C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
1773 commits 17 branches 66 tags 141 MiB
Commit graph

1043 commits

Author SHA1 Message Date
Josh Lothian
806f12804b Fix docker restart in atomic 
In atomic, containers are left running when docker is restarted.
When docker is restarted after the flannel config is put in place,
the docker0 interface isn't re-IPed because docker sees the running
containers and won't update the previous config.

This patch kills all the running containers after docker is stopped.
We can't simply `docker stop` the running containers, as they respawn
before we've got a chance to stop the docker daemon, so we need to
use runc to do this after dockerd is stopped.
 2017-05-17 14:31:49 -05:00
Spencer Smith
5ccae0d60d issue raw yum command since we don't have facts in bootstrapping 2017-05-16 10:07:38 -04:00
Spencer Smith
bfe64ca382 remove conditional 2017-05-12 17:16:49 -04:00
Spencer Smith
391ec811d5 default to kubedns and set nxdomain in kubedns deployment if that's the dns_mode 2017-05-12 15:57:24 -04:00
moss2k13
c71a6bbbc0 Updated helm installation 
Added full path for helm
 2017-05-08 09:27:06 +02:00
Spencer Smith
82e1684aaf Merge pull request #1254 from iJanki/cert_group 
Adding /O=system:masters to admin certificate
 2017-05-05 10:58:42 -04:00
Brad Beam
40942a3b39 Merge pull request #1252 from adidenko/separate-tags-for-netcheck-containers 
Add support for different tags for netcheck containers
 2017-05-05 08:04:54 -05:00
Spencer Smith
647c1c721b Merge pull request #1250 from digitalrebar/master 
bootstrap task on centos missing packages
 2017-05-02 12:24:11 -04:00
Spencer Smith
e110346254 Merge pull request #1259 from bradbeam/calico214 
Updating calico to v2.1.4
 2017-05-02 12:20:47 -04:00
Spencer Smith
755c20f2f9 ensure the /etc/os-release is mounted read only 2017-05-01 14:51:40 -04:00
Spencer Smith
f608e9e4f8 add for rkt as well 2017-04-28 17:45:10 -04:00
Brad Beam
752c5ef5cf Updating calico to v2.1.4 2017-04-28 14:04:25 -05:00
Spencer Smith
fe7c2709f9 mount os-release to ensure the node's OS is what's seen in k8s api 2017-04-28 13:40:54 -04:00
Aleksandr Didenko
a443af85c9 Add support for different tags for netcheck containers 
Replace 'netcheck_tag' with 'netcheck_version' and add additional
'netcheck_server_tag' and 'netcheck_agent_tag' config options to
provide ability to use different tags for server and agent
containers.
 2017-04-27 17:15:28 +02:00
Sergii Golovatiuk
085aeb6a0a Ansible 2.3 support 
- Fix when clauses in various places
- Update requirements.txt
- Fix README.md

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
 2017-04-26 15:22:10 +02:00
Aleksey Kasatkin
31d8f29ae8 add MY_NODE_NAME variable into netchecker-agent environment 2017-04-24 17:19:42 +03:00
Matthew Mosesohn
2e1626f526 Merge pull request #1251 from FengyunPan/fix-helm-home 
Specify a dir and attach it to helm for HELM_HOME
 2017-04-24 15:17:28 +03:00
FengyunPan
4ef76e0c75 Specify a dir and attach it to helm for HELM_HOME 2017-04-21 10:51:27 +08:00
Greg Althaus
e85b53a6cb Install required selinux-python bindings in bootstrap 
on centos.  The bootstrap tty fixup needs it.
 2017-04-20 11:17:01 -05:00
Spencer Smith
04818b9d94 fix stray 'in' and break into multiple lines for clarity 2017-04-20 09:53:01 -04:00
Spencer Smith
21b10784f4 allow for correct aws default resolver 2017-04-20 09:32:03 -04:00
Matthew Mosesohn
cb52d78845 Merge pull request #1246 from holser/disable_dns_for_kube_services 
Change DNS policy for kubernetes components
 2017-04-20 16:12:52 +03:00
Sergii Golovatiuk
f061ce63b3 Add aws to default_resolver 
When VPC is used, external DNS might not be available. This patch change
behavior to use metadata service instead of external DNS when
upstream_dns_servers is not specified.

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
 2017-04-20 11:47:19 +02:00
Sergii Golovatiuk
0a687a22ff Change DNS policy for kubernetes components 
According to code apiserver, scheduler, controller-manager, proxy don't
use resolution of objects they created. It's not harmful to change
policy to have external resolver.

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
 2017-04-20 11:22:57 +02:00
Matthew Mosesohn
fc5ca5090e Merge pull request #1238 from Starefossen/fix/namespace-template-file 
Move namespace file to template directory
 2017-04-20 12:19:55 +03:00
Matthew Mosesohn
8d5d973a64 Merge pull request #1241 from bradbeam/rktcnidir 
Explicitly create cni bin dir
 2017-04-20 12:19:26 +03:00
Matthew Mosesohn
f04e3615f4 Merge pull request #1239 from mattymo/resettags 
Add tags to reset playbook and make iptables flush optional
 2017-04-20 11:35:08 +03:00
Sergii Golovatiuk
1268c9b642 Fix restart kube-controller (#1242) 
kubernetesUnitPrefix was changed to k8s_* in 1.5. This patch reflects
this change in kargo
 2017-04-20 11:26:01 +03:00
Matthew Mosesohn
be22466489 Add tags to reset playbook and make iptables flush optional 
Fixes #1229
 2017-04-19 19:32:18 +03:00
Brad Beam
0dc4967e43 Explicitly create cni bin dir 
If this path doesnt exist, it will cause kubelet to fail to start when
using rkt
 2017-04-19 16:00:44 +00:00
Hans Kristian Flaatten
12bbb243b2 Move namespace file to template directory 2017-04-19 13:37:02 +02:00
Spencer Smith
e76ed88ea2 Merge pull request #1232 from rsmitty/custom-flags 
add ability for custom flags
 2017-04-17 14:01:32 -04:00
Spencer Smith
1d848dc211 remove stray spaces in templating 2017-04-17 12:24:24 -04:00
Spencer Smith
daa728e3cf ensure spacing on string of flags 2017-04-17 12:13:39 -04:00
Spencer Smith
0fb9469249 ensure spacing on string of flags 2017-04-17 11:11:10 -04:00
Spencer Smith
c1192b1154 update to safeguard against accidentally passing string instead of list 2017-04-17 11:09:34 -04:00
Matthew Mosesohn
f500f32771 Merge pull request #1233 from gbolo/master 
allow admission control plug-ins to be easily customized
 2017-04-17 12:59:49 +03:00
Matthew Mosesohn
07ea95a9bf Merge pull request #1223 from mattymo/vault_cert_skip 
Skip vault cert task evaluation when using script certs
 2017-04-17 12:52:42 +03:00
Matthew Mosesohn
138b593d33 Merge pull request #1222 from bradbeam/calico 
Updating calico versions
 2017-04-17 12:52:20 +03:00
gbolo
c05d141128 allow admission control plug-ins to be easily customized 2017-04-16 22:03:45 -04:00
Spencer Smith
7656ae2887 add ability for custom flags 2017-04-14 17:33:04 -04:00
Spencer Smith
184016d6e4 Merge pull request #1231 from holser/fix_netchecker-server 
Reschedule netchecker-server in case of HW failure.
 2017-04-14 10:50:07 -04:00
Matthew Mosesohn
c23385e77e Update start_vault_temp.yml 2017-04-14 13:32:41 +03:00
Sergii Golovatiuk
2ab365825f Reschedule netchecker-server in case of HW failure. 
Pod opbject is not reschedulable by kubernetes. It means that if node
with netchecker-server goes down, netchecker-server won't be scheduled
somewhere. This commit changes the type of netchecker-server to
Deployment, so netchecker-server will be scheduled on other nodes in
case of failures.
 2017-04-14 10:49:16 +02:00
Joe Duhamel
f945c8d885 Update dnsmasq-autoscaler 
changed target to be a deployment rather than a replicationcontroller.
 2017-04-13 15:07:06 -04:00
Joe Duhamel
4eb5a0e67a Update kubedns-autoscaler change target 
The target was a replicationcontroller but kubedns is currently a deployment
 2017-04-13 14:55:25 -04:00
Matthew Mosesohn
74c43c290a Skip vault cert task evaluation completely when using script cert generation 2017-04-13 19:29:07 +03:00
Brad Beam
4ef5f03d7b Updating calico versions 2017-04-11 20:52:04 -05:00
Spencer Smith
3f76403983 Merge pull request #1218 from bradbeam/efkidempotent 
Fixing resource type for kibana
 2017-04-11 19:04:13 -04:00
Spencer Smith
012826e2f0 Merge pull request #1217 from bradbeam/helmcompletion 
Excluding bash completion for helm on CoreOS
 2017-04-11 17:34:11 -04:00