External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 06:26:19 -02:30
Code Issues Packages Projects Releases Wiki Activity
1,090 Commits 61 Branches 91 Tags
68ad4ff4d901bf42d082e9e3b846cb3db1005e48
Commit Graph
92 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Matthew Mosesohn 68ad4ff4d9 Add dns_domain for each host to /etc/hosts 
Fixes #754
 2016-12-15 13:34:59 +04:00
Matthew Mosesohn e6fe9d5807 Merge pull request #726 from bogdando/netcheck_ci 
Enable netchecker for CI
 2016-12-14 17:19:30 +03:00
Matthew Mosesohn b1e852a785 Merge pull request #707 from vwfs/reset_playbook 
Add playbook and role to reset the cluster
 2016-12-12 12:43:00 +03:00
Matthew Mosesohn e5ad0836bc Merge pull request #713 from kubernetes-incubator/bump_kubedns 
Bump kubedns version to 1.9
 2016-12-10 11:08:42 +03:00
Matthew Mosesohn fb774d4317 Merge pull request #706 from vwfs/docker_storage_options 
Allow to specify docker storage driver
 2016-12-09 18:28:20 +03:00
Matthew Mosesohn 459bee6d2c Bump kubedns version to 1.9 
Version 1.9 has reduced verbosity for federation dns queries
which flood container logs.
 2016-12-09 17:57:54 +03:00
Matthew Mosesohn 4265149463 Merge pull request #703 from adidenko/fix-docker_versioned_pkg 
Convert docker_versioned_pkg dict keys to string
 2016-12-09 11:50:17 +03:00
Matthew Mosesohn a80745b5bd Merge pull request #668 from bodepd/etcd_access_address 
Use etcd host ip instead of hostname to build etcd_access_addresses
 2016-12-09 07:54:12 +03:00
Matthew Mosesohn fc769eb870 Merge pull request #693 from kubernetes-incubator/upgrades-doc 
Add document outlining upgrade process
 2016-12-08 13:02:55 +03:00
Matthew Mosesohn bfc9bcb8c7 Force hardlink for calico/canal certs 
Fixes: #669
 2016-12-07 19:03:22 +03:00
Matthew Mosesohn 3c66e4cdba Add document outlining upgrade process 2016-12-07 16:33:08 +03:00
Matthew Mosesohn 45ed6de315 Merge pull request #688 from fen4o/cluster-signing-cert 
add cluster-signing to kube-controller-manager
 2016-12-07 14:53:30 +03:00
Matthew Mosesohn 756ae926ba Re-enable debian-8-kubespray image for CI 
debian-8 image is missing memory cgroup, so it can't spawn pods.
 2016-12-06 16:00:58 +03:00
Matthew Mosesohn 7a3a473ccf Fix ipv4 forwarding on GCE 
ipv4 forwarding gets broken when restarting networking, which
breaks all networking for all pods.
 2016-12-06 11:57:57 +03:00
Matthew Mosesohn 2cdf752481 Add dbus socket dir to kube-proxy 2016-12-05 19:25:27 +03:00
Matthew Mosesohn 8b11de5425 Merge pull request #608 from sneumann/patch-1 
Fix failure if image package index is outdated
 2016-11-17 12:21:15 -05:00
Matthew Mosesohn ab0ff2ab3c Merge pull request #602 from adidenko/fix-canal-ssl 
Fix etcd ssl for canal
 2016-11-15 12:43:22 +03:00
Matthew Mosesohn 5cd65f9c45 Merge pull request #598 from kubernetes-incubator/bug_376 
Generate kubectl bash completion from kubectl instead of file
 2016-11-15 12:28:51 +03:00
Matthew Mosesohn 4e47c267fb Merge pull request #604 from kubernetes-incubator/k8s-upgrade-v1.4.6 
upgrade k8s version to 1.4.6
 2016-11-15 12:27:29 +03:00
Matthew Mosesohn 8ca1f4ce44 Fix kubelet deprecated options 
--api-servers now just reads kubeconfig
--config is now --pod-manifest-path

Fixes #542
 2016-11-14 22:13:44 +04:00
Matthew Mosesohn 8092f57695 Merge branch 'master' into calico-cni-container-support 2016-11-14 14:58:42 +03:00
Matthew Mosesohn 15bc445a9c Generate kubectl bash completion from kubectl instead of file 2016-11-14 14:54:59 +04:00
Matthew Mosesohn 6da0ecfa55 Merge pull request #550 from chadswen/hostname-alias 
Hostname alias fixes
 2016-11-14 13:09:18 +03:00
Matthew Mosesohn 1ccc10baf8 Merge pull request #597 from pcm32/patch-1 
Adds missing 'ip' var for terraform-generated inventory, based on internal ip
 2016-11-14 10:41:21 +03:00
Matthew Mosesohn 45c2900e71 Merge branch 'master' into hostname-alias 2016-11-14 09:32:35 +03:00
Matthew Mosesohn eb583dd2f3 Merge branch 'master' into idempotency_resolvconf 2016-11-14 09:30:22 +03:00
Matthew Mosesohn 46ee9faca9 Fix ca certificate loading on CoreOS 2016-11-14 08:47:09 +04:00
Matthew Mosesohn 6cc05c103a Merge pull request #592 from artem-panchenko/support_golang_calicoctl 
Support new version of 'calicoctl' (>=v1.0.0)
 2016-11-11 13:55:24 +03:00
Matthew Mosesohn 046e315bfd Merge pull request #595 from kubernetes-incubator/etcdtls-followup 
Fix canal's calico networking config for ETCD TLS
 2016-11-10 16:00:05 +03:00
Matthew Mosesohn fe16fecd8f Fix canal's calico networking config for ETCD TLS 
Also fixes kube-apiserver upgrade that was erroneously
deleted in a previous commit.
 2016-11-10 12:49:47 +03:00
Matthew Mosesohn 9ea9604b3f Merge pull request #591 from kubernetes-incubator/etcdtls 
Add etcd tls support
 2016-11-10 12:32:13 +03:00
Matthew Mosesohn a32cd85eb7 Add etcd TLS support 2016-11-09 18:38:28 +03:00
Matthew Mosesohn 95b460ae94 Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 13:31:12 +03:00
Matthew Mosesohn f106bf5bc4 adds ability to have hosts with no floating ips on terraform/openstack (+8 squashed commits) 
Squashed commits:
[f9355ea] Swap order in which we reload docker/socket
[2ca6819] Reload docker.socket after installing flannel on coreos

Workaround for #569
[9f976e5] Vagrantfile: setup proxy inside virtual machines

In corporate networks, it is good to pre-configure proxy variables.
[9d7142f] Vagrantfile: use Ubuntu 16.04 LTS

Use recent supported version of Ubuntu for local development setup
with Vagrant.
[50f77cc] Add CI test layouts

* Drop Wily from test matrix
* Replace the Wily cases dropped with extra cases to test separate
  roles deployment

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
[03e162b] Update OWNERS
[c7b00ca] Use tar+register instead of copy/slurp for distributing tokens and certs

Related bug: https://github.com/ansible/ansible/issues/15405

Uses tar and register because synchronize module cannot sudo on the
remote side correctly and copy is too slow.

This patch dramatically cuts down the number of tasks to process
for cert synchronization.
[2778ac6] Add new var skip_dnsmasq_k8s

If skip_dnsmasq is set, it will still not set up dnsmasq
k8s pod. This enables independent setup of resolvconf section
before kubelet is up.
 2016-11-07 10:53:13 +00:00
Matthew Mosesohn 03e162b342 Update OWNERS 2016-10-28 11:16:11 +04:00
Matthew Mosesohn d8b06f3e2f Ignore changes on check resolvconf task 2016-10-28 10:38:16 +04:00
Matthew Mosesohn 2778ac61a4 Add new var skip_dnsmasq_k8s 
If skip_dnsmasq is set, it will still not set up dnsmasq
k8s pod. This enables independent setup of resolvconf section
before kubelet is up.
 2016-10-26 17:56:15 +03:00
Matthew Mosesohn c7b00caeaa Use tar+register instead of copy/slurp for distributing tokens and certs 
Related bug: https://github.com/ansible/ansible/issues/15405

Uses tar and register because synchronize module cannot sudo on the
remote side correctly and copy is too slow.

This patch dramatically cuts down the number of tasks to process
for cert synchronization.
 2016-10-26 15:46:18 +03:00
Matthew Mosesohn 11f1f71b3b dynamically calculate etcd peer names 2016-10-21 16:17:50 +03:00
Matthew Mosesohn 0e9d1e09e3 Sync master tokens only with those in play_hosts 2016-10-21 14:43:41 +03:00
Matthew Mosesohn 65d2a3b0e5 Use only native cachable hostvars for etcd set_facts 2016-10-21 14:39:58 +03:00
Matthew Mosesohn 4b7347f1cd fix dnsmasq template cloud_provider lookup 2016-10-21 13:00:40 +03:00
Matthew Mosesohn 71347322d6 Add cluster-cidr to kube-proxy config 
This option enables masquerading for traffic directed at pods
that comes frmom outside the cluster.
 2016-10-12 19:13:33 +03:00
Matthew Mosesohn 84052ff0b6 use nginx proxy on non-master nodes to proxy apiserver traffic 
Also adds all masters by hostname and localhost/127.0.0.1 to
apiserver SSL certificate.

Includes documentation update on how localhost loadbalancer works.
 2016-10-05 20:09:10 +03:00
Matthew Mosesohn 2e90d3fe76 Merge branch 'master' into reverselookups 2016-10-05 14:46:47 +03:00
Matthew Mosesohn f4e6fdc193 Enable quorum read for apiserver 
This reduces the likelihood of apiserver status updates
timing out due to etcd write conflicts.
 2016-10-04 18:31:42 +03:00
Matthew Mosesohn d9641771ed add kube-masters to SSL certificate 2016-09-29 15:12:30 +03:00
Matthew Mosesohn 5579cddbdb Disable reverse lookups again 
Initially this was removed, but it turns out that services that
perform reverse lookups (such as MariaDB) will encounter severe
performance degredation with this disabled.
 2016-09-29 10:49:55 +04:00
Matthew Mosesohn e4a48cf53b Add Docker 1.12.1 version 2016-09-26 12:16:16 +03:00
Matthew Mosesohn a3fe1e78df Copy hyperkube CNI plugins when using weave 2016-09-26 12:02:19 +03:00
Matthew Mosesohn d313be4420 Improve management of nameservers in resolv.conf 
Changing nameservers now will clean up previous entries
 2016-09-22 18:11:15 +03:00
Matthew Mosesohn a93639650f Allow calico to configure pool if tree exists, but no pools defined 2016-09-19 15:27:47 +03:00
Matthew Mosesohn 341ea5a6ea always bind etcd_proxy to localhost 2016-09-18 19:58:15 +04:00
Matthew Mosesohn b69d5f6e6e Fix logic handling for use_hyperkube_cni 2016-09-15 16:09:40 +03:00
Matthew Mosesohn e3ebabc3b0 switch /etc/hosts to use blockinfile 2016-09-14 19:43:33 +03:00
Matthew Mosesohn ef43b21597 Fix kubedns idempotency 
Removed api-version from kube.py because it is deprecated.
Updating both kube.py because dnsmasq one is actually used.
Fixed name back to kubedns for checking its resource.
 2016-09-13 16:49:51 +03:00
Matthew Mosesohn b62de1dcb1 Reset replicacluster name of kube-dns-v19 back to kubedns 
This broke upgraded clusters
 2016-09-06 16:43:17 +03:00
Matthew Mosesohn b58512bbda Rename kube-dns back to kubedns 
kubedns should stay named the same so that services which
depend on this name are not broken.
 2016-09-02 15:09:49 +04:00
Matthew Mosesohn 26a0406669 Disable calicoctl from creating a default pool 
Sometimes invoking calicoctl to create a pool also
creates a default pool, which causes errors in deploy.
 2016-08-31 12:54:05 +03:00
Matthew Mosesohn 33c8d0a1a7 Remove search and nameserver entries from resolvconf base 
These items conflict when they are provided also in head file
Fixes: #456
 2016-08-30 13:14:44 +03:00
Matthew Mosesohn 256a4e1f29 Rebase etcd to v3.0.6 
Fixes #450
 2016-08-29 15:31:05 +03:00
Matthew Mosesohn c50c6672f3 Remove SecurityContextDeny API plugin 
This is no longer recommended for use since K8s 1.2:
http://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-plug-ins-to-use
 2016-08-29 14:20:28 +03:00
Matthew Mosesohn 1345dd07f7 Add --no-sync to etcdctl member list 
Fixes #447
 2016-08-29 12:51:43 +03:00
Matthew Mosesohn b92404fd0a Enable customization of calico-node docker image 
New vars: calico_node_image_repo and claico_node_image_tag
Defaults: calico/node and {{ calico_version }}, respectively
 2016-08-27 16:25:39 +04:00
Matthew Mosesohn 6f07da9f41 Restart kubelet if launcher changed 
Fixes #409
 2016-08-18 19:00:05 +03:00
Matthew Mosesohn d591b59205 Fix etcd play to only run on non-k8s-cluster nodes 
This decreases the time required to deploy a cluster with
3 nodes, but none are standalone etcd roles.
 2016-08-18 14:08:24 +03:00
Matthew Mosesohn 0c953101ff Fix init scripts for etcd. Fixes #383 
Fixes Ubuntu 14.04 deployment of etcd.
 2016-08-15 14:09:42 +03:00
Matthew Mosesohn f073ee91ea Copy hyperkube cni plugins optionally for calico deployment 
Hyperkube from CoreOS now ships with all binaries required for
calico and flannel (but not weave). It simplifies deployment for
some network plugin scenarios to not download CNI images.

TODO: Optionally disable downloading calico to /opt/cni/bin
 2016-08-10 15:35:53 +03:00
Matthew Mosesohn e727bd52f1 Add option to disable ipv6 dns lookup 
New variable disable_ipv6_dns in kubernetes/preinstall.
 2016-08-08 13:59:20 +03:00
Matthew Mosesohn acae5d4286 Check dnsmasq on first kube-node 
kube-masters without kube-node role will not run
kube-proxy, and therefore can't check if dnsmasq
is running.

Fixes #368
 2016-08-05 16:55:48 +04:00
Matthew Mosesohn e38258381f Wait for static pods when setting up 
Fixes #390
 2016-08-02 17:56:31 +03:00
Matthew Mosesohn e8a1c7a53f Move docker systemd unit creation to docker role 
Creating the unit using default settings early on
and then changing it during network_plugin section
leads to too many docker restarts and duplicated code.

Reversed Wants= dependence on docker.service so it does not
restart docker when reloading systemd

Consolidated all docker restart handlers.
 2016-08-02 17:56:24 +03:00
Matthew Mosesohn 5bf9b5345e Add future docker versions 
Default version is still unchanged, but added docker versions 1.11 and 1.12
 2016-08-02 12:35:05 +03:00
Matthew Mosesohn c7fef6cb76 Fix weave deployment task names 2016-07-30 23:12:41 +04:00
Matthew Mosesohn 5668e5f767 Fix etcd restart and handler systemd tasks 
Changed Wants=docker.service to docker.socket

Renamed handlers for reloading systemd to contain role in task name.
 2016-07-29 16:32:35 +03:00
Matthew Mosesohn 90fc407420 Fix etcd user for etcd-proxy service 
Only affects sys V OSes (Ubuntu 14.04)

Fixes ##383
 2016-07-27 11:54:47 +03:00
Matthew Mosesohn 1b1f5f22d4 Fix etcd standalone deployment 
etcd facts are generated in kubernetes/preinstall, so etcd nodes need
to be evaluated first before the rest of the deployment.

Moved several directory facts from kubernetes/node to
kubernetes/preinstall because they are not backward dependent.
 2016-07-26 18:15:06 +03:00
Matthew Mosesohn b4688701ea Copy kubectl from docker container 
Nearly the last stage of source all components to containers.
Kubectl will be called from hyperkube image.

Remaining tasks:
 * Move kube_version variable to kubernetes/preinstall
 * Drop placeholder download.nothing requirement
 2016-07-25 18:17:59 +03:00
Matthew Mosesohn d0a1e15ef3 Deploy kubelet and kube-apiserver as containers 
kubelet via docker
kube-apiserver as a static pod

Fixed etcd service start to be more tolerant of slow start.

Workaround for kube_version to stay in download role, but not
download an files by creating a new "nothing" download entry.
 2016-07-22 16:42:34 +03:00
Matthew Mosesohn 7f212ca9cb Revert "Add HA/LB endpoints for kube-apiserver" 
This reverts commit a70c3b661e.
 2016-07-22 13:54:38 +03:00
mattymo 8141b72d5e Merge branch 'master' into etcddockerdefault 2016-07-20 19:16:47 +03:00
Matthew Mosesohn 7a86b6c73e Set default etcd deployment to docker 
Improved docker reload command to wait for etcd to be
up before proceeding. Switched reload to run restart
because it can't reload if it is not guaranteed to be
in running state.
 2016-07-20 18:26:16 +03:00
Matthew Mosesohn c3e5aac18e Add variable kube_resolv_conf 
Allow configuration of a custom /etc/resolv.conf for kubelet.
 2016-07-20 11:57:47 +03:00
Matthew Mosesohn b3282cd0bb Add optional deployment mode for Docker etcd_deployment_type 
Running etcd in Docker reduces the number of individual file
downloads and services running on the host.

Note: etcd container v3.0.1 moves bindir to /usr/local/bin

Fixes: #298
 2016-07-07 19:31:28 +03:00
Matthew Mosesohn baf80b7d7e Change calicoctl deployment to use container 
Improves upgradability of calicoctl by leveraging docker tags.
 2016-07-05 13:49:03 +03:00
Matthew Mosesohn d2151500b6 Fix kube-apiserver log level syntax 2016-07-05 13:11:45 +03:00
Matthew Mosesohn b847a43c61 Set hyperkube version to kube_version 2016-07-05 12:43:27 +03:00
mattymo 708d2fbd61 Add KUBE_API_INSECURE_BIND to systemd unit file 
This was missing from commit c4c312c2e6
 2016-06-27 13:01:22 +04:00
Matthew Mosesohn c4c312c2e6 Add configurable option for kube_apiserver_insecure_bind_address 2016-06-24 18:10:01 +03:00
Matthew Mosesohn 33d897bcb6 Force install of specified docker version, fixes #295 
This allows Ubuntu/Debian to downgrade Docker version if
a newer version is installed, instead of failing.
 2016-06-17 12:31:55 +03:00
Matthew Mosesohn 153b82a803 Add docker_options to calico networking 2016-06-14 19:33:44 +03:00
mattymo 68808534b3 Fix order in restart kubelet to fix systemd reload 
Systemd reload before reload kubelet was failing because its definition was before "restart kubelet". Its definition should be after the notify hook.
 2016-05-31 20:09:49 +04:00