- Dec 09, 2016
-
-
Bogdan Dobrelya authored
Add tags to allow more granular tasks filtering. Add generator script for MD formatted tags found. Add docs for tags how-to. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Dec 07, 2016
-
-
Dan Bode authored
The variale etcd_access_addresses is used to determine how to address communication from other roles to the etcd cluster. It was set to the address that ansible uses to connect to instance ({{ item }})s and not the the variable: ip_access which had already been created and could already be overridden through the access_ip variable. This change allows ansible to connect to a machine using a different address than the one used to access etcd.
-
Bogdan Dobrelya authored
Override GCE sysctl in /etc/sysctl.d/99-sysctl.conf instead of the /etc/sysctl.d/11-gce-network-security.conf. It is recreated by GCE, f.e. if gcloud CLI invokes some security related changes, thus losing customizations we want to be persistent. Update cloud providers firewall requirements in calico docs. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
fen4o authored
kube-controller-manager's cluster signing cert and key points by default to not existing `/etc/kubernetes/ca/ca.pem` and `/etc/kubernetes/ca/ca.key` [docs][1] [1]: http://kubernetes.io/docs/admin/kube-controller-manager/#options
-
- Dec 06, 2016
-
-
Matthew Mosesohn authored
ipv4 forwarding gets broken when restarting networking, which breaks all networking for all pods.
-
- Dec 05, 2016
-
-
Matthew Mosesohn authored
-
- Dec 03, 2016
-
-
Chad Swenson authored
-
- Dec 02, 2016
-
-
ant31 authored
-
- Nov 29, 2016
-
-
Sebastian Melchior authored
-
- Nov 28, 2016
-
-
Yuriy Taraday authored
Fixes #655. This is a teporary solution for long-polling idle connections to apiserver. It will make Nginx not cut them for the duration of expected timeout. It will also make Nginx extremely slow in realizing that there is some issue with connectivity to apiserver as well, so it might not be perfect permanent solution.
-
Bogdan Dobrelya authored
* Add an option to deploy K8s app to test e2e network connectivity and cluster DNS resolve via Kubedns for nethost/simple pods (defaults to false). * Parametrize existing k8s apps templates with kube_namespace and kube_config_dir instead of hardcode. * For CoreOS, ensure nameservers from inventory to be put in the first place to allow hostnet pods connectivity via short names or FQDN and hostnet agents to pass as well, if netchecker deployed. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Nov 25, 2016
-
-
Bogdan Dobrelya authored
* Add dns_replicas, dns_memory/cpu_limit/requests vars for dns related apps. * When kube_log_level=4, log dnsmasq queries as well. * Add log level control for skydns (part of kubedns app). * Add limits/requests vars for dnsmasq (part of kubedns app) and dnsmasq daemon set. * Drop string defaults for kube_log_level as it is int and is defined in the global vars as well. * Add docs Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Nov 23, 2016
-
-
Bogdan Dobrelya authored
W/o this patch, the "Download containers" task may be skipped when running on the delegate node due to wrong "when" confition. Then it fails to upload nginx image to the nodes as well. Fix download nginx dependency so it always can be pushed to nodes when download_run_once is enabled. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Nov 22, 2016
-
-
Bogdan Dobrelya authored
According to http://kubernetes.io/docs/user-guide/images/ : By default, the kubelet will try to pull each image from the specified registry. However, if the imagePullPolicy property of the container is set to IfNotPresent or Never, then a local\ image is used (preferentially or exclusively, respectively). Use IfNotPresent value to allow images prepared by the download role dependencies to be effectively used by kubelet without pull errors resulting apps to stay blocked in PullBackOff/Error state even when there are images on the localhost exist. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
Bogdan Dobrelya authored
Pre download all required container images as roles' deps. Drop unused flannel-server-helper images pre download. Improve pods creation post-install test pre downloaded busybox. Improve logs collection script with kubectl describe, fix sudo/etcd/weave commands. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Nov 21, 2016
-
-
Paweł Skrzyński authored
-
Bogdan Dobrelya authored
Fix unreliable waiting for the apiserver to become ready. Remove logfile mount to align with the rest of static pods and because containers shall write logs to stdout only. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Nov 18, 2016
-
-
Spencer Smith authored
-
Maciej Filipiak authored
-
- Nov 17, 2016
-
-
Spencer Smith authored
-
Spencer Smith authored
-
- Nov 15, 2016
-
-
Aleksandr Didenko authored
- Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico.
-
Bogdan Dobrelya authored
Add missing --require-kubeconfig to the if..else stanza. Make sure certs dirs mounted in RO. Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Nov 14, 2016
-
-
Matthew Mosesohn authored
--api-servers now just reads kubeconfig --config is now --pod-manifest-path Fixes #542
-
Aleksandr Didenko authored
- Move CNI configuration from `kubernetes/node` role to `network_plugin/canal` - Create SSL dir for Canal and symlink etcd SSL files - Add needed options to `canal-config` configmap - Run flannel and calico-node containers with proper configuration
-
Matthew Mosesohn authored
-
Matthew Mosesohn authored
-
- Nov 10, 2016
-
-
Bogdan Dobrelya authored
- Drop debugs from collect-info playbook - Drop sudo from collect-info step and add target dir var (required for travis jobs) - Label all k8s apps, including static manifests - Add logs for K8s apps to be collected as well - Fix upload to GCS as a public-read tarball Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
Matthew Mosesohn authored
Also fixes kube-apiserver upgrade that was erroneously deleted in a previous commit.
-
- Nov 09, 2016
-
-
Matthew Mosesohn authored
-
Matthew Mosesohn authored
-
- Nov 08, 2016
-
-
Aleksandr Didenko authored
Container settings moved from deamonset yaml to a separate configmap.
-
Aleksandr Didenko authored
This patch provides support for Canal network plugin installation as a self-hosted app, see the following link for details: https://github.com/tigera/canal/tree/master/k8s-install
-
- Nov 07, 2016
-
-
Matthew Mosesohn authored
Squashed commits: [f9355ea1] Swap order in which we reload docker/socket [2ca6819c] Reload docker.socket after installing flannel on coreos Workaround for #569 [9f976e56] Vagrantfile: setup proxy inside virtual machines In corporate networks, it is good to pre-configure proxy variables. [9d7142f4] Vagrantfile: use Ubuntu 16.04 LTS Use recent supported version of Ubuntu for local development setup with Vagrant. [50f77cca] Add CI test layouts * Drop Wily from test matrix * Replace the Wily cases dropped with extra cases to test separate roles deployment Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com> [03e162b3] Update OWNERS [c7b00cae] Use tar+register instead of copy/slurp for distributing tokens and certs Related bug: https://github.com/ansible/ansible/issues/15405 Uses tar and register because synchronize module cannot sudo on the remote side correctly and copy is too slow. This patch dramatically cuts down the number of tasks to process for cert synchronization. [2778ac61] Add new var skip_dnsmasq_k8s If skip_dnsmasq is set, it will still not set up dnsmasq k8s pod. This enables independent setup of resolvconf section before kubelet is up.
-
- Nov 04, 2016
-
-
Spencer Smith authored
-
- Oct 26, 2016
-
-
Matthew Mosesohn authored
Related bug: https://github.com/ansible/ansible/issues/15405 Uses tar and register because synchronize module cannot sudo on the remote side correctly and copy is too slow. This patch dramatically cuts down the number of tasks to process for cert synchronization.
-
- Oct 24, 2016
-
-
Bogdan Dobrelya authored
* Don't push containers if not changed * Do preinstall role only once and redistribute defaults to corresponding roles Signed-off-by:
Bogdan Dobrelya <bdobrelia@mirantis.com>
-
- Oct 21, 2016
-
-
Matthew Mosesohn authored
-
Matthew Mosesohn authored
-
Matthew Mosesohn authored
-