Justin Santa Barbara
26b8421dda
Merge pull request #2285 from justinsb/fix_tests
...
Tidy up kubelet nodeup tests
2017-04-06 01:16:58 -04:00
Justin Santa Barbara
ba1af6950e
Tidy up kubelet nodeup tests
2017-04-06 00:18:43 -04:00
Justin Santa Barbara
a935a81b51
Merge pull request #2223 from andrewsykim/set-nf-conntrack-max-in-kubeproxy
...
Set nf_conntrack_max in kubeproxy
2017-04-06 00:13:14 -04:00
Justin Santa Barbara
bc0063e1cb
Update to docker 1.12.6 for k8s 1.6
2017-04-04 01:24:49 -04:00
chrislovecnm
131bc77abb
Adding feature gates flag for kubelet, and unit tests
2017-04-03 11:13:21 -06:00
Justin Santa Barbara
e04fdbd95d
PoC of hooks
2017-03-31 22:33:25 -04:00
Chris Love
f63c52c425
Merge pull request #2225 from justinsb/use_kcm_serviceaccounts
...
Set --use-service-account-credentials for 1.6
2017-03-29 10:50:42 -06:00
Justin Santa Barbara
2678f7e4be
Merge pull request #2221 from justinsb/use_tee
...
Use tee for kube-proxy, so kubectl logs works
2017-03-29 11:44:07 -04:00
Justin Santa Barbara
e5ec85fb7c
Merge pull request #2220 from justinsb/disable_insecure_port
...
Be able to disable insecure port for apiserver
2017-03-29 11:43:40 -04:00
Justin Santa Barbara
19db8b37a0
Set --use-service-account-credentials for 1.6
2017-03-29 11:42:24 -04:00
Justin Santa Barbara
4179074590
Add RBAC roles to basic auth
2017-03-29 00:42:03 -04:00
andrewsykim
c2e3717df2
remove setting nf_conntrack_max in nodeup
2017-03-28 21:40:19 -04:00
andrewsykim
8ee736a485
kube-proxy overwrites nf_conntrack_max so we should set it there
2017-03-28 21:38:09 -04:00
Justin Santa Barbara
8b965a0ad9
Disable insecure port for apiserver
...
All components need a kubeconfig
2017-03-28 21:26:17 -04:00
Justin Santa Barbara
fe3b1f3abe
Use tee for kube-proxy, so kubectl logs works
2017-03-28 20:48:48 -04:00
Justin Santa Barbara
c6b4288e61
Pull fixes from the integration branch
2017-03-28 20:42:15 -04:00
Justin Santa Barbara
4c28bd30e4
Enable RBAC on 1.6
2017-03-28 20:14:13 -04:00
Justin Santa Barbara
eecf22d593
Merge pull request #2206 from justinsb/kubeproxy_to_code
...
Move kubeproxy configuration to code
2017-03-28 19:51:02 -04:00
Justin Santa Barbara
04b4659923
Log kube-proxy command after we build it
2017-03-28 19:37:03 -04:00
Justin Santa Barbara
c4e05ca1b1
Fix taint format
2017-03-28 12:26:10 -04:00
Justin Santa Barbara
e2a06a389a
Move kubeproxy configuration to code
...
Also map kube-proxy ClusterCIDR arg.
2017-03-28 10:03:17 -04:00
Justin Santa Barbara
fea4df5868
Merge pull request #2202 from justinsb/post_2095
...
More log options for k8s 1.6
2017-03-28 01:25:20 -04:00
Justin Santa Barbara
cb8ea7e043
Use repeated flags for log-opt to docker
...
Also add tests for the expected format
2017-03-28 00:53:31 -04:00
Justin Santa Barbara
3bf0dcd086
Move logrotate configuration to code
2017-03-28 00:44:22 -04:00
Justin Santa Barbara
e6fb0a3d67
Move kube-scheduler to code & RBAC
2017-03-28 00:26:59 -04:00
Justin Santa Barbara
4006741a5d
Update for new taints / labels names
2017-03-27 23:13:39 -04:00
Justin Santa Barbara
86d544c2f3
Update protokube to make tainting optional
...
As of 1.6, kubelet can apply the taints, so we don't need to do it in
protokube.
2017-03-27 23:08:15 -04:00
Justin Santa Barbara
ae52277272
Update error message for golang style
2017-03-27 10:23:32 -04:00
Leon Waldman
133153b9a2
Add AWS CloudConfig DisableSecurityGroupIngress Configuration Parameter
2017-03-22 21:49:38 -03:00
Justin Santa Barbara
b9204e9911
Initial Container-Optimized OS support
...
Add initial support for google's container-optimized OS (available on
GCE).
2017-03-20 23:47:37 -04:00
Justin Santa Barbara
cb4641fea3
Code updates
2017-03-16 02:40:50 -04:00
Justin Santa Barbara
3d14d07616
Support cloud-config on GCE
2017-02-28 20:08:03 -05:00
Justin Santa Barbara
645f330dad
Re-enable GCE support
...
We move everything to the models. We feature-flag it, because we
probably want to change the names etc, and we aren't going to be able to
offer smooth upgrades until that is done.
2017-02-28 20:08:03 -05:00
Michael Taufen
c24a017ed5
use --kubeconfig on kubelet instead of --api-servers in post 1.6 clusters
2017-02-27 15:49:11 -08:00
Justin Santa Barbara
4557ee7b9e
Add socat to CoreOS
...
We build a statically linked version and distribute it with kops.
Note that our version of socat does not include libssl, but kubernetes
does not use it anyway.
2017-02-24 01:24:25 -05:00
Justin Santa Barbara
1c7818833a
Merge pull request #1813 from aledbf/coreos
...
Initial (experimental) CoreOS support
2017-02-14 11:08:40 -05:00
Justin Santa Barbara
75447f8b44
Install ethtool in nodeup
...
Issue #1830
2017-02-11 16:16:09 -05:00
Manuel de Brito Fontes
6715bd53db
Address comments
2017-02-11 13:57:30 -03:00
Manuel de Brito Fontes
da2630638b
Fix build
2017-02-11 13:57:30 -03:00
Justin Santa Barbara
1bacf8271e
Initial (experimental) CoreOS support
...
* Detect CoreOS
* Move key manifests to code, to tolerate read-only mounts
* Misc refactorings so more code can be shared
* Change lots of ints to int32s in the models
* Run nodeup as a oneshot systemd service, rather than relying on
cloud-init behaviour which varies across distros
2017-02-11 13:57:30 -03:00
Manuel de Brito Fontes
572e2ab53e
Increase conntrack table size using sysctl
2017-02-08 12:14:41 -03:00
Justin Santa Barbara
a909f38b9c
Merge pull request #1790 from justinsb/k8s_version_per_kops_version
...
Recommend a k8s version based on each kops version
2017-02-06 20:13:57 -05:00
Justin Santa Barbara
2d37ab1ca5
Recommend a k8s version based on each kops version
...
So the flow is that we recommend (or strongly recommend) a new kops
version when one is required for a new version, and then the new kops
version will recommend (or strongly recommend) a new k8s version.
We don't have a notion of multiple recommended k8s versions per kops
version - that is what channels are for.
Users are always free to disregard updates, even "required" ones by
setting a flag.
2017-02-06 01:06:03 -05:00
Justin Santa Barbara
46a770bf43
Don't set docker.socket on RHEL
...
For Docker >= 1.12
Fix #1781
2017-02-05 23:50:56 -05:00
Justin Santa Barbara
fc66ac19a3
Install ebtables in nodeup
...
Partially addresses #1711 . We want to preinstall ebtables to fully fix.
2017-02-01 02:18:28 -05:00
Justin Santa Barbara
93d0a79833
Fix path to docker service manifest
...
Fix #1542
2017-01-30 01:50:20 -05:00
Justin Santa Barbara
5ace7ef11b
protokube: build etcd manifest in code
2017-01-24 12:14:25 -05:00
Chris Love
645bf798b6
Merge pull request #1523 from justinsb/remove_kubelet
...
Refactor kubelet to code
2017-01-19 08:10:23 -08:00
Justin Santa Barbara
d561d33e60
Refactor kubelet to code
...
More splitting up the CoreOS PR
2017-01-18 21:53:52 -05:00
Justin Santa Barbara
670b3712ef
Remove systemd manifest (for real)
...
I forgot to actually remove the old copy we were moving last time!
2017-01-18 01:09:35 -05:00
Kris Nova
5c7174da00
Merge pull request #1487 from justinsb/split_out_systemd
...
Split out systemd package
2017-01-16 21:19:57 -07:00
Justin Santa Barbara
515d4ddb21
Split out distros into its own package
...
Part of splitting up the coreos PR
2017-01-15 18:18:34 -05:00
Justin Santa Barbara
b3fd80ac11
Split out systemd package
...
Part of splitting up the CoreOS PR
2017-01-15 17:52:56 -05:00
Justin Santa Barbara
6d6f8cb932
Fixes per code review
2017-01-11 00:12:59 -05:00
Justin Santa Barbara
8342208cc5
Build docker service in code, to cope with variations
...
The docker systemd manifest changes a lot between versions - build it in
code for sanity.
2017-01-10 15:22:09 -05:00
Justin Santa Barbara
17f54fefb7
Clean up sysctls
...
Remove duplicate key; add missing blank line
2017-01-09 00:30:47 -05:00
Justin Santa Barbara
5b3524cb80
Set default sysctls
2017-01-04 00:08:56 -05:00
Justin Santa Barbara
2f256b9d39
Add tests for docker nodeup side
2016-12-20 13:10:39 -05:00
Justin Santa Barbara
846b7601db
Configure DockerVersion in Docker Spec
...
And automatically choose 1.12.3 for k8s >= 1.5, 1.11.2 for < 1.5
Fix #849
2016-12-20 00:34:40 -05:00