Commit Graph

909 Commits

Author SHA1 Message Date
Justin Santa Barbara 26b8421dda Merge pull request #2285 from justinsb/fix_tests
Tidy up kubelet nodeup tests
2017-04-06 01:16:58 -04:00
Justin Santa Barbara ba1af6950e Tidy up kubelet nodeup tests 2017-04-06 00:18:43 -04:00
Justin Santa Barbara a935a81b51 Merge pull request #2223 from andrewsykim/set-nf-conntrack-max-in-kubeproxy
Set nf_conntrack_max in kubeproxy
2017-04-06 00:13:14 -04:00
Justin Santa Barbara bc0063e1cb Update to docker 1.12.6 for k8s 1.6 2017-04-04 01:24:49 -04:00
chrislovecnm 131bc77abb Adding feature gates flag for kubelet, and unit tests 2017-04-03 11:13:21 -06:00
Justin Santa Barbara e04fdbd95d PoC of hooks 2017-03-31 22:33:25 -04:00
Chris Love f63c52c425 Merge pull request #2225 from justinsb/use_kcm_serviceaccounts
Set --use-service-account-credentials for 1.6
2017-03-29 10:50:42 -06:00
Justin Santa Barbara 2678f7e4be Merge pull request #2221 from justinsb/use_tee
Use tee for kube-proxy, so kubectl logs works
2017-03-29 11:44:07 -04:00
Justin Santa Barbara e5ec85fb7c Merge pull request #2220 from justinsb/disable_insecure_port
Be able to disable insecure port for apiserver
2017-03-29 11:43:40 -04:00
Justin Santa Barbara 19db8b37a0 Set --use-service-account-credentials for 1.6 2017-03-29 11:42:24 -04:00
Justin Santa Barbara 4179074590 Add RBAC roles to basic auth 2017-03-29 00:42:03 -04:00
andrewsykim c2e3717df2 remove setting nf_conntrack_max in nodeup 2017-03-28 21:40:19 -04:00
andrewsykim 8ee736a485 kube-proxy overwrites nf_conntrack_max so we should set it there 2017-03-28 21:38:09 -04:00
Justin Santa Barbara 8b965a0ad9 Disable insecure port for apiserver
All components need a kubeconfig
2017-03-28 21:26:17 -04:00
Justin Santa Barbara fe3b1f3abe Use tee for kube-proxy, so kubectl logs works 2017-03-28 20:48:48 -04:00
Justin Santa Barbara c6b4288e61 Pull fixes from the integration branch 2017-03-28 20:42:15 -04:00
Justin Santa Barbara 4c28bd30e4 Enable RBAC on 1.6 2017-03-28 20:14:13 -04:00
Justin Santa Barbara eecf22d593 Merge pull request #2206 from justinsb/kubeproxy_to_code
Move kubeproxy configuration to code
2017-03-28 19:51:02 -04:00
Justin Santa Barbara 04b4659923 Log kube-proxy command after we build it 2017-03-28 19:37:03 -04:00
Justin Santa Barbara c4e05ca1b1 Fix taint format 2017-03-28 12:26:10 -04:00
Justin Santa Barbara e2a06a389a Move kubeproxy configuration to code
Also map kube-proxy ClusterCIDR arg.
2017-03-28 10:03:17 -04:00
Justin Santa Barbara fea4df5868 Merge pull request #2202 from justinsb/post_2095
More log options for k8s 1.6
2017-03-28 01:25:20 -04:00
Justin Santa Barbara cb8ea7e043 Use repeated flags for log-opt to docker
Also add tests for the expected format
2017-03-28 00:53:31 -04:00
Justin Santa Barbara 3bf0dcd086 Move logrotate configuration to code 2017-03-28 00:44:22 -04:00
Justin Santa Barbara e6fb0a3d67 Move kube-scheduler to code & RBAC 2017-03-28 00:26:59 -04:00
Justin Santa Barbara 4006741a5d Update for new taints / labels names 2017-03-27 23:13:39 -04:00
Justin Santa Barbara 86d544c2f3 Update protokube to make tainting optional
As of 1.6, kubelet can apply the taints, so we don't need to do it in
protokube.
2017-03-27 23:08:15 -04:00
Justin Santa Barbara ae52277272 Update error message for golang style 2017-03-27 10:23:32 -04:00
Leon Waldman 133153b9a2 Add AWS CloudConfig DisableSecurityGroupIngress Configuration Parameter 2017-03-22 21:49:38 -03:00
Justin Santa Barbara b9204e9911 Initial Container-Optimized OS support
Add initial support for google's container-optimized OS (available on
GCE).
2017-03-20 23:47:37 -04:00
Justin Santa Barbara cb4641fea3 Code updates 2017-03-16 02:40:50 -04:00
Justin Santa Barbara 3d14d07616 Support cloud-config on GCE 2017-02-28 20:08:03 -05:00
Justin Santa Barbara 645f330dad Re-enable GCE support
We move everything to the models.  We feature-flag it, because we
probably want to change the names etc, and we aren't going to be able to
offer smooth upgrades until that is done.
2017-02-28 20:08:03 -05:00
Michael Taufen c24a017ed5 use --kubeconfig on kubelet instead of --api-servers in post 1.6 clusters 2017-02-27 15:49:11 -08:00
Justin Santa Barbara 4557ee7b9e Add socat to CoreOS
We build a statically linked version and distribute it with kops.

Note that our version of socat does not include libssl, but kubernetes
does not use it anyway.
2017-02-24 01:24:25 -05:00
Justin Santa Barbara 1c7818833a Merge pull request #1813 from aledbf/coreos
Initial (experimental) CoreOS support
2017-02-14 11:08:40 -05:00
Justin Santa Barbara 75447f8b44 Install ethtool in nodeup
Issue #1830
2017-02-11 16:16:09 -05:00
Manuel de Brito Fontes 6715bd53db Address comments 2017-02-11 13:57:30 -03:00
Manuel de Brito Fontes da2630638b Fix build 2017-02-11 13:57:30 -03:00
Justin Santa Barbara 1bacf8271e Initial (experimental) CoreOS support
* Detect CoreOS
* Move key manifests to code, to tolerate read-only mounts
* Misc refactorings so more code can be shared
* Change lots of ints to int32s in the models
* Run nodeup as a oneshot systemd service, rather than relying on
cloud-init behaviour which varies across distros
2017-02-11 13:57:30 -03:00
Manuel de Brito Fontes 572e2ab53e Increase conntrack table size using sysctl 2017-02-08 12:14:41 -03:00
Justin Santa Barbara a909f38b9c Merge pull request #1790 from justinsb/k8s_version_per_kops_version
Recommend a k8s version based on each kops version
2017-02-06 20:13:57 -05:00
Justin Santa Barbara 2d37ab1ca5 Recommend a k8s version based on each kops version
So the flow is that we recommend (or strongly recommend) a new kops
version when one is required for a new version, and then the new kops
version will recommend (or strongly recommend) a new k8s version.

We don't have a notion of multiple recommended k8s versions per kops
version - that is what channels are for.

Users are always free to disregard updates, even "required" ones by
setting a flag.
2017-02-06 01:06:03 -05:00
Justin Santa Barbara 46a770bf43 Don't set docker.socket on RHEL
For Docker >= 1.12

Fix #1781
2017-02-05 23:50:56 -05:00
Justin Santa Barbara fc66ac19a3 Install ebtables in nodeup
Partially addresses #1711.  We want to preinstall ebtables to fully fix.
2017-02-01 02:18:28 -05:00
Justin Santa Barbara 93d0a79833 Fix path to docker service manifest
Fix #1542
2017-01-30 01:50:20 -05:00
Justin Santa Barbara 5ace7ef11b protokube: build etcd manifest in code 2017-01-24 12:14:25 -05:00
Chris Love 645bf798b6 Merge pull request #1523 from justinsb/remove_kubelet
Refactor kubelet to code
2017-01-19 08:10:23 -08:00
Justin Santa Barbara d561d33e60 Refactor kubelet to code
More splitting up the CoreOS PR
2017-01-18 21:53:52 -05:00
Justin Santa Barbara 670b3712ef Remove systemd manifest (for real)
I forgot to actually remove the old copy we were moving last time!
2017-01-18 01:09:35 -05:00
Kris Nova 5c7174da00 Merge pull request #1487 from justinsb/split_out_systemd
Split out systemd package
2017-01-16 21:19:57 -07:00
Justin Santa Barbara 515d4ddb21 Split out distros into its own package
Part of splitting up the coreos PR
2017-01-15 18:18:34 -05:00
Justin Santa Barbara b3fd80ac11 Split out systemd package
Part of splitting up the CoreOS PR
2017-01-15 17:52:56 -05:00
Justin Santa Barbara 6d6f8cb932 Fixes per code review 2017-01-11 00:12:59 -05:00
Justin Santa Barbara 8342208cc5 Build docker service in code, to cope with variations
The docker systemd manifest changes a lot between versions - build it in
code for sanity.
2017-01-10 15:22:09 -05:00
Justin Santa Barbara 17f54fefb7 Clean up sysctls
Remove duplicate key; add missing blank line
2017-01-09 00:30:47 -05:00
Justin Santa Barbara 5b3524cb80 Set default sysctls 2017-01-04 00:08:56 -05:00
Justin Santa Barbara 2f256b9d39 Add tests for docker nodeup side 2016-12-20 13:10:39 -05:00
Justin Santa Barbara 846b7601db Configure DockerVersion in Docker Spec
And automatically choose 1.12.3 for k8s >= 1.5, 1.11.2 for < 1.5

Fix #849
2016-12-20 00:34:40 -05:00