Commit Graph

930 Commits

Author SHA1 Message Date
John Gardiner Myers 07ee0c2206 Simplify Calico IPv6 configuration 2021-06-14 08:06:10 -07:00
Kubernetes Prow Robot 0347d79a14
Merge pull request #11754 from johngmyers/ipv6-cilium
Enable IPv6 support for Cilium
2021-06-14 07:27:04 -07:00
John Gardiner Myers 3cf8234d01 Cilium: disable masquerade by default when in ENI IPAM mode 2021-06-13 21:36:56 -07:00
John Gardiner Myers c0b54d980d Enable IPv6 support for Cilium 2021-06-13 20:47:44 -07:00
ederst 7f787decd8 Make forwardToKubeDNS work in the NodeLocal DNSCache template
This fixes the rendering of the Corefile of the NodeLocal DNSCache
template when setting forwardToKubeDNS to false (or not setting it).

Previously, due to not dereferencing the bool pointer, the Corefile was
always rendered with the true clause, due to checking the address
instead of the actual value of the variable.

With this fix, the templating mechanism will actually respect the value
of forwardToKubeDNS and render it accordingly.
2021-06-11 21:58:07 +02:00
Ole Markus With c162013a3c Use quay images for cilium 2021-06-08 23:01:08 +02:00
Dmytro Oboznyi feed3b26ae
Add proxy envs to calico to make possible usage of AWS source destination check
Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
2021-06-07 16:56:35 +03:00
Kubernetes Prow Robot 16dca9e844
Merge pull request #11124 from hakman/kube-router-1.2.0
Update kube-router to v1.2.3
2021-06-06 21:52:39 -07:00
Ciprian Hacman 91d681622c Update kube-router to v1.2.3 2021-06-07 05:25:00 +03:00
Kubernetes Prow Robot 673961cb0f
Merge pull request #11703 from olemarkus/lbc-use-v1-cert
Use v1 certificate for LB controller
2021-06-06 12:06:39 -07:00
Kubernetes Prow Robot 9984ba079c
Merge pull request #11701 from olemarkus/fix-ebs-csi-role-crb
Fix the CSI EBS DS CRB.
2021-06-06 11:08:38 -07:00
Ole Markus With 0e1a0538b3 Use v1 certificate 2021-06-06 19:28:19 +02:00
Ole Markus With 8f8d6deb17 Fix the CSI EBS DS CRB. 2021-06-06 19:23:22 +02:00
Kubernetes Prow Robot 7001de3486
Merge pull request #11688 from hakman/ipv6-calico
Add options for configuring IPv4 and IPv6 support with Calico
2021-06-05 16:06:38 -07:00
Ciprian Hacman 70f77a34d1 Add options for configuring IPv4 and IPv6 support with Calico 2021-06-04 17:05:40 +03:00
Peter Rifel 708a5db365
Consolidate CSI livenessprobe images for multi-arch support
This manifest includes two liveness-probe containers but they use different images.
The k8s.gcr.io image is multi-arch but the quay.io image is not.
By only using the k8s.gcr.io one we should fix arm64 clusters now that EBS CSI is enabled by default.
2021-05-31 14:19:00 -05:00
Ryan Dyer 65b750e732 add init image field 2021-05-25 17:57:49 +00:00
Kubernetes Prow Robot fcef4fc1bf
Merge pull request #11594 from hakman/calico-3.19.1
Update Calico to v3.19.1
2021-05-24 23:32:22 -07:00
Ciprian Hacman ca39686c29 Update Calico to v3.19.1 2021-05-25 07:34:50 +03:00
John Gardiner Myers 6ac345e23d Use the OnDelete updateStrategy for AWS VPC CNI DaemonSet 2021-05-24 19:55:19 -07:00
Kubernetes Prow Robot d906f83121
Merge pull request #11561 from olemarkus/actually-add-snapshot-controller
Add snapshot-controller
2021-05-22 02:03:37 -07:00
Ole Markus With 1868313497 Add snapshot-controller 2021-05-22 09:19:35 +02:00
Ciprian Hacman 93a09e5419 Update metrics-server to v0.4.4 2021-05-22 09:39:14 +03:00
Ciprian Hacman 2df8e56fc9 Allow using insecure TLS for metrics-server with Kubernetes 1.19+ 2021-05-22 09:38:31 +03:00
Ole Markus With 46e13c0009 Bump snapshot-controller version
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>

Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-21 15:40:40 +02:00
Kubernetes Prow Robot 8a6ec1416c
Merge pull request #11491 from olemarkus/cas-update-manifest
Update CAS manifest
2021-05-21 04:52:46 -07:00
Kubernetes Prow Robot 8e938ba5ee
Merge pull request #11500 from dntosas/coredns-bump-manifest
Bump CoreDNS manifests to latest stable version 1.8.3
2021-05-21 00:28:57 -07:00
Kubernetes Prow Robot c28783c581
Merge pull request #11514 from ulfox/cilium/prometheus-scrape-annotations
[addons/networking.cilium.io] enable prometheus scraping
2021-05-19 10:12:51 -07:00
Ole Markus With 2fb1861528 Update CAS manifest
Upstream examples were missing a number of improvements.
This commit also adds template functions for making controllers such as CAS more HA on HA clusters
2021-05-19 16:12:51 +02:00
Kubernetes Prow Robot 16f7208c8c
Merge pull request #11525 from olemarkus/ebs-csi-default-fs
Set default fstype for ebs volumes to ext4
2021-05-19 02:38:51 -07:00
Ole Markus With 05cac12c19 Set default fstype for ebs volumes to ext4 2021-05-19 09:54:31 +02:00
Christos Kotsis 34ac1ad8d4
[feedback/tests] 2021-05-19 09:59:16 +03:00
Kubernetes Prow Robot e8e5bf2ed3
Merge pull request #11517 from olemarkus/aws-lb-default-tags
Add default tags to LB controller and cilium eni resources
2021-05-18 21:50:50 -07:00
Ole Markus With 22f3a4aff8 Add default tags to LB controller and cilium eni resources 2021-05-18 19:02:40 +02:00
Christos Kotsis bb98caeed3
[tests/feedback] fix missing quote function with printf 2021-05-18 19:42:50 +03:00
Christos Kotsis 2ba0843c91
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.16-v1.10.yaml.template
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-18 19:14:15 +03:00
Christos Kotsis 793115242a
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.12-v1.9.yaml.template
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-18 19:14:09 +03:00
Christos Kotsis 08162bcc2e
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.12-v1.8.yaml.template
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-18 19:13:59 +03:00
Christos Kotsis 5ac4569998
[addons/networking.cilium.io] enable prometheus scraping
When EnablePromethesMetrics is enabled the
required metrics endpoints are exposed but
no annotations is included in the agents.

This commit includes the prometheus.io/scrape
and prometheus.io/port annotations that
prometheus scrappers can use for auto-discovery

Co-authored-by: tchatzig <t.chatzigeorgiou@thebeat.co>
2021-05-18 16:59:56 +03:00
liranp 6b61445414
feat(spot/addon): bump ocean-controller to 1.0.75 2021-05-18 13:55:58 +03:00
Kubernetes Prow Robot 07f3bc0e96
Merge pull request #11502 from olemarkus/aws-lb-controller-bump
bump aws lb controller to 2.2.0
2021-05-16 16:43:59 -07:00
Ole Markus With d3581ebb84 bump aws lb controller to 2.2.0 2021-05-16 18:26:23 +02:00
dntosas da42becf08
[addons/coredns] Bump manifests to latest stable version 1.8.3
In this commit, we update manifest files of CoreDNS. We also do a small
refactoring on yaml blocks to match the upstream source and to make
updating and reviewing procedures easier on the future.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-16 11:37:12 +03:00
dntosas ceba48855b
[addons/nodeLocaCache] Bump patch version
Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-16 11:25:40 +03:00
Kubernetes Prow Robot 07a9ed9c27
Merge pull request #11459 from nettoclaudio/fix/add-rbac-endpointslices
fix(coredns/rbac): add permission to list and watch endpointslices
2021-05-16 01:07:59 -07:00
Ole Markus With fe2cbbf369 Set priorityClassName on critical addons 2021-05-15 09:12:14 +02:00
Ole Markus With d27ca73272 Update cert-manager 2021-05-14 20:32:18 +02:00
Nick Turner 0239dc1f63 Permission to create servcice account tokens
* We need the ability to create service account token
  because this is required by clientbuilder/controller-manager
  framework which we will be using in 1.21.
* This is required for the CCM to use 1 SA per controller, which
  follows principle of least privilege and makes audit logs easier
  to understand
* Restricts token creation to resource names "node-controller",
  "service-controller", and "route-controller".
2021-05-13 14:16:59 -07:00
Claudio Netto 1b7179513f
fix(coredns/rbac): add permission to list and watch endpointslices 2021-05-11 17:16:12 -03:00
Kubernetes Prow Robot 7db45cb5fa
Merge pull request #11418 from dntosas/aws-csi-ga-release
[addons/awscsidriver] Bump to GA release
2021-05-08 02:46:47 -07:00