Skip to content
  1. Feb 12, 2018
  2. Feb 08, 2018
  3. Dec 25, 2017
    • Matthew Mosesohn's avatar
      Update Kubernetes to v1.9.0 (#2100) · ad6fecef
      Matthew Mosesohn authored
      Update checksum for kubeadm
      Use v1.9.0 kubeadm params
      Include hash of ca.crt for kubeadm join
      Update tag for testing upgrades
      Add workaround for testing upgrades
      Remove scale CI scenarios because of slow inventory parsing
      in ansible 2.4.x.
      
      Change region for tests to us-central1 to
      improve ansible performance
      ad6fecef
  4. Nov 29, 2017
    • unclejack's avatar
      contiv network support (#1914) · e5d353d0
      unclejack authored
      
      
      * Add Contiv support
      
      Contiv is a network plugin for Kubernetes and Docker. It supports
      vlan/vxlan/BGP/Cisco ACI technologies. It support firewall policies,
      multiple networks and bridging pods onto physical networks.
      
      * Update contiv version to 1.1.4
      
      Update contiv version to 1.1.4 and added SVC_SUBNET in contiv-config.
      
      * Load openvswitch module to workaround on CentOS7.4
      
      * Set contiv cni version to 0.1.0
      
      Correct contiv CNI version to 0.1.0.
      
      * Use kube_apiserver_endpoint for K8S_API_SERVER
      
      Use kube_apiserver_endpoint as K8S_API_SERVER to make contiv talks
      to a available endpoint no matter if there's a loadbalancer or not.
      
      * Make contiv use its own etcd
      
      Before this commit, contiv is using a etcd proxy mode to k8s etcd,
      this work fine when the etcd hosts are co-located with contiv etcd
      proxy, however the k8s peering certs are only in etcd group, as a
      result the etcd-proxy is not able to peering with the k8s etcd on
      etcd group, plus the netplugin is always trying to find the etcd
      endpoint on localhost, this will cause problem for all netplugins
      not runnign on etcd group nodes.
      This commit make contiv uses its own etcd, separate from k8s one.
      on kube-master nodes (where net-master runs), it will run as leader
      mode and on all rest nodes it will run as proxy mode.
      
      * Use cp instead of rsync to copy cni binaries
      
      Since rsync has been removed from hyperkube, this commit changes it
      to use cp instead.
      
      * Make contiv-etcd able to run on master nodes
      
      * Add rbac_enabled flag for contiv pods
      
      * Add contiv into CNI network plugin lists
      
      * migrate contiv test to tests/files
      
      Signed-off-by: default avatarCristian Staretu <cristian.staretu@gmail.com>
      
      * Add required rules for contiv netplugin
      
      * Better handling json return of fwdMode
      
      * Make contiv etcd port configurable
      
      * Use default var instead of templating
      
      * roles/download/defaults/main.yml: use contiv 1.1.7
      
      Signed-off-by: default avatarCristian Staretu <cristian.staretu@gmail.com>
      e5d353d0
  5. Oct 26, 2017
  6. Oct 25, 2017
    • Matthew Mosesohn's avatar
      Fix broken CI jobs (#1854) · a52bc44f
      Matthew Mosesohn authored
      * Fix broken CI jobs
      
      Adjust image and image_family scenarios for debian.
      Checkout CI file for upgrades
      
      * add debugging to file download
      
      * Fix download for alternate playbooks
      
      * Update ansible ssh args to force ssh user
      
      * Update sync_container.yml
      a52bc44f
  7. Oct 18, 2017
  8. Oct 13, 2017
  9. Oct 05, 2017
  10. Oct 03, 2017
  11. Oct 01, 2017
  12. Sep 26, 2017
    • Matthew Mosesohn's avatar
      Upgrade to kubeadm (#1667) · bd272e0b
      Matthew Mosesohn authored
      * Enable upgrade to kubeadm
      
      * fix kubedns upgrade
      
      * try upgrade route
      
      * use init/upgrade strategy for kubeadm and ignore kubedns svc
      
      * Use bin_dir for kubeadm
      
      * delete more secrets
      
      * fix waiting for terminating pods
      
      * Manually enforce kube-proxy for kubeadm deploy
      
      * remove proxy. update to kubeadm 1.8.0rc1
      bd272e0b
  13. Sep 24, 2017
  14. Sep 16, 2017
  15. Sep 13, 2017
    • Matthew Mosesohn's avatar
      kubeadm support (#1631) · 67447260
      Matthew Mosesohn authored
      * kubeadm support
      
      * move k8s master to a subtask
      * disable k8s secrets when using kubeadm
      * fix etcd cert serial var
      * move simple auth users to master role
      * make a kubeadm-specific env file for kubelet
      * add non-ha CI job
      
      * change ci boolean vars to json format
      
      * fixup
      
      * Update create-gce.yml
      
      * Update create-gce.yml
      
      * Update create-gce.yml
      67447260
  16. Sep 05, 2017
    • mkrasilnikov's avatar
      06035c0f
    • mkrasilnikov's avatar
      Vault role updates: · bf0af1cd
      mkrasilnikov authored
        * using separated vault roles for generate certs with different `O` (Organization) subject field;
        * configure vault roles for issuing certificates with different `CN` (Common name) subject field;
        * set `CN` and `O` to `kubernetes` and `etcd` certificates;
        * vault/defaults vars definition was simplified;
        * vault dirs variables defined in kubernetes-defaults foles for using
        shared tasks in etcd and kubernetes/secrets roles;
        * upgrade vault to 0.8.1;
        * generate random vault user password for each role by default;
        * fix `serial` file name for vault certs;
        * move vault auth request to issue_cert tasks;
        * enable `RBAC` in vault CI;
      bf0af1cd
  17. Sep 04, 2017
  18. Aug 24, 2017
    • Brad Beam's avatar
      Adding yamllinter to ci steps (#1556) · 8b151d12
      Brad Beam authored
      * Adding yaml linter to ci check
      
      * Minor linting fixes from yamllint
      
      * Changing CI to install python pkgs from requirements.txt
      
      - adding in a secondary requirements.txt for tests
      - moving yamllint to tests requirements
      8b151d12
  19. Aug 21, 2017
    • Matthew Mosesohn's avatar
      Update to Kubernetes v1.7.3 (#1549) · ca3050ec
      Matthew Mosesohn authored
      Change kubelet deploy mode to host
      Enable cri and qos per cgroup for kubelet
      Update CoreOS images
      Add upgrade hook for switching from kubelet deployment from docker to host.
      Bump machine type for ubuntu-rkt-sep
      ca3050ec
  20. Aug 20, 2017
    • Maxim Krasilnikov's avatar
      Fixed deploy cluster with vault cert manager (#1548) · 2ba285a5
      Maxim Krasilnikov authored
      * Added custom ips to etcd vault distributed certificates
      
      * Added custom ips to kube-master vault distributed certificates
      
      * Added comment about issue_cert_copy_ca var in vault/issue_cert role file
      
      * Generate kube-proxy, controller-manager and scheduler certificates by vault
      
      * Revert "Disable vault from CI (#1546)"
      
      This reverts commit 781f31d2.
      
      * Fixed upgrade cluster with vault cert manager
      
      * Remove vault dir in reset playbook
      2ba285a5
  21. Aug 18, 2017
  22. Jul 17, 2017
  23. Jul 04, 2017
  24. Jun 26, 2017
Loading