Commit Graph

5029 Commits

Author SHA1 Message Date
Justin SB f20e08cab9 GCE FirewallRule: Use an explicit field for ipv4 vs ipv6
We were previously relying on the name, but the name was "fooled" by
cluster names like ipv6.example.com
2023-03-31 09:33:29 -04:00
Justin SB d4f3573351 gce: Fix log message about bucket level IAM
The parameters were the wrong way round.
2023-03-30 17:16:03 -04:00
Kubernetes Prow Robot b202130d8f
Merge pull request #15221 from infonova/os-set-allowed-addresses
OpenStack: Allow setting allowed address pairs for ports
2023-03-26 23:35:56 -07:00
ederst a0c8bb600a Run make apimachinery and crds 2023-03-24 11:34:34 +01:00
ederst 1e9fc8e6d5 OpenStack: Add OCCM address sort order config
This will add the OCCM config to specify an address sort order:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1946
2023-03-24 11:34:22 +01:00
ederst a63328fc5b Run hack/update-expected.sh 2023-03-23 15:01:10 +01:00
ederst 37c2cf56d2 OpenStack: Allow setting allowed address pairs for ports 2023-03-23 15:01:10 +01:00
idanshoham 222e138683
feat(spot): Setting the VNG Size Limits in Launch Spec 2023-03-19 10:30:34 +02:00
Ciprian Hacman 8f703f5509 Fix behaviour for `kops export kubeconfig --internal` 2023-03-17 06:51:26 +02:00
Kubernetes Prow Robot 9d05f3d59c
Merge pull request #15238 from hakman/fix_additional_policies
aws: Use `control-plane` for additional policies instead of `master`
2023-03-16 19:31:16 -07:00
Ciprian Hacman 3a8d11c01f aws: Use `control-plane` for additional policies instead of `master` 2023-03-16 10:49:08 +02:00
Ciprian Hacman 88fd444987 gcp: Update terraform rendering for Target Pool 2023-03-16 08:55:15 +02:00
Ciprian Hacman 1db17ab949 gcp: Update terraform rendering for HTTP Health Check 2023-03-16 08:10:25 +02:00
Peter Rifel 3ce30fff48
Don't set CSIMigrationAWS for k8s >=1.27 2023-03-10 21:19:21 -06:00
Justin SB 03af1c7272 gce: Don't reconcile routes when running with "gce" networking.
If running with GCE "native" networking, we do not need the route
controller (and it causes problems); we turn it off by setting
--configure-cloud-routes=false.

In general we do not need the gkenetworkparams controller (and it
complains about missing CRDs).  We will turn it off in future, but it
isn't in the images we are using currently.
2023-03-03 10:07:09 -05:00
Justin SB eb7d3c958c gce: When using network native pod IPs, open firewall to apiserver
If we're not masquerading the pod IPs, we need an explicit firewall
rule for the pods to reach the kube-apiserver.  Normally this is
permitted anyway, but if the apiserver has a locked-down CIDR range
(as the e2e tests do) then we need our own rule.
2023-03-02 13:15:58 -05:00
Kubernetes Prow Robot 4b61ae77c1
Merge pull request #15183 from anthonyhaussman/feat/kops/nodeLocalDNS_ExternalCoreFile
feat(NodeLocalDNS): Add possibility to set an ExternalCoreFile
2023-02-28 23:17:17 -08:00
Anthony Hausman cc47bd278c
feat(nodelocaldns): Add possibility to set an ExternalCoreFile
Allow users to provide entirely custom CoreFile for NodeLocalDNS to provide improved flexibility.
2023-02-28 08:19:20 +01:00
Jesse Haka 3f9a1b6462 set node status update freq to 60min in OpenStack 2023-02-27 20:38:30 +02:00
Kubernetes Prow Robot d50995ece3
Merge pull request #15179 from justinsb/cleanup_validate_cidr
validation cleanup: simplify signature of validateCIDR
2023-02-24 11:13:30 -08:00
Justin SB 94c35804c9 validation cleanup: simplify signature of validateCIDR
We split out the "add to a slice" logic, as this is then easier to
reason about.

Should be a no-op in terms of valid inputs, might avoid some crashes
with invalid inputs.
2023-02-24 11:09:49 -05:00
Kubernetes Prow Robot b5dc9f6371
Merge pull request #15122 from Mia-Cross/scw_profiles
scaleway: get credentials from Scaleway profile
2023-02-24 07:43:34 -08:00
Kubernetes Prow Robot e8f704a855
Merge pull request #15036 from johngmyers/addlcidr-subnet
Improve support for AdditionalNetworkCIDRs
2023-02-24 06:33:34 -08:00
Kubernetes Prow Robot 511f32a20c
Merge pull request #15138 from zetaab/exitgracefully
exit nodeup gracefully if server already exists in k8s
2023-02-20 03:49:49 -08:00
Jesse Haka a765191898 use http.StatusConflict 2023-02-20 13:01:43 +02:00
Ciprian Hacman 8d6a809d10 Update containerd to v1.6.18 2023-02-18 04:38:08 +02:00
Rafael da Fonseca bc37c7408c Add terraform target support for configuring Warm Pool 2023-02-14 14:27:46 +00:00
Kubernetes Prow Robot ca3b53c00a
Merge pull request #15095 from infonova/use-clustername-in-cinder-csi-plugin
Pass actual cluster name to cinder-csi-plugin
2023-02-13 09:33:29 -08:00
ederst b4557d4729 Run make apimachinery and crds 2023-02-13 17:34:31 +01:00
ederst cd50ee00ac Pass actual cluster name to cinder-csi-plugin
This passes the acutal cluster name to the cinder-csi-plugin, so that
the plugin will add the name as metadata to the backing volume in
OpenStack.

Effectively, the change will help to better identify which volume in
OpenStack belongs to which cluster, which is especially helpful when
running multiple clusters in one OpenStack tenant/project.

Setting the cluster name in both - the controller and the nodeserver -
will ensure that dynamic and ephemeral volumes will receive the correct
metadata.
2023-02-13 17:31:32 +01:00
justinsb 1ad3f6012c hetzner: add dependency logic to deletion
This avoids warnings about deleting e.g. the volume while it is still
attached to a server.

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2023-02-13 08:55:12 -05:00
Kubernetes Prow Robot 9ec9d42910
Merge pull request #15131 from hakman/containerd-v1.6.17
Update containerd to v1.6.17
2023-02-13 02:27:29 -08:00
Jesse Haka ff557a9cf1 remove cadvisor and etcd client fw rule 2023-02-13 09:31:37 +02:00
Jesse Haka 382855d7d1 remove s3 access from nodes if using none dns 2023-02-12 21:51:16 +02:00
justinsb 150a98e258 DigitalOcean: Support SSH key provisioning
This means we don't need to pre-upload our SSH keys.
2023-02-12 10:34:40 -05:00
Jesse Haka 8e6199fa39 exit gracefully if server already exists in k8s 2023-02-12 16:52:13 +02:00
Ciprian Hacman e6e4324b85 Remove compatibility with k8s.gcr.io 2023-02-12 13:46:48 +02:00
Ciprian Hacman 0d39e0920e Update containerd to v1.6.17 2023-02-12 12:27:24 +02:00
Kubernetes Prow Robot 24a83acb66
Merge pull request #15128 from justinsb/do_no_empty_ips
digitalocean: don't print empty IP addresses
2023-02-11 17:49:31 -08:00
Kubernetes Prow Robot fce388e3a2
Merge pull request #15124 from justinsb/integration_hetzner
hetzner: support toolbox dump of instances
2023-02-11 11:07:29 -08:00
justinsb c7ed41ca70 digitalocean: don't print empty IP addresses
Now we have some IPv6 support, we were printing an empty address when
machines did not have an IPv6 address.
2023-02-11 13:25:43 -05:00
Justin SB 0b699832ec Use cloud-discovery on GCE in gossip mode
It's a little simpler and should speed up our boot.
2023-02-11 11:03:12 -05:00
justinsb 312ee7fefc hetzner: support toolbox dump of instances
Makes for easier debugging.
2023-02-11 10:55:54 -05:00
Leïla MARABESE 9f950f4a3a scaleway profiles feature 2023-02-10 17:02:45 +01:00
Jesse Haka 9df5534a13 add k8s node labels 2023-02-01 21:11:11 +02:00
Ciprian Hacman 884fded69e hack/update-expected.sh 2023-02-01 09:37:37 +02:00
Ciprian Hacman bdd7ff49da Update etcd-manager to v3.0.20230201 2023-02-01 09:35:32 +02:00
Kubernetes Prow Robot 2c619f3f23
Merge pull request #15083 from infonova/os-allow-setting-ignore-volume-microversion
Allow setting 'ignore-volume-microversion' for OCCP
2023-01-31 04:32:49 -08:00
ederst f4fdf7df79 Allow setting 'ignore-volume-microversion' for OCCP
This will allow setting the option `ignore-volume-microversion` for the
cinder-csi-plugin.

Setting this is necessary for older OpenStack APIs so that OCCP can
create PVs.

Note: This will work with cinder-csi-plugin >= 1.25.

For reference:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1986/
2023-01-31 11:48:25 +01:00
Kubernetes Prow Robot ebebbe8b76
Merge pull request #15068 from hakman/etcd-v3.5.7
Update etcd to v3.5.7
2023-01-31 01:54:49 -08:00