kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
16,991 Commits 31 Branches 256 Tags 544 MiB
Commit Graph

2038 Commits

Author SHA1 Message Date
Kubernetes Prow Robot e5f75e03b0
Merge pull request #13199 from zetaab/addhealthcheck 
GCP API health checks
 2022-02-15 17:27:02 -08:00
Kubernetes Prow Robot bffc60202c
Merge pull request #13113 from hierynomus/issue-12925 
Allow PrefixList for sshAccess and kubernetesApiAccess
 2022-02-15 07:20:03 -08:00
Jeroen van Erp 255a0322c9
Allow PrefixList for sshAccess and kubernetesApiAccess 
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
 2022-02-15 14:37:28 +01:00
srikiz 97a3ef1566 Initial changes for vpc 
More changes for do vpc

some more minor updates

Fix PrivateIP check

Bazel fixes

Minor changes for vpc listing

Minor fixes for DO VPC

Add delete vpc logic

More fixes for vpc usage with gossip based clusters

Fix minor comments in code

Fix mock DO interface to use missing functions

Another fix for mock cloud do for missing interface function

incorporate review comments

incorporate review comments
 2022-02-15 17:07:09 +05:30
Ciprian Hacman 5746093297 Install contained from the release package 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-02-14 11:27:26 +02:00
Ole Markus With 8b71cedccc Do not enable graceful shutdown if k8s version < 1.21 2022-02-12 19:13:52 +01:00
Ole Markus With 65c3a63d5d KCM should not run with leader migraton when aws ccm is enabled 
AWS CCM is enabled by default in k8s 1.24, and KCM builder is now aware of that
 2022-02-12 11:35:30 +01:00
Ole Markus With 2625264fe5 Add support for graceful node shutdown 
Update docs/cluster_spec.md

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
 2022-02-11 20:51:02 +01:00
Kubernetes Prow Robot 95fc0ac5b8
Merge pull request #13212 from olemarkus/irsa-119 
Fix irsa for k8s < 1.20
 2022-02-09 12:25:49 -08:00
Ole Markus With 74e9a6cd18 Fix irsa for k8s < 1.20 2022-02-09 08:52:06 +01:00
Kubernetes Prow Robot 147052818b
Merge pull request #13203 from olemarkus/csi-featuregates 
Fix CSI migration feature gates
 2022-02-07 21:36:53 -08:00
Jiahui Feng b1dde24433 always enable Leader Election 
for openstack CCM.
 2022-02-07 15:31:21 -08:00
Ciprian Hacman f6d2502b85 Update containerd to v1.6.0-rc.3 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-02-08 20:03:10 +02:00
Jiahui Feng c57ed0c053 fix KCM logLevel not honored. 2022-02-07 14:34:35 -08:00
Jesse Haka 3e505a559e add missing import 2022-02-07 21:35:01 +02:00
Jesse Haka 180c3ae475
Update pkg/model/gcemodel/api_loadbalancer.go 
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
 2022-02-07 21:32:05 +02:00
Kubernetes Prow Robot 70f3a2ec7f
Merge pull request #13187 from jiahuif-forks/feature/enable-leader-election 
Always enable Leader Election for cloud-controller-manager
 2022-02-05 06:30:50 -08:00
Ole Markus With 66e3202f34 Fix CSI migration feature gates 
We had a bug for KCM feature gate, and the scheuler and apiserver gate was missing entirely.
 2022-02-04 15:29:28 +01:00
Kubernetes Prow Robot 2fbc3e0671
Merge pull request #13198 from hakman/containerd-1.6.0-rc.2 
Update containerd to v1.6.0-rc.2
 2022-02-03 18:28:11 -08:00
Jesse Haka d3fac0c1be GCP API health checks 2022-02-03 21:02:21 +02:00
Ciprian Hacman b961e03296 Update containerd to v1.6.0-rc.2 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-02-03 19:31:16 +02:00
justinsb 4f89c2e689 Update expected test output for etcd-manager bump 2022-02-03 11:21:54 -05:00
justinsb 97b7b90226 Update to etcd-manager v3.0.20220203 
Relevant changes:

* Only emit GOMAXPROCS if non-zero [justinsb](https://github.com/justinsb) [284](https://github.com/kubernetes-sigs/etcdadm/pull/284)
* Set ETCD_STRICT_RECONFIG_CHECK [justinsb](https://github.com/justinsb) [286](https://github.com/kubernetes-sigs/etcdadm/pull/286)
* environment: ignore empty lines when converting to map [justinsb](https://github.com/justinsb) [285](https://github.com/kubernetes-sigs/etcdadm/pull/285)
* Fix ipv6 detection [olemarkus](https://github.com/olemarkus) [291](https://github.com/kubernetes-sigs/etcdadm/pull/291)
* Test for nil in to not found check [olemarkus](https://github.com/olemarkus) [292](https://github.com/kubernetes-sigs/etcdadm/pull/292)
 2022-02-03 11:21:09 -05:00
Ole Markus With 6327cc378f Fix etcd-manager for ipv6 2022-02-03 12:59:26 +01:00
Jiahui Feng 0dfa8614b1 always enable Leader Election 
for GCP cloud-controller-manager
 2022-02-02 11:40:57 -08:00
Jiahui Feng d4b5742b5d always enable Leader Election 
for AWS cloud-controller-manager
 2022-02-02 11:40:34 -08:00
Ole Markus With af4d69cab3 Use etcd-manager pre-release until final release has been cut 2022-02-02 13:10:32 +01:00
Ole Markus With 994588c0fd Bump etcd-manager to v3.0.20220128 2022-01-30 07:13:32 +01:00
Kubernetes Prow Robot 3b8727de06
Merge pull request #13143 from olemarkus/ccm-bump-123 
Bump CCM images
 2022-01-21 07:45:59 -08:00
Kubernetes Prow Robot c9ad543dea
Merge pull request #13096 from zetaab/poolmonitor 
OpenStack - Add loadbalancer pool monitor to API LB
 2022-01-21 04:49:58 -08:00
Ole Markus With 71a144136e Bump CCM images 2022-01-21 13:24:40 +01:00
Kubernetes Prow Robot ba837c0680
Merge pull request #13135 from olemarkus/metrics-server-bump-123 
Bump metrics-server to 0.6.0 and enable HA mode
 2022-01-21 01:27:59 -08:00
Ole Markus With 59dc424eae Bump metrics-server to 0.6.0 and enable HA mode 2022-01-21 09:28:50 +01:00
Kubernetes Prow Robot fd242709f3
Merge pull request #12911 from olemarkus/tag-on-create 
Tag on create for remaining CCM privileges
 2022-01-21 00:11:59 -08:00
Ole Markus With 9d476c0e9c Add CreateSecurityGroup permission for vpcs 2022-01-20 17:49:36 +01:00
Ole Markus With 666cf710a2 Push partition into the policy struct 2022-01-20 17:49:36 +01:00
Ole Markus With 0a082fed12 Require tag on create for external AWS CCM 2022-01-20 15:32:46 +01:00
Jesse Haka 0beb036d83 expose external ccm metrics for OpenStack 2022-01-20 15:22:30 +02:00
Ciprian Hacman 68b4611066 Clean up kubelet networking flags for dockershim 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-01-19 17:36:18 +02:00
Ciprian Hacman bf82a8f260 Update pause image to v3.6 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-01-19 13:00:36 +02:00
Kubernetes Prow Robot 4eb54f2260
Merge pull request #13114 from olemarkus/nodeup-describe-regions 
Add DescribeRegions to nodeup privs
 2022-01-18 22:14:05 -08:00
Kubernetes Prow Robot fda6210e29
Merge pull request #13104 from olemarkus/tag-on-create-func 
Create helper function for ec2 create/tag-on-create IAM permissions
 2022-01-18 19:30:06 -08:00
Ole Markus With 3f265a43bb Remove networking flags as of k8s 1.24 2022-01-18 22:15:16 +01:00
Kubernetes Prow Robot 85732b4c4d
Merge pull request #13030 from johngmyers/v6-topology 
Use IPv6-only subnets for worker nodes in private IPv6 topology
 2022-01-18 10:58:40 -08:00
Jesse Haka 6b32f79c18 OpenStack - Add loadbalancer pool monitor to API LB 2022-01-18 12:10:47 +02:00
Ole Markus With b80488906f Add DescribeRegions to nodeup privs 2022-01-17 09:34:29 +01:00
Kubernetes Prow Robot 7e645187bc
Merge pull request #13110 from olemarkus/no-dns-irsa-on-gossip 
Do not create an IAM role for dns-controller on gossip clusters
 2022-01-16 11:29:28 -08:00
Kubernetes Prow Robot b82a5d917e
Merge pull request #13093 from zetaab/fixmaster 
fix ipv4+ipv6 sec groups/listeners in OpenStack
 2022-01-16 03:37:27 -08:00
Ole Markus With 0ef596dd49 Do not create an IAM role for dns-controller on gossip clusters 2022-01-16 10:31:11 +01:00
Ole Markus With f4e538508f Create helper function for ec2 create/tag-on-create IAM permissions 2022-01-14 18:41:28 +01:00
Ciprian Hacman 678366b916 Update containerd to v1.6.0-rc.0 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-01-13 07:39:37 +02:00
Jesse Haka fbb8b1ff08 make gazelle 2022-01-12 15:13:08 +02:00
Jesse Haka acdca486e7 fix ipv4+ipv6 sec groups/listeners in OpenStack 2022-01-12 15:11:51 +02:00
Ciprian Hacman 3f6db14e89 Update containerd to v1.6.0-beta.5 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-01-07 10:18:10 +02:00
John Gardiner Myers 5385381633 Use IPv6-only subnets for worker nodes in private IPv6 topology 2022-01-06 21:00:00 -08:00
Kubernetes Prow Robot af7e6a4aeb
Merge pull request #12983 from zetaab/feature/drainos 
Drain OpenStack loadbalancers
 2022-01-03 02:23:00 -08:00
John Gardiner Myers d5ac8862d5 Release 1.24.0-alpha.2 2022-01-01 10:35:11 -08:00
John Gardiner Myers 4d4a4a9e01 Use latest GCP CCM for k8s 1.24 2021-12-31 17:31:12 -08:00
justinsb 45ad8b50ae Enhance AddHostPathMapping to support a fluent style 
This allows for the helper to be used in more places.
 2021-12-31 13:26:12 -05:00
Jesse Haka b88d110f58 Drain OpenStack loadbalancers 2021-12-31 13:16:02 +02:00
Ole Markus With ea9d0de847 Handle default in templating instead of ig population 2021-12-30 09:01:43 +01:00
Ole Markus With dd06cd337f Bump Cluster Autoscaler and update manifest 2021-12-29 18:06:27 +01:00
John Gardiner Myers dae281d30e Migrate to GCE CCM in k8s 1.24 2021-12-28 19:33:07 -08:00
Jiahui Feng f3ca669141 generated: ./hack/update-bazel.sh 2021-12-20 17:19:34 -08:00
Jiahui Feng 733f4d524f external CCM for GCE 2021-12-20 17:15:17 -08:00
justinsb 93a6871e9b gce: don't set per-IG permissions when using shared account 
If we're using a cluster-level service-account, we shouldn't try to
set bucket permissions on a per-IG level.

For compatibility with the existing behavior, we simply don't set any
permissions in this case.
 2021-12-28 10:10:16 -05:00
Ole Markus With b09241122f Support specifying instance requirements per IG 
Update docs/instance_groups.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
 2021-12-24 21:19:58 +01:00
John Gardiner Myers f9071dd0d5 Allow IPv6-only subnets 2021-12-23 19:50:46 -08:00
Kubernetes Prow Robot 2f31054e19
Merge pull request #13007 from hakman/skip_non-masquerade-cidr 
Use kubelet --non-masquerade-cidr only for Docker with kubenet
 2021-12-21 18:49:36 -08:00
justinsb 994ac19b42 Use fi.Keyset instead of passing tasks around 
Using a task leads to layering complexity.  We could introduce a new
type, but fi.Keyset is the type we seem to want.

(We could move Keyset out of fi, but we don't need to yet)

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
 2021-12-20 23:24:32 -05:00
justinsb e8ddfa4328 Update test data for bash return change 2021-12-20 10:12:07 -05:00
justinsb fdf412cdf5 nodeup bash script: use explicit return code 
In bash, `return` returns the exit code of the last statement.  Being
explicit here is safer, and I believe in the first case (the cached
download) the value was actually incorrect.
 2021-12-20 10:08:06 -05:00
Ole Markus With 00f8808ab1 Log the specific yaml segment that fails. Also remove redundant full manifest logging 2021-12-20 15:04:52 +01:00
Ciprian Hacman cb6d424675 Use kubelet --non-masquerade-cidr only for Docker with kubenet 2021-12-20 08:47:02 +02:00
John Gardiner Myers 3314c18e89 Support creating dualstack internal NLBs 2021-12-19 21:52:56 -08:00
Kubernetes Prow Robot 7ab4f43500
Merge pull request #12864 from johngmyers/rbn-subnet 
Set Resource Based Naming on managed subnets
 2021-12-19 21:03:25 -08:00
Kubernetes Prow Robot 43027b9998
Merge pull request #12988 from justinsb/gce_use_per_ig_serviceaccounts 
gce: use per InstanceGroup serviceaccounts
 2021-12-18 04:25:24 -08:00
justinsb e2c28b062b Refactor nodeup script to avoid action-at-a-distance 2021-12-17 18:33:44 -05:00
justinsb 0e1bbd58bd Avoid double-encoding templates 
We were previously passing the template (with placeholders) through
MIME encoding.  This seems like it might fail rarely in
hard-to-understand ways.
 2021-12-17 16:28:09 -05:00
justinsb 8b3372ec76 Need to truncate gce serviceaccounts to max 30 characters 2021-12-17 12:57:14 -05:00
justinsb 2f1ce3fa14 Move string truncation to its own package 2021-12-17 12:57:14 -05:00
justinsb 746f886718 gce: use per instancegroup serviceaccounts 
We no longer set the cloudconfig serviceaccount on new clusters, and
instead use a per-IG setting if this is not set.
 2021-12-17 12:57:14 -05:00
Kubernetes Prow Robot 8019c88b47
Merge pull request #12978 from justinsb/gce_use_serviceaccount_task 
gce: Use ServiceAccount task when building model
 2021-12-15 08:49:52 -08:00
justinsb 63e3d98443 gce: Use ServiceAccount task when building model 
The next step towards supporting custom ServiceAccounts per IG
 2021-12-15 11:08:51 -05:00
Ciprian Hacman 991eb70c71 Update containerd to v1.6.0-beta.4 2021-12-15 08:33:30 +02:00
Kubernetes Prow Robot 424452a855
Merge pull request #12906 from olemarkus/karpenter 
Support Karpenter
 2021-12-14 13:58:50 -08:00
Ole Markus With 0a6e329477 Use internal-elb as karpenter subnet selector 2021-12-13 21:11:56 +01:00
Ole Markus With b785965c50 Rename InstanceManager to Manager 2021-12-13 09:14:24 +01:00
Ole Markus With 0cfea49250 Do not expose the policy actions sets out of package 2021-12-13 09:14:20 +01:00
Robbie Lankford 88a9d50e73
fix ineffectual assignments 2021-12-12 18:16:46 -06:00
Ole Markus With d4ec7cc7e0 Make kops get instances work with karpenter 2021-12-12 19:33:41 +01:00
Ole Markus With 794cb72112 Karpenter addon 
Constrain the instance types to what is supported by the AMI

Add taints and label to karpenter provisioner

Add instance types to karpenter provisioner
 2021-12-12 19:33:41 +01:00
John Gardiner Myers a0736b3c29 Remove support for Aliyun/Alibaba Cloud 2021-12-11 21:49:13 -08:00
John Gardiner Myers c5e1dea184 Remove code for no-longer-supported k8s version 2021-12-11 16:30:51 -08:00
Ole Markus With 2088849768 Do not set insecure port on k8s 1.20+ 2021-12-11 12:44:56 +01:00
Ciprian Hacman f5f35ab755
Release 1.24.0-alpha.1 (#12928) 2021-12-11 00:01:57 -08:00
Ciprian Hacman 473018f64f
Release 1.23.0-beta.1 (#12924) 2021-12-10 22:31:58 -08:00
John Gardiner Myers fe324c84b5 Upgrade node-cache to 1.21.3 2021-12-06 21:10:04 -08:00
Kubernetes Prow Robot e146bb4334
Merge pull request #12881 from heybronson/enable-conn-draining 
enable connection-draining for aws classic lb
 2021-12-05 21:18:33 -08:00
John Gardiner Myers 9f9316a921 Set Resource Based Naming on managed subnets 2021-12-05 17:42:29 -08:00