Kubernetes Prow Robot
7a67dce053
Merge pull request #12314 from olemarkus/sgr-ids
...
Use sg rule ids and tags where possible
2021-09-12 07:10:07 -07:00
Kubernetes Prow Robot
3fd7b446c0
Merge pull request #12305 from hakman/node_ip_families
...
Make AWS CCM NodeIPFamilies configurable
2021-09-12 06:26:14 -07:00
Kubernetes Prow Robot
2e3ca721a5
Merge pull request #12291 from hakman/aws-ccm-1.22.0-alpha.0
...
Default to latest staging image for AWS CCM
2021-09-12 06:26:07 -07:00
Ole Markus With
d98994686a
Use sg rule ids and tags where possible
2021-09-12 14:32:58 +02:00
Kubernetes Prow Robot
1b431b4c9c
Merge pull request #11628 from olemarkus/gpu-runtime
...
Pre-install nvidia container runtime + drivers on GPU instances
2021-09-11 13:00:07 -07:00
Ciprian Hacman
cf8b11b0d4
Default to latest staging image for AWS CCM
2021-09-11 18:38:24 +03:00
Ole Markus With
bba3c3abfe
Bump aws ebs csi driver to 1.2.1
2021-09-11 14:15:31 +02:00
Ciprian Hacman
dde08e839d
Make AWS CCM NodeIPFamilies configurable
2021-09-11 13:09:08 +03:00
Peter Rifel
0d13da839a
Use MasterInternalName for gossip cluster SA issuer
...
This reverts a change introduced earlier in 1.22 that resulted in existing service account tokens becoming invalid after a kops upgrade.
2021-09-10 14:40:07 -04:00
Kubernetes Prow Robot
39eb930646
Merge pull request #12290 from rifelpet/imds-ipv6
...
Enable IMDS IPv6 endpoint
2021-09-09 06:04:11 -07:00
Peter Rifel
60c86e1a44
Enable IMDS IPv6 endpoint when IPv6AddressCount > 0
2021-09-09 07:24:14 -05:00
Kubernetes Prow Robot
5a917b5186
Merge pull request #12104 from rifelpet/ccm-tag
...
Update AWS CCM tags
2021-09-09 02:54:11 -07:00
Peter Rifel
6a53285ffe
Move AWS CCM image logic into pkg/model and add 1.21 and 1.22 images
2021-09-08 20:56:39 -05:00
Simone Sciarrati
6773fdf495
option to omit --cluster-cidr from kubeproxy config
2021-09-08 14:46:06 +02:00
Ole Markus With
f5fed2a08d
Move nvidia config under containerd
2021-09-05 20:28:07 +02:00
Ole Markus With
4ab75b01cb
Have instances learn about their GPU capabilities
2021-09-05 20:09:04 +02:00
Ole Markus With
2d013e460c
Install nvidia container runtime
2021-09-05 20:09:04 +02:00
Ole Markus With
c390d45f76
Set ipv6 nameservers on aws
...
AWS now provides ipv6 DNS server endpoint at a fixed address (rather than ipv4, which depends on the VPC CIDR block). This isn't provided in dhcp, and anyways we want to ensure we use this endpoint in ipv6 mode and not have ipv4 in the mix.
2021-09-03 09:47:37 +02:00
Kubernetes Prow Robot
c7eb08c76f
Merge pull request #12193 from olemarkus/protect-kernel-defaults
...
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-09-02 04:42:09 -07:00
Kubernetes Prow Robot
c70ced2f66
Merge pull request #12219 from dntosas/nodelocaldns-bump-version
...
[addons/node-local-dns] Bump version and make image field configurable
2021-09-01 04:54:59 -07:00
Ole Markus With
b52008d9b6
Add instance state change notification to nth
2021-08-31 22:54:21 +02:00
dntosas
f558f2441a
[addons/nodelocaldns] Bump image to latest stable v1.20.0
...
As per
3b17e06879 ,
node-local-dns addon is now builded with latest coreDNS base v1.8 and
that brings great consistency between cache and upstream servers in a
manner of configuration, metrics name convention, etc.
So in this commit, we bump node-local-dns image to latest v1.20.0 which
is build upon latest coreDNS and also add support for overriding this
field.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-31 14:07:19 +03:00
John Gardiner Myers
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
John Gardiner Myers
f041bdafdc
More kops 1.23 updates
2021-08-28 11:54:39 -07:00
John Gardiner Myers
6655022ce1
Remove support for the Lyft CNI
2021-08-28 11:54:39 -07:00
John Gardiner Myers
1ea4168cab
Release 1.23.0-alpha.1
2021-08-27 21:12:45 -07:00
Ole Markus With
b3982e1033
Apply suggestions from code review
...
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-08-27 06:45:50 +02:00
Ole Markus With
0152c23c1e
Remove externaldns feature flag
2021-08-27 06:30:01 +02:00
Ole Markus With
41c3ff2aac
Make external dns provider configurable
2021-08-27 06:28:02 +02:00
Ole Markus With
38f805c5ef
Make external-dns a drop-in for dns-controller
...
Support TXT records
2021-08-27 06:24:47 +02:00
Kubernetes Prow Robot
bb38a3e52e
Merge pull request #12067 from h3poteto/iss-11608
...
Support AWS LB access log configuration in cluster spec
2021-08-25 16:51:23 -07:00
Ole Markus With
4ef0172ee9
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-08-23 11:48:20 +02:00
Kubernetes Prow Robot
20e472eded
Merge pull request #12170 from justinsb/gce_ipv6
...
Initial IPv6 support for GCE
2021-08-22 00:31:59 -07:00
Kubernetes Prow Robot
cf2b0febf1
Merge pull request #12183 from rifelpet/consolidate-iam
...
Consolidate statements in control plane IAM role
2021-08-21 19:09:59 -07:00
Justin SB
0722124e8e
Initial IPv6 support for GCE
...
Supporting IPv6 values where they can be set by the user, and ensuring
that IPv4 and IPv6 firewall rules are split because on GCP they cannot
be in the same rule.
2021-08-21 20:09:31 -04:00
Amit Prasad
48fa73f3bb
Add option in Cluster Autoscaler AddOn for AWS EC2 Static instance list
2021-08-21 22:44:31 +05:30
Peter Rifel
3db20bed01
./hack/update-expected.sh
2021-08-20 08:41:25 -05:00
Peter Rifel
67007e1a0a
Consolidate IAM statements
2021-08-19 23:16:04 -05:00
Ole Markus With
83d818705e
Don't set encryption type if encryption is disabled
2021-08-16 14:08:59 +02:00
Ole Markus With
7534890b3a
Use enum for cilium encryption types
2021-08-16 14:08:59 +02:00
dntosas
0e8d189aee
[cilium] Add support for encryption via WireGuard
...
In this commit, we enable users to choose WireGuard as their prefered
encryption type, leveraging this new feature from Cilium.
Ref: https://cilium.io/blog/2021/05/20/cilium-110#wireguard
Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-16 14:08:59 +02:00
Ole Markus With
caf46fef6a
Bump AWS CSI Driver to 1.2.0
2021-08-13 11:14:05 +02:00
Ole Markus With
133eb1f7ba
Bump cilium to 1.10.3
2021-08-12 21:12:25 +02:00
Ole Markus With
4e589431d5
Bump CAS for 1.22
2021-08-11 09:55:03 +02:00
Michael Wagner
e1f3c5dbf8
chore(openstack): make sure our port tags are short
...
OpenStack limits the tag length to 60 characters.
2021-08-09 08:49:12 +02:00
Michael Wagner
99330549e4
feat(openstack): enrich ports with more metadata
...
The overall goal is to get rid of the specific port names and replace
them with hashed ones. This in turn allows us to introduce rolling
updates for Openstack in a later stage.
2021-08-09 08:49:12 +02:00
Peter Rifel
9c824e80f8
Pass AZURE_ENVIRONMENT to nodeup
...
This allows nodeup to use the same azure environment as the kops cli, working towards support for azure government.
2021-08-08 15:34:44 -04:00
Kubernetes Prow Robot
64f00d71ae
Merge pull request #12109 from olemarkus/useserviceaccountexternalpermissions
...
Remove UseServiceAccountIAM feature flag and rename feature to UseServiceAccountExternalPermissions
2021-08-07 15:13:30 -07:00
Kubernetes Prow Robot
a9a5865032
Merge pull request #12111 from rifelpet/os-lb-vipacl
...
In-line openstack loadbalancer feature detection
2021-08-07 12:31:29 -07:00
Ole Markus With
0439bb0d76
Remove UseServiceAccountIAM feature flag and rename feature to UseServiceAccountExternalPermissions
2021-08-07 21:20:03 +02:00