John Gardiner Myers
0a419953d3
Expand TestPolicyGeneration to cover gossip/no-gossip cases
2023-01-11 22:06:01 -08:00
John Gardiner Myers
c1c75ca340
hack/update-expected.sh
2023-01-11 21:19:24 -08:00
John Gardiner Myers
1de02c56f1
Use state store for nodeup.Config in Gossip clusters
2023-01-11 21:19:24 -08:00
Grégory SANCHEZ
6fdf54ff34
feat(cluster-autoscaler): autogenerate priority-expander configMap
2023-01-11 08:26:33 +01:00
Kubernetes Prow Robot
b9c2bbea5d
Merge pull request #14974 from hakman/containerd-v1.6.15
...
Update containerd to v1.6.15
2023-01-10 23:19:45 -08:00
Kubernetes Prow Robot
f2883115a4
Merge pull request #14913 from johngmyers/hostnetwork-no-irsa
...
Run pods needing control-plane instance credentials on hostNetwork
2023-01-10 22:25:27 -08:00
Kubernetes Prow Robot
d247c0b37d
Merge pull request #14879 from hakman/aws_imds_all_clusters
...
aws: Set IMDS defaults for existing clusters
2023-01-10 22:25:19 -08:00
John Gardiner Myers
ad92d2760c
Run pods needing control-plane instance credentials on hostNetwork
2023-01-10 20:48:05 -08:00
Ciprian Hacman
086d74605f
Update containerd to v1.6.15
2023-01-11 06:32:22 +02:00
Leïla MARABESE
543d59758a
removed SCW_DEFAULT_REGION and SCW_DEFAULT_ZONE env vars
2023-01-10 16:11:23 +01:00
Kubernetes Prow Robot
f6a36bfc42
Merge pull request #14194 from jandersen-plaid/jandersen-plaid-exit-first-error
...
Exit rolling updates when encountering specific errors
2023-01-09 23:59:25 -08:00
Kubernetes Prow Robot
0b8ccf2c9e
Merge pull request #14951 from johngmyers/kube-dns
...
Upgrade k8s-dns-node-cache to 1.22.16
2023-01-09 08:21:29 -08:00
Ole Markus With
07c77b1e5f
Bump EBS CSI driver to 1.14.1
2023-01-09 13:01:23 +01:00
justinsb
cca919dcde
gce: KCM should not allocate IPs when CCM is in use.
...
When the GCE cloud-controller-controlller is in use, it allocates node
IPs, and so the kube-controller-manager should not allocate node IPs.
2023-01-07 17:24:24 -05:00
justinsb
132a805972
Allow built-in manifests to be replaced by external addons
...
We identify the external manifests by checking for our labels.
Currently that label is kOps specific, and we'll likely have to evolve
that to something ecosystem-netural.
We only support the GCE CCM addon and the kopeio-networking addon at
first.
For the GCE CCM addon, we need to replace the arguments, in particular
we likely need the Pod CIDR. Here we need to work with the GCE CCM to
find a mechanism that can allow some of these flags to be communicated
via a more extensible mechanism (env vars or config maps, likely,
though possibly CRDs).
This is all behind the ClusterAddons feature flag at the moment, so we
can figure this out with other projects safely.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2023-01-05 20:29:56 -05:00
Ole Markus With
517da72ff5
Bump cluster autoscaler to 1.26.1
2023-01-05 13:40:26 +01:00
Kubernetes Prow Robot
7b4430ff61
Merge pull request #14885 from johngmyers/root-volume
...
v1alpha3: Move IG root volume settings to sub-struct
2023-01-04 18:11:58 -08:00
John Gardiner Myers
c55cc836db
Upgrade k8s-dns-node-cache to 1.22.16
2023-01-04 17:49:50 -08:00
John Gardiner Myers
8fc4bdb669
Add missing line break
...
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2023-01-04 17:25:44 -08:00
justinsb
b7d9319fff
EnsureTask should panic on error
...
This means that we automatically check the error code. A linter could
detect errors here (maybe), but in practice we can't recover from
errors here anyway.
2023-01-04 08:29:20 -05:00
Kubernetes Prow Robot
5096ea5182
Merge pull request #14947 from johngmyers/k8s-version
...
Miscellaneous NodeupConfig refactoring
2023-01-03 23:13:59 -08:00
John Gardiner Myers
447220ef4e
Use NodeupConfig for NTP-managed setting
2023-01-03 22:16:20 -08:00
John Gardiner Myers
fea27074aa
hack/update-expected.sh
2023-01-03 22:16:20 -08:00
John Gardiner Myers
4179fcce58
Use NodeupConfig for KubernetesVersion
2023-01-03 22:16:20 -08:00
Kubernetes Prow Robot
2a29412931
Merge pull request #14943 from johngmyers/kube-proxy
...
Use NodeupConfig for kube-proxy config
2023-01-03 19:35:58 -08:00
Kubernetes Prow Robot
3562661b46
Merge pull request #14912 from justinsb/localmutex
...
gce: try to avoid concurrent IAM project operations
2023-01-03 18:31:58 -08:00
John Gardiner Myers
7419620b80
hack/update-expected.sh
2023-01-03 12:29:07 -08:00
John Gardiner Myers
b5eef1c129
Use NodeupConfig for kube-proxy config
2023-01-03 12:29:07 -08:00
John Gardiner Myers
2439193a8a
Don't tag public subnets for internal LBs in IPv6 clusters
2023-01-03 11:04:52 -08:00
Ciprian Hacman
62f1d20c96
aws: Set IMDS defaults for existing clusters
2023-01-03 11:03:44 +02:00
Kubernetes Prow Robot
60a423bd40
Merge pull request #14936 from johngmyers/nodeup-runtime
...
Use NodeupConfig for container-runtime configuration
2023-01-03 00:15:42 -08:00
John Gardiner Myers
e44ce84f78
hack/update-expected.sh
2023-01-02 13:58:23 -08:00
John Gardiner Myers
fe448ef906
Use NodeupConfig for DockerConfig
2023-01-02 13:58:21 -08:00
John Gardiner Myers
3fe4ee9b84
hack/update-expected.sh
2023-01-02 13:42:11 -08:00
John Gardiner Myers
125866792d
Use NodeupConfig for ContainerdConfig
2023-01-02 13:42:11 -08:00
John Gardiner Myers
768299134c
hack/update-expected.sh
2023-01-02 12:50:24 -08:00
John Gardiner Myers
25a897b691
Use NodeupConfig for ContainerRuntime
2023-01-02 12:50:23 -08:00
John Gardiner Myers
c051198f85
Pull pki.Keystore out of fi.KeystoreReader
2023-01-02 10:39:24 -08:00
justinsb
f016c396ec
gce: try to avoid concurrent IAM project operations
...
We set up a process-wide table of mutexes, to avoid concurrent IAM
operations on GCE projects. Best-effort is reasonable here, we will
retry, but avoiding concurrent operations just avoids logspam and a
needless retry from self-conflicts.
2023-01-01 18:15:20 -05:00
John Gardiner Myers
c08326e8c0
Separate out a VFSSecretStoreReader
2023-01-01 13:47:05 -08:00
John Gardiner Myers
c68be498c6
Refactor NewAssetBuilder to not take a Cluster
2023-01-01 13:37:52 -08:00
justinsb
6c2edaee7e
Add Context arg to vfs ReadFile
...
This is an "action" method, so should take a context.
2023-01-01 09:51:44 -05:00
Kubernetes Prow Robot
2fa8894960
Merge pull request #14915 from johngmyers/topology-subnet
...
Reduce use of cluster topology field
2022-12-31 00:11:28 -08:00
John Gardiner Myers
1be8be233f
Reduce use of cluster topology field
2022-12-30 14:28:47 -08:00
John Gardiner Myers
74becb764e
Don't require subnets on DO and Hetzner
2022-12-30 12:00:02 -08:00
Kubernetes Prow Robot
fc527b6e9f
Merge pull request #14909 from johngmyers/valid-values
...
Make IsValidValue more useful for enum types
2022-12-30 01:25:36 -08:00
Kubernetes Prow Robot
ee990f8057
Merge pull request #14881 from johngmyers/addl-cidr
...
Move networking validations inside validateNetworking()
2022-12-30 01:25:29 -08:00
John Gardiner Myers
43f56de38b
Make IsValidValue more useful for enum types
2022-12-29 23:30:53 -08:00
Kubernetes Prow Robot
50fe61338c
Merge pull request #14883 from johngmyers/sg-override
...
Improve validation of API loadbalancer specs
2022-12-29 23:27:29 -08:00
Kubernetes Prow Robot
cf44ec0766
Merge pull request #14882 from johngmyers/apiserver-cloud-config
...
APIServer nodes need cloudconfig
2022-12-29 00:09:29 -08:00