C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
1026 commits 17 branches 66 tags 141 MiB
Commit graph

609 commits

Author SHA1 Message Date
Matthew Mosesohn
5ee4d2e6e5 Merge pull request #608 from sneumann/patch-1 
Fix failure if image package index is outdated
 2016-11-17 12:21:15 -05:00
Spencer Smith
a4376c9ddd add restart flag for docker run kubelet 2016-11-17 12:03:41 -05:00
sneumann
4a00f5005f updated bootstrap-ubuntu.yml 
Moved the variable setting to the apt-get install part where it matters as requested in the review.
 2016-11-16 12:11:54 +01:00
Aleksandr Didenko
512c5b8440 Move CNI config and add MTU support for calico-cni 
- Move CNI configuration creation for Calico to appropriate
network_plugin role from kubernetes/node.
- Add support for MTU configuration in Calico.
 2016-11-15 18:05:11 +01:00
sneumann
3a397ea9db Fix failure if image package index is outdated 2016-11-15 17:49:14 +01:00
Bogdan Dobrelya
c18ccb64fb Merge pull request #600 from adidenko/calico-cni-container-support 
Replace calico-cni binaries with calico/cni container
 2016-11-15 15:40:13 +01:00
Bogdan Dobrelya
8c2c5f383b Fix mountflags and kubelet config 
Add missing --require-kubeconfig to the if..else stanza.
Make sure certs dirs mounted in RO.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-11-15 11:22:23 +01:00
Antoine Legrand
0f9c289281 Merge pull request #599 from kubernetes-incubator/bug_542 
Fix kubelet deprecated options
 2016-11-15 10:50:26 +01:00
Matthew Mosesohn
d98e8a4323 Merge pull request #602 from adidenko/fix-canal-ssl 
Fix etcd ssl for canal
 2016-11-15 12:43:22 +03:00
Matthew Mosesohn
9f4ebdd017 Merge pull request #598 from kubernetes-incubator/bug_376 
Generate kubectl bash completion from kubectl instead of file
 2016-11-15 12:28:51 +03:00
Matthew Mosesohn
3a8d9cb0bc Merge pull request #604 from kubernetes-incubator/k8s-upgrade-v1.4.6 
upgrade k8s version to 1.4.6
 2016-11-15 12:27:29 +03:00
Smana
b2d3ee2ae7 upgrade k8s version to 1.4.6 2016-11-14 21:40:05 +01:00
Matthew Mosesohn
a96f78f848 Fix kubelet deprecated options 
--api-servers now just reads kubeconfig
--config is now --pod-manifest-path

Fixes #542
 2016-11-14 22:13:44 +04:00
Aleksandr Didenko
2b751c7d77 Fix etcd ssl for canal 
- Move CNI configuration from `kubernetes/node` role to
`network_plugin/canal`
- Create SSL dir for Canal and symlink etcd SSL files
- Add needed options to `canal-config` configmap
- Run flannel and calico-node containers with proper configuration
 2016-11-14 14:49:17 +01:00
Matthew Mosesohn
9eef9afad1 Merge branch 'master' into calico-cni-container-support 2016-11-14 14:58:42 +03:00
Aleksandr Didenko
12b27f4ef0 Replace calico-cni binaries with calico/cni container 
Calico CNI binaries are also released/shipped in calico/cni
container. This patch replaces download of calico CNI binaries with
calico/cni container.
 2016-11-14 12:19:58 +01:00
Matthew Mosesohn
976f095ef6 Generate kubectl bash completion from kubectl instead of file 2016-11-14 14:54:59 +04:00
Bogdan Dobrelya
70f8780e38 Merge pull request #496 from kubernetes-incubator/idempotency_resolvconf 
Ignore changes on check resolvconf task
 2016-11-14 11:10:04 +01:00
Matthew Mosesohn
220ac0d281 Merge branch 'master' into hostname-alias 2016-11-14 09:32:35 +03:00
Matthew Mosesohn
0529bb0a58 Merge branch 'master' into idempotency_resolvconf 2016-11-14 09:30:22 +03:00
Matthew Mosesohn
b141c41fee Fix ca certificate loading on CoreOS 2016-11-14 08:47:09 +04:00
Matthew Mosesohn
bc75a4f12c Merge pull request #592 from artem-panchenko/support_golang_calicoctl 
Support new version of 'calicoctl' (>=v1.0.0)
 2016-11-11 13:55:24 +03:00
Bogdan Dobrelya
813dd47808 Merge pull request #593 from bogdando/label_apps 
Label k8s apps, adjust collect info commands
 2016-11-10 18:09:05 +01:00
Bogdan Dobrelya
3aee431750 Merge pull request #594 from adidenko/fix-calico-policy-controller 
Fix policy controller
 2016-11-10 16:15:36 +01:00
Artem Panchenko
9d0a79a777 Support new version of 'calicoctl' (>=v1.0.0) 
Since version 'v1.0.0-beta' calicoctl is written
in Go and its API differs from old Python based
utility. Added support of both old and new version
of the utility.
 2016-11-10 17:11:29 +02:00
Bogdan Dobrelya
9f6c2fd32a Label k8s apps, adjust collect/upload info steps 
- Drop debugs from collect-info playbook
- Drop sudo from collect-info step and add target dir var (required for travis jobs)
- Label all k8s apps, including static manifests
- Add logs for K8s apps to be collected as well
- Fix upload to GCS as a public-read tarball

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-11-10 16:05:50 +01:00
Aleksandr Didenko
3cf230fee1 Fix policy controller 
'etcd_cert_dir' variable is missing from 'kubernetes-apps/ansible'
role which breaks Calico policy controller deployment.

Also fixing calico-policy-controller.yml.
 2016-11-10 13:31:31 +01:00
Matthew Mosesohn
ac100c4034 Fix canal's calico networking config for ETCD TLS 
Also fixes kube-apiserver upgrade that was erroneously
deleted in a previous commit.
 2016-11-10 12:49:47 +03:00
Matthew Mosesohn
cf5e8dc7d4 Merge pull request #591 from kubernetes-incubator/etcdtls 
Add etcd tls support
 2016-11-10 12:32:13 +03:00
Matthew Mosesohn
0dceb685ea Add etcd TLS support 2016-11-09 18:38:28 +03:00
Matthew Mosesohn
b8ca4e4f45 Remove etcd-proxy from all nodes and use etcd multiaccess 2016-11-09 13:31:12 +03:00
Bogdan Dobrelya
b930d8385c Merge pull request #588 from adidenko/canal-support 
Adding support for canal network plugin
 2016-11-09 10:31:56 +01:00
Aleksandr Didenko
90bae73e36 Fix idempotency of calico-policy-controller rs 
We need to specify kube resource type and name in order to avoid
playbook errors related to k8s resource duplication.
 2016-11-08 12:59:18 +01:00
Aleksandr Didenko
9acb8cd954 Add ConfigMap for basic configuration options 
Container settings moved from deamonset yaml to a separate
configmap.
 2016-11-08 12:57:34 +01:00
Aleksandr Didenko
fec253abaf Adding support for canal network plugin 
This patch provides support for Canal network plugin installation
as a self-hosted app, see the following link for details:

https://github.com/tigera/canal/tree/master/k8s-install
 2016-11-08 11:04:01 +01:00
Spencer Smith
5f9c20d64e update admission controllers for > 1.4 2016-11-04 12:54:35 -04:00
Bogdan Dobrelya
9eae0c0dbf Merge branch 'master' into idempotency_resolvconf 2016-11-03 13:08:07 +01:00
Jan Jungnickel
c6b8dac830 Swap order in which we reload docker/socket 2016-11-01 13:12:40 +01:00
Jan Jungnickel
a12bc91734 Reload docker.socket after installing flannel on coreos 
Workaround for #569
 2016-11-01 13:12:32 +01:00
Matthew Mosesohn
e80970cbbc Ignore changes on check resolvconf task 2016-10-28 10:38:16 +04:00
Smaine Kahlouch
e9dd77520a Merge pull request #561 from kubespray/rsync_certs 
Use tar+register instead of copy/slurp for distributing tokens and certs
 2016-10-27 10:52:41 +02:00
Matthew Mosesohn
d0b0805a03 Add new var skip_dnsmasq_k8s 
If skip_dnsmasq is set, it will still not set up dnsmasq
k8s pod. This enables independent setup of resolvconf section
before kubelet is up.
 2016-10-26 17:56:15 +03:00
Matthew Mosesohn
94b81dbdd7 Use tar+register instead of copy/slurp for distributing tokens and certs 
Related bug: https://github.com/ansible/ansible/issues/15405

Uses tar and register because synchronize module cannot sudo on the
remote side correctly and copy is too slow.

This patch dramatically cuts down the number of tasks to process
for cert synchronization.
 2016-10-26 15:46:18 +03:00
Bogdan Dobrelya
6cc7f4795c Fix idempotency/recurrence of download and preinstall 
* Don't push containers if not changed
* Do preinstall role only once and redistribute defaults to
  corresponding roles

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-10-24 18:28:53 +02:00
Smaine Kahlouch
f440f74e3b Merge pull request #562 from kubespray/enable_standalone_node 
Enable standalone node deployment
 2016-10-24 13:10:53 +02:00
Smaine Kahlouch
8efd5ce6e5 Merge pull request #558 from chadswen/etcdctl-path 
Use absolute path for etcdctl
 2016-10-21 23:06:15 +02:00
Matthew Mosesohn
ff42bb6c0e dynamically calculate etcd peer names 2016-10-21 16:17:50 +03:00
Matthew Mosesohn
ccbdf6ec49 Sync master tokens only with those in play_hosts 2016-10-21 14:43:41 +03:00
Matthew Mosesohn
0d62e53939 Use only native cachable hostvars for etcd set_facts 2016-10-21 14:39:58 +03:00
Matthew Mosesohn
a16ec5cc9a fix dnsmasq template cloud_provider lookup 2016-10-21 13:00:40 +03:00
Chad Swenson
5b08697679 Use absolute path for etcdctl 
Small fix. The shell module won't automatically resolve the path to the etcdctl binary, so i prefixed with {{ bin_dir }}/
 2016-10-20 14:56:52 -05:00
Chad Swenson
fbba0d155e Hostname alias fixes 
Change the kubelet --hostname-override flag to use the ansible_hostname variable which should be more consistent with the value required by cloud providers

Add ansible_hostname alias to /etc/hosts when it is different from inventory_hostname to overcome node name limitations see https://github.com/kubernetes/kubernetes/issues/22770

Signed-off-by: Chad Swenson <chadswen@gmail.com>
 2016-10-18 16:22:32 -05:00
Smaine Kahlouch
425f3e3f4f Merge pull request #546 from chadswen/dependency-variables 
Parameterize dependency endpoints
 2016-10-18 18:42:17 +02:00
Smana
c489c65e5c upgrade to k8s v1.4.3 2016-10-18 12:52:35 +02:00
Chad Swenson
24fbc35ebe Parameterize several dependency endpoints so that they can be overridden with internal mirrors. 
Signed-off-by: Chad Swenson <chadswen@gmail.com>
 2016-10-15 12:26:52 -05:00
Smana
8f77bdd4e6 upgrade calico version v0.22.0 2016-10-15 15:01:45 +02:00
Smana
2426d2af0c upgrade flannel version 2016-10-12 21:55:39 +02:00
Matthew Mosesohn
0cc3636a37 Add cluster-cidr to kube-proxy config 
This option enables masquerading for traffic directed at pods
that comes frmom outside the cluster.
 2016-10-12 19:13:33 +03:00
Smaine Kahlouch
e0ca39330f Merge pull request #540 from aateem/enable-network-policy 
Add possibility to enable network policy via Calico network controller
 2016-10-11 12:10:56 +02:00
Smana
9386982369 upgrade to kubernetes version 1.4.0 
test to change the machine type

Revert "test to change the machine type"

This reverts commit 7a91f1b5405a39bee6cb91940b09a0b0f9d3aee1.

use google dns server when no upstream dns are defined

comment upstream_dns_servers

update documentation

remove deprecated kubelet flags

Revert "remove deprecated kubelet flags"

This reverts commit 21e3b893c896d0291c36a07d0414f4cb88b8d8ac.
 2016-10-10 22:44:47 +02:00
Artem Roma
d2e6bd153b Add possibility to enable network policy via Calico network controller 
The requirements for network policy feature are described here [1]. In
order to enable it, appropriate configuration must be provided to the CNI
plug in and Calico policy controller must be set up. Beside that
corresponding extensions needed to be enabled in k8s API.

Now to turn on the feature user can define `enable_network_policy`
customization variable for Ansible.

[1] http://kubernetes.io/docs/user-guide/networkpolicies/
 2016-10-10 17:22:12 +03:00
Sergey Vasilenko
fbe7b1cd2c Bump Calico-CNI plugin binaries versions 
and correct checksums
 2016-10-07 13:14:46 +03:00
Sergey Vasilenko
c410680b34 Changes in Kubernetes and Calico-CNI plugin config files 
required for usage of Calico CNI plugin version 1.4.2
 2016-10-06 19:33:16 +03:00
Smaine Kahlouch
9df4502909 Merge pull request #528 from kubespray/proxy-nginx 
Use nginx proxy on non-master nodes to proxy apiserver traffic
 2016-10-05 19:19:32 +02:00
Matthew Mosesohn
73066f308d use nginx proxy on non-master nodes to proxy apiserver traffic 
Also adds all masters by hostname and localhost/127.0.0.1 to
apiserver SSL certificate.

Includes documentation update on how localhost loadbalancer works.
 2016-10-05 20:09:10 +03:00
Smaine Kahlouch
3faeffc294 Merge pull request #491 from kubespray/calicopools 
Allow calico to configure pool if tree exists, but no pools defined
 2016-10-05 17:12:26 +02:00
Smaine Kahlouch
4bc31798e0 Merge pull request #522 from anthonyhaussman/KubeVersionDefaults 
Move kube_version var to defaults
 2016-10-05 17:11:59 +02:00
Matthew Mosesohn
de543fed5f Merge branch 'master' into reverselookups 2016-10-05 14:46:47 +03:00
Matthew Mosesohn
5fdfc25657 Enable quorum read for apiserver 
This reduces the likelihood of apiserver status updates
timing out due to etcd write conflicts.
 2016-10-04 18:31:42 +03:00
Aleksandr Didenko
40a94947c8 Add support for --masquerade-all in kube-proxy 
New boolean var `kube_proxy_masquerade_all` which enables/disables
`--masquerade-all` argument for kube-proxy.

Closes #524
 2016-10-03 12:24:43 +02:00
Bogdan Dobrelya
1990f8bec5 Skip download_run_once for binaries as unimplemented yet 
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-09-30 10:55:02 +02:00
Matthew Mosesohn
0cbafa2d4b add kube-masters to SSL certificate 2016-09-29 15:12:30 +03:00
Smaine Kahlouch
0bd3081219 Merge pull request #502 from adidenko/custom-calico-hyperkube 
Allow to use custom "canalized" calico cni
 2016-09-29 13:29:49 +02:00
Smaine Kahlouch
490f613359 Merge pull request #515 from adidenko/fix-delegate-to 
Fix delegate_to expression in download tasks
 2016-09-29 10:36:44 +02:00
Matthew Mosesohn
fa11a6876c Disable reverse lookups again 
Initially this was removed, but it turns out that services that
perform reverse lookups (such as MariaDB) will encounter severe
performance degredation with this disabled.
 2016-09-29 10:49:55 +04:00
Aleksandr Didenko
c12b06839a Allow to use custom "canalized" calico cni 
- Allow to overwrite calico cni binaries copied from hyperkube
  by the custom ones.
- Fix calico-ipam deployment (it had wrong source in rsync)
- Make copy from hyperkube idempotent (use rsync instead of cp)
- Remove some orphaned comments
 2016-09-28 18:09:20 +02:00
Anthony Haussmann
f9a18460d3 Move kube_version var to defaults 
Move the variable kube_version to defaults to have the possibility to overwrite it via group_vars inventory if needed.
 2016-09-28 16:15:18 +02:00
Smaine Kahlouch
9146b8917d Merge pull request #521 from anthonyhaussman/MethodBoolUseCNI 
Change method to set use_hyperkube_cni var bool
 2016-09-28 12:24:53 +02:00
Smaine Kahlouch
ffe882315a Merge pull request #518 from bogdando/issues/516 
Allow subdomains of dns_domain and fix kubelet restarts
 2016-09-28 10:11:44 +02:00
Anthony Haussmann
5b021ed438 Change method to set use_hyperkube_cni var bool 
The precedent method returb a string "True\n" or "False\n", it seems to be an Ansible bug.
New method return a boolean
 2016-09-27 16:41:09 +02:00
Smaine Kahlouch
63d5ac91ad Merge pull request #519 from bogdando/fix_containers_download 
Fix containers download condition
 2016-09-27 15:23:50 +02:00
Bogdan Dobrelya
6ab133d0a3 Allow subdomains of dns_domain and fix kubelet restarts 
* Add a var for ndots (default 5) and put it hosts' /etc/resolv.conf.
* Poke kube dns container image to v1.7
* In order to apply changes to kubelet, notify it to
be restarted on changes made to /etc/resolv.conf. Ignore errors as the kubelet
may yet to be present up to the moment of the notification being processed.
* Remove unnecessary kubelet restart for master role as the node role ensures
it is up and running. Notify master static pods waiters for apiserver,
scheduler, controller-manager instead.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-09-27 14:32:49 +02:00
Smana
c60d8111f6 use variable dns_domain instead of cluster_name for kubedns 2016-09-27 14:15:27 +02:00
Bogdan Dobrelya
130d66d24d Fix containers download condition 
Save/push/load containers if only download.enabled and download.container

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-09-27 13:44:29 +02:00
Aleksandr Didenko
c7249e1a45 Fix delegate_to expression in download tasks 
"else omit" is causing problems in this expression. Replacing
it with more strict "inventory_hostname" fixes the issue and
handles `download_run_once` as expected.

Closes issue #514
 2016-09-27 11:25:24 +02:00
Smaine Kahlouch
5a6424d7a2 Merge pull request #507 from anthonyhaussman/KubeDNSCorrection 
Correct nslookup command
 2016-09-26 13:58:00 +02:00
Smaine Kahlouch
e3fe648de6 Merge pull request #509 from kubespray/cnicopyweave 
Copy hyperkube CNI plugins when using weave
 2016-09-26 13:54:02 +02:00
Matthew Mosesohn
1494238ab1 Add Docker 1.12.1 version 2016-09-26 12:16:16 +03:00
Matthew Mosesohn
6bf2a80dcd Copy hyperkube CNI plugins when using weave 2016-09-26 12:02:19 +03:00
Anthony Haussmann
83a6c5cf61 Correct nslookup command 
Change nslookup command to check the right cluster_name
 2016-09-23 17:44:09 +02:00
Bogdan Dobrelya
2908f92524 Fix docs and dns servers placement order 
- Update docs and a drawing to clarify DNS setup.
- Change order of nameservers placement to match
  changes in https://github.com/kubespray/kargo/pull/501

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-09-23 16:16:00 +02:00
Bogdan Dobrelya
34d0c5c676 Make dnsmasq daemon set optional 
Change additional dnsmasq opts:
- Adjust caching size and TTL
- Disable resolve conf to not create loops
- Change dnsPolicy to default (similarly to kubedns's dnsmasq). The
  ClusterFirst should not be used to not create loops
- Disable negative NXDOMAIN replies to be cached
- Make its very installation as optional step (enabled by default).
  If you don't want more than 3 DNS servers, including 1 for K8s, disable
  it.
- Add docs and a drawing to clarify DNS setup.
- Fix stdout logs for dnsmasq/kubedns app configs
- Add missed notifies to resolvconf -u handler
- Fix idempotency of resolvconf head file changes

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
 2016-09-23 12:59:06 +02:00
Matthew Mosesohn
abb56c21a7 Improve management of nameservers in resolv.conf 
Changing nameservers now will clean up previous entries
 2016-09-22 18:11:15 +03:00
Özgür Caner
34e467c60e Changed ImagePullPolicy from Always to IfNotPresent to avoid download issue when DNS is not working 2016-09-20 10:34:44 +02:00
Matthew Mosesohn
cf519ef3a8 Allow calico to configure pool if tree exists, but no pools defined 2016-09-19 15:27:47 +03:00
Smaine Kahlouch
0360ccadd4 Merge pull request #493 from ivan4th/fix-reverse-dns-lookups 
Fix reverse DNS lookups of service IPs.
 2016-09-19 14:20:15 +02:00
Smaine Kahlouch
e843f7f89c Merge pull request #494 from kubespray/etcd_proxy_fix 
always bind etcd_proxy to localhost
 2016-09-19 14:19:55 +02:00
Smaine Kahlouch
5a53a462b8 Merge pull request #489 from lukaszo/patch-1 
Add socat do required pkgs
 2016-09-19 12:19:46 +02:00
Smaine Kahlouch
bc8bba5b6b Merge pull request #486 from kubespray/etchosts 
switch /etc/hosts to use blockinfile
 2016-09-19 12:19:37 +02:00
Ivan Shvedunov
4ef97d9df4 Fix reverse DNS lookups of service IPs. 
This fixes "DNS should provide DNS for services [Conformance]"
e2e test in k8s.
 2016-09-19 09:12:10 +03:00