This change support running kubernetes master on Ubuntu Trusty.
It uses pure cloud-config and shell scripts, and completely gets
rid of saltstack or the release salt tarball.
The version of Salt we're running doesn't do a good job of detecting
systemd. Inspired by https://github.com/saltstack/salt/issues/13926,
I added a provider-force to the services.
With this change, salt-call -l debug state.highstate succeeds, even for
repeated invocations.
The issue was (probably) benign, but definitely caused noised (e.g. #11297)
To build the python image, BUILD_PYTHON_IMAGE should be set during make.
When the addon script is running, it will check if python is installed
on the machine, if not, it will use the python image that built previously.
This registry can be accessed through proxies that run on each node
listening on port 5000. We send the proxy images to the nodes directly
to avoid requests that hit the network during cluster launch. For now,
we continue to pull the registry itself over the network, especially
given its large size (we should be able to dramatically shrink the
image). On GCE we create a PD and use that for storage, otherwise we
use an emptyDir. The registry is not enabled outside of GCE. All
communication is currently plain HTTP. In order to use SSL, we will
need to be able to request a certificate/key from the apiserver signed
by the apiserver's CA cert.
Instead of hard coding kube-cert and /srv/kubernetes allow these to be
overwritten by environment variables. / is immutable on some systems
and so /srv is not a possible location to store data.
This may help Salt reload services correctly, although we still
need the script until Salt's bug with reloading services on systemd
is resolved.
Salt bug: https://github.com/saltstack/salt/issues/16778
Changes include:
- Add kube-ui binary for serving static dashboard UI
- Add kube-ui docker image, replication controller, and service
- Make the kube-ui a cluster-addon (enabled by default)
- Split the compiled pkg/ui/datafile.go into separate dashboard and swagger packages
- Update docs to reflect changes
Was previously kubernetes_auth format.
Added defaults file which uses salt to fill in an env var
with the master's IP.
More thought needs to be given soon to how to make this
connection use a cert for the master, and how to support
multiple masters, and whether to use the DNS record
instead of an IP address. But this PR unblocks some other
more urgent things, so doing it this way.
Mike Danese
Mike Danese
Quintin Lee
bryk
Andy Zheng
Peter McDonnell
Dhawal Yogesh Bhanushali
Arsen Mamikonyan
Justin Santa Barbara
Josh Ellithorpe
Yifan Gu
Prashanth Balasubramanian
Brendan Burns
Dai Zuozhuo
Muhammed Uluyol
Veres Lajos
Eric Paris
Piotr Szczesniak
Marek Biskup
Satnam Singh
nikhiljindal
Tim St. Clair
Zach Loafman
Daniel Smith
Vishnu Kannan
saadali
Jeffrey Bean
Robert Bailey
Dawn Chen
Kris Rousey
CJ Cullen
Eric Tune