CadolesKube/typhoon
7
0
Fork 0
mirror of https://github.com/puppetmaster/typhoon.git synced 2024-12-27 08:49:33 +01:00
Code Issues Packages Projects Releases Wiki Activity
738 Commits 4 Branches 126 Tags 9.4 MiB
8f412e2f09
Commit Graph

98 Commits

Author SHA1 Message Date
Dalton Hubble
8f412e2f09 Update etcd from v3.3.13 to v3.3.14 
* https://github.com/etcd-io/etcd/releases/tag/v3.3.14
 2019-08-18 21:05:06 -07:00
Dalton Hubble
2227f2cc62 Update Kubernetes from v1.15.1 to v1.15.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.15.md#v1152
 2019-08-05 08:48:57 -07:00
Dalton Hubble
e0c7676a15 Update Kubernetes from v1.15.0 to v1.15.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.15.md#downloads-for-v1151
 2019-07-19 01:21:08 -07:00
Dalton Hubble
408e60075a Update Kubernetes from v1.14.3 to v1.15.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.15.md#v1150
* Remove docs referring to possible v1.14.4 release
 2019-06-23 13:12:18 -07:00
Dalton Hubble
79d910821d Configure Kubelet cgroup-driver for Flatcar Linux Edge 
* For Container Linux or Flatcar Linux alpha/beta/stable,
continue using the `cgroupfs` driver
* For Fedora Atomic, continue using the `systemd` driver
* For Flatcar Linux Edge, use the `systemd` driver
 2019-06-22 23:38:42 -07:00
Dalton Hubble
db36959178 Migrate bare-metal module Terraform v0.11 to v0.12 
* Replace v0.11 bracket type hints with Terraform v0.12 list expressions
* Use expression syntax instead of interpolated strings, where suggested
* Update bare-metal tutorial
* Define `clc_snippets` type constraint map(list(string))
* Define Terraform and plugin version requirements in versions.tf
  * Require matchbox ~> 0.3.0 to support Terraform v0.12
  * Require ct ~> 0.3.2 to support Terraform v0.12
 2019-06-06 09:51:21 -07:00
Dalton Hubble
0ccb2217b5 Update Kubernetes from v1.14.2 to v1.14.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#v1143
 2019-05-31 01:08:32 -07:00
Dalton Hubble
da97bd4f12 Update Kubernetes from v1.14.1 to v1.14.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#v1142
 2019-05-17 13:09:15 +02:00
Dalton Hubble
feb6192aac Update etcd from v3.3.12 to v3.3.13 on Container Linux 
* Skip updating etcd for Fedora Atomic clusters, now that
Fedora Atomic has been deprecated
 2019-05-04 12:55:42 -07:00
Dalton Hubble
452253081b Update Kubernetes from v1.14.0 to v1.14.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#changelog-since-v1140
 2019-04-09 21:47:23 -07:00
Dalton Hubble
5271e410eb Update Kubernetes from v1.13.5 to v1.14.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#v1140
 2019-04-07 00:15:59 -07:00
Dalton Hubble
4fea526ebf Update Kubernetes from v1.13.4 to v1.13.5 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1135
 2019-03-25 21:43:47 -07:00
Dalton Hubble
f598307998 Update Kubernetes from v1.13.3 to v1.13.4 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1134
 2019-02-28 22:47:43 -08:00
Dalton Hubble
584088397c Update etcd from v3.3.11 to v3.3.12 
* https://github.com/etcd-io/etcd/releases/tag/v3.3.12
 2019-02-09 11:54:54 -08:00
Dalton Hubble
ccd96c37da Update Kubernetes from v1.13.2 to v1.13.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1133
 2019-02-01 23:26:13 -08:00
Dalton Hubble
b74cc8afd2 Update etcd from v3.3.10 to v3.3.11 
* https://github.com/etcd-io/etcd/releases/tag/v3.3.11
 2019-01-12 14:17:25 -08:00
Dalton Hubble
4d32b79c6f Update Kubernetes from v1.13.1 to v1.13.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1132
 2019-01-12 00:00:53 -08:00
Dalton Hubble
b57273b6f1 Rename internal kube_dns_service_ip to cluster_dns_service_ip 
* terraform-render-bootkube module deprecated kube_dns_service_ip
output in favor of cluster_dns_service_ip
* Rename k8s_dns_service_ip to cluster_dns_service_ip for
consistency too
 2019-01-05 13:32:03 -08:00
Dalton Hubble
018c5edc25 Update Kubernetes from v1.13.0 to v1.13.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1131
 2018-12-15 11:44:57 -08:00
Dalton Hubble
d31f444fcd Update Kubernetes from v1.12.3 to v1.13.0 2018-12-03 20:44:32 -08:00
yokhahn
bcce02a9ce Add Kubelet /etc/iscsi and iscsiadm mounts on bare-metal 
* Allow using iSCSI with Container Linux bare-metal clusters
* Warning, iSCSI isn't part of Kubernetes conformance and isn't
regularly evaluated
 2018-11-28 00:28:46 -08:00
Dalton Hubble
5b27d8d889 Update Kubernetes from v1.12.2 to v1.12.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.12.md/#v1123
 2018-11-26 21:06:09 -08:00
Dalton Hubble
8fd2978c31 Update bootkube image version from v0.13.0 to v0.14.0 
* https://github.com/kubernetes-incubator/bootkube/releases/tag/v0.14.0
 2018-11-06 23:35:11 -08:00
Dalton Hubble
f1da0731d8 Update Kubernetes from v1.12.1 to v1.12.2 
* Update CoreDNS from v1.2.2 to v1.2.4
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.12.md#v1122
* https://coredns.io/2018/10/17/coredns-1.2.4-release/
* https://coredns.io/2018/10/16/coredns-1.2.3-release/
 2018-10-27 15:47:57 -07:00
Dalton Hubble
99a6d5478b Disable Kubelet read-only port 10255 
* We can finally disable the Kubelet read-only port 10255!
* Journey: https://github.com/poseidon/typhoon/issues/322#issuecomment-431073073
 2018-10-18 21:14:14 -07:00
Dalton Hubble
9b6113a058 Update Kubernetes from v1.11.3 to v1.12.1 
* Mount an empty dir for the controller-manager to work around
https://github.com/kubernetes/kubernetes/issues/68973
* Update coreos/pod-checkpointer to strip affinity from
checkpointed pod manifests. Kubernetes v1.12.0-rc.1 introduced
a default affinity that appears on checkpointed manifests; but
it prevented scheduling and checkpointed pods should not have an
affinity, they're run directly by the Kubelet on the local node
* https://github.com/kubernetes-incubator/bootkube/issues/1001
* https://github.com/kubernetes/kubernetes/pull/68173
 2018-10-16 20:28:13 -07:00
Dalton Hubble
5a283b6443 Update etcd from v3.3.9 to v3.3.10 
* https://github.com/etcd-io/etcd/blob/master/CHANGELOG-3.3.md#v3310-2018-10-10
 2018-10-13 13:14:37 -07:00
Dalton Hubble
ad871dbfa9 Update Kubernetes from v1.11.2 to v1.11.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.11.md#v1113
 2018-09-13 18:50:41 -07:00
Dalton Hubble
bec5250e73 Remove unofficial bare-metal *_networkds variables 
* Remove controller_networkds and worker_networkds variables. These
variables were always listed as experimental, unsupported, and excluded
from documentation in anticipation of Container Linux Config snippets
* Use Container Linux Config snippets on bare-metal instead. They
provide safer, more powerful, and more elegant host customization
 2018-08-13 23:33:29 -07:00
Dalton Hubble
f7ebdf475d Update Kubernetes from v1.11.1 to v1.11.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.11.md#v1112
 2018-08-07 21:57:25 -07:00
Dalton Hubble
db64ce3312 Update etcd from v3.3.8 to v3.3.9 
* https://github.com/coreos/etcd/blob/master/CHANGELOG-3.3.md#v339-2018-07-24
 2018-07-29 11:27:37 -07:00
Dalton Hubble
7c327b8bf4 Update from bootkube v0.12.0 to v0.13.0 2018-07-29 11:20:17 -07:00
Dalton Hubble
d8d524d10b Update Kubernetes from v1.11.0 to v1.11.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.11.md#v1111
 2018-07-20 00:41:27 -07:00
Dalton Hubble
8464b258d8 Update Kubernetes from v1.10.5 to v1.11.0 
* Force apiserver to stop listening on 127.0.0.1:8080
* Remove deprecated Kubelet `--allow-privileged`. Defaults to
true. Use `PodSecurityPolicy` if limiting is desired
* https://github.com/kubernetes/kubernetes/releases/tag/v1.11.0
* https://github.com/poseidon/terraform-render-bootkube/pull/68
 2018-06-27 22:47:35 -07:00
Dalton Hubble
f4d3059b00 Update Kubernetes from v1.10.4 to v1.10.5 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.10.md#v1105
 2018-06-21 22:51:39 -07:00
Dalton Hubble
6e64634748 Update etcd from v3.3.7 to v3.3.8 
* https://github.com/coreos/etcd/releases/tag/v3.3.8
 2018-06-19 21:56:21 -07:00
Dalton Hubble
51906bf398 Update etcd from v3.3.6 to v3.3.7 2018-06-14 22:46:16 -07:00
Dalton Hubble
79260c48f6 Update Kubernetes from v1.10.3 to v1.10.4 2018-06-06 23:23:11 -07:00
Dalton Hubble
589c3569b7 Update etcd from v3.3.5 to v3.3.6 
* https://github.com/coreos/etcd/releases/tag/v3.3.6
 2018-06-06 23:19:30 -07:00
Dalton Hubble
4ea1fde9c5 Update Kubernetes from v1.10.2 to v1.10.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.10.md#v1103
* Update Calico from v3.1.1 to v3.1.2
 2018-05-21 21:38:43 -07:00
Dalton Hubble
0c3557e68e Allow Flatcar Linux os_channel on bare-metal 
* Choose the Container Linux derivative Flatcar Linux on
bare-metal by setting os_channel to flatcar-stable, flatcar-beta
or flatcar-alpha
* As with Container Linux from Red Hat, the version (os_version)
must correspond to the channel being used
* Thank you to @dongsupark from Kinvolk
 2018-05-17 20:09:36 -07:00
Dalton Hubble
adc6c6866d Rename container_linux_ bare-metal variables 
* Allow for Container Linux derivatives
* Replace container_linux_channel variable with `os_channel`
* Replace `container_linux_version` variable with `os_version`
* Please change values `stable`, `beta`, or `alpha` to `coreos-stable`,
`coreos-beta`, `coreos-alpha` (action required!)
 2018-05-16 22:40:39 -07:00
Dalton Hubble
37981f9fb1 Allow bearer token authn/authz to the Kubelet 
* Require Webhook authorization to the Kubelet
* Switch apiserver X509 client cert org to systems:masters
to grant the apiserver admin and satisfy the authorization
requirement. kubectl commands like logs or exec that have
the apiserver make requests of a kubelet continue to work
as before
* https://kubernetes.io/docs/admin/kubelet-authentication-authorization/
* https://github.com/poseidon/typhoon/issues/215
 2018-05-13 23:20:42 -07:00
Dalton Hubble
8b8e364915 Update etcd from v3.3.4 to v3.3.5 
* https://github.com/coreos/etcd/releases/tag/v3.3.5
 2018-05-10 02:12:53 -07:00
Dalton Hubble
32ddfa94e1 Update Kubernetes from v1.10.1 to v1.10.2 
* https://github.com/kubernetes/kubernetes/releases/tag/v1.10.2
 2018-04-28 00:27:00 -07:00
Dalton Hubble
681450aa0d Update etcd from v3.3.3 to v3.3.4 
* https://github.com/coreos/etcd/releases/tag/v3.3.4
 2018-04-27 23:57:26 -07:00
Dalton Hubble
a54f76db2a Update Calico from v3.0.4 to v3.1.1 
* https://github.com/projectcalico/calico/releases/tag/v3.1.1
* https://github.com/projectcalico/calico/releases/tag/v3.1.0
 2018-04-21 18:30:36 -07:00
Dalton Hubble
77c0a4cf2e Update Kubernetes from v1.10.0 to v1.10.1 
* Use kubernetes-incubator/bootkube v0.12.0
 2018-04-12 20:57:31 -07:00
Dalton Hubble
9bb3de5327 Skip creating unused dirs on worker nodes 2018-04-11 22:23:51 -07:00
Dalton Hubble
d276fffcda Fix bare-metal multiple apply/ssh on Terraform v0.11.4+ 
* Terraform v0.11.4 introduced changes to remote-exec
that mean Typhoon bare-metal clusters require multiple
runs of terraform apply to ssh and bootstrap.
* Bare-metal installs PXE boot a live instance to install
to disk and then reboot from disk as controllers/workers.
Terraform remote-exec has no way to "know" to wait until
the reboot has occurred to kickoff Kubernetes bootstrap.
Previously Typhoon created a "debug" user during this
install phase to allow an admin to SSH, but remote-exec
would hang, trying to connect as user "core". Terraform
v0.11.4 changes this behavior so remote-exec fails and
a user must re-run terraform apply until succeeding.
* A new way to "trick" remote-exec into waiting for the
reboot into the disk install is to run SSH on a non-standard
port during the disk install. This retains the ability
for an admin to SSH during install (most distros don't have
this) and fixes the issue so only a single run of terraform
apply is needed.
* https://github.com/hashicorp/terraform/pull/17359#issuecomment-376415464
 2018-04-08 13:32:31 -07:00