Dalton Hubble
c4914c326b
Update bootkube and terraform-render-bootkube to v0.11.0
2018-02-22 21:53:26 -08:00
Paul Saunders
ceb5555222
Switch apiserver from ELB to a network load balancer
2018-02-22 16:10:31 -08:00
Dalton Hubble
22fa051002
Switch Ingress ELB to a network load balancer
...
* Require terraform-provider-aws 1.7 or higher
2018-02-20 17:34:38 -08:00
Stephen Augustus
c8313751d7
Ignore lifecycle changes to the AWS controller ami
2018-02-15 19:48:39 -08:00
Dalton Hubble
195d902ab6
Upgrade etcd from v3.2.15 to v3.3.1
2018-02-15 19:29:46 -08:00
Dalton Hubble
c19a68b59b
Update bootkube control-plane manifests
...
* Remove PersistentVolumeLabel admission controller flag
* Switch Deployments and DaemonSets to apps/v1
* Minor update to pod-checkpointer image version
2018-02-15 11:06:35 -08:00
Dalton Hubble
82a616c70b
Fix terraform config formatting
2018-02-10 15:18:27 -08:00
Dalton Hubble
a41691b222
Update Kubernetes from v1.9.2 to v1.9.3
...
* Add flannel service account and limited RBAC cluster role
* Change DaemonSets to tolerate NoSchedule and NoExecute taints
* Remove deprecated apiserver --etcd-quorum-read flag
* Update Calico from v3.0.1 to v3.0.2
* Add Calico GlobalNetworkSet CRD
* https://github.com/poseidon/terraform-render-bootkube/pull/44
2018-02-10 13:37:07 -08:00
Dalton Hubble
2fa1840c30
Update flannel from v0.9.0 to v0.10.0
...
* https://github.com/coreos/flannel/releases/tag/v0.10.0
2018-01-28 23:09:21 -08:00
Dalton Hubble
8e0b8d7e40
Upgrade Calico from 2.6.6 to 3.0.1
2018-01-28 11:47:23 -08:00
Dalton Hubble
3e6e4ea339
Update etcd from 3.2.14 to 3.2.15
...
* https://github.com/coreos/etcd/releases/tag/v3.2.15
2018-01-23 23:50:04 -08:00
Dalton Hubble
868265988b
Update bootkube and terraform-render-bootkube to v0.10.0
2018-01-19 23:10:45 -08:00
Dalton Hubble
6adffcb778
Update Kubernetes from v1.9.1 to v1.9.2
2018-01-19 08:40:09 -08:00
Dalton Hubble
d8db296932
Update kube-dns and use separate service account
...
* Update kube-dns from v1.14.7 to v1.14.8
* Use a separate kube-dns service account
* https://github.com/kubernetes/kubernetes/pull/57918
2018-01-12 10:29:30 -08:00
Dalton Hubble
388ac08492
Update etcd from 3.2.13 to 3.2.14
...
* https://github.com/coreos/etcd/releases/tag/v3.2.14
2018-01-12 07:20:55 -08:00
Dalton Hubble
fc455c8624
Remove old mention of ACIs in bootkube.service description
2018-01-06 16:20:34 -08:00
Dalton Hubble
51a5f64024
Enable portmap plugin alongside Calico to fix hostPort
...
* https://github.com/poseidon/terraform-render-bootkube/pull/36
2018-01-06 14:01:18 -08:00
Dalton Hubble
e1f2125f02
Update etcd from 3.2.0 to 3.2.13
...
* https://github.com/coreos/etcd/releases/tag/v3.2.13
2018-01-06 14:01:18 -08:00
Dalton Hubble
9329b775f6
Update Kubernetes from v1.8.6 to v1.9.1
2018-01-06 14:01:16 -08:00
Dalton Hubble
fbdd946601
Update Kubernetes from v1.8.5 to v1.8.6
2017-12-21 11:20:37 -08:00
Barak Michener
e79088baa0
Add optional cluster_domain_suffix variable
...
* Allow kube-dns to respond to DNS queries with a custom
suffix, instead of the default 'cluster.local'
* Useful when multiple clusters exist on the same local
network and wish to query services on one another
2017-12-15 01:45:52 -08:00
Dalton Hubble
495e33e213
Update bootkube and terraform-render-bootkube to v0.9.1
2017-12-15 01:45:02 -08:00
Dalton Hubble
63f5a26a72
Eliminate steps to move self-hosted etcd assets
...
* bootkube/assets/experimental/* assets corresponded to self-hosted
etcd manifests, which are no longer an option in Typhoon
2017-12-13 01:06:56 -08:00
Lars Fenneberg
eea79e895d
Fix manifest consolidation in bootkube start wrapper
...
* Fix manifest existence test in /opt/bootkube/bootkube-start
to also work with more than one directory
2017-12-12 23:08:22 -08:00
Dalton Hubble
165396d6aa
Update Kubernetes from v1.8.4 to v1.8.5
2017-12-09 21:28:31 -08:00
Vincent Palmer
ce49a93d5d
Fix issue with etcd-member failing to resolve peers
...
* When restarting masters, `etcd-member.service` may fail to lookup peers if
/etc/resolv.conf hasn't been populated yet. Require the wait-for-dns.service.
2017-12-09 20:12:49 -08:00
Dalton Hubble
5f5eec1175
Update bootkube and terraform-render-bootkube to v0.9.0
2017-12-01 22:27:48 -08:00
Dalton Hubble
5308fde3d3
Add Kubernetes certification badge
2017-11-29 19:26:49 -08:00
Dalton Hubble
6483f613c5
Update Kubernetes from v1.8.3 to v1.8.4
2017-11-28 21:52:11 -08:00
Dalton Hubble
56c6bf431a
Update terraform-render-bootkube for Kubernetes v1.8.4
...
* Update hyperkube from v1.8.3 to v1.8.4
* Remove flock from bootstrap-apiserver and kube-apiserver
* Remove unused critical-pod annotations in manifests
* Use service accounts for kube-proxy and pod-checkpointer
* Update Calico from v2.6.1 to v2.6.3
* Update flannel from v0.9.0 to v0.9.1
* Remove Calico termination grace period to prevent calico
from getting stuck for extended periods
* https://github.com/poseidon/terraform-render-bootkube/pull/29
2017-11-28 21:42:26 -08:00
Dalton Hubble
5f6b0728c5
Update bootkube and terraform-render-bootkube to v0.8.2
2017-11-10 20:01:37 -08:00
Dalton Hubble
d774c51297
Update Kubernetes from v1.8.2 to v1.8.3
2017-11-08 23:34:19 -08:00
Dalton Hubble
f6a8fb363e
Remove deprecated kubelet --require-kubeconfig flag
...
* https://github.com/kubernetes/kubernetes/pull/40050
2017-11-08 23:34:19 -08:00
Dalton Hubble
ea1efb536a
Remove old firewall rule for bootstrap self-hosted etcd
2017-11-08 00:15:20 -08:00
Dalton Hubble
ccc832f468
Add firewall rule to allow apiserver to proxy other controller kubelets
...
* Prometheus proxies through the apiserver to scrape kubelets
* In multi-controller setups, an apiserver must be able to scrape
kubelets (10250) on other controllers
2017-11-06 01:03:53 -08:00
Dalton Hubble
90f8d62204
Add firewall rules to allow prometheus to reach node-exporter
...
* node_exporter service endpoints run on hostNetwork port 9100
* Re-evaluate after https://github.com/kubernetes-incubator/bootkube/pull/711
2017-11-06 01:03:53 -08:00
Dalton Hubble
af5c413abf
Focus controller ELB on load balancing apiservers
...
* ELB distributing load across controllers is no longer the mechanism
used to SSH to instances to distribute secrets
* Focus the ELB on load balancing across apiserver and edit the HTTP
health check to an SSL:443 check
2017-11-06 01:03:53 -08:00
Dalton Hubble
168c487484
Remove mention of self-hosted etcd, its deprecated
2017-11-06 01:03:53 -08:00
Dalton Hubble
805dd772a8
Run etcd cluster on-host, across controllers on AWS
...
* Change controllers ASG to heterogeneous EC2 instances
* Create DNS records for each controller's private IP for etcd
* Change etcd to run on-host, across controllers (etcd-member.service)
* Reduce time to bootstrap a cluster
* Deprecate self-hosted-etcd on the AWS platform
2017-11-06 01:03:53 -08:00
Dalton Hubble
878f5a3647
Bump bootkube and terraform-render-bootkube to v0.8.1
...
* Use the v0.8.1 tagged terraform-render-bootkube module
* Use the v0.8.1 quay.io/coreos/bootkube image to bootstrap
2017-10-28 12:50:37 -07:00
Dalton Hubble
34ec7e9862
Relax pessimistic constraints on 1.0+ providers
...
* Constrains ~> 1.0 means users can use 1.0.1, 1.1, but not 2.0
* https://www.terraform.io/docs/configuration/terraform.html
2017-10-25 23:27:28 -07:00
Dalton Hubble
f6c6e85f84
Require minimum Terraform and plugin versions
...
* Bump minimum Terraform version to v0.10.4
* Allow minor version updates for 1.0+ plugins
* Fix versions for plugins which are pre-1.0
2017-10-25 23:00:31 -07:00
Dalton Hubble
60bc8957c9
Update Kubernetes from v1.8.1 to v1.8.2
...
* Kubernetes v1.8.2 fixes a memory leak in the v1.8.1 apiserver
* Switch to using the `gcr.io/google_containers/hyperkube` for the
on-host kubelet and shutdown drains
* Update terraform-render-bootkube manifests generation
* Update flannel from v0.8.0 to v0.9.0
* Add `hairpinMode` to flannel CNI config
* Add `--no-negcache` to kube-dns dnsmasq
2017-10-24 21:44:26 -07:00
Dalton Hubble
e4c479554c
Update AWS, DO, BM Kubernetes from v1.7.7 to v1.8.1
...
* Update from bootkube v0.7.0 to v0.8.0
* Leave Google Cloud update to a followup commit
2017-10-19 21:10:04 -07:00
Dalton Hubble
43dc44623f
Fix the terraform fmt of configs
2017-10-16 01:32:25 -07:00
Dalton Hubble
1bc25c1036
Update Kubernetes from v1.7.5 to v1.7.7
...
* Update from bootkube v0.6.2 to v0.7.0
* Use renamed terraform-render-bootkube. Renamed from
bootkube-terraform to meet Terraform Module requirements
2017-10-03 21:03:15 -07:00
Dalton Hubble
2d5a4ae1ef
Update kube-dns image to address dnsmasq vulnerability
...
* https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
2017-10-02 10:27:10 -07:00
Dalton Hubble
dd883988bd
Update from Calico v2.5.1 to v2.6.1
...
* Network policy improvements
* Update cni sidecar image from v1.10.0 to v1.11.0
* Lower log level in Calico CNI config from debug to info
2017-09-30 16:16:40 -07:00
Dalton Hubble
e0d8917573
Add LICENSE to top-level of each module
2017-09-28 20:41:19 -07:00
Dalton Hubble
b20233e05d
aws: Add Ingress ELB DNS name output as ingress_dns_name
...
* Expose the Ingress ELB DNS name so application DNS records can
be defined in Terraform to resolve to the Ingress ELB
2017-09-28 00:46:17 -07:00