Commit Graph

1226 Commits

Author SHA1 Message Date
Kubernetes Prow Robot a61075634c
Merge pull request #12406 from johngmyers/v1alpha3
Create v1alpha3 apiVersion
2021-10-02 10:13:06 -07:00
Ole Markus With 8eef72d8e8 Bump CAS images 2021-10-02 09:13:22 +02:00
Ciprian Hacman 2622964491 Run hack/update-expected.sh 2021-10-02 07:07:38 +03:00
Kubernetes Prow Robot 37ac7d31a1
Merge pull request #12452 from rifelpet/skip-elb-ipv6
Skip load balancer test in IPv6 clusters
2021-10-01 03:59:22 -07:00
Moshe Shitrit d451edcdfd Update expected after aws-cni version bump 2021-10-01 00:51:20 -04:00
Peter Rifel eeda5f927d
Skip load balancer test in IPv6 clusters 2021-09-30 15:41:47 -05:00
Kubernetes Prow Robot 8449d605bd
Merge pull request #12416 from olemarkus/channel-versions
Add fixed version to all addons
2021-09-30 12:21:15 -07:00
Peter Rifel 724804025b
./hack/update-expected.sh 2021-09-30 09:20:33 -05:00
Ole Markus With e7a5437a34 Add fixed version to all addons
This will make also older channels trigger addon updates
2021-09-30 15:25:29 +02:00
Kubernetes Prow Robot 3dc1d25454
Merge pull request #12439 from rifelpet/nth-truncate
Truncate cluster name in NTH EventBridgeRules
2021-09-30 00:58:07 -07:00
Peter Rifel 3311e45767
Truncate cluster name prefix used in event bridge rules 2021-09-29 19:12:49 -05:00
Peter Rifel 83e3d3c75d
Lengthen NTH integration test cluster name 2021-09-29 19:10:04 -05:00
Kubernetes Prow Robot dc9bf4f36c
Merge pull request #12419 from eddycharly/audiences
feat: add support for custom audience in aws oidc provider
2021-09-29 13:45:21 -07:00
Kubernetes Prow Robot 960c4a796d
Merge pull request #12434 from rifelpet/gce-skip
Skip certain e2e tests in GCE
2021-09-28 23:44:48 -07:00
Charles-Edouard Brétéché 7c8c9b9a23 feat: add support for custom audience in aws oidc provider
fix: missing json tags


fix: code gen


fix: switch to additional audiences


fix: oidc task


fix: add integration test
2021-09-28 22:39:56 +02:00
Kubernetes Prow Robot b9d5e37e1f
Merge pull request #12431 from olemarkus/cilium-al2
Mount cgroupv2 for cilium at a custom location
2021-09-28 07:14:43 -07:00
Peter Rifel 08ad2c6765
Skip certain e2e tests in GCE
These tests will never work with how kOps configures GCE clusters, so skip them for now
2021-09-27 22:28:54 -05:00
Kubernetes Prow Robot 25f43e194d
Merge pull request #12428 from rifelpet/apiserver-e2e
Add kubetest2-kops template for testing dedicated APIServer nodes
2021-09-27 11:17:45 -07:00
Ole Markus With 39178703c8 Mount cgroupv2 for cilium at a custom location 2021-09-27 19:29:36 +02:00
Peter Rifel cfdfb65e04
Allow api-server taint in e2e tests 2021-09-27 10:12:40 -05:00
Peter Rifel 6dd0d99f9b
Include --name in `kops toolbox template` 2021-09-27 10:12:40 -05:00
Peter Rifel d1148bce67
Add kubetest2-kops template for testing dedicated APIServer nodes 2021-09-27 10:12:40 -05:00
justinsb 464879a405 Update google.golang.org/api to 0.57.0
In particular, we want the vTPM (shielded VM) support.
2021-09-26 09:39:10 -04:00
Kubernetes Prow Robot ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Kubernetes Prow Robot 92ea7d58cb
Merge pull request #12398 from rifelpet/scheduler-critical
Remove critical-pod scheduler annotation.
2021-09-24 08:07:23 -07:00
Kubernetes Prow Robot 1774e6cae3
Merge pull request #12321 from dezmodue/private_bastion
Add option to create an internal load balancer for the bastion
2021-09-24 07:23:24 -07:00
John Gardiner Myers 63009934e7 update-bazel.sh 2021-09-23 23:40:08 -07:00
John Gardiner Myers 29efbe5881 Create v1alpha3 API 2021-09-23 22:27:56 -07:00
Reilly Brogan 9c6bf83c93 Update Cilium to 1.10.4
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4)
2021-09-23 13:08:57 -05:00
Reilly Brogan bce435da1c Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
- Cilium versions 1.10.4 and 1.9.10 now auto-mount the bpf file-system automatically
- Also remove redundant capabilities (these are already automatically granted by virtue of this being a privileged container)
2021-09-23 13:01:58 -05:00
Peter Rifel ca044455a3
Remove critical-pod scheduler annotation.
This is no longer recognized in all supported k8s versions (1.16+)

ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
Kubernetes Prow Robot 74f9a8e2fb
Merge pull request #12342 from eddycharly/irsa-wildcard
feat: add support for wildcard in roles generated for IRSA
2021-09-22 16:09:10 -07:00
Charles-Edouard Brétéché 5f523366d6 feat: add support for wildcard in roles generated for IRSA 2021-09-23 00:24:45 +02:00
Kubernetes Prow Robot d60469ff09
Merge pull request #12391 from olemarkus/sleep-test
Add sleep to upgrade-ab scenario
2021-09-22 11:30:33 -07:00
Ole Markus With 5cdcff163c Add sleep to upgrade-ab scenario 2021-09-22 19:51:30 +02:00
Ole Markus With f06fcc5af2 Add specific taints to dns-controller.
Also set kops-controller as cluster critical, not node critical
2021-09-22 16:40:08 +02:00
Kubernetes Prow Robot bb81c744f0
Merge pull request #12379 from rifelpet/dump-k8s-ssh
kubetest2 - fix parsing output from toolbox dump
2021-09-21 07:34:24 -07:00
Peter Rifel e423650857
Fix parsing output of kops toolbox dump 2021-09-21 08:54:52 -05:00
justinsb 3e83b771d6 GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
Kubernetes Prow Robot be2676076c
Merge pull request #12334 from dntosas/bump-amis
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
2021-09-21 04:52:24 -07:00
Kubernetes Prow Robot 8f42a4a689
Merge pull request #12368 from justinsb/gce_firewall_rules_always_ipv6
GCE: Always have IPv6 rules in "ipv6 mode"
2021-09-20 20:38:23 -07:00
justinsb 16fc5e8cec GCE: Don't create utility subnets in private topology
We don't need them on GCE, and in fact we don't support them with IP Alias.
2021-09-20 09:31:33 -04:00
justinsb 76f816f483 GCE: Always have IPv6 rules in "ipv6 mode"
If we don't specify some SourceRanges, it defaults to 0.0.0.0/0, which
is IPv4 and confusing.
2021-09-20 09:26:28 -04:00
Peter Rifel 6deeda1ea2
Fix parsing of kops toolbox dump yaml output
Also add logging to help troubleshoot which command is failing
2021-09-20 07:06:08 -05:00
Kubernetes Prow Robot 3101180638
Merge pull request #12372 from rifelpet/dump-k8s-ssh
kubetest2 - add support for dumping k8s resources via SSH
2021-09-19 21:26:09 -07:00
Peter Rifel 5526744471
kubetest2 - add support for dumping k8s resources via SSH
Some of our jobs are currently failing because `kops validate cluster` times out waiting for the k8s API DNS record to be updated.
To assist in troubleshooting, we can get insight into the k8s resources present on the cluster even though the DNS record hasnt been set if we use kubectl on the control plane host via SSH.

This will SSH into a control plane host when the local kubectl dump fails.
2021-09-19 18:21:37 -05:00
Kubernetes Prow Robot 9eb28b93fe
Merge pull request #12365 from rifelpet/sctp
Fix version check in cilium SCTP test skipping
2021-09-19 08:38:08 -07:00
Kubernetes Prow Robot 34bad9bfc9
Merge pull request #12360 from hakman/calico-3.20.1
Update Calico to v3.20.1
2021-09-19 07:54:08 -07:00
Peter Rifel cf16b4a6bf
Fix version check in cilium SCTP test skipping 2021-09-19 09:12:05 -05:00
Kubernetes Prow Robot 8ab1f8bbc4
Merge pull request #12355 from justinsb/gate_ipv6_permissions
Only add IPv6 IAM permissions if using IPv6
2021-09-19 00:54:08 -07:00