Commit Graph

1433 Commits

Author SHA1 Message Date
Ciprian Hacman 9d485d95ef
Release 1.24.5 (#14662) 2022-11-24 22:00:05 -08:00
Ole Markus With 53e29767f0 Fix pdb for identity webhook
Also removing namespace from non-namespaced resource
2022-11-21 12:39:48 -08:00
Bronson Mirafuentes 895e7cd33a use sprig join for template functions 2022-11-15 13:18:08 -08:00
Ciprian Hacman b3c13ea1d5 Update Canal to v3.23.5 for k8s 1.22+ 2022-11-15 06:18:20 +02:00
Ciprian Hacman e3036bf09f Update Calico to v3.23.5 for k8s 1.22+ 2022-11-15 06:18:15 +02:00
Moshe Shitrit 1254f60785 add a condition for the aws-cni ClusterRole based on the value of 'ANNOTATE_POD_IP' env 2022-11-08 18:29:42 -05:00
Moshe Shitrit d6012aea5e use the same affinity config for coredns-autoscaler deployment as for main coredns deployment 2022-11-07 14:06:12 -05:00
Moshe Shitrit cf1cfa3f08 use the same tolerations config for coredns-autoscaler deployment as for main coredns deployment 2022-11-07 14:03:06 -05:00
Ciprian Hacman 1570e7ed40 Update Canal to v3.23.4 for k8s 1.22+ 2022-10-31 06:07:59 +02:00
Ciprian Hacman 27627924c7 Update Calico to v3.23.4 for k8s 1.22+ 2022-10-31 06:07:59 +02:00
Ciprian Hacman 0dbfa8f757 Update Calico to v3.21.6 for k8s 1.16+ 2022-10-31 06:07:59 +02:00
Ciprian Hacman 83d5fc052c
Release 1.24.4 (#14429) 2022-10-18 00:59:19 -07:00
Ole Markus With dadb6495cd
Release 1.24.3 (#14279) 2022-09-16 00:03:17 -07:00
Moshe Shitrit 0ee4efae70 bump aws-cni to version 1.11.4 2022-09-13 14:06:17 +03:00
Moshe Shitrit a24c16e00e bump aws cni to 1.11.13 2022-09-13 14:06:16 +03:00
Anthony Hausman dd4af99ea2 aws-node-termination-handler: Add option to fetch node name through Kubernetes node `.spec.providerID`
Fetch node name through Kubernetes node `.spec.providerID` since Kops use InstanceID as node name.
 - 701db81ccf
2022-09-07 19:25:47 +02:00
Justin Santa Barbara 422bfff775
Release 1.24.2 (#14219)
Tag release 1.24.2
2022-09-01 08:25:06 -07:00
Kubernetes Prow Robot bae14a9d4e
Merge pull request #14209 from hakman/automated-cherry-pick-of-#14205-upstream-release-1.24
Automated cherry pick of #14205: Calico: Work around host port/conntrack problem
2022-09-01 07:35:07 -07:00
Ole Markus With 8965683021 Bump cert-manager to 1.8.2 2022-08-31 13:53:02 +02:00
Steven E. Harris 9105368a41 Calico: Work around host port/conntrack problem
In Calico's released versions, when using the eBPF data plane,
containers using host ports cannot respond to connection attempts
correctly. These container receive the packets from the client
forwarded after DNAT, but when they reply, there is no conntrack entry
for the would-be connection, so netfilter drops the reply packets,
preventing the connection from completing. The client never receives
the reply packets. The conntrack entry is missing because Calico
mistakenly attempts to optimize it away.

Work around the problem by disabling the Calico Felix program's
"BPFHostConntrackBypass" feature. This is a temporary measure until
the Calico maintainers can improve this feature to better handle host
port traffic, preserving these conntrack entries as intended.
2022-08-31 09:55:45 +03:00
Ole Markus With 1d0c679577 Add deployment-specific selectors to nth pdb
If not, when migrating from imds-mode to sqs-mode, the selectors will match the daemonset pods, which doesn't work with pdb
2022-08-12 21:09:55 +02:00
ddelange 3882c93277 Bump nvidia device plugin to 0.12.0 2022-08-09 09:24:06 +02:00
Nicolas Sterchele 32b3ae8ade aws-ebs-csi-driver: remove preStop hook
The hook can cause issue on execution, like

```
Exec lifecycle hook ([/bin/sh -c rm -rf
/registration/ebs.csi.aws.com-reg.sock /csi/csi.sock]) for Container
"node-driver-registrar" in Pod
"ebs-csi-node-96jbk_ebs-csi(a82c6d41-bd2b-42dd-b092-e3acd4c43b62)"
failed - error: command '/bin/sh -c rm -rf
/registration/ebs.csi.aws.com-reg.sock /csi/csi.sock' exited with 126: ,
message: "OCI runtime exec failed: exec failed: container_linux.go:370:
starting container process caused: exec: \"/bin/sh\": stat /bin/sh: no
such file or directory: unknown\r\n"
```

Moreover, it has been deleted from upstream driver, see this patch
6e59160eea

Signed-off-by: Nicolas Sterchele <foss@sterchelen.net>
2022-08-03 09:53:44 +03:00
Ciprian Hacman 0e1f09cd30
Release 1.24.1 (#14071) 2022-07-29 11:49:13 -07:00
Peter Rifel 218a65971b Remove namespaces from cluster-scoped resources in CNI manifests 2022-07-29 11:18:01 +03:00
Ciprian Hacman 0601f3cd62 Update Canal to v3.23.3 2022-07-20 11:26:31 +03:00
Ciprian Hacman a98838b872 Update Calico to v3.23.3 2022-07-20 11:26:31 +03:00
Ciprian Hacman f33d526937 Update Calico to v3.23.2 2022-07-20 11:19:42 +03:00
Peter Rifel e159fbe0d5 Upgrade DO CSI driver to 4.2.0 2022-07-19 09:22:11 +03:00
Ciprian Hacman cf1f01556f Add option to set number of replicas for pod-identity-webhook 2022-07-17 05:43:56 +03:00
Peter Rifel 9c51b9512a
Upgrade aws-iam-authenticator to v0.5.9 2022-07-14 16:09:10 -06:00
Ciprian Hacman 75d124852a Use Calico v3.23 for Kubernetes 1.22+ 2022-07-12 05:44:45 +03:00
Ciprian Hacman 59360d774d
Release 1.24.0 (#13957) 2022-07-07 23:13:46 -07:00
Kubernetes Prow Robot 79d39eb17f
Merge pull request #13953 from hakman/automated-cherry-pick-of-#13939-upstream-release-1.24
Automated cherry pick of #13939: Bump EBS CSI driver to 1.8.0
2022-07-07 09:47:41 -07:00
Ciprian Hacman cbb049b881 Bump EBS CSI driver to 1.8.0 2022-07-07 18:14:45 +03:00
ederst 37de1a353e Use csi-snapshotter for OS only when the controller is enabled 2022-07-07 16:40:18 +02:00
Ole Markus With 73b4fde64b Revert "Add back the metrics-server 443 port with a new name"
This reverts commit 6d0cc427f6.
2022-07-02 12:42:11 +02:00
Reilly Brogan 05fe75fa12 Update Cilium to 1.11.6 2022-07-01 19:40:55 +02:00
Kubernetes Prow Robot d4c9fe99bf
Merge pull request #13923 from hakman/automated-cherry-pick-of-#13922-upstream-release-1.24
Automated cherry pick of #13922: Mount /etc/hosts from host for CoreDNS
2022-06-30 20:43:22 -07:00
Kubernetes Prow Robot 919c16f932
Merge pull request #13928 from olemarkus/automated-cherry-pick-of-#13926-origin-release-1.24
Automated cherry pick of #13926: Make IRSA webhook configure apps to use regional STS and set
2022-06-30 10:50:07 -07:00
Ole Markus With fbf3304fce Make it possible to enable the shield addon for LBC 2022-06-30 16:42:08 +02:00
Ole Markus With 6197c4d510 Make IRSA webhook configure apps to use regional STS and set the default region on them 2022-06-30 14:26:34 +02:00
Ciprian Hacman 167ea9aab2 Mount /etc/hosts from host for CoreDNS 2022-06-30 14:08:02 +03:00
Ole Markus With 3bcfdaf7d6 Release 1.24.0-beta.3 2022-06-26 09:13:46 +02:00
Ciprian Hacman 32208750b8 Disable removal or CCM leader migration 2022-06-26 07:05:42 +03:00
Ciprian Hacman 9099edbfc4 Completely remove core addons 2022-06-26 06:52:19 +03:00
Ciprian Hacman b1afa07004 Move kube-dns service account to kube-dns addon 2022-06-26 06:52:19 +03:00
Ciprian Hacman c781d213e0 Remove unneeded kube-proxy service account 2022-06-26 06:52:19 +03:00
Ciprian Hacman 766d77818e Don't try to manage the kube-system namespace 2022-06-26 06:52:17 +03:00
Ole Markus With aca869b7b5 Do not run CAS on spot instances 2022-06-21 17:11:38 +02:00