new commit from concourse: Commit 755ad7c by Sam Leavens rbwsam@gmail.com
 Adding optional addon for Helm's tiller

• Files Changed
• Browse Source

new commit from concourse: Commit e0727d2 by Kiall Mac Innes kiall@macinnes.ie
 Combine etcd and etcd-proxy formulas
 
 The base etcd formula is never used on it's own, lets remove this unnecessary
 complexity.

• Files Changed
• Browse Source

new commit from concourse: Commit c0bbaba by Kiall Mac Innes kiall@macinnes.ie
 Include both v2 and v3 flags in etcdctl vars

• Files Changed
• Browse Source

new commit from concourse: Commit c1c851c by Robert Roland rob.roland@gmail.com
 Role-based access control (#192)
 
 Adding role-based access control based on CoreOS Dex and OpenLDAP

• Files Changed
• Browse Source

new commit from concourse: Commit 66b0de2 by Aishwarya Thangappa aishwarya.thangappa@gmail.com
 Update docker images for KubeDNS to ones based on SLES from the rpms in
 MicroOS

• Files Changed
• Browse Source

new commit from concourse: Commit 67846f6 by Kiall Mac Innes kiall@macinnes.ie
 Fix flannel config for 0.8.0
 
 Flannel in 0.8.0 rejects the "-logtostderr" flag we were providing, this
 doesn't seem to have ever been an option, however it was silently ignored in
 the past.

• Files Changed
• Browse Source

new commit from concourse: Commit 5c4bf44 by Michal Jura mjura@suse.com
 Set kube-apiserver storage backend as option
 
 Parametrize Kubernetes apiserver storage backend. This will be used in future
 for migration process from storage etcd2 to etcd3.

• Files Changed
• Browse Source

new commit from concourse: Commit 0a8f3e2 by Michal Jura mjura@suse.com
 Add cloud provider integration for OpenStack Storage
 
 Commit 885cc4d by Michal Jura mjura@suse.com
 Add cloud provider integration for OpenStack LoadBalancer

• Files Changed
• Browse Source

new commit from concourse: Commit 6ac7ffb by Kiall Mac Innes kiall@macinnes.ie
 Use haproxy to load balance Kube API requests
 
 Now that we can have multiple masters, we need a way for the various services
 and end-users to be load balanced over the set of kube-api servers.
 
 We install haproxy on each node, inside a docker container, configured to
 load balance requests over all the cluster masters. This haproxy is
 configured to listen on 0.0.0.0 on the masters, and 127.0.0.1 on the workers.
 
 This is to allow the minions to simply "talk" to 127.0.0.0, and be routed to
 an active kube-api server.

• Files Changed
• Browse Source

new commit from concourse: Commit 2269176 by Kiall Mac Innes kiall@macinnes.ie
 Use apply instead of create for addons
 
 kubectl apply is generally idempotent, while kubectl create is not. With
 multi-master now enabled, if two masters execute this script at once, one of
 them is likely to fail given the check+set race within this script -
 Switching to apply removes part of this this C+S race.
 
 The second part of this race, is it client-side decision by apply to create
 or update, by retrying the command once if it fails, we can ensure when two
 masters run this script at the same time, for the first time, the C+S race
 will be avoided here too.

• Files Changed
• Browse Source

new commit from concourse: Commit b470a20 by Kiall Mac Innes kiall@macinnes.ie
 Ensure k8s_etcd.get_cluster_size works for multi-master
 
 If we had enough masters to form a etcd cluster, we would end up returning
 "None" from this method, preventing the cluster formation.

• Files Changed
• Browse Source

new commit from concourse: Commit 06033b3 by Alvaro Saurin alvaro.saurin@gmail.com
 Wait for the API server after starting the service.

• Files Changed
• Browse Source

new commit from concourse: Commit af41306 by Alvaro Saurin alvaro.saurin@gmail.com
 Do not generate an empty --proxy line in curlrc

• Files Changed
• Browse Source

new commit from concourse: Commit bdd9b9c by Kiall Mac Innes kiall@macinnes.ie
 Grow flannel CIDR to accommodate 1024 workers
 
 Flannel was setup such that 150 workers could obtain a subnet before there
 were not none left. By growing this range, and the size of the individual
 allocations, we allow for up to 1024 workers with 510 pods on each.
 
 bsc#1047847

• Files Changed
• Browse Source

new commit from concourse: Commit 4b40d4c by Aishwarya Thangappa aishwarya.thangappa@gmail.com
 Add kube-dns service account

• Files Changed
• Browse Source

new commit from concourse: Commit e1d5650 by Kiall Mac Innes kiall@macinnes.ie
 Disable Salt's Job Cache
 
 Salt's job cache is buggy, causing random failures to lookup mine data, which
 in turn causes our deployments to fail.
 
 Fixes bsc#1054256

• Files Changed
• Browse Source

new commit from concourse: Commit 7c47d63 by Alvaro Saurin alvaro.saurin@gmail.com
 Properly wait for a HTTP endpoint

• Files Changed
• Browse Source

new commit from concourse: Commit a4a049e by Kiall Mac Innes kiall@macinnes.ie
 Kube-API: Set storage-backend to etcd2
 
 In our current configuration, kube-api logs a series of errors unless this is
 set.

• Files Changed
• Browse Source

new commit from concourse: Commit 6caa9fa by Robert Roland robert.roland@suse.com
 Dedicated certificate for kube-controller-manager
 
 Commit 5e5dfb5 by Robert Roland robert.roland@suse.com
 Dedicated certificate for kube-proxy
 
 Commit afe4f63 by Robert Roland robert.roland@suse.com
 Dedicated certificate for kubelet
 
 Commit 8acea7c by Robert Roland robert.roland@suse.com
 Dedicated certificate for kube-scheduler
 
 Commit e59670e by Robert Roland robert.roland@suse.com
 Adapting kube-apiserver wait fix into this branch
 
 Commit c4eef4d by Robert Roland robert.roland@suse.com
 eliminated the kubernetes-master formula
 
 the daemons are all separate now, so it's controlled by role membership in
 the top.sls file
 
 moved addons to a separate salt formula
 
 Commit 9232705 by Robert Roland robert.roland@suse.com
 kube-proxy as a separate salt formula
 
 Commit 15ff190 by Robert Roland robert.roland@suse.com
 kubelet as a separate salt formula
 
 Commit 4412b9d by Robert Roland robert.roland@suse.com
 kube-scheduler as its own formula
 
 fixing a bug where we uncordon master nodes. but we should never do that.
 
 Commit 4662dd1 by Robert Roland robert.roland@suse.com
 kube-controller-manager as a separate formula
 
 Commit ee9fb0b by Robert Roland robert.roland@suse.com
 kube-apiserver as a separate formula
 
 Makes a dedicated formula for the kube-apiserver
 
 Generates a cert specifically for the kube-apiserver

• Files Changed
• Browse Source

new commit from concourse: Commit 65b9e9c by Robert Roland robert.roland@suse.com
 can't talk to 6443 without a client cert
 
 talk to the insecure-bind-address instead.
 
 Commit 5c6d2e1 by Kiall Mac Innes kiall@macinnes.ie
 Wait for Kube-API before installing Kube-DNS

• Files Changed
• Browse Source