Commit Graph

596 Commits

Author SHA1 Message Date
Justin SB 4d514856f9 cilium: don't try to mount sys/fs/bpf if already mounted
systemd v238 already includes the mount, and the unit file fails.  We
test for the existence of the mount, rather than testing systemd
versions directly.
2019-12-28 12:01:54 -05:00
Peter Rifel dbb74e76c4 Fix typo in KubeProxy model
very minor, but meant to ensure that KubeProxyBuilder satisfies the ModelBuilder interface
2019-12-27 19:38:32 -08:00
Kubernetes Prow Robot adf659370c
Merge pull request #8170 from hakman/coninerd-add-1.2.4
containerd: Use containerd 1.2.4 with Docker 18.09.3
2019-12-27 09:29:38 -08:00
Kubernetes Prow Robot ac76e81ecd
Merge pull request #8164 from hakman/update-rhel-8
Update support for RHEL 8
2019-12-27 07:45:38 -08:00
Ciprian Hacman e90474d593 Update support for RHEL 8 2019-12-24 17:07:23 +02:00
Ciprian Hacman 760c7b06b4 Use containerd 1.2.4 with Docker 18.09.3 2019-12-23 19:26:38 +02:00
Kubernetes Prow Robot 4621df3c0a
Merge pull request #8155 from hakman/staticcheck-nodeup
nodeup/pkg/model - fix static check
2019-12-20 00:15:32 -08:00
Ciprian Hacman 97f70ff7a5 Add Docker 19.03.4 and 18.09.9 for Ubuntu Xenial 2019-12-19 16:14:09 +02:00
Justin Santa Barbara 2c770aa7a5
Merge branch 'master' into split-containerd 2019-12-19 07:03:33 -05:00
Kubernetes Prow Robot 1a0e441914
Merge pull request #8020 from hakman/install-with-updates
Automatically install dependencies with local packages
2019-12-19 01:53:56 -08:00
Ciprian Hacman fa665943ac nodeup/pkg/model - fix static check 2019-12-18 22:07:31 +02:00
Ciprian Hacman d0f15a8e27 Add "pigz" dependency in a future commit 2019-12-17 09:47:47 +02:00
Ciprian Hacman ce9ed2e1fb Make sure Cluster.Spec.Containerd exists before checking the address 2019-12-16 15:26:52 +02:00
Ciprian Hacman c2d55ecdf3 Always require containerd version in nodeup 2019-12-16 15:17:57 +02:00
Ciprian Hacman f1ffd9a7f6 Rename config option contained.configFile to containerd.configOverride 2019-12-16 00:59:26 +02:00
Ciprian Hacman 59ab0ca9d0 Pass containerd --address flag to kubelet if it exists 2019-12-16 00:59:26 +02:00
Ciprian Hacman 6363289103 Update tests after rebase 2019-12-16 00:59:26 +02:00
Ciprian Hacman b234d0687a Add back Protokube image pull during service start 2019-12-16 00:59:19 +02:00
Ciprian Hacman f401342d8f Update Protokube tests 2019-12-15 22:31:52 +02:00
Ciprian Hacman 4c5693be0d Remove unneeded version check 2019-12-15 21:57:12 +02:00
Ciprian Hacman 6dce39ffe1 Always set TasksMax=infinity for container friendly OSes 2019-12-15 21:37:57 +02:00
Ciprian Hacman 9d1ef68616 Parse Docker and containerd version using strconv.Atoi 2019-12-15 21:37:57 +02:00
Ciprian Hacman a6696f8060 Remove duplicate ExecStartPre 2019-12-15 21:37:57 +02:00
Ciprian Hacman bbb6740f3f Remove unneeded imports 2019-12-15 21:37:57 +02:00
Ciprian Hacman bdb395f722 Fix container remove command on failed start 2019-12-15 21:37:57 +02:00
Ciprian Hacman 92cd1842c6 Add support for containerd container runtime - generated 2019-12-15 21:37:57 +02:00
Ciprian Hacman 1a4d8bf49c Add support for containerd container runtime - tests 2019-12-15 21:37:57 +02:00
Ciprian Hacman 42b73b877d Add support for containerd container runtime 2019-12-15 21:37:57 +02:00
Peter Rifel 23ee2e63fc
Fix typo in protokube_test.go 2019-12-15 11:18:46 -06:00
Peter Rifel ea106478e0
Run ./hack/update-bazel.sh 2019-12-15 09:47:57 -06:00
Justin Santa Barbara 700bd2c0a5 Add test for protokube builder
This should give us some assurances that we haven't changed things too
much with the containerd introduction.
2019-12-14 23:19:54 -05:00
Kubernetes Prow Robot 852ed31f5f
Merge pull request #7545 from mazzy89/flatcar-fix
Complete support for Flatcar
2019-12-09 04:58:01 -08:00
John Gardiner Myers eaa13e734d Fix truncation of admission control plugins list 2019-11-30 19:30:49 -08:00
Ciprian Hacman 10b7d1e7b5 Don't consider recommended packages as a dependency for installing 2019-11-29 10:56:22 +02:00
Ciprian Hacman d66dfc1ac1 Automatically install dependencies with local packages 2019-11-27 17:12:38 +02:00
Kubernetes Prow Robot 482fce5d54
Merge pull request #7424 from mmerrill3/feature/dynamic-audit-config
Implementing audit dynamic configuration (#7392)
2019-11-26 01:01:10 -08:00
Salvatore Mazzarino 16f667d5a8 Correct Distro name
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
2019-11-24 18:58:49 +01:00
Salvatore Mazzarino 9732d06d97 Add reference
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
2019-11-24 16:35:23 +01:00
Salvatore Mazzarino f6908656bf Fix volume plugins dir
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
2019-11-24 16:35:23 +01:00
Salvatore Mazzarino 5c0d5c112d Add tag during isDebian check family
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
2019-11-24 16:35:23 +01:00
Kubernetes Prow Robot 4b11768ae0
Merge pull request #7906 from johngmyers/fix-apiversion
Update apiVersion in docs and tests
2019-11-22 06:03:28 -08:00
Kubernetes Prow Robot 1e2673515f
Merge pull request #7923 from eest/sysctls-comment
sysctls.go: Fix some comments
2019-11-21 17:35:40 -08:00
Kubernetes Prow Robot baa5ae3934
Merge pull request #7860 from hakman/docker-19.03.4
Add support for newer Docker versions
2019-11-17 12:23:54 -08:00
Patrik Lundin ad9448ac40 sysctls.go: Fix some comments
Comment for net.ipv4.tcp_tw_reuse from tcp(7).
2019-11-13 13:01:06 +01:00
John Gardiner Myers f1068e5c8c Update apiVersion in docs and tests 2019-11-09 14:14:24 -08:00
Zac Blazic 28d3eb4e37 Use `--encryption-provider-config` when kubernetes 1.13+
The alpha version of encryption at rest used the following flag:
`--experimental-encryption-provider-config`. As of kubernetes 1.13,
`--encryption-provider-config` should be used instead.
2019-11-08 18:24:05 +02:00
Kubernetes Prow Robot 3979650823
Merge pull request #7841 from tanjunchen/fix-up-gosimple-problems
fix-up static-check
2019-11-05 21:57:20 -08:00
Ciprian Hacman 777265931f Add support for Docker 18.09.9 2019-11-04 12:00:11 +02:00
Ciprian Hacman a716ac17f4 Add support for Docker 19.03.4 2019-10-31 11:42:47 +02:00
Ripta Pasay 56ea75cc91 Include custom sysctl parameters when running the sysctl builder
(cherry picked from commit 6766f47c670b68d2bf1a13ef94a710bd48f10678)
2019-10-30 10:55:01 -07:00
tanjunchen a19fb935e4 fix-up static-check 2019-10-29 14:06:12 +08:00
Srikanth afe59ba7cc Remove clusterID to be passed as a parameter for protokube 2019-10-29 09:40:38 +05:30
Srikanth cb4a8ef6fc Rebase with latest master 2019-10-29 09:40:38 +05:30
mmerrill3 5cf94c8ddf Implementing audit dynamic configuration (#7392)
Signed-off-by: mmerrill3 <michael.merrill@vonage.com>
2019-10-24 10:21:27 -04:00
hwdef bc7d07035b dnsprovider: fix static check 2019-10-24 11:13:55 +08:00
tanjunchen 6a01525de5 fix-up bug in nodeup/pkg/model 2019-10-16 00:35:26 +08:00
Kubernetes Prow Robot 39cbb2bf1c
Merge pull request #7781 from hatappi/api-server-multiple-sa-key-file
fix(apiserver): allow multiple service-account-key-file
2019-10-14 18:15:51 -07:00
hatappi 3b1c1f1639 fix(apiserver): allow multiple service-account-key-file 2019-10-14 10:52:48 +09:00
Kubernetes Prow Robot 34c7d5a64a
Merge pull request #7755 from tanjunchen/fix-up-static-error
fix-up staticcheck error
2019-10-13 08:20:35 -07:00
Kubernetes Prow Robot 0c66a304c3
Merge pull request #7754 from tanjunchen/fix-up-gosimple-error
fix-up gosimple check error
2019-10-12 11:18:44 -07:00
Kubernetes Prow Robot dfaa39bc34
Merge pull request #7539 from spotinst/fix-kubelet-maxpods
Kubelet configuration: Maximum pods flag is miscalculated when using Amazon VPC CNI
2019-10-11 11:35:25 -07:00
Thomas Jackson cfcb93e822 Misc fixes 2019-10-10 13:09:22 -07:00
Thomas Jackson f8c416d6ce Add configs for gossip dns 2019-10-10 13:09:22 -07:00
liranp c6eb29a4b5
fix(nodeup): miscalculated `max-pods` when using amazon-vpc-cni 2019-10-10 12:02:12 +03:00
tanjunchen 28fdb358f8 fix-up staticcheck error 2019-10-08 13:53:04 +08:00
tanjunchen 43bf6bdab6 fix-up gosimple check error 2019-10-07 11:59:57 +08:00
tanjunchen 8fe36dc72c fix-up some staticcheck error 2019-10-06 10:40:13 +08:00
Jesse Haka 4ccad007ce mountcerts -> usehostcerts 2019-09-30 11:36:32 +03:00
Jesse Haka 352bc1eaa2 Allow to use custom rootCAs 2019-09-30 11:35:58 +03:00
yuxiaobo 0bd700781e Correct word misspelling 2019-09-29 22:23:07 +08:00
Kubernetes Prow Robot 942c8915db
Merge pull request #7496 from justinsb/label_controller
kops-controller
2019-09-27 03:43:35 -07:00
Kubernetes Prow Robot ba69006d17
Merge pull request #7663 from rifelpet/staticcheck-bugfixes
Fix some bugs reported by staticcheck
2019-09-25 15:31:06 -07:00
Justin SB 728e582360
Fill out kops controller functionality
k8s 1.16 requires that we move label setting away from the kubelet, to
a central controller.  kops-controller is that controller.
2019-09-25 12:04:34 -04:00
Justin SB cdcf72b0c9
Pull centos.org packages from the vault
This isn't as nice as debian's vault, in that it doesn't contain the
latest packages.  But it appears that once a package is in the vault,
it should stay there.

Source from the vault to unbreak 1.13.
2019-09-25 10:15:28 -04:00
Peter Rifel c8d424dd87 Fix some staticcheck warnings 2019-09-25 06:35:25 -07:00
Kubernetes Prow Robot 30c6f65300
Merge pull request #6957 from austinmoore-/skip-docker-install
Skip Docker install
2019-09-18 14:55:00 -07:00
Kubernetes Prow Robot 3b9821d5c5
Merge pull request #7474 from nebril/cilium-standalone
Change Cilium templates to standalone version
2019-09-18 14:01:00 -07:00
Kubernetes Prow Robot 0ae46139a7
Merge pull request #7609 from igarcia-sugarcrm/issue/7608
Updated container-selinux url to point to the right path
2019-09-18 10:05:33 -07:00
Mike Splain 3af3f81a18
Fix gofmt 2019-09-18 11:21:45 -04:00
mikesplain 0fe1a52e09 Add logrotate for etcd/etcd-events.log 2019-09-18 09:43:24 -04:00
Ivan Garcia d0db05defa Updated container-selinux url to pint to the right path 2019-09-17 14:57:13 -07:00
Austin Moore 4695e7d03c
Move SkipInstall to DockerConfig 2019-09-17 11:55:08 -04:00
Ole Markus With e7ff69a4a3 Mount BPF for cilium as part of nodeup instead of using a daemonset 2019-09-16 16:49:36 +02:00
mikesplain 9e55b8230a Update copyright notices
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Justin SB 8e2dbb6a99
Bootstrap: protokube labels its own node with node-role label
As of k8s 1.16, the node-role label is protected for security reasons.
We will introduce a controller to set those labels generically.
However, we need these labels to run the controller (only) on master
nodes.

To solve this bootstrapping problem, we use protokube to apply the
master role node labels to the master node only.  This isn't a
security problem because we assume that protokube on the master is
highly trusted - we are still administering labels centrally.

Then kops-controller can use this label to target the master nodes,
and run a central label controller.
2019-09-08 20:51:00 -04:00
Justin SB 810c65eb46
Copy well-known users from apiserver
This should eliminate the dependency on k8s.io/apiserver
2019-08-31 08:50:09 -07:00
Justin SB 17186ff7ba
Generated vendor & bazel from `make gomod`
Automatically generated vendor & BUILD.bazel files
2019-08-25 16:00:41 -04:00
Justin SB b1f8f84306
Code changes for 1.15 2019-08-25 16:00:39 -04:00
Kubernetes Prow Robot 2d1b010071
Merge pull request #7346 from ripta/max-pd-vols
Add maxPersistentVolumes to support the KUBE_MAX_PD_VOLS scheduler setting
2019-08-15 22:54:32 -07:00
Kashif Saadat 4514215656 Set and mount the correct volume plugin dir based on OS 2019-08-01 17:54:08 +01:00
Ripta Pasay a31a6b60ca Add maxPersistentVolumes to support the KUBE_MAX_PD_VOLS scheduler setting 2019-07-30 11:44:45 -07:00
Justin SB 35bb1c1636
Update default flexvolumepath for COS
Default on COS is a different location, see
https://github.com/kubernetes/kubernetes/pull/58171
2019-07-29 12:57:59 -04:00
Kubernetes Prow Robot 8a146b1c64
Merge pull request #6874 from kellanburket/master
Mount FlexVolume directory in kube-controller-manager pod
2019-07-25 08:05:54 -07:00
Kubernetes Prow Robot 0e27206973
Merge pull request #7290 from justinsb/rationalize_golden_output_comparison
Rationalize golden-output comparison
2019-07-23 00:20:55 -07:00
Kubernetes Prow Robot 2178721764
Merge pull request #6236 from justinsb/fixup_ntp_install
Move NTP and misc packages initialization to code
2019-07-22 07:18:52 -07:00
Kubernetes Prow Robot cdd3496c8a
Merge pull request #6229 from justinsb/gce_ipalias
GCE: support ipalias networking mode, named "gce"
2019-07-22 06:26:51 -07:00
Justin SB 512378b335
Rationalize golden-output comparison
Create a single helper function: AssertMatchesFile

Also a few output files that weren't consistent.
2019-07-21 23:08:48 -04:00
Kubernetes Prow Robot 92903304d4
Merge pull request #7287 from VibrentHealth/rhel8_support
Rhel8 support
2019-07-21 19:55:03 -07:00
Cassandra Comar 9ba043330a Fix package installation by switching ntp to chrony and directly installing container-selinux 2019-07-19 09:11:56 -04:00
Cassandra Comar 4638081c89 Fix identity string for RHEL8 2019-07-19 09:11:50 -04:00