new commit from concourse: Commit 408ab7a by Kiall Mac Innes kiall@macinnes.ie
 Allow custom options to be passed to the Salt Master
 
 Rename the salt master configurations, so that custom options can be loaded
 after the stock options, allowing an override.
 
 bsc#1059724

• Files Changed
• Browse Source

new commit from concourse: Commit 60e6a69 by Alvaro Saurin alvaro.saurin@gmail.com
 Do not access infra machines through the proxy (bsc#1053739)

• Files Changed
• Browse Source

new commit from concourse: Commit f730743 by Kiall Mac Innes kiall@macinnes.ie
 Ensure cluster-service labels are consistent
 
 These were inconsistent, with some services using the labels, and others not.
 Within services, some of the resoures the label should be applied to were
 not, even though other parts of the same service did have the label applied.
 
 Commit 6520870 by Kiall Mac Innes kiall@macinnes.ie
 Add CriticalAddonsOnly tolerations
 
 Add CriticalAddonsOnly toleration to dex/kube-dns/timmer, this syncs them
 with upstream, and allows for masters to be flagged as suitable for running
 these critical contains if desired.
 
 Commit 6cde454 by Kiall Mac Innes kiall@macinnes.ie
 Remove Kube addonmanager references
 
 As Kubernetes addonmanager is not used to deploy these, we should not apply
 the addonmanager labels. Should a end user deploy kube addonmanager, it will
 believe these pods are under it's control and potentially remove or change
 them.
 
 bsc#1059516

• Files Changed
• Browse Source

new commit from concourse: Commit 7184f5e by Kiall Mac Innes kiall@macinnes.ie
 Prevent update-etc-hosts conflicting with bootstrap
 
 Fix another case where the etc hosts update orchestration would otherwise
 conflict with the bootstrap / add node orchestration.
 
 bsc#1059577

• Files Changed
• Browse Source

• Files Changed
• Browse Source

new commit from concourse: Commit 8865d73 by Robert Roland rob.roland@gmail.com
 Making the service account key the same on all nodes (#230)
 
 The kube-apiserver and kube-controller-manager must agree on what the
 private key is for service account generation. In a multi-master
 scenario,
 where an api server starts on one machine, and the
 controller-manager on
 another machine becomes primary, pods cannot be
 created because
 kube-controller-manager cannot communicate with the
 apiserver.
 So, now, we generate the service account key on the ca minion and store
 it
 in the mine, so that it's generated once.
 Fixes bsc#1059398

• Files Changed
• Browse Source

new commit from concourse: Commit 6868ea5 by Alvaro Saurin alvaro.saurin@gmail.com
 Set a default external fqdn

• Files Changed
• Browse Source

new commit from concourse: Commit 2df25a0 by Aishwarya Thangappa aishwarya.thangappa@gmail.com
 [WIP} Fix the race condition that occurs with the
 
 ...kube-dns creation in multi master set up

• Files Changed
• Browse Source

new commit from concourse: Commit 5d0e520 by Kiall Mac Innes kiall@macinnes.ie
 Update paths to match SLES based Dex container
 
 The SLES based dex container does not put dex in /usr/local/bin,
 additionally, we install the web content in /usr/share/caasp-dex/web.
 
 Part of bsc#1058833

• Files Changed
• Browse Source

new commit from concourse: Commit e966106 by Michal Jura mjura@suse.com
 Add OpenStack block storage version as a option

• Files Changed
• Browse Source

new commit from concourse: Commit 8e90c5c by Kiall Mac Innes kiall@macinnes.ie
 Include kube-apiserver in the dex role
 
 Without this, We're seeing an error post-bootstrap, so deployments look
 green, but fail with:
 
 The following requisites were not found:
 require:
 id: kube-apiserver

• Files Changed
• Browse Source

new commit from concourse: Commit cc32e39 by Robert Roland robert.roland@suse.com
 Switch to the sles12/caasp-dex image

• Files Changed
• Browse Source

new commit from concourse: Commit 6c2b47a by Michal Jura mjura@suse.com
 Add orchestration for etcd storage 'etcd2' to 'etcd3'
 
 In Kubernetes v1.7 default storage backend for apiserver is 'etcd3'. We need
 orchestrate migration between version 'etcd2' and 'etcd3'.

• Files Changed
• Browse Source

new commit from concourse: Commit c26d987 by Robert Roland rob.roland@gmail.com
 Role-based access control (#192)
 
 Adding role-based access control based on CoreOS Dex and OpenLDAP

• Files Changed
• Browse Source

new commit from concourse: Commit 2b5dd9b by Nikhil Manchanda SlickNik@gmail.com
 Add cluster role binding for tiller
 
 Tiller requires a cluster role binding to work correctly with the new RBAC
 changes. Add this cluster role binding so that helm commands work correctly.

• Files Changed
• Browse Source

new commit from concourse: Commit efd8877 by Rafael Fernández López ereslibre@ereslibre.es
 Set etcd3 as default backend storage

• Files Changed
• Browse Source

new commit from concourse: Commit 3e9bcd6 by Kiall Mac Innes kiall@macinnes.ie
 Move External FQDN to 127.0.0.1 address
 
 s was added to ensure Dex was always reachable, however, with multi masters,
 this name was assigned to 3 different lines in /etc/hosts. Most consumers of
 /etc/hosts do not deal with this as they would a round-robin DNS entry which
 returns multiple IPs.
 
 When the "selected" master is powered off, this name continues to resolve the
 same dead IP address. As Dex uses a NodePort service, putting this to
 127.0.0.1 works as we expect it to.

• Files Changed
• Browse Source

new commit from concourse: Commit 5e89d99 by Alvaro Saurin alvaro.saurin@gmail.com
 Refactor the wait-for-apiserver so it can be used in some other parts of the
 code

• Files Changed
• Browse Source

new commit from concourse: Commit 5a13bbc by Kiall Mac Innes kiall@macinnes.ie
 Ensure systemd is reloaded after units are changed
 
 Ensure systemd is reloaded as soon as a unit is changed, rather than relying
 on a task later within the orchestration to execute.
 
 Fixes bsc#1057641

• Files Changed
• Browse Source

new commit from concourse: Commit a601b38 by Kiall Mac Innes kiall@macinnes.ie
 Include short hostname for masters
 
 The short hostname for masters was not being set, as it was for both the
 admin node, and worker nodes
 
 Fixes bsc#1057794

• Files Changed
• Browse Source