Justin SB
f20e08cab9
GCE FirewallRule: Use an explicit field for ipv4 vs ipv6
...
We were previously relying on the name, but the name was "fooled" by
cluster names like ipv6.example.com
2023-03-31 09:33:29 -04:00
Justin SB
d4f3573351
gce: Fix log message about bucket level IAM
...
The parameters were the wrong way round.
2023-03-30 17:16:03 -04:00
Kubernetes Prow Robot
b202130d8f
Merge pull request #15221 from infonova/os-set-allowed-addresses
...
OpenStack: Allow setting allowed address pairs for ports
2023-03-26 23:35:56 -07:00
ederst
a0c8bb600a
Run make apimachinery and crds
2023-03-24 11:34:34 +01:00
ederst
1e9fc8e6d5
OpenStack: Add OCCM address sort order config
...
This will add the OCCM config to specify an address sort order:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1946
2023-03-24 11:34:22 +01:00
ederst
a63328fc5b
Run hack/update-expected.sh
2023-03-23 15:01:10 +01:00
ederst
37c2cf56d2
OpenStack: Allow setting allowed address pairs for ports
2023-03-23 15:01:10 +01:00
idanshoham
222e138683
feat(spot): Setting the VNG Size Limits in Launch Spec
2023-03-19 10:30:34 +02:00
Ciprian Hacman
8f703f5509
Fix behaviour for `kops export kubeconfig --internal`
2023-03-17 06:51:26 +02:00
Kubernetes Prow Robot
9d05f3d59c
Merge pull request #15238 from hakman/fix_additional_policies
...
aws: Use `control-plane` for additional policies instead of `master`
2023-03-16 19:31:16 -07:00
Ciprian Hacman
3a8d11c01f
aws: Use `control-plane` for additional policies instead of `master`
2023-03-16 10:49:08 +02:00
Ciprian Hacman
88fd444987
gcp: Update terraform rendering for Target Pool
2023-03-16 08:55:15 +02:00
Ciprian Hacman
1db17ab949
gcp: Update terraform rendering for HTTP Health Check
2023-03-16 08:10:25 +02:00
Peter Rifel
3ce30fff48
Don't set CSIMigrationAWS for k8s >=1.27
2023-03-10 21:19:21 -06:00
Justin SB
03af1c7272
gce: Don't reconcile routes when running with "gce" networking.
...
If running with GCE "native" networking, we do not need the route
controller (and it causes problems); we turn it off by setting
--configure-cloud-routes=false.
In general we do not need the gkenetworkparams controller (and it
complains about missing CRDs). We will turn it off in future, but it
isn't in the images we are using currently.
2023-03-03 10:07:09 -05:00
Justin SB
eb7d3c958c
gce: When using network native pod IPs, open firewall to apiserver
...
If we're not masquerading the pod IPs, we need an explicit firewall
rule for the pods to reach the kube-apiserver. Normally this is
permitted anyway, but if the apiserver has a locked-down CIDR range
(as the e2e tests do) then we need our own rule.
2023-03-02 13:15:58 -05:00
Kubernetes Prow Robot
4b61ae77c1
Merge pull request #15183 from anthonyhaussman/feat/kops/nodeLocalDNS_ExternalCoreFile
...
feat(NodeLocalDNS): Add possibility to set an ExternalCoreFile
2023-02-28 23:17:17 -08:00
Anthony Hausman
cc47bd278c
feat(nodelocaldns): Add possibility to set an ExternalCoreFile
...
Allow users to provide entirely custom CoreFile for NodeLocalDNS to provide improved flexibility.
2023-02-28 08:19:20 +01:00
Jesse Haka
3f9a1b6462
set node status update freq to 60min in OpenStack
2023-02-27 20:38:30 +02:00
Kubernetes Prow Robot
d50995ece3
Merge pull request #15179 from justinsb/cleanup_validate_cidr
...
validation cleanup: simplify signature of validateCIDR
2023-02-24 11:13:30 -08:00
Justin SB
94c35804c9
validation cleanup: simplify signature of validateCIDR
...
We split out the "add to a slice" logic, as this is then easier to
reason about.
Should be a no-op in terms of valid inputs, might avoid some crashes
with invalid inputs.
2023-02-24 11:09:49 -05:00
Kubernetes Prow Robot
b5dc9f6371
Merge pull request #15122 from Mia-Cross/scw_profiles
...
scaleway: get credentials from Scaleway profile
2023-02-24 07:43:34 -08:00
Kubernetes Prow Robot
e8f704a855
Merge pull request #15036 from johngmyers/addlcidr-subnet
...
Improve support for AdditionalNetworkCIDRs
2023-02-24 06:33:34 -08:00
Kubernetes Prow Robot
511f32a20c
Merge pull request #15138 from zetaab/exitgracefully
...
exit nodeup gracefully if server already exists in k8s
2023-02-20 03:49:49 -08:00
Jesse Haka
a765191898
use http.StatusConflict
2023-02-20 13:01:43 +02:00
Ciprian Hacman
8d6a809d10
Update containerd to v1.6.18
2023-02-18 04:38:08 +02:00
Rafael da Fonseca
bc37c7408c
Add terraform target support for configuring Warm Pool
2023-02-14 14:27:46 +00:00
Kubernetes Prow Robot
ca3b53c00a
Merge pull request #15095 from infonova/use-clustername-in-cinder-csi-plugin
...
Pass actual cluster name to cinder-csi-plugin
2023-02-13 09:33:29 -08:00
ederst
b4557d4729
Run make apimachinery and crds
2023-02-13 17:34:31 +01:00
ederst
cd50ee00ac
Pass actual cluster name to cinder-csi-plugin
...
This passes the acutal cluster name to the cinder-csi-plugin, so that
the plugin will add the name as metadata to the backing volume in
OpenStack.
Effectively, the change will help to better identify which volume in
OpenStack belongs to which cluster, which is especially helpful when
running multiple clusters in one OpenStack tenant/project.
Setting the cluster name in both - the controller and the nodeserver -
will ensure that dynamic and ephemeral volumes will receive the correct
metadata.
2023-02-13 17:31:32 +01:00
justinsb
1ad3f6012c
hetzner: add dependency logic to deletion
...
This avoids warnings about deleting e.g. the volume while it is still
attached to a server.
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2023-02-13 08:55:12 -05:00
Kubernetes Prow Robot
9ec9d42910
Merge pull request #15131 from hakman/containerd-v1.6.17
...
Update containerd to v1.6.17
2023-02-13 02:27:29 -08:00
Jesse Haka
ff557a9cf1
remove cadvisor and etcd client fw rule
2023-02-13 09:31:37 +02:00
Jesse Haka
382855d7d1
remove s3 access from nodes if using none dns
2023-02-12 21:51:16 +02:00
justinsb
150a98e258
DigitalOcean: Support SSH key provisioning
...
This means we don't need to pre-upload our SSH keys.
2023-02-12 10:34:40 -05:00
Jesse Haka
8e6199fa39
exit gracefully if server already exists in k8s
2023-02-12 16:52:13 +02:00
Ciprian Hacman
e6e4324b85
Remove compatibility with k8s.gcr.io
2023-02-12 13:46:48 +02:00
Ciprian Hacman
0d39e0920e
Update containerd to v1.6.17
2023-02-12 12:27:24 +02:00
Kubernetes Prow Robot
24a83acb66
Merge pull request #15128 from justinsb/do_no_empty_ips
...
digitalocean: don't print empty IP addresses
2023-02-11 17:49:31 -08:00
Kubernetes Prow Robot
fce388e3a2
Merge pull request #15124 from justinsb/integration_hetzner
...
hetzner: support toolbox dump of instances
2023-02-11 11:07:29 -08:00
justinsb
c7ed41ca70
digitalocean: don't print empty IP addresses
...
Now we have some IPv6 support, we were printing an empty address when
machines did not have an IPv6 address.
2023-02-11 13:25:43 -05:00
Justin SB
0b699832ec
Use cloud-discovery on GCE in gossip mode
...
It's a little simpler and should speed up our boot.
2023-02-11 11:03:12 -05:00
justinsb
312ee7fefc
hetzner: support toolbox dump of instances
...
Makes for easier debugging.
2023-02-11 10:55:54 -05:00
Leïla MARABESE
9f950f4a3a
scaleway profiles feature
2023-02-10 17:02:45 +01:00
Jesse Haka
9df5534a13
add k8s node labels
2023-02-01 21:11:11 +02:00
Ciprian Hacman
884fded69e
hack/update-expected.sh
2023-02-01 09:37:37 +02:00
Ciprian Hacman
bdd7ff49da
Update etcd-manager to v3.0.20230201
2023-02-01 09:35:32 +02:00
Kubernetes Prow Robot
2c619f3f23
Merge pull request #15083 from infonova/os-allow-setting-ignore-volume-microversion
...
Allow setting 'ignore-volume-microversion' for OCCP
2023-01-31 04:32:49 -08:00
ederst
f4fdf7df79
Allow setting 'ignore-volume-microversion' for OCCP
...
This will allow setting the option `ignore-volume-microversion` for the
cinder-csi-plugin.
Setting this is necessary for older OpenStack APIs so that OCCP can
create PVs.
Note: This will work with cinder-csi-plugin >= 1.25.
For reference:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1986/
2023-01-31 11:48:25 +01:00
Kubernetes Prow Robot
ebebbe8b76
Merge pull request #15068 from hakman/etcd-v3.5.7
...
Update etcd to v3.5.7
2023-01-31 01:54:49 -08:00