Artem Panchenko
05c8061c24
Allow connections from pods to local endpoints
...
By default Calico blocks traffic from endpoints
to the host itself by using an iptables DROP
action. It could lead to a situation when service
has one alive endpoint, but pods which run on
the same node can not access it. Changed the action
to RETURN.
2017-03-01 09:21:02 +02:00
Antoine Legrand
eea75b9fb2
Merge pull request #1094 from retr0h/vagrant-flannel
...
Ensure vagrant uses flannel
2017-03-01 00:07:24 +01:00
John Dewey
f2ae2a0294
Ensure vagrant uses flannel
...
The Vagrantfile is setup to use flannel. The default network
was changed to Calico (#1031 ). However, the Vagrantfile was
not updated to reflect this. Ensuring the Vagrantfile remains
functional on master, until someone decides to make it work
with Calico.
2017-02-28 13:31:28 -08:00
Matthew Mosesohn
2f86520ce7
Merge pull request #1066 from bradbeam/rkt-kubelet-cloudprovider
...
Adding KUBELET_CLOUDPROVIDER to kubelet.rkt.service
2017-02-28 20:02:56 +03:00
Matthew Mosesohn
d9dd286107
Merge pull request #1084 from mattymo/fixubunturktjob
...
Remove upgrade from the ubuntu-rkt-sep CI job
2017-02-28 20:02:05 +03:00
Antoine Legrand
2ea6247830
Merge pull request #1083 from holser/api_port
...
Change kube-api default port from 443 to 6443
2017-02-28 17:57:35 +01:00
Sergii Golovatiuk
d9f67a343c
Allow to specify etcd backend for kube-api
...
Kubernetes project is about to set etcdv3 as default storage engine in
1.6. This patch allows to specify particular backend for
kube-apiserver. User may force the option to etcdv3 for new environment.
At the same time if the environment uses v2 it will continue uses it
until user decides to upgrade to v3.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-28 17:13:22 +01:00
Sergii Golovatiuk
2a88210f78
Change kube-api default port from 443 to 6443
...
Operator can specify any port for kube-api (6443 default) This helps in
case where some pods such as Ingress require 443 exclusively.
Closes: 820
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-28 15:45:35 +01:00
Brad Beam
a939c53d86
Adding KUBELET_CLOUDPROVIDER to kubelet.rkt.service
2017-02-28 06:29:35 -06:00
Matthew Mosesohn
015f1305eb
Merge pull request #1086 from bradbeam/lowermem
...
Lower default memory requests
2017-02-28 13:37:28 +03:00
Matthew Mosesohn
ff1d02300e
Merge pull request #1077 from holser/bug/1073
...
Make etcd data dir configurable.
2017-02-28 13:19:20 +03:00
Brad Beam
607fb7c89d
Making openstack domain name optional
2017-02-27 21:19:27 -06:00
Xavier Lange
60af40af27
Bug fix: support kilo's keystone requirement for domain-name, extracts from ENV var
2017-02-27 21:18:30 -06:00
Brad Beam
6a144213c9
Updating vsphere cloud provider support
2017-02-27 15:08:04 -06:00
Sergii Golovatiuk
a011677697
Make etcd data dir configurable.
...
Closes : #1073
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-27 21:35:51 +01:00
Jan Jungnickel
c11f981692
Initial support for vsphere as cloud provider
2017-02-27 12:51:41 -06:00
Brad Beam
c50bb7d252
Lower default memory requests
...
This is to address out of memory issues on CI as well as help
fit deployments for people starting out with kargo on smaller
machines
2017-02-27 10:53:43 -06:00
Matthew Mosesohn
73fa908cf2
Remove upgrade from the ubuntu-rkt-sep CI job
2017-02-27 18:16:22 +03:00
Vincent Schwarzer
9073d92a61
Fixed counter in ETCD Openssl.conf
...
When a apiserver_loadbalancer_domain_name is added to the Openssl.conf
the counter gets not increased correctly. This didnt seem to have an
effect at the current kargo version.
2017-02-27 12:01:09 +01:00
Bogdan Dobrelya
87a100ae00
Merge pull request #946 from neith00/master
...
Using the command module instead of raw
2017-02-27 10:59:53 +01:00
Bogdan Dobrelya
543dafa900
Merge pull request #1063 from bogdando/fix
...
Align LB defaults with the HA docs
2017-02-27 10:14:42 +01:00
Matthew Mosesohn
bac6bd883b
Merge pull request #1072 from gkopylov/fix_doc_issue
...
Fix cluster.yml file extension in docs
2017-02-26 15:12:45 +03:00
Kopylov German
f143fe80f5
Fix cluster.yml file extension in docs
2017-02-26 13:42:52 +03:00
Matthew Mosesohn
ec506dbefe
Merge pull request #1069 from holser/increase_ssl_ttl
...
Increase SSL TTL to 3650 days
2017-02-25 10:47:30 +03:00
Sergii Golovatiuk
802503458d
Increase SSL TTL to 3650 days
...
In real scenarios 365 days is short period of time. 3650 days is good
enough for long running k8s environments
2017-02-24 15:38:13 +01:00
Antoine Legrand
615b9ae8f7
Merge pull request #1068 from holser/uncomment_all.yml
...
Uncomment one key/value in all.yml
2017-02-24 12:54:51 +01:00
Sergii Golovatiuk
6ec0a9220f
Uncomment one key/value in all.yml
...
all.yaml shouldn't be empty otherwise ansible won't be able to merge 2
dicts.
Related bug: ansible/issues/21889
2017-02-24 12:25:45 +01:00
Antoine Legrand
bdd96cfce7
Merge pull request #1067 from kubernetes-incubator/ant31-patch-2
...
Uncommented group_vars variables
2017-02-24 11:45:17 +01:00
Antoine Legrand
ac709eb065
Uncommented group_vars variables
2017-02-24 10:54:25 +01:00
Bogdan Dobrelya
797a9efb12
Merge pull request #1064 from kubernetes-incubator/rework_vars
...
Add default var role
2017-02-23 21:48:23 +01:00
Antoine Legrand
d428acd74d
Add subnet var in tests
2017-02-23 15:14:28 +01:00
Antoine Legrand
7d67dfa30c
Comment all variables in group_vars
2017-02-23 14:02:57 +01:00
Antoine Legrand
2aff3df697
Add default var role
2017-02-23 12:07:17 +01:00
Antoine Legrand
1b7c272109
Merge pull request #829 from bogdando/opts
...
Rework group/role vars
2017-02-23 10:39:43 +01:00
Bogdan Dobrelya
18cb160be6
Align LB defaults with the HA docs
...
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-02-23 10:32:44 +01:00
Bogdan Dobrelya
dacfbde0b0
Rework inventory all by real groups' vars
...
* Leave all.yml to keep only optional vars
* Store groups' specific vars by existing group names
* Fix optional vars casted as mandatory (add default())
* Fix missing defaults for an optional IP var
* Relink group_vars for terraform to reflect changes
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-02-23 09:43:42 +01:00
Matthew Mosesohn
9a1774dfd7
Merge pull request #1020 from mattymo/synthscale
...
Add synthetic scale deployment mode
2017-02-22 19:15:46 +03:00
Matthew Mosesohn
8ee3957b51
Merge pull request #1059 from holser/docker_iptables
...
iptables switch for docker
2017-02-22 08:23:58 +03:00
Matthew Mosesohn
0765e8b9d3
Merge pull request #1061 from ivan4th/fix-shell-vars
...
Fix shell special vars
2017-02-22 08:23:44 +03:00
Ivan Shvedunov
836a6a953a
Fix shell special vars
2017-02-21 22:22:40 +03:00
Matthew Mosesohn
51a6ec836e
Merge branch 'master' into synthscale
2017-02-21 22:17:43 +03:00
Sergii Golovatiuk
f47ad95eb9
Switch docker to 1.13
...
- Remove variable dup for Ubuntu
- Update Docker to 1.13
2017-02-21 19:10:34 +01:00
Sergii Golovatiuk
d2ff06e81d
Statically disable iptables management for docker
...
Docker 1.13 changes the behaviour of iptables defaults from allow
to drop. This patch disables docker's iptables management as it was
in Docker 1.12 [1]
[1] https://github.com/docker/docker/pull/28257
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-21 19:10:34 +01:00
Matthew Mosesohn
14b86ebc45
Change coreos-alpha dns mode to host_resolvconf
2017-02-21 18:14:42 +03:00
Matthew Mosesohn
efe8f20af8
Merge pull request #1046 from skyscooby/pedantic-syntax-cleanup
...
Cleanup legacy syntax, spacing, files all to yml
2017-02-21 17:03:16 +03:00
Matthew Mosesohn
1075f0f9d1
Raise timeout for get netchecker agents
2017-02-21 14:48:25 +03:00
Matthew Mosesohn
cc4070339a
Merge pull request #1055 from mattymo/etcd-preupgrade-speedup
...
speed up etcd preupgrade check
2017-02-21 12:51:42 +03:00
Matthew Mosesohn
84a8f66c8a
Merge pull request #1058 from holser/update_calico_cni
...
Update calico-cni to 1.5.6
2017-02-20 23:09:47 +03:00
Matthew Mosesohn
5dbf14232e
Merge pull request #1043 from rutsky/patch-3
...
fix typos in azure docs
2017-02-20 20:24:05 +03:00
Matthew Mosesohn
967df623f9
Merge pull request #1034 from rutsky/fix-openssl-lb-index
...
fix load balancer DNS name index evaluation in openssl.conf
2017-02-20 20:23:26 +03:00