Ole Markus With
1698069ae2
Update pkg/apis/kops/networking.go
...
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-23 08:04:34 +02:00
Ole Markus With
b3505030c3
Fix containerd test
2020-05-22 09:56:19 +02:00
Ole Markus With
fc0f7f237c
Fix UsesKubenet call in containerd.go
2020-05-22 09:14:36 +02:00
Ole Markus With
6e04586361
Docs fixes
2020-05-22 08:08:58 +02:00
Ole Markus With
82c4670f04
Small comment adjustments
2020-05-22 08:08:58 +02:00
Ole Markus With
77aab657cc
Copy comments
2020-05-22 08:08:58 +02:00
Ole Markus With
30a2ec7d4d
Update pkg/apis/kops/v1alpha2/networking.go
...
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2020-05-22 08:08:58 +02:00
Ole Markus With
eebb605c9c
Remove as much of the classic networking logic as we can
2020-05-22 08:08:58 +02:00
Ole Markus With
d1ff25bb4e
Remove some rather long networking nil checks
2020-05-22 08:08:58 +02:00
Ole Markus With
95d2170fa6
Update networking in kops create
...
* Remove classic from cli docs. Add missing providers
* Use cilium instead of weave in example since we don't consider weave stable
2020-05-22 08:08:58 +02:00
Kubernetes Prow Robot
2c899d859a
Merge pull request #9104 from hakman/containerd-kubenet
...
Add support for Kubenet with containerd
2020-05-21 22:20:38 -07:00
John Gardiner Myers
8a6d29cd40
Remove support for reading legacy-format keypairs
2020-05-20 13:28:13 -07:00
Kubernetes Prow Robot
83c2a0885e
Merge pull request #8989 from hs0210/work
...
Add unit test for func matchesElbTags
2020-05-19 22:08:30 -07:00
Kubernetes Prow Robot
96819c2e48
Merge pull request #8950 from justinsb/apiserver-test1
...
Create golden image test for nodeup kube-apiserver
2020-05-19 22:08:18 -07:00
Kubernetes Prow Robot
204cf58c96
Merge pull request #9124 from johngmyers/bastion-private
...
Don't put bastions in the utility subnets
2020-05-19 21:26:18 -07:00
Kubernetes Prow Robot
26421c3081
Merge pull request #9133 from justinsb/service_account_jwks_uri_flag
...
Map kube-apiserver service-account-jwks-uri flag
2020-05-19 20:54:18 -07:00
Ciprian Hacman
9d666c73bc
Use components.UsesKubenet to check if Kubenet is required
2020-05-19 20:43:33 +03:00
Justin Santa Barbara
35c6056fb2
Create golden image test for nodeup kube-apiserver
...
The building of the manifests for nodeup tasks can be a little opaque;
create a test to verify and expose what is happening.
2020-05-18 06:42:16 -04:00
Kubernetes Prow Robot
2e5d4761d0
Merge pull request #8464 from justinsb/google_clouddns_delete_records
...
DNS: Don't try to apply empty changesets
2020-05-17 16:17:36 -07:00
Kubernetes Prow Robot
bda2a15ee6
Merge pull request #9024 from tomesm/support_launch_template
...
Added Launch Template support for instance interruption behavior
2020-05-17 15:35:36 -07:00
Justin Santa Barbara
3306549749
Add general contract test for IsEmpty
...
This was the root bug that was causing the over-logging on GCE.
2020-05-17 17:11:01 -04:00
Justin Santa Barbara
7e710e85d9
DNS: Apply should be a no-op when empty
...
Document the contract a bit more, change the signature by adding a
context arg and following through to make sure we honor the contract
everywhere.
2020-05-17 16:45:08 -04:00
Justin SB
ae4381c555
Map kube-apiserver service-account-jwks-uri flag
...
This is needed/useful for identity federation to AWS.
2020-05-16 22:03:47 -04:00
Kubernetes Prow Robot
66b5322037
Merge pull request #8960 from q384566678/add-ut
...
add some unit tests
2020-05-16 15:37:36 -07:00
Kubernetes Prow Robot
50a1a8edfb
Merge pull request #9121 from atmosx/master
...
Add EC2 Instance LifeCycle label
2020-05-15 11:17:37 -07:00
Panagiotis Atmatzidis
31acabf8cd
Add EC2 instance lifecycle label to nodes
...
When using a "mixed instance policy"[1] instance group spot and onDemand nodes are part of the same
ASG. The ASG handles the percentage of spot vs onDemand instances. There are no annotations, EC2 tags or labels to identify which
instances are onDemand vs spot. There is a field called `InstanceLifecycle` accessible through `EC2.DescribeInstances`.
The field `InstanceLifecycle` is available only in `spot` and
`scheduled` AWS EC2 instance types.
This PR introduces a new label to be attached on AWS EC2 spot nodes.
The label is:
```
node-role.kubernetes.io/spot-worker: "true"
```
or
```
node-role.kubernetes.io/scheduled-worker: "true"
```
[^1]: https://github.com/kubernetes/kops/blob/master/docs/instance_groups.md#mixedinstancepolicy-aws-only
2020-05-15 09:33:37 +03:00
Kubernetes Prow Robot
a454f0ff83
Merge pull request #9118 from johngmyers/validate-missing-asg
...
Return cluster validation failure if ASG missing
2020-05-13 14:36:23 -07:00
John Gardiner Myers
154833e652
Fail cluster validation if too few nodes for ig's target size
2020-05-12 22:28:26 -07:00
John Gardiner Myers
ec4fe1e7e8
Don't put bastions in the utility subnets
2020-05-12 22:06:34 -07:00
Kubernetes Prow Robot
d7d61c683d
Merge pull request #9091 from spotinst/feat-addon-featureflag
...
Spotinst: Allow users to disable the controller add-on
2020-05-12 09:34:22 -07:00
Ciprian Hacman
e608cd5265
Add support for Kubenet with containerd
2020-05-12 17:20:59 +03:00
Zhou Hao
1a1be5f60a
model: add UT for DefaultInstanceGroupVolumeSize
...
Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>
2020-05-12 17:26:08 +08:00
John Gardiner Myers
23d48f01d6
Return cluster validation failure if ASG missing
2020-05-11 21:19:02 -07:00
Jesse Haka
bdaeb6df36
upgrade to cinder v3 to use api
2020-05-11 08:06:13 +03:00
Martin Tomes
224351a4b7
Update pkg/apis/kops/instancegroup.go
...
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:32 +02:00
Martin Tomes
dd67149e99
Update pkg/apis/kops/v1alpha2/instancegroup.go
...
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:17 +02:00
Kubernetes Prow Robot
dbf709e975
Merge pull request #9098 from justinsb/enable_healthcheck_1_17_on_master
...
kube-apiserver-healthcheck: actually enable on 1.17
2020-05-08 11:59:51 -07:00
Justin Santa Barbara
8db0017e62
kube-apiserver-healthcheck: actually enable on 1.17
...
We cherry picked the support to 1.17, but now we need to activate the
feature.
2020-05-08 13:32:22 -04:00
Justin Santa Barbara
86fb6031fd
Fix port conflict on etcd-cilium vs dns-controller memberlist
...
Both were allocated port 3993; etcd-cilium is new and so it is less
impactful to renumber that.
2020-05-08 10:53:53 -04:00
liranp
4f207e4ac3
feat(spotinst): allow users to disable the controller addon
2020-05-07 18:11:17 +03:00
Justin SB
75fd939a62
kube-apiserver: healthcheck via sidecar container
...
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled. That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.
Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.
This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Jesse Haka
facd12dd32
Revert "feat(openstack): propagate cloud labels to machines"
2020-05-07 12:06:58 +03:00
Kubernetes Prow Robot
e4ca5a000d
Merge pull request #9068 from andersosthus/disable-attach-detach-sync
...
Added support for configuring disable-attach-detach-reconcile-sync in…
2020-05-06 10:25:08 -07:00
Kubernetes Prow Robot
4f6496c274
Merge pull request #9052 from johngmyers/natgateway-notfound
...
Treat NatGatewaysNotFound error as already-deleted
2020-05-06 06:49:21 -07:00
Anders Østhus
9409e2af67
Added support for configuring disable-attach-detach-reconcile-sync in k-c-m config
2020-05-05 15:26:58 +02:00
John Gardiner Myers
463456737c
Treat NatGatewaysNotFound error as already-deleted
2020-05-04 20:33:21 -07:00
Kubernetes Prow Robot
7da181e7a4
Merge pull request #9049 from johngmyers/validate-more-static
...
Validate more static pods on masters
2020-05-04 10:56:26 -07:00
John Gardiner Myers
843e5b9b16
Move GCEServiceAccount into CloudConfig
2020-05-03 20:35:32 -07:00
John Gardiner Myers
06376302e4
Don't test static pods on non-ready nodes
2020-05-02 22:09:53 -07:00
John Gardiner Myers
c524290f9e
Test more static pods during cluster validation
2020-05-02 22:09:53 -07:00