Kubernetes Prow Robot
a61075634c
Merge pull request #12406 from johngmyers/v1alpha3
...
Create v1alpha3 apiVersion
2021-10-02 10:13:06 -07:00
Ole Markus With
8eef72d8e8
Bump CAS images
2021-10-02 09:13:22 +02:00
Ciprian Hacman
2622964491
Run hack/update-expected.sh
2021-10-02 07:07:38 +03:00
Kubernetes Prow Robot
37ac7d31a1
Merge pull request #12452 from rifelpet/skip-elb-ipv6
...
Skip load balancer test in IPv6 clusters
2021-10-01 03:59:22 -07:00
Moshe Shitrit
d451edcdfd
Update expected after aws-cni version bump
2021-10-01 00:51:20 -04:00
Peter Rifel
eeda5f927d
Skip load balancer test in IPv6 clusters
2021-09-30 15:41:47 -05:00
Kubernetes Prow Robot
8449d605bd
Merge pull request #12416 from olemarkus/channel-versions
...
Add fixed version to all addons
2021-09-30 12:21:15 -07:00
Peter Rifel
724804025b
./hack/update-expected.sh
2021-09-30 09:20:33 -05:00
Ole Markus With
e7a5437a34
Add fixed version to all addons
...
This will make also older channels trigger addon updates
2021-09-30 15:25:29 +02:00
Kubernetes Prow Robot
3dc1d25454
Merge pull request #12439 from rifelpet/nth-truncate
...
Truncate cluster name in NTH EventBridgeRules
2021-09-30 00:58:07 -07:00
Peter Rifel
3311e45767
Truncate cluster name prefix used in event bridge rules
2021-09-29 19:12:49 -05:00
Peter Rifel
83e3d3c75d
Lengthen NTH integration test cluster name
2021-09-29 19:10:04 -05:00
Kubernetes Prow Robot
dc9bf4f36c
Merge pull request #12419 from eddycharly/audiences
...
feat: add support for custom audience in aws oidc provider
2021-09-29 13:45:21 -07:00
Kubernetes Prow Robot
960c4a796d
Merge pull request #12434 from rifelpet/gce-skip
...
Skip certain e2e tests in GCE
2021-09-28 23:44:48 -07:00
Charles-Edouard Brétéché
7c8c9b9a23
feat: add support for custom audience in aws oidc provider
...
fix: missing json tags
fix: code gen
fix: switch to additional audiences
fix: oidc task
fix: add integration test
2021-09-28 22:39:56 +02:00
Kubernetes Prow Robot
b9d5e37e1f
Merge pull request #12431 from olemarkus/cilium-al2
...
Mount cgroupv2 for cilium at a custom location
2021-09-28 07:14:43 -07:00
Peter Rifel
08ad2c6765
Skip certain e2e tests in GCE
...
These tests will never work with how kOps configures GCE clusters, so skip them for now
2021-09-27 22:28:54 -05:00
Kubernetes Prow Robot
25f43e194d
Merge pull request #12428 from rifelpet/apiserver-e2e
...
Add kubetest2-kops template for testing dedicated APIServer nodes
2021-09-27 11:17:45 -07:00
Ole Markus With
39178703c8
Mount cgroupv2 for cilium at a custom location
2021-09-27 19:29:36 +02:00
Peter Rifel
cfdfb65e04
Allow api-server taint in e2e tests
2021-09-27 10:12:40 -05:00
Peter Rifel
6dd0d99f9b
Include --name in `kops toolbox template`
2021-09-27 10:12:40 -05:00
Peter Rifel
d1148bce67
Add kubetest2-kops template for testing dedicated APIServer nodes
2021-09-27 10:12:40 -05:00
justinsb
464879a405
Update google.golang.org/api to 0.57.0
...
In particular, we want the vTPM (shielded VM) support.
2021-09-26 09:39:10 -04:00
Kubernetes Prow Robot
ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
...
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Kubernetes Prow Robot
92ea7d58cb
Merge pull request #12398 from rifelpet/scheduler-critical
...
Remove critical-pod scheduler annotation.
2021-09-24 08:07:23 -07:00
Kubernetes Prow Robot
1774e6cae3
Merge pull request #12321 from dezmodue/private_bastion
...
Add option to create an internal load balancer for the bastion
2021-09-24 07:23:24 -07:00
John Gardiner Myers
63009934e7
update-bazel.sh
2021-09-23 23:40:08 -07:00
John Gardiner Myers
29efbe5881
Create v1alpha3 API
2021-09-23 22:27:56 -07:00
Reilly Brogan
9c6bf83c93
Update Cilium to 1.10.4
...
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4 )
2021-09-23 13:08:57 -05:00
Reilly Brogan
bce435da1c
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
...
- Cilium versions 1.10.4 and 1.9.10 now auto-mount the bpf file-system automatically
- Also remove redundant capabilities (these are already automatically granted by virtue of this being a privileged container)
2021-09-23 13:01:58 -05:00
Peter Rifel
ca044455a3
Remove critical-pod scheduler annotation.
...
This is no longer recognized in all supported k8s versions (1.16+)
ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
Kubernetes Prow Robot
74f9a8e2fb
Merge pull request #12342 from eddycharly/irsa-wildcard
...
feat: add support for wildcard in roles generated for IRSA
2021-09-22 16:09:10 -07:00
Charles-Edouard Brétéché
5f523366d6
feat: add support for wildcard in roles generated for IRSA
2021-09-23 00:24:45 +02:00
Kubernetes Prow Robot
d60469ff09
Merge pull request #12391 from olemarkus/sleep-test
...
Add sleep to upgrade-ab scenario
2021-09-22 11:30:33 -07:00
Ole Markus With
5cdcff163c
Add sleep to upgrade-ab scenario
2021-09-22 19:51:30 +02:00
Ole Markus With
f06fcc5af2
Add specific taints to dns-controller.
...
Also set kops-controller as cluster critical, not node critical
2021-09-22 16:40:08 +02:00
Kubernetes Prow Robot
bb81c744f0
Merge pull request #12379 from rifelpet/dump-k8s-ssh
...
kubetest2 - fix parsing output from toolbox dump
2021-09-21 07:34:24 -07:00
Peter Rifel
e423650857
Fix parsing output of kops toolbox dump
2021-09-21 08:54:52 -05:00
justinsb
3e83b771d6
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
...
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
Kubernetes Prow Robot
be2676076c
Merge pull request #12334 from dntosas/bump-amis
...
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
2021-09-21 04:52:24 -07:00
Kubernetes Prow Robot
8f42a4a689
Merge pull request #12368 from justinsb/gce_firewall_rules_always_ipv6
...
GCE: Always have IPv6 rules in "ipv6 mode"
2021-09-20 20:38:23 -07:00
justinsb
16fc5e8cec
GCE: Don't create utility subnets in private topology
...
We don't need them on GCE, and in fact we don't support them with IP Alias.
2021-09-20 09:31:33 -04:00
justinsb
76f816f483
GCE: Always have IPv6 rules in "ipv6 mode"
...
If we don't specify some SourceRanges, it defaults to 0.0.0.0/0, which
is IPv4 and confusing.
2021-09-20 09:26:28 -04:00
Peter Rifel
6deeda1ea2
Fix parsing of kops toolbox dump yaml output
...
Also add logging to help troubleshoot which command is failing
2021-09-20 07:06:08 -05:00
Kubernetes Prow Robot
3101180638
Merge pull request #12372 from rifelpet/dump-k8s-ssh
...
kubetest2 - add support for dumping k8s resources via SSH
2021-09-19 21:26:09 -07:00
Peter Rifel
5526744471
kubetest2 - add support for dumping k8s resources via SSH
...
Some of our jobs are currently failing because `kops validate cluster` times out waiting for the k8s API DNS record to be updated.
To assist in troubleshooting, we can get insight into the k8s resources present on the cluster even though the DNS record hasnt been set if we use kubectl on the control plane host via SSH.
This will SSH into a control plane host when the local kubectl dump fails.
2021-09-19 18:21:37 -05:00
Kubernetes Prow Robot
9eb28b93fe
Merge pull request #12365 from rifelpet/sctp
...
Fix version check in cilium SCTP test skipping
2021-09-19 08:38:08 -07:00
Kubernetes Prow Robot
34bad9bfc9
Merge pull request #12360 from hakman/calico-3.20.1
...
Update Calico to v3.20.1
2021-09-19 07:54:08 -07:00
Peter Rifel
cf16b4a6bf
Fix version check in cilium SCTP test skipping
2021-09-19 09:12:05 -05:00
Kubernetes Prow Robot
8ab1f8bbc4
Merge pull request #12355 from justinsb/gate_ipv6_permissions
...
Only add IPv6 IAM permissions if using IPv6
2021-09-19 00:54:08 -07:00