016-12-24 02:27:53 +02:00
King'ori Maina 267c0ca451
Upgrade Weave to 1.8.2
https://github.com/weaveworks/weave/releases/tag/v1.8.2
2016-12-23 21:48:16 +02:00
heschlie e18036cfa6 Renamed networking.calico
Renamed the networking.calico directory to networking.projectcalico.org
2016-12-22 16:23:08 -08:00
heschlie a4b7093b0d Calico integration
Adding the option to install Calico with the `--networking calico`
argument.  This will currently deploy Calico v2.0 to the cluster.

Documentation has also been updated with information about Calico and
where one can find more information or help.
2016-12-20 10:13:00 -08:00
chrislovecnm 1bbbe0b71d bumping weave version 2016-11-30 22:06:12 -07:00
chrislovecnm 6e9a88151a starting work on limits 2016-11-22 13:20:57 -07:00
chrislovecnm 25ee1e4cdb adding weave support 2016-11-16 15:48:32 -07:00
Justin Santa Barbara ee44353cde Add support for kopeio networking 2016-11-16 14:20:23 -05:00
Justin Santa Barbara a529ffbb65 Configure dns-controller with ID of hosted zones
Fix #584
2016-10-06 13:12:27 -04:00
Justin Santa Barbara 204d1364ac Switch to image published under kope account 2016-10-01 17:30:52 -04:00
Justin Santa Barbara 146babbd27 Disable ingress DNS integration for 1.4.0
There are still some problems with the default nginx controller
2016-10-01 17:25:11 -04:00
Justin Santa Barbara 1a4558a736 Fix DNS deployment manifest 2016-10-01 15:26:10 -04:00
Justin Santa Barbara 655a61588e Switch all the final switches for release 1.4
Also apply the 1.4 schema changes.
2016-10-01 13:50:19 -04:00
Justin Santa Barbara 3ead9fe0ce Create addons for 1.4
(It isn't activated yet though)
2016-10-01 09:35:20 -04:00