Commit Graph

4924 Commits

Author SHA1 Message Date
John Gardiner Myers 0a419953d3 Expand TestPolicyGeneration to cover gossip/no-gossip cases 2023-01-11 22:06:01 -08:00
John Gardiner Myers c1c75ca340 hack/update-expected.sh 2023-01-11 21:19:24 -08:00
John Gardiner Myers 1de02c56f1 Use state store for nodeup.Config in Gossip clusters 2023-01-11 21:19:24 -08:00
Grégory SANCHEZ 6fdf54ff34 feat(cluster-autoscaler): autogenerate priority-expander configMap 2023-01-11 08:26:33 +01:00
Kubernetes Prow Robot b9c2bbea5d
Merge pull request #14974 from hakman/containerd-v1.6.15
Update containerd to v1.6.15
2023-01-10 23:19:45 -08:00
Kubernetes Prow Robot f2883115a4
Merge pull request #14913 from johngmyers/hostnetwork-no-irsa
Run pods needing control-plane instance credentials on hostNetwork
2023-01-10 22:25:27 -08:00
Kubernetes Prow Robot d247c0b37d
Merge pull request #14879 from hakman/aws_imds_all_clusters
aws: Set IMDS defaults for existing clusters
2023-01-10 22:25:19 -08:00
John Gardiner Myers ad92d2760c Run pods needing control-plane instance credentials on hostNetwork 2023-01-10 20:48:05 -08:00
Ciprian Hacman 086d74605f Update containerd to v1.6.15 2023-01-11 06:32:22 +02:00
Leïla MARABESE 543d59758a removed SCW_DEFAULT_REGION and SCW_DEFAULT_ZONE env vars 2023-01-10 16:11:23 +01:00
Kubernetes Prow Robot f6a36bfc42
Merge pull request #14194 from jandersen-plaid/jandersen-plaid-exit-first-error
Exit rolling updates when encountering specific errors
2023-01-09 23:59:25 -08:00
Kubernetes Prow Robot 0b8ccf2c9e
Merge pull request #14951 from johngmyers/kube-dns
Upgrade k8s-dns-node-cache to 1.22.16
2023-01-09 08:21:29 -08:00
Ole Markus With 07c77b1e5f Bump EBS CSI driver to 1.14.1 2023-01-09 13:01:23 +01:00
justinsb cca919dcde gce: KCM should not allocate IPs when CCM is in use.
When the GCE cloud-controller-controlller is in use, it allocates node
IPs, and so the kube-controller-manager should not allocate node IPs.
2023-01-07 17:24:24 -05:00
justinsb 132a805972 Allow built-in manifests to be replaced by external addons
We identify the external manifests by checking for our labels.
Currently that label is kOps specific, and we'll likely have to evolve
that to something ecosystem-netural.

We only support the GCE CCM addon and the kopeio-networking addon at
first.

For the GCE CCM addon, we need to replace the arguments, in particular
we likely need the Pod CIDR.  Here we need to work with the GCE CCM to
find a mechanism that can allow some of these flags to be communicated
via a more extensible mechanism (env vars or config maps, likely,
though possibly CRDs).

This is all behind the ClusterAddons feature flag at the moment, so we
can figure this out with other projects safely.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2023-01-05 20:29:56 -05:00
Ole Markus With 517da72ff5 Bump cluster autoscaler to 1.26.1 2023-01-05 13:40:26 +01:00
Kubernetes Prow Robot 7b4430ff61
Merge pull request #14885 from johngmyers/root-volume
v1alpha3: Move IG root volume settings to sub-struct
2023-01-04 18:11:58 -08:00
John Gardiner Myers c55cc836db Upgrade k8s-dns-node-cache to 1.22.16 2023-01-04 17:49:50 -08:00
John Gardiner Myers 8fc4bdb669 Add missing line break
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2023-01-04 17:25:44 -08:00
justinsb b7d9319fff EnsureTask should panic on error
This means that we automatically check the error code.  A linter could
detect errors here (maybe), but in practice we can't recover from
errors here anyway.
2023-01-04 08:29:20 -05:00
Kubernetes Prow Robot 5096ea5182
Merge pull request #14947 from johngmyers/k8s-version
Miscellaneous NodeupConfig refactoring
2023-01-03 23:13:59 -08:00
John Gardiner Myers 447220ef4e Use NodeupConfig for NTP-managed setting 2023-01-03 22:16:20 -08:00
John Gardiner Myers fea27074aa hack/update-expected.sh 2023-01-03 22:16:20 -08:00
John Gardiner Myers 4179fcce58 Use NodeupConfig for KubernetesVersion 2023-01-03 22:16:20 -08:00
Kubernetes Prow Robot 2a29412931
Merge pull request #14943 from johngmyers/kube-proxy
Use NodeupConfig for kube-proxy config
2023-01-03 19:35:58 -08:00
Kubernetes Prow Robot 3562661b46
Merge pull request #14912 from justinsb/localmutex
gce: try to avoid concurrent IAM project operations
2023-01-03 18:31:58 -08:00
John Gardiner Myers 7419620b80 hack/update-expected.sh 2023-01-03 12:29:07 -08:00
John Gardiner Myers b5eef1c129 Use NodeupConfig for kube-proxy config 2023-01-03 12:29:07 -08:00
John Gardiner Myers 2439193a8a Don't tag public subnets for internal LBs in IPv6 clusters 2023-01-03 11:04:52 -08:00
Ciprian Hacman 62f1d20c96 aws: Set IMDS defaults for existing clusters 2023-01-03 11:03:44 +02:00
Kubernetes Prow Robot 60a423bd40
Merge pull request #14936 from johngmyers/nodeup-runtime
Use NodeupConfig for container-runtime configuration
2023-01-03 00:15:42 -08:00
John Gardiner Myers e44ce84f78 hack/update-expected.sh 2023-01-02 13:58:23 -08:00
John Gardiner Myers fe448ef906 Use NodeupConfig for DockerConfig 2023-01-02 13:58:21 -08:00
John Gardiner Myers 3fe4ee9b84 hack/update-expected.sh 2023-01-02 13:42:11 -08:00
John Gardiner Myers 125866792d Use NodeupConfig for ContainerdConfig 2023-01-02 13:42:11 -08:00
John Gardiner Myers 768299134c hack/update-expected.sh 2023-01-02 12:50:24 -08:00
John Gardiner Myers 25a897b691 Use NodeupConfig for ContainerRuntime 2023-01-02 12:50:23 -08:00
John Gardiner Myers c051198f85 Pull pki.Keystore out of fi.KeystoreReader 2023-01-02 10:39:24 -08:00
justinsb f016c396ec gce: try to avoid concurrent IAM project operations
We set up a process-wide table of mutexes, to avoid concurrent IAM
operations on GCE projects.  Best-effort is reasonable here, we will
retry, but avoiding concurrent operations just avoids logspam and a
needless retry from self-conflicts.
2023-01-01 18:15:20 -05:00
John Gardiner Myers c08326e8c0 Separate out a VFSSecretStoreReader 2023-01-01 13:47:05 -08:00
John Gardiner Myers c68be498c6 Refactor NewAssetBuilder to not take a Cluster 2023-01-01 13:37:52 -08:00
justinsb 6c2edaee7e Add Context arg to vfs ReadFile
This is an "action" method, so should take a context.
2023-01-01 09:51:44 -05:00
Kubernetes Prow Robot 2fa8894960
Merge pull request #14915 from johngmyers/topology-subnet
Reduce use of cluster topology field
2022-12-31 00:11:28 -08:00
John Gardiner Myers 1be8be233f Reduce use of cluster topology field 2022-12-30 14:28:47 -08:00
John Gardiner Myers 74becb764e Don't require subnets on DO and Hetzner 2022-12-30 12:00:02 -08:00
Kubernetes Prow Robot fc527b6e9f
Merge pull request #14909 from johngmyers/valid-values
Make IsValidValue more useful for enum types
2022-12-30 01:25:36 -08:00
Kubernetes Prow Robot ee990f8057
Merge pull request #14881 from johngmyers/addl-cidr
Move networking validations inside validateNetworking()
2022-12-30 01:25:29 -08:00
John Gardiner Myers 43f56de38b Make IsValidValue more useful for enum types 2022-12-29 23:30:53 -08:00
Kubernetes Prow Robot 50fe61338c
Merge pull request #14883 from johngmyers/sg-override
Improve validation of API loadbalancer specs
2022-12-29 23:27:29 -08:00
Kubernetes Prow Robot cf44ec0766
Merge pull request #14882 from johngmyers/apiserver-cloud-config
APIServer nodes need cloudconfig
2022-12-29 00:09:29 -08:00