Commit Graph

2841 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 0d9e2e7bb4
Merge pull request #11184 from cloudnatix/kenji/gcp
Add GCE Router task
2021-04-24 00:37:15 -07:00
Kenji Kaneda f37330f53d Add GCE Router task
This commit picks up the change from the previous attempt
(https://github.com/kubernetes/kops/pull/6828).

- Add Router to GCE tasks
- Add the HasExternalIP field to InstanceTemplate
- Create a RouterTask and set HasExternalIP to false when
  a private topology is specified.

https://github.com/kubernetes/kops/issues/6827
2021-04-23 23:03:38 -07:00
Ole Markus With b3f52ee39f Make warm pool no ASG found error retryable 2021-04-23 16:38:30 +02:00
Kubernetes Prow Robot 11acc49b13
Merge pull request #11289 from spotinst/fix-issue-10908
Spotinst: Prevent nil pointer dereference
2021-04-23 00:16:03 -07:00
Ole Markus With ab12d18714 Make kops-controller use the local api server
If the cluster is under pressure, especially the new api server nodes, kops-controller go into crash loops because kubernetes.default doesn't respond.
By using the local api server, it has a higher likelyhood of being able to connect.
2021-04-23 07:35:43 +02:00
Kubernetes Prow Robot 2649cbc598
Merge pull request #10995 from haugenj/release-1.19
Add NTH Queue Processor Mode
2021-04-22 12:15:58 -07:00
liranp bd19ba987d
fix(spot/elastigroup): prevent nil pointer dereference 2021-04-22 21:48:07 +03:00
Jason Haugen 36722afb0f change casing Asg->ASG 2021-04-22 13:07:01 -05:00
liranp 59c6b4a440
feat(spot/addon): bump ocean-controller to 1.0.74 2021-04-22 16:28:33 +03:00
Kubernetes Prow Robot 5307cd735f
Merge pull request #11276 from olemarkus/no-eip
If one tries to use eip with a public ip that doesn't exist, fail
2021-04-21 00:14:10 -07:00
Ole Markus With e70585d7e5 If one tries to use eip with a public ip that doesn't exist, fail
Update upup/pkg/fi/cloudup/awstasks/elastic_ip.go

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-04-21 08:36:56 +02:00
Kubernetes Prow Robot 9c46f5046a
Merge pull request #11235 from olemarkus/warm-provision
Make it possible to enable/configure warm pool
2021-04-20 21:44:10 -07:00
Kenji Kaneda 221568a7a6 Add Azure image to alpha/stable channel
Remove the default image hard-coded in populate_instancegroup_spec.go.
2021-04-20 09:47:03 -07:00
Ole Markus With 020652e096 Add ability to enable/configure warm pool for ASG
Apply suggestions from code review

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>

Apply suggestions from code review

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-04-20 09:02:09 +02:00
Jason Haugen 7e48dad4d2 add ManagedAsgTag, merge templates, improve docs 2021-04-19 16:51:08 -05:00
Jason Haugen a2cc750d62 fix sqs url for china 2021-04-19 15:43:06 -05:00
Jason Haugen cceb9dd296 lifecycle integ test, docs, & small cleanup 2021-04-19 15:43:06 -05:00
Jason Haugen fb3f317e42 fix cloudformation verify 2021-04-19 15:43:05 -05:00
Jason Haugen 318a116ba6 fix staticcheck 2021-04-19 15:43:05 -05:00
Jason Haugen 10df4a9a14 integ tests 2021-04-19 15:43:05 -05:00
Jason Haugen c8bb48ba81 fix existing tests 2021-04-19 15:43:05 -05:00
Jason Haugen d07b067249 Add NTH queue-processor mode 2021-04-19 15:43:05 -05:00
Kubernetes Prow Robot 146f9b4cbb
Merge pull request #11248 from dntosas/cilium-resources
[cilium] Add support for choosing resources
2021-04-19 10:23:45 -07:00
dntosas 55524935d7
[cilium] Add support for choosing resources
Cilium as a CNI is a critical component for the cluster so it would be safe
to have some guaranteed resources as well as allowing the users to
define them based on their needs.

In this commit, we init default requested resources and add the
capability of user-defined values.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-04-19 11:30:02 +03:00
AkiraFukushima 9d42b4a4fd
Remove mixedInstancesPolicy in update when it is removed from expected 2021-04-19 00:59:25 +09:00
Ole Markus With 09615935fd Make kOps CLI handle ASG warm pools 2021-04-15 11:10:23 +02:00
Ciprian Hacman 27e102bd04 Add support for Docker v20.10.6 2021-04-15 07:01:36 +03:00
Ciprian Hacman f3c6558fd0 Release 1.21.0-alpha.3 2021-04-14 09:13:04 +03:00
Barry Melbourne 1a60629d38 Update Docker to v20.10.5 2021-04-11 19:26:46 +01:00
Kubernetes Prow Robot 6f302f0ea7
Merge pull request #11181 from spotinst/fix-ocean-headroom
Spotinst: Configure headroom resources only at the VNG level
2021-04-07 00:03:53 -07:00
liranp 97370b0adc
fix(spot/ocean): configure headroom resources only at the vng level 2021-04-06 23:41:40 +03:00
liranp d945a35058
fix(spot/ocean): configure root volume size using bdm 2021-04-06 21:34:38 +03:00
Ole Markus With dbd23473ef Add irsa support for awslbcontroller
This commit also introduces support for adding token projection volumes for well-known SAs.
Slightly less complicated than explicitly parsing the objects for a manifest
2021-04-04 21:24:07 +02:00
Kubernetes Prow Robot 6bb9355361
Merge pull request #11152 from olemarkus/apiserver-cli-flags
Allow setting dedicated apiserver node count from create cluster cmd
2021-04-03 22:32:14 -07:00
Jesse Haka fe3f5d2762 Filter kOps natgateways from route table 2021-04-02 14:31:00 +03:00
Kubernetes Prow Robot f8f34f4499
Merge pull request #11156 from olemarkus/apiserver-sideload-api-healthcheck
Side load images also on apiserver
2021-03-30 21:58:58 -07:00
Ole Markus With 06cf3512bc Only update kops-controller pods on deletion
This will in most cases mean kops-controller is only updated when the CP node is rolled and should increase the chances of compatible controller<->CP updates
2021-03-29 09:06:39 +02:00
Ole Markus With ff10bc3fc5 Side load images also on apiserver 2021-03-27 12:35:17 +01:00
Ole Markus With c6e5c4364d Allow setting dedicated apiserver node count from create cluster cmd 2021-03-27 08:59:45 +01:00
Peter Rifel 80ceb4200d
Update test outputs 2021-03-26 11:24:11 -07:00
Peter Rifel 093536c425
Add tags to instance profile and OIDC provider terraform resources
This requires bumping the provider version to the most recent, which added this support
2021-03-26 11:23:19 -07:00
Barry Melbourne 05123faf5a Update containerd to v1.3.10/v1.4.4 2021-03-23 17:02:01 +00:00
Peter Rifel 51cec7e556
Use "tag on create" for EIPs, NLBs, and TargetGroups
These are the remaining resources that support "tag on create" of which we werent taking advantage.

This allows more fine-grained IAM permissions for the kops cli.
2021-03-22 07:21:51 -05:00
Ciprian Hacman fa72535f95 Release 1.21.0-alpha.2 2021-03-22 08:38:47 +02:00
Justin SB c75e084158 Re-add integration tests for jwks
We removed them from #10756, but they can be re-added.
2021-03-20 22:55:11 -04:00
Ole Markus With 20bd724f5e Add support for scaling out the control plane with dedicated apiserver nodes
Ensure apiserver role can only be used on AWS (because of firewalling)

Apply api-server label to CP as well

Consolidate node not ready validation message

Guard apiserver nodes with a feature flag

Rename Apiserver role to APIServer

Add an integration test for apiserver nodes

Rename Apiserver role to APIServer

Enumerate all roles in rolling update docs

Apply suggestions from code review

Co-authored-by: Steven E. Harris <seh@panix.com>
2021-03-20 20:57:00 +01:00
MoShitrit d72006aaf0 Update expected 2021-03-19 23:12:08 -04:00
Ole Markus With 2c1f88f40e Do not need thumbprints to be resources 2021-03-19 20:05:37 +01:00
Peter Rifel 7c900b7fae Generate and upload keys.json + discovery.json to public store
Generate and upload keys.json + discovery.json to public store

Don't enable anonymous auth on publicjwks

Remove tests that won't work using FS VFS anymore
2021-03-19 20:03:26 +01:00
Ciprian Hacman 55f8c70779 Add channels entries for image architecture 2021-03-15 20:36:37 +02:00