new commit from concourse: Commit 3a6869d by Aishwarya Thangappa aishwarya.thangappa@gmail.com
 Install Kube-DNS by default
 
 1. Removed the skydns template files and added kubedns template files. We
 will be using deployments instead of replication controllers. 2. Modified
 the deploy script to check for the existence of kube-dns deployment, kube-dns
 service and config map before creating one. 3. Turned on the addon:dns flag
 so as to install KubeDNS by default.

• Files Changed
• Browse Source

new commit from concourse: Commit d1abfaa by Thomas Hipp thipp@suse.de
 update k8s version
 
 Signed-off-by: Thomas Hipp <thipp@suse.de>

• Files Changed
• Browse Source

new commit from concourse: Commit bc3adf7 by Robert Roland robert.roland@suse.com
 Explicit dependency ordering
 
 Commit 1086ebf by Robert Roland robert.roland@suse.com
 Run kubelet and kube-proxy on the master node
 
 A standard Kubernetes installation runs a kubelet and kube-proxy on every
 node, and then you decide where to run apiserver, controller-manager and
 scheduler.
 
 This change is required to support RBAC, DaemonSets and many other changes.
 
 Requires an updated kubernetes-client package that contains:
 https://build.opensuse.org/request/show/494998

• Files Changed
• Browse Source

new commit from concourse: Commit 5df94da by Kiall Mac Innes kiall@macinnes.ie
 Delay reboots during upgrade by 15 seconds
 
 Even with backgrounding the call, salt-minion sometimes still does not have
 enough time to respond before systemd shuts down salt-minion on some
 environments. By adding a 15 second delay, we give salt-minion much more time
 than it should need in a healthy cluster to respond.
 
 Additionally, switch from the deprecated syntax for supplying bg=True, to the
 newer syntax which no longer logs a warning.
 
 Followup up fix for bsc#1049200

• Files Changed
• Browse Source

new commit from concourse: Commit 4920c7a by Rafael Fernández López ereslibre@ereslibre.es
 Do not publish the `ca.crt` from the `ca` SLS, use `mine_functions`
 
 We will be publishing this contents when the `ca` minion starts, so there's
 no need to do this during the orchestration.
 
 `mine.send` is not reliable enough since we cannot confirm that the contents
 are there yet, and waiting a random amount of time is not appropriate as we
 are just hiding the real problem. In the near future we can do an active wait
 for the content to be there using `retry`, but for now we just publish the
 contents of the `ca.crt` using
 `mine_functions`, so it is sent when the `ca` minion starts.
 
 There's no need to refresh the mine, as this was just hiding the real problem
 when we were publishing this contents during the orchestration phase.
 
 Fixes: bsc#1049137 Fixes: bsc#1048548

• Files Changed
• Browse Source

new commit from concourse: Commit 3e5cf9f by Kiall Mac Innes kiall@macinnes.ie
 Add extra requisites to the update orchestration
 
 These additional requisites enforce a stricter ordering of tasks during the
 upgrade. In some case, "-set-update-grain" would not execute in the right
 place, potentially leading to a failed upgrade.
 
 bsc#1045381

• Files Changed
• Browse Source

new commit from concourse: Commit d97a24e by Kiall Mac Innes kiall@macinnes.ie
 Don't wait for minion responses when rebooting
 
 When we instruct a minion to reboot, we can't reliably wait for the response
 from salt-minion letting us know that the "systemctl reboot" command
 succeeded, as systemd may choose to shutdown the salt-minion service before
 it can sent out the "Yes, that worked" response.
 
 Salt does not make any attempt to finish in progress tasks when it receives a
 SIGTERM, leaving us with few other viable choices for this.
 
 Fixes bsc#1049200

• Files Changed
• Browse Source

new commit from concourse: Commit 0692dbf by Rafael Fernández López ereslibre@ereslibre.es
 Explicitly refresh the mine on all minions after the `ca` has published the
 `ca.crt`
 
 We will explicitly force all minions to refresh the mine after the `ca`
 minion has published the `ca.crt` certificate on the mine, to avoid rendering
 problems with later SLS being executed. It might happen that a minion was
 missing this information on its mine, so the rendering of the SLS failed,
 effectively stopping the whole orchestration process.
 
 Fixes: bsc#1048548

• Files Changed
• Browse Source

fix changelog

• Files Changed
• Browse Source

fix changelog

• Files Changed
• Browse Source

new commit from concourse: Commit 219b7d5 by Kiall Mac Innes kiall@macinnes.ie
 Upgrade: Wait longer for minions to reboot
 
 Wait 1200 seconds (20 minutes) for minions to reboot, instead of the default
 300 seconds (5 minutes). We increase this to cover off cases where slower to
 boot physical hardware is used.
 
 20 minutes was chosen as, I've seen physical hardware take 10-12 minutes in
 the past, and someone likely has something that is slower to reboot.
 
 bsc#1048683

• Files Changed
• Browse Source

new commit from concourse: Commit 1e41512 by Alvaro Saurin alvaro.saurin@gmail.com
 Add some extra naames to the AIP server certificate (bsc#1033671)

• Files Changed
• Browse Source

new commit from concourse: Commit 6b146d5 by Maximilian Meister mmeister@suse.de
 make branch safe by transforming slashes to dashes
 
 Signed-off-by: Maximilian Meister <mmeister@suse.de>
 
 Commit 588b834 by Maximilian Meister mmeister@suse.de
 packaging: make branch configurable
 
 Signed-off-by: Maximilian Meister <mmeister@suse.de>

• Files Changed
• Browse Source

new commit from concourse: Commit 6b146d5 by Maximilian Meister mmeister@suse.de
 make branch safe by transforming slashes to dashes
 
 Signed-off-by: Maximilian Meister <mmeister@suse.de>
 
 Commit 588b834 by Maximilian Meister mmeister@suse.de
 packaging: make branch configurable
 
 Signed-off-by: Maximilian Meister <mmeister@suse.de>

• Files Changed
• Browse Source

new commit from concourse: Commit 6b146d5 by Maximilian Meister mmeister@suse.de
 make branch safe by transforming slashes to dashes
 
 Signed-off-by: Maximilian Meister <mmeister@suse.de>
 
 Commit 588b834 by Maximilian Meister mmeister@suse.de
 packaging: make branch configurable
 
 Signed-off-by: Maximilian Meister <mmeister@suse.de>

• Files Changed
• Browse Source

osc copypac from project:devel:CaaSP:1.0:ControllerNode package:kubernetes-salt revision:1

• Files Changed
• Browse Source

osc copypac from project:devel:CaaSP:1.0:ControllerNode package:kubernetes-salt revision:1

• Browse Source