Andreas Krüger
d84ff06f73
Set filemode to 0640 ( #2315 )
...
* Set filemode to 0640
weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.
* Set mode 0640 on users_file with basic auth
2018-02-21 23:13:46 +03:00
Matthew Mosesohn
87f33a4644
Use CNI to assign kube_pods_subnet for calico
...
Now calico can be deployed if there are other existing pools
and not confuse IPAM and end up with pods in the wrong pools.
2018-02-21 20:32:28 +03:00
Dann Bohn
2eb57ee5cd
default kube_proxy_mode in kubernetes-defaults
2018-02-21 11:33:25 -05:00
Chris Mildebrandt
85c69c2a4a
Add check for atomic hosts in template
2018-02-21 08:26:18 -08:00
Matthew Mosesohn
c20f38b89c
retry unmount kubelet dirs
2018-02-21 14:41:57 +03:00
Aivars Sterns
bfe196236f
Merge pull request #2033 from ArchiFleKs/terraform-fix-cred
...
Update Terraform docs and authentication method
2018-02-21 12:16:24 +02:00
Wong Hoi Sing Edison
d4c61d2628
Fixup for gce_centos7-flannel-addons
2018-02-21 13:41:25 +08:00
Wong Hoi Sing Edison
deef47c923
Upgrade Local Volume Provisioner Addon to v2.0.0
2018-02-21 13:41:25 +08:00
Chris Mildebrandt
c19d8994b9
Set TasksMax to infinity on any OS with systemd
2018-02-20 11:55:13 -08:00
Chad Swenson
2de6da25a8
Merge pull request #2312 from woopstar/patch-7
...
Added iptables lock fix and ajusted oom-score
2018-02-19 22:47:07 -06:00
melkosoft
f13e76d022
Added cilium support ( #2236 )
...
* Added cilium support
* Fix typo in debian test config
* Remove empty lines
* Changed cilium version from <latest> to <v1.0.0-rc3>
* Add missing changes for cilium
* Add cilium to CI pipeline
* Fix wrong file name
* Check kernel version for cilium
* fixed ci error
* fixed cilium-ds.j2 template
* added waiting for cilium pods to run
* Fixed missing EOF
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed trailing spaces
* Fixed too many blank lines
* Updated tolerations,annotations in cilium DS template
* Set cilium_version to iptables-1.9 to see if bug is fixed in CI
* Update cilium image tag to v1.0.0-rc4
* Update Cilium test case CI vars filenames
* Add optional prometheus flag, adjust initial readiness delay
* Update README.md with cilium info
2018-02-16 21:37:47 -06:00
Antoine Legrand
5c0a41a6e0
Merge pull request #2340 from eduardobaitello/patch-1
...
Fix typo in aws.md docs
2018-02-16 19:03:14 +01:00
David Miller
6424928ba3
Update typo in the tag necessary for the ELB role ( #2330 )
2018-02-16 17:20:03 +01:00
Antoine Legrand
56b7400dac
Merge pull request #2325 from kubernetes-incubator/ci_two_stages
...
rollback to a two stage CI
2018-02-15 23:27:45 +01:00
Antoine Legrand
d095a1bb96
rollback to a two stage CI
2018-02-15 23:17:10 +01:00
Antoine Legrand
76a89039ad
Merge pull request #2285 from jasdeep-hundal/do_not_install_python_apt
...
Remove redundant python-apt install
2018-02-15 17:04:08 +01:00
Łukasz Piątkowski
f90e509bf6
gather facts for all nodes, even if running for single one (--limit)
2018-02-14 15:45:50 +00:00
Eduardo Baitello
dd8902bfcd
Fix typo in aws.md docs
...
"kubernetes" is spelled wrong in the cluster tag example
2018-02-14 12:52:36 -02:00
Merouane Atig
911af3f331
Fix link markdown markup
2018-02-13 16:02:50 +01:00
Antoine Legrand
e2f083f885
Merge pull request #2317 from kubernetes-incubator/add_digitalocean_ci
...
Additional CI platform (digital-ocean)
2018-02-13 14:59:08 +01:00
Antoine Legrand
e5a450349b
Single step CI
2018-02-13 12:30:14 +01:00
Antoine Legrand
7a20d69809
fix inventory paths
2018-02-12 17:38:32 +01:00
Antoine Legrand
c187ae22e5
Force to /usr/bin/python in CI
2018-02-12 17:38:32 +01:00
Antoine Legrand
cb202a76df
Fix tests
2018-02-12 17:38:32 +01:00
Antoine Legrand
e1d139db2e
Use new CI image
2018-02-12 17:38:32 +01:00
Antoine Legrand
51e695066a
Add dockerfile for the ci
2018-02-12 17:38:32 +01:00
Antoine Legrand
ce25fa4302
Enable multiple CI platform / Add DigitalOcean
2018-02-12 17:38:32 +01:00
Antoine Legrand
c403b61383
Update private key
2018-02-12 17:38:32 +01:00
Antoine Legrand
3ef7c25a16
Add digitalocean test case
2018-02-12 17:38:32 +01:00
Antoine Legrand
442d211ee3
Add DigitalOcean playbook to create VM
2018-02-12 17:38:32 +01:00
RongZhang
c0aad0a6d5
Fix install etcd by host service ( #2297 )
...
Fix bug issues #2289
2018-02-12 17:34:01 +01:00
Matthew Mosesohn
5903aea86f
Update coreos-calico-aio scenario to test no group vars ( #2314 )
...
This updated scenario ensures deployment still passes without
having any group_vars available.
2018-02-12 12:38:06 +01:00
Aivars Sterns
f4a68eae01
Merge pull request #2313 from hswong3i/multiple_inventory_dir
...
Update default CONFIG_FILE for contrib/inventory_builder/inventory.py
2018-02-12 11:24:35 +00:00
Wong Hoi Sing Edison
4a36b091f4
Update default CONFIG_FILE for contrib/inventory_builder/inventory.py
2018-02-12 18:01:56 +08:00
Antoine Legrand
874ec8fc73
Merge pull request #2311 from brutus333/fix/wait4k8sapi
...
Increased timeout values for k8s API server restart
2018-02-12 10:25:16 +01:00
Andreas Krüger
41ca67bf54
Added iptables lock fix and ajusted oom-score
...
xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.
2018-02-12 10:21:38 +01:00
Virgil Chereches
d72232f15b
Increased timeout values for k8s API server restart
2018-02-12 07:35:29 +00:00
Maxim Krasilnikov
03c61685fb
Added apiserver extra args variable for kubeadm config ( #2291 )
2018-02-12 10:29:46 +03:00
Antoine Legrand
46284198f8
Merge pull request #2298 from clkao/patch-2
...
Fix version comparison
2018-02-11 17:22:39 +01:00
Antoine Legrand
9916100835
Merge pull request #2299 from riverzhang/patch-4
...
Fix default_resolver is undefined
2018-02-10 17:26:51 +01:00
RongZhang
bbb1da1a83
Fix default_resolver is undefined
...
fix issues #2265
2018-02-10 10:08:26 -06:00
Antoine Legrand
cf183288dd
Merge pull request #2287 from hswong3i/cephfs_provisioner_default
...
Add optional StorageClass name with cephfs_provisioner_storage_class
2018-02-10 14:13:48 +01:00
Wong Hoi Sing Edison
07075add3d
Add optional StorageClass name with cephfs_provisioner_storage_class
2018-02-10 20:31:34 +08:00
Chia-liang Kao
338238d086
Fix version comparison
...
`FAILED! => {"changed": false, "msg": "AnsibleFilterError: Version comparison: unorderable types: str() < int()"}`
2018-02-10 03:49:49 +08:00
Brad Beam
c6c74616d8
Merge pull request #2293 from bradbeam/upgrade
...
Making node status and scheduling detection mo betta for upgrades
2018-02-09 13:15:55 -06:00
Brad Beam
03bb729fea
Making status and detection mo betta
2018-02-09 12:30:46 -06:00
Antoine Legrand
60460c025c
Merge pull request #2256 from mlushpenko/fix-kubeadm-safe-upgrade
...
Fix safe upgrade
2018-02-09 19:03:04 +01:00
Damian Nowak
f8a59446e8
Enable OOM killing
...
When etcd exceeds its memory limit, it becomes useless but keeps running.
We should let OOM killer kill etcd process in the container, so systemd can spot
the problem and restart etcd according to "Restart" setting in etcd.service unit file.
If OOME problem keep repeating, i.e. it happens every single restart,
systemd will eventually back off and stop restarting it anyway.
--restart=on-failure:5 in this file has no effect because memory allocation error
doesn't by itself cause the process to die
Related: https://github.com/kubernetes-incubator/kubespray/blob/master/roles/etcd/templates/etcd-docker.service.j2
This kind of reverts a change introduced in #1860 .
2018-02-09 11:00:13 -06:00
mlushpenko
a37c642127
Remove obsolete token variables
...
Tokens are generated automatically during init process and on-demand for nodes joining process
2018-02-09 15:53:12 +01:00
mlushpenko
4e61fb9cd3
Refactored kubeadm join process and fixed uncrodonng for master nodes
2018-02-09 15:51:47 +01:00