Commit Graph

484 Commits (56f8142e24c5ff2e857ad28a52a49c5a15afdd8c)

Author SHA1 Message Date
Thomas Strömberg e1804d24ba
Merge pull request #3535 from tstromberg/runc-update
Update to opencontainers/runc HEAD as of 2019-01-15
2019-01-17 09:27:27 -08:00
Thomas Stromberg 0219c67612 Pull in opencontainers/runc#1962 by updating to runc HEAD 2019-01-16 11:06:49 -08:00
Thomas Strömberg 3aa83674a9
Merge pull request #3441 from brb/2907-no-cni-conf-by-default
Do not include the default CNI config by default
2019-01-15 17:14:20 -08:00
Thomas Strömberg 8bc8816c9f
Merge pull request #3521 from nixpanic/addons/gluster
Add a storage-provisioner-gluster addon
2019-01-15 17:08:45 -08:00
Thomas Strömberg 5d9311bcdf
Merge pull request #3190 from afbjorklund/crio
Improve the default crio-bin configuration
2019-01-15 17:02:12 -08:00
Thomas Strömberg d8f2e99076
Merge pull request #3510 from brb/enable_ipvlan_module
Enable ipvlan kernel module
2019-01-14 14:30:27 -08:00
Thomas Stromberg 666a902ba7 Add newline 2019-01-11 10:53:29 -08:00
Thomas Stromberg 5dab8fa319 Merge branch 'master' into crio-v1.13.0 2019-01-10 11:44:20 -08:00
Niels de Vos b85b6d5eeb addons: mark the last enabled storage provider as default
When a storage provider is enabled (storage-provisioner-glusterfile),
mark it "is-default" and set "is-default" to "false" in all other
StorageClasses.
2019-01-09 20:04:21 +01:00
Niels de Vos b0c7341373 addons: when enabling storage-provisioner-gluster, mark other SCs non-default
There can only be one StorageClass be marked as default. When the
storage-provisioner-gluster addon is enabled, users expect it to be the
default StorageClass.

Instead of removing the "is-default" annotation from the other
StorageClasses, set it to "false". This leaves only the "glusterfile"
StorageClass as "is-default".
2019-01-09 20:04:21 +01:00
Niels de Vos 3c3b7368f0 Add storage-provisioner-gluster addon
With this addon dynamic provisioning based on Gluster can be enabled:

    $ minikube addons enable storage-provisioner-gluster

This will deploy several pods in a new 'storage-gluster' namespace:

 - glusterfs, storage service with a 10GB sparse /srv/fake-disk.img
 - heketi, a smart Gluster volume manager
 - glusterfile-provisioner, external-storage provisioner

In addition, the StorageClass 'glusterfile' will be created. It is
currently not configured as default StorageClass, so PVCs need to refer
to the new StorageClass.
2019-01-09 20:04:21 +01:00
Martynas Pumputis 4792a62bc8 Enable ipvlan kernel module
This makes it possible to use ipvlan CNI plugins in minikube.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
2019-01-09 14:50:49 +01:00
Thomas Stromberg b2831c871e Update crio-bin to v1.13.0 2019-01-08 16:22:21 -08:00
Martynas Pumputis 1252ad9a6d Get rid of /usr/libexec/kubernetes/kubelet-plugins/net/exec/k8s.conf
As per https://github.com/kubernetes/kubernetes/pull/32151, kubelet
doesn't search for CNI configs in /usr/libexec/kubernetes/kubelet-plugins/net/exec/
by default anymore.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
2019-01-03 09:23:29 +01:00
Martynas Pumputis d982c4bf74 Do not include the default CNI config by default
Previously, minikube has been shipped with the default CNI config
(/etc/cni/net.d/k8s.conf) in its rootfs. This complicated a lot
when using a custom CNI plugin, as the default config was picked
by kubelet before the custom CNI plugin has installed its own CNI
config. So, the end result was that some Pods were attached to a
network defined in the default config, and some got managed by
the custom plugin.

This commit introduces the flag "--enable-default-cni" to
"minikube start" to trigger the provisioning of the default CNI
config.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
2019-01-03 09:23:29 +01:00
Jason Cwik 9dd74f7cf0 Fix for Minikube #3495
Change the policy for the minikube-hostpath storage class addon from
Reconcile to EnsureExists. When it's set to reconcile, it's impossible
to change the default storage class in Minikube because it will keep
setting the minikube-hostpath storageclass to default.

Ported from kubernetes/kubernetes#66235
2018-12-28 20:36:24 -06:00
minikube-bot 97076960a6 Update releases.json to include v0.32.0 2018-12-22 02:34:13 +00:00
Thomas Strömberg ad57efb4bf
Merge pull request #3476 from tstromberg/vbox-timesync
VirtualBox time cleanup: sync on boot, don't run timesyncd
2018-12-20 17:21:48 -08:00
Thomas Stromberg e4303ebb91 Disable vboxvideo and remove timesync-set-on-restore: neither work correctly w/ 5.1.x drivers in minikube 2018-12-20 13:54:57 -08:00
Thomas Stromberg 9a2600e791 Revert "Upgrade vbox from 5.1.38 to 5.2.22"
This reverts commit cbe5878ef2.
2018-12-20 11:46:54 -08:00
Jeffrey Sica 8f1b4d2882 bump dashboard version to v1.10.1 (#3466) 2018-12-19 16:38:52 -08:00
Thomas Stromberg cbe5878ef2 Upgrade vbox from 5.1.38 to 5.2.22 2018-12-17 11:59:35 -08:00
Thomas Stromberg cee128ad3a Disable timesyncd: not used in our environment 2018-12-17 11:59:23 -08:00
Thomas Stromberg c3ce6ba0ec Force vbox timesync at boot 2018-12-17 11:59:00 -08:00
priyawadhwa 1514511b7a Change restart policy on gvisor pod (#3445)
* Change restart policy on gvisor pod

Change the restart policy on the gvisor pod to Always. This way, if a
user runs

minikube addons enable gvisor
minikube stop
minikube start

when the addon manager tries to restart the gvisor pod, it will be
restarted and gvisor will start running automatically. This PR also adds an
integration test for this functionality.

* Test stop and start

* Revert test to delete

Revert test to delete for now, for some reason "stop" and then "start"
is failing both locally and in Jenkins for VirtualBox with a "panic test
timed out after 30 min" error
2018-12-11 18:39:57 -08:00
minikube-bot d7c0b48e3b Update releases.json to include v0.31.0 (#3435) 2018-12-10 09:51:51 -08:00
priyawadhwa 8f128a7d10 Enable gvisor addon in minikube (#3399)
This PR adds the code for enabling gvisor in minikube. It adds the pod
that will run when the addon is enabled, and the code for the image
which will run when this happens.

When gvisor is enabled, the pod will download runsc and the
gvisor-containerd-shim. It will replace the containerd config.toml and
restart containerd.

When gvisor is disabled, the pod will be deleted by the addon manager.
This will trigger a pre-stop hook which will revert the config.toml to
it's original state and restart containerd.
2018-12-07 15:27:22 -08:00
Thomas Stromberg bbfb8ff4cb Add schedutils for ionice (used by k8s 1.12) 2018-12-05 16:15:36 -08:00
Thomas Strömberg bc67a32a7b
Merge pull request #3332 from dlorenc/rmaddons
Remove both the CoreDNS and KubeDNS addons. Let Kubeadm install the c…
2018-12-03 17:15:06 -08:00
priyawadhwa 1c3df2dc3c Add NET_PRIO cgroup to iso (#3396)
This cgroup is required for running gvisor in minikube.
2018-12-03 14:44:00 -08:00
Fernando Diaz 49f038a902 Update Ingress-Nginx to 0.21 (#3365)
Updates the Ingress-Nginx Addon to version 0.21.
2018-11-26 14:59:53 -08:00
dlorenc 2091f8c27a
Remove both the CoreDNS and KubeDNS addons. Let Kubeadm install the correct DNS addon. 2018-11-16 14:54:44 -08:00
Thomas Stromberg f7ac166f6b crio is now in kubernetes-sigs rather than kubernetes-incubator. 2018-11-12 14:44:26 -08:00
Thomas Stromberg cfd8007243 Merge branch 'master' into crio 2018-11-07 15:06:04 -08:00
Thomas Stromberg d2ac7ae28e Upgrade to crio v1.11.8 2018-11-07 15:05:51 -08:00
Thomas Stromberg 72e596507a Merge branch 'master' into consistent_err_formatting 2018-10-19 14:08:35 -07:00
Thomas Strömberg e77d95a638
Merge pull request #3223 from AkihiroSuda/docker1806
Upgrade Docker, from 17.12.1-ce to 18.06.1-ce
2018-10-17 14:47:35 -07:00
Thomas Stromberg f24c02319e Update releases.json to v0.30.0 2018-10-05 16:18:40 -07:00
Akihiro Suda 8edef67226 Upgrade Docker, from 17.12.1-ce to 18.06.1-ce
Docker >= 18.06 is needed for securityContext.procMount (Kubernetes >= 1.12)

See kubernetes/kubernetes#64283 and docker/docker-ce@67fe100

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-06 06:17:01 +09:00
Thomas Strömberg 583937ac3e
Merge pull request #3210 from tstromberg/dashboard_on_demand
Use "kubectl proxy" instead of a NodePort to expose the dashboard.
2018-10-04 14:42:41 -07:00
Thomas Strömberg 36d76c72ff
Merge pull request #3183 from tstromberg/k8s_releases_json_dep
Remove refs to k8s_releases.json now that `get-k8s-versions` is gone.
2018-10-04 14:42:12 -07:00
Thomas Stromberg dc6d1bab8d Merge branch 'master' into dashboard_on_demand 2018-10-04 13:38:49 -07:00
Fernando Diaz 2ebdf5e1eb Enhance the Ingress Controller Addon (#3099)
- Updates Ingress-Controller Version to 0.19.0
- Adds Service Account for Ingress-Controller
- Adds Support for Prometheus
- Fixes bug with TCP/UDP ConfigMaps not Loading
- Adds more resource limits to default-backend
- Use new ingress class name
- Use app.kubernetes.io/xxxxxxxxxxx labels
2018-10-04 16:13:53 -04:00
Thomas Strömberg 79e95f8e67
Merge pull request #3152 from afbjorklund/cni
Upgrade cni and cni-plugins to release version
2018-10-03 21:55:07 -07:00
Thomas Strömberg 9ce572222e
Merge pull request #3195 from davidovich/ensure_dev_mounted
ensure that /dev has settled before operating
2018-10-03 21:36:55 -07:00
Thomas Stromberg ca9ca6f29b Switch the label back to k8s-app instead of app for minikube compatibility. 2018-10-03 12:57:55 -07:00
Thomas Stromberg 21776a09b5 Fix service port indentation. 2018-10-02 22:31:26 -07:00
Thomas Stromberg df54c6a5b4 Use "kubectl proxy" instead of a NodePort to expose the dashboard.
This provides an additional level of security, by enforcing host checking, applying port randomization, and requiring explicit user intent to expose the service to the host.
2018-10-02 22:25:45 -07:00
Thomas Strömberg 67d5fc8984
Merge pull request #3162 from ansiwen/upgrade-gluster
Upgrade gluster client in ISO to 4.1.5
2018-10-02 17:54:01 -07:00
Anders F Björklund da203377be Set storage driver explictly in the crio.conf
crio.conf(5) says:

   storage_driver=""
   CRIO storage driver (default is "overlay")

   Note:
   overlay and overlay2 are the same driver
2018-10-02 22:16:46 +02:00