Skip to content
  1. Dec 09, 2016
    • Bogdan Dobrelya's avatar
      Preconfigure DNS stack and docker early · a15d6267
      Bogdan Dobrelya authored
      
      
      In order to enable offline/intranet installation cases:
      * Move DNS/resolvconf configuration to preinstall role. Remove
        skip_dnsmasq_k8s var as not needed anymore.
      
      * Preconfigure DNS stack early, which may be the case when downloading
        artifacts from intranet repositories. Do not configure
        K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be
        not existing).
      
      * Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq
        was set up and before K8s apps to be created.
      
      * Move docker install task to early stage as well and unbind it from the
        etcd role's specific install path. Fix external flannel dependency on
        docker role handlers. Also fix the docker restart handlers' steps
        ordering to match the expected sequence (the socket then the service).
      
      * Add default resolver fact, which is
        the cloud provider specific and remove hardcoded GCE resolver.
      
      * Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search
        domains combined with high ndots values lead to poor performance of
        DNS stack and make ansible workers to fail very often with the
        "Timeout (12s) waiting for privilege escalation prompt:" error.
      
      * Update docs.
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      a15d6267
    • Bogdan Dobrelya's avatar
      Add tags · 8cc84e13
      Bogdan Dobrelya authored
      
      
      Add tags to allow more granular tasks filtering.
      Add generator script for MD formatted tags found.
      Add docs for tags how-to.
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      8cc84e13
  2. Dec 07, 2016
  3. Dec 06, 2016
  4. Nov 29, 2016
  5. Nov 28, 2016
    • Bogdan Dobrelya's avatar
      Add advanced net check for DNS K8s app · b7692fad
      Bogdan Dobrelya authored
      
      
      * Add an option to deploy K8s app to test e2e network connectivity
        and cluster DNS resolve via Kubedns for nethost/simple pods
        (defaults to false).
      * Parametrize existing k8s apps templates with kube_namespace and
        kube_config_dir instead of hardcode.
      * For CoreOS, ensure nameservers from inventory to be put in the
        first place to allow hostnet pods connectivity via short names
        or FQDN and hostnet agents to pass as well, if netchecker
        deployed.
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      b7692fad
  6. Nov 25, 2016
    • Bogdan Dobrelya's avatar
      Tune dnsmasq/kubedns limits, replicas, logging · 2d18e192
      Bogdan Dobrelya authored
      
      
      * Add dns_replicas, dns_memory/cpu_limit/requests vars for
      dns related apps.
      * When kube_log_level=4, log dnsmasq queries as well.
      * Add log level control for skydns (part of kubedns app).
      * Add limits/requests vars for dnsmasq (part of kubedns app) and
        dnsmasq daemon set.
      * Drop string defaults for kube_log_level as it is int and
        is defined in the global vars as well.
      * Add docs
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      2d18e192
  7. Nov 24, 2016
    • Bogdan Dobrelya's avatar
      Fix download dnsmasq image dependency on docker · aa447585
      Bogdan Dobrelya authored
      
      
      When download_run_once with download_localhost is used, docker is
      expected to be running on the delegate localhost. That may be not
      the case for a non localhost delegate, which is the kube-master
      otherwise. Then the dnsmasq role, had it been invoked early before
      deployment starts, would fail because of the missing docker dependency.
      
      * Fix that dependency on docker and do not pre download dnsmasq image
        for the dnsmasq role, if download_localhost is disabled.
      * Remove become: false for docker CLI invocation because that's not
        the common pattern to allow users access docker CLI w/o sudo.
      * Fix opt bin path hack for localhost delegate to ignore errors when
        it fails with "sudo password required" otherwise.
      * Describe download_run_once with download_localhost use case in docs
        as well.
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      aa447585
  8. Nov 18, 2016
  9. Nov 17, 2016
  10. Nov 15, 2016
  11. Nov 10, 2016
  12. Nov 09, 2016
  13. Oct 18, 2016
  14. Oct 17, 2016
  15. Oct 05, 2016
  16. Sep 29, 2016
  17. Sep 27, 2016
    • Bogdan Dobrelya's avatar
      Allow subdomains of dns_domain and fix kubelet restarts · 5fd43b7c
      Bogdan Dobrelya authored
      
      
      * Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf.
      * Poke kube dns container image to v1.7
      * In order to apply changes to kubelet, notify it to
      be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet
      may yet to be present up to the moment of the notification being processed.
      * Remove unnecessary kubelet restart for master role as the node role ensures
      it is up and running. Notify master static pods waiters for apiserver,
      scheduler, controller-manager instead.
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      5fd43b7c
  18. Sep 26, 2016
  19. Sep 23, 2016
  20. Sep 19, 2016
  21. Sep 15, 2016
  22. Aug 24, 2016
  23. Jul 25, 2016
    • Bogdan Dobrelya's avatar
      Add HA/LB endpoints for kube-apiserver · 731d32af
      Bogdan Dobrelya authored
      
      
      * Add HA docs for API server.
      * Add auto-evaluated internal endpoints and clarify the loadbalancer_apiserver
      vars and usecases.
      * Use facts for kube_apiserver to not repeat code and enable LB endpoints use.
      * Use /healthz check for the wait-for apiserver.
      * Use the single endpoint for kubelet instead of the list of apiservers
      * Specify kube_apiserver_count to for HA layout
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      731d32af
  24. Jul 22, 2016
  25. Jul 19, 2016
    • Bogdan Dobrelya's avatar
      Add etcd proxy support · 32cd6e99
      Bogdan Dobrelya authored
      
      
      * Enforce a etcd-proxy role to a k8s-cluster group members. This
      provides an HA layout for all of the k8s cluster internal clients.
      * Proxies to be run on each node in the group as a separate etcd
      instances with a readwrite proxy mode and listen the given endpoint,
      which is either the access_ip:2379 or the localhost:2379.
      * A notion for the 'kube_etcd_multiaccess' is: ignore endpoints and
      loadbalancers and use the etcd members IPs as a comma-separated
      list. Otherwise, clients shall use the local endpoint provided by a
      etcd-proxy instances on each etcd node. A Netwroking plugins always
      use that access mode.
      * Fix apiserver's etcd servers args to use the etcd_access_endpoint.
      * Fix networking plugins flannel/calico to use the etcd_endpoint.
      * Fix name env var for non masters to be set as well.
      * Fix etcd_client_url was not used anywhere and other etcd_* facts
      evaluation was duplicated in a few places.
      * Define proxy modes only in the env file, if not a master. Del
      an automatic proxy mode decisions for etcd nodes in init/unit scripts.
      * Use Wants= instead of Requires= as "This is the recommended way to
      hook start-up of one unit to the start-up of another unit"
      * Make apiserver/calico Wants= etcd-proxy to keep it always up
      
      Signed-off-by: default avatarBogdan Dobrelya <bdobrelia@mirantis.com>
      Co-authored-by: default avatarMatthew Mosesohn <mmosesohn@mirantis.com>
      32cd6e99
  26. Jul 08, 2016
  27. Jul 07, 2016
  28. Jul 04, 2016
Loading