3 Commits

Author	SHA1	Message	Date
Dalton Hubble	72c94f1c6a	Add Kubelet System Container and bootkube bootstrap ... * First semi-working cluster using 30.307-metal-bios * Enable CPU, Memory, and BlockIO accounting * Mount /var/lib/kubelet with `rshare` so mounted tmpfs Secrets (e.g. serviceaccount's) are visible within appropriate containers * SELinux relabel /etc/kubernetes so install-cni init containers can write the CNI config to the host /etc/kubernetes/net.d * SELinux relabel /var/lib/kubelet so ConfigMaps can be read by containers * SELinux relabel /opt/cni/bin so install-cni containers can write CNI binaries to the host * Set net.ipv4_conf.all.rp_filter to 1 (not 2, loose mode) to satisfy Calico requirement * Enable the QoS cgroup hierarchy for pod workloads (kubepods, burstable, besteffort). Mount /sys/fs/cgroup and /sys/fs/cgroup/systemd into the Kubelet. Its still rather racy whether Kubelet will fail on ContainerManager Delegation	2019-07-18 00:55:22 -07:00
Dalton Hubble	aab14c5573	Run etcd-member.service across controllers ... * Running the etcd container with NOTIFY_SOCKET mounted (to use systemd Type=notify) causes podman to hang so for now just use exec * https://github.com/opencontainers/runc/pull/1807	2019-07-18 00:55:22 -07:00
Dalton Hubble	eb92f67125	Start prototype of Fedora CoreOS on bare-metal ... * Use terraform-provider-ct v0.4.0 with Fedora CoreOS Config support (not yet released)	2019-07-18 00:55:22 -07:00