Ciprian Hacman
9d485d95ef
Release 1.24.5 ( #14662 )
2022-11-24 22:00:05 -08:00
Ole Markus With
53e29767f0
Fix pdb for identity webhook
...
Also removing namespace from non-namespaced resource
2022-11-21 12:39:48 -08:00
Bronson Mirafuentes
895e7cd33a
use sprig join for template functions
2022-11-15 13:18:08 -08:00
Ciprian Hacman
b3c13ea1d5
Update Canal to v3.23.5 for k8s 1.22+
2022-11-15 06:18:20 +02:00
Ciprian Hacman
e3036bf09f
Update Calico to v3.23.5 for k8s 1.22+
2022-11-15 06:18:15 +02:00
Moshe Shitrit
1254f60785
add a condition for the aws-cni ClusterRole based on the value of 'ANNOTATE_POD_IP' env
2022-11-08 18:29:42 -05:00
Moshe Shitrit
d6012aea5e
use the same affinity config for coredns-autoscaler deployment as for main coredns deployment
2022-11-07 14:06:12 -05:00
Moshe Shitrit
cf1cfa3f08
use the same tolerations config for coredns-autoscaler deployment as for main coredns deployment
2022-11-07 14:03:06 -05:00
Ciprian Hacman
1570e7ed40
Update Canal to v3.23.4 for k8s 1.22+
2022-10-31 06:07:59 +02:00
Ciprian Hacman
27627924c7
Update Calico to v3.23.4 for k8s 1.22+
2022-10-31 06:07:59 +02:00
Ciprian Hacman
0dbfa8f757
Update Calico to v3.21.6 for k8s 1.16+
2022-10-31 06:07:59 +02:00
Ciprian Hacman
83d5fc052c
Release 1.24.4 ( #14429 )
2022-10-18 00:59:19 -07:00
Ole Markus With
dadb6495cd
Release 1.24.3 ( #14279 )
2022-09-16 00:03:17 -07:00
Moshe Shitrit
0ee4efae70
bump aws-cni to version 1.11.4
2022-09-13 14:06:17 +03:00
Moshe Shitrit
a24c16e00e
bump aws cni to 1.11.13
2022-09-13 14:06:16 +03:00
Anthony Hausman
dd4af99ea2
aws-node-termination-handler: Add option to fetch node name through Kubernetes node `.spec.providerID`
...
Fetch node name through Kubernetes node `.spec.providerID` since Kops use InstanceID as node name.
- 701db81ccf
2022-09-07 19:25:47 +02:00
Justin Santa Barbara
422bfff775
Release 1.24.2 ( #14219 )
...
Tag release 1.24.2
2022-09-01 08:25:06 -07:00
Kubernetes Prow Robot
bae14a9d4e
Merge pull request #14209 from hakman/automated-cherry-pick-of-#14205-upstream-release-1.24
...
Automated cherry pick of #14205 : Calico: Work around host port/conntrack problem
2022-09-01 07:35:07 -07:00
Ole Markus With
8965683021
Bump cert-manager to 1.8.2
2022-08-31 13:53:02 +02:00
Steven E. Harris
9105368a41
Calico: Work around host port/conntrack problem
...
In Calico's released versions, when using the eBPF data plane,
containers using host ports cannot respond to connection attempts
correctly. These container receive the packets from the client
forwarded after DNAT, but when they reply, there is no conntrack entry
for the would-be connection, so netfilter drops the reply packets,
preventing the connection from completing. The client never receives
the reply packets. The conntrack entry is missing because Calico
mistakenly attempts to optimize it away.
Work around the problem by disabling the Calico Felix program's
"BPFHostConntrackBypass" feature. This is a temporary measure until
the Calico maintainers can improve this feature to better handle host
port traffic, preserving these conntrack entries as intended.
2022-08-31 09:55:45 +03:00
Ole Markus With
1d0c679577
Add deployment-specific selectors to nth pdb
...
If not, when migrating from imds-mode to sqs-mode, the selectors will match the daemonset pods, which doesn't work with pdb
2022-08-12 21:09:55 +02:00
ddelange
3882c93277
Bump nvidia device plugin to 0.12.0
2022-08-09 09:24:06 +02:00
Nicolas Sterchele
32b3ae8ade
aws-ebs-csi-driver: remove preStop hook
...
The hook can cause issue on execution, like
```
Exec lifecycle hook ([/bin/sh -c rm -rf
/registration/ebs.csi.aws.com-reg.sock /csi/csi.sock]) for Container
"node-driver-registrar" in Pod
"ebs-csi-node-96jbk_ebs-csi(a82c6d41-bd2b-42dd-b092-e3acd4c43b62)"
failed - error: command '/bin/sh -c rm -rf
/registration/ebs.csi.aws.com-reg.sock /csi/csi.sock' exited with 126: ,
message: "OCI runtime exec failed: exec failed: container_linux.go:370:
starting container process caused: exec: \"/bin/sh\": stat /bin/sh: no
such file or directory: unknown\r\n"
```
Moreover, it has been deleted from upstream driver, see this patch
6e59160eea
Signed-off-by: Nicolas Sterchele <foss@sterchelen.net>
2022-08-03 09:53:44 +03:00
Ciprian Hacman
0e1f09cd30
Release 1.24.1 ( #14071 )
2022-07-29 11:49:13 -07:00
Peter Rifel
218a65971b
Remove namespaces from cluster-scoped resources in CNI manifests
2022-07-29 11:18:01 +03:00
Ciprian Hacman
0601f3cd62
Update Canal to v3.23.3
2022-07-20 11:26:31 +03:00
Ciprian Hacman
a98838b872
Update Calico to v3.23.3
2022-07-20 11:26:31 +03:00
Ciprian Hacman
f33d526937
Update Calico to v3.23.2
2022-07-20 11:19:42 +03:00
Peter Rifel
e159fbe0d5
Upgrade DO CSI driver to 4.2.0
2022-07-19 09:22:11 +03:00
Ciprian Hacman
cf1f01556f
Add option to set number of replicas for pod-identity-webhook
2022-07-17 05:43:56 +03:00
Peter Rifel
9c51b9512a
Upgrade aws-iam-authenticator to v0.5.9
2022-07-14 16:09:10 -06:00
Ciprian Hacman
75d124852a
Use Calico v3.23 for Kubernetes 1.22+
2022-07-12 05:44:45 +03:00
Ciprian Hacman
59360d774d
Release 1.24.0 ( #13957 )
2022-07-07 23:13:46 -07:00
Kubernetes Prow Robot
79d39eb17f
Merge pull request #13953 from hakman/automated-cherry-pick-of-#13939-upstream-release-1.24
...
Automated cherry pick of #13939 : Bump EBS CSI driver to 1.8.0
2022-07-07 09:47:41 -07:00
Ciprian Hacman
cbb049b881
Bump EBS CSI driver to 1.8.0
2022-07-07 18:14:45 +03:00
ederst
37de1a353e
Use csi-snapshotter for OS only when the controller is enabled
2022-07-07 16:40:18 +02:00
Ole Markus With
73b4fde64b
Revert "Add back the metrics-server 443 port with a new name"
...
This reverts commit 6d0cc427f6 .
2022-07-02 12:42:11 +02:00
Reilly Brogan
05fe75fa12
Update Cilium to 1.11.6
2022-07-01 19:40:55 +02:00
Kubernetes Prow Robot
d4c9fe99bf
Merge pull request #13923 from hakman/automated-cherry-pick-of-#13922-upstream-release-1.24
...
Automated cherry pick of #13922 : Mount /etc/hosts from host for CoreDNS
2022-06-30 20:43:22 -07:00
Kubernetes Prow Robot
919c16f932
Merge pull request #13928 from olemarkus/automated-cherry-pick-of-#13926-origin-release-1.24
...
Automated cherry pick of #13926 : Make IRSA webhook configure apps to use regional STS and set
2022-06-30 10:50:07 -07:00
Ole Markus With
fbf3304fce
Make it possible to enable the shield addon for LBC
2022-06-30 16:42:08 +02:00
Ole Markus With
6197c4d510
Make IRSA webhook configure apps to use regional STS and set the default region on them
2022-06-30 14:26:34 +02:00
Ciprian Hacman
167ea9aab2
Mount /etc/hosts from host for CoreDNS
2022-06-30 14:08:02 +03:00
Ole Markus With
3bcfdaf7d6
Release 1.24.0-beta.3
2022-06-26 09:13:46 +02:00
Ciprian Hacman
32208750b8
Disable removal or CCM leader migration
2022-06-26 07:05:42 +03:00
Ciprian Hacman
9099edbfc4
Completely remove core addons
2022-06-26 06:52:19 +03:00
Ciprian Hacman
b1afa07004
Move kube-dns service account to kube-dns addon
2022-06-26 06:52:19 +03:00
Ciprian Hacman
c781d213e0
Remove unneeded kube-proxy service account
2022-06-26 06:52:19 +03:00
Ciprian Hacman
766d77818e
Don't try to manage the kube-system namespace
2022-06-26 06:52:17 +03:00
Ole Markus With
aca869b7b5
Do not run CAS on spot instances
2022-06-21 17:11:38 +02:00