Merge pull request #554 from weaveworks/v0.3.0-prep

Change CHANGELOG for 0.3.0

CHANGELOG.md

@@ -1,3 +1,25 @@
+## 0.3.0 (2017-05-03)
+
+Update to support newer Kubernetes (1.6.1).
+
+### Potentially breaking changes
+
+- Support for Kubernetes' ReplicationControllers is deprecated; please
+  update these to Deployments, which do the same job but much better
+  (see
+  https://kubernetes.io/docs/user-guide/replication-controller/#deployment-recommended)
+- The service<->daemon protocol is versioned. The daemon will now
+  crash-loop, printing a warning to the log, if it tries to connect to
+  the service with a deprecated version of the protocol.
+
+### Improvements
+
+-   Updated the version of `kubectl` bundled in the Flux daemon image,
+    to work with newer (>1.5) Kubernetes.
+-   Added `fluxctl save` command for bootstrapping a repo from an existing cluster
+-   You can now record a message and username with each release, which
+    show up in notifications
+
 ## 0.2.0 (2017-03-16)
 
 More informative and helpful UI.

deploy/standalone/flux-account.yaml

@@ -0,0 +1,38 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  namespace: default
+  labels:
+    name: flux
+  name: flux
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  namespace: default
+  labels:
+    name: flux
+  name: flux
+rules:
+  - apiGroups: ['*']
+    resources: ['*']
+    verbs: ['*']
+  - nonResourceURLs: ['*']
+    verbs: ['*']
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  namespace: default
+  labels:
+    name: flux
+  name: flux
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: flux
+subjects:
+  - kind: ServiceAccount
+    name: flux
+    namespace: default

deploy/standalone/flux-deployment.yaml

@@ -19,6 +19,7 @@ spec:
       labels:
         name: flux
     spec:
+      # serviceAccountName: flux
       # Give fluxsvc up to 10 minutes grace to finish jobs in progress and exit
       # cleanly. Service is available during this time, as long as we don't
       # stop too many replicas at once.

site/installing/standalone.md

@@ -52,6 +52,22 @@ runs the Flux service and the Flux daemon in a single pod.
 kubectl create -f flux-deployment.yaml
 ```
 
+#### Note for Kubernetes >=1.6 with role-based access control (RBAC)
+
+You will need to provide fluxd with a service account which can access
+the namespaces you want to use Flux with. To do this, consult the
+example service account given in
+[flux-account.yaml](../../deploy/standalone/flux-account.yaml) (which
+puts essentially no constraints on the account) and the
+[RBAC documentation](https://kubernetes.io/docs/admin/authorization/rbac/),
+and create a service account in whichever namespace you put fluxd
+in. You may need to alter the `namespace: default` lines, if you adapt
+the example.
+
+You will need to explicitly tell fluxd to use that service account by
+uncommenting and possible adapting the line `# serviceAccountName:
+flux` in the file `fluxd-deployment.yaml` before applying it.
+
 ### Flux service
 
 To make the pod accessible to the command-line client `fluxctl`, you