13 Commits

Author	SHA1	Message	Date
Mykhailo Oleksiuk	a860fdbdfd	add parameter --no-associate-public-ip	2016-08-04 17:19:20 +03:00
Justin Santa Barbara	2b3f55563e	Run the master on the pod network, unless IsolateMaster=true ... The master is now registered as a Node. It is marked as Unschedulable, so normal pods will not run on it. But Daemonsets will, and it is surprising that they don't work unless hostNetwork=true. The default is now what seems to be expected: * we allocate the master a real CIDR on the pod network * kube-proxy runs on the master, so it can talk to pods * we run kubelet on the master with enable-debugging-handlers, so kubectl logs etc works To get the old behaviour, edit the cluster spec and set `isolateMasters: true`	2016-07-28 12:12:16 -04:00
Justin Santa Barbara	9e9855d1a4	Simpler upgrade procedure: reuse subnet ... By reusing the subnet & security groups, we are able to skip the ELB steps of the upgrade procedure. The new cluster also has the same identity as the old cluster for security groups, so we don't need to reconfigure ELB etc. Fixes #175 Fixes #174	2016-07-22 11:47:12 -04:00
Justin Santa Barbara	302f23463e	Configuration of admin access to ports 22 and master-443 ... Fix #143	2016-07-14 10:33:26 -04:00
Justin Santa Barbara	1102e7818d	Perform as much validation as possible before writing a cluster config ... This prevents us getting into a situation where an invalid cluster is saved, and then cannot be deleted.	2016-07-14 09:54:21 -04:00
Justin Santa Barbara	b69ee2a0ee	Accept a hosted zone ID for dns-zone ... There isn't any real ambiguity. Fix #75	2016-07-12 22:14:26 -04:00
Justin Santa Barbara	9ff5dcd902	Make IAM permission abstraction more generic ... At least in the JSON representation!	2016-06-27 15:48:16 -04:00
Justin Santa Barbara	947a045667	Rename DNSDomain -> ClusterDNSDomain for clarity	2016-06-27 15:36:11 -04:00
Justin Santa Barbara	c36607644b	Better shared VPC support: more validation	2016-06-27 15:00:51 -04:00
Justin Santa Barbara	65135db3be	upup: group DNS properties	2016-06-27 15:00:51 -04:00
Justin Santa Barbara	b6cf38c96e	AllocateNodeCIDRs need no longer be "bubbled down" ... We have it on the KCM config; just set it there	2016-06-27 00:32:19 -04:00
Justin Santa Barbara	492856069a	Apply gofmt	2016-06-26 23:24:17 -04:00
Justin Santa Barbara	eeed4a3031	Rationalize API to something we want to support forever	2016-06-26 23:09:02 -04:00