Commit Graph

2531 Commits

Author SHA1 Message Date
Ole Markus With 1698069ae2 Update pkg/apis/kops/networking.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-23 08:04:34 +02:00
Ole Markus With b3505030c3 Fix containerd test 2020-05-22 09:56:19 +02:00
Ole Markus With fc0f7f237c Fix UsesKubenet call in containerd.go 2020-05-22 09:14:36 +02:00
Ole Markus With 6e04586361 Docs fixes 2020-05-22 08:08:58 +02:00
Ole Markus With 82c4670f04 Small comment adjustments 2020-05-22 08:08:58 +02:00
Ole Markus With 77aab657cc Copy comments 2020-05-22 08:08:58 +02:00
Ole Markus With 30a2ec7d4d Update pkg/apis/kops/v1alpha2/networking.go
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2020-05-22 08:08:58 +02:00
Ole Markus With eebb605c9c Remove as much of the classic networking logic as we can 2020-05-22 08:08:58 +02:00
Ole Markus With d1ff25bb4e Remove some rather long networking nil checks 2020-05-22 08:08:58 +02:00
Ole Markus With 95d2170fa6 Update networking in kops create
* Remove classic from cli docs. Add missing providers
* Use cilium instead of weave in example since we don't consider weave stable
2020-05-22 08:08:58 +02:00
Kubernetes Prow Robot 2c899d859a
Merge pull request #9104 from hakman/containerd-kubenet
Add support for Kubenet with containerd
2020-05-21 22:20:38 -07:00
John Gardiner Myers 8a6d29cd40 Remove support for reading legacy-format keypairs 2020-05-20 13:28:13 -07:00
Kubernetes Prow Robot 83c2a0885e
Merge pull request #8989 from hs0210/work
Add unit test for func matchesElbTags
2020-05-19 22:08:30 -07:00
Kubernetes Prow Robot 96819c2e48
Merge pull request #8950 from justinsb/apiserver-test1
Create golden image test for nodeup kube-apiserver
2020-05-19 22:08:18 -07:00
Kubernetes Prow Robot 204cf58c96
Merge pull request #9124 from johngmyers/bastion-private
Don't put bastions in the utility subnets
2020-05-19 21:26:18 -07:00
Kubernetes Prow Robot 26421c3081
Merge pull request #9133 from justinsb/service_account_jwks_uri_flag
Map kube-apiserver service-account-jwks-uri flag
2020-05-19 20:54:18 -07:00
Ciprian Hacman 9d666c73bc Use components.UsesKubenet to check if Kubenet is required 2020-05-19 20:43:33 +03:00
Justin Santa Barbara 35c6056fb2 Create golden image test for nodeup kube-apiserver
The building of the manifests for nodeup tasks can be a little opaque;
create a test to verify and expose what is happening.
2020-05-18 06:42:16 -04:00
Kubernetes Prow Robot 2e5d4761d0
Merge pull request #8464 from justinsb/google_clouddns_delete_records
DNS: Don't try to apply empty changesets
2020-05-17 16:17:36 -07:00
Kubernetes Prow Robot bda2a15ee6
Merge pull request #9024 from tomesm/support_launch_template
Added Launch Template support for instance interruption behavior
2020-05-17 15:35:36 -07:00
Justin Santa Barbara 3306549749 Add general contract test for IsEmpty
This was the root bug that was causing the over-logging on GCE.
2020-05-17 17:11:01 -04:00
Justin Santa Barbara 7e710e85d9 DNS: Apply should be a no-op when empty
Document the contract a bit more, change the signature by adding a
context arg and following through to make sure we honor the contract
everywhere.
2020-05-17 16:45:08 -04:00
Justin SB ae4381c555 Map kube-apiserver service-account-jwks-uri flag
This is needed/useful for identity federation to AWS.
2020-05-16 22:03:47 -04:00
Kubernetes Prow Robot 66b5322037
Merge pull request #8960 from q384566678/add-ut
add some unit tests
2020-05-16 15:37:36 -07:00
Kubernetes Prow Robot 50a1a8edfb
Merge pull request #9121 from atmosx/master
Add EC2 Instance LifeCycle label
2020-05-15 11:17:37 -07:00
Panagiotis Atmatzidis 31acabf8cd
Add EC2 instance lifecycle label to nodes
When using a "mixed instance policy"[1] instance group spot and onDemand nodes are part of the same
ASG. The ASG handles the percentage of spot vs onDemand instances. There are no annotations, EC2 tags or labels to identify which
instances are onDemand vs spot. There is a field called `InstanceLifecycle` accessible through `EC2.DescribeInstances`.

The field `InstanceLifecycle` is available only in `spot` and
`scheduled` AWS EC2 instance types.

This PR introduces a new label to be attached on AWS EC2 spot nodes.

The label is:

```
node-role.kubernetes.io/spot-worker: "true"
```

or

```
node-role.kubernetes.io/scheduled-worker: "true"
```

[^1]: https://github.com/kubernetes/kops/blob/master/docs/instance_groups.md#mixedinstancepolicy-aws-only
2020-05-15 09:33:37 +03:00
Kubernetes Prow Robot a454f0ff83
Merge pull request #9118 from johngmyers/validate-missing-asg
Return cluster validation failure if ASG missing
2020-05-13 14:36:23 -07:00
John Gardiner Myers 154833e652 Fail cluster validation if too few nodes for ig's target size 2020-05-12 22:28:26 -07:00
John Gardiner Myers ec4fe1e7e8 Don't put bastions in the utility subnets 2020-05-12 22:06:34 -07:00
Kubernetes Prow Robot d7d61c683d
Merge pull request #9091 from spotinst/feat-addon-featureflag
Spotinst: Allow users to disable the controller add-on
2020-05-12 09:34:22 -07:00
Ciprian Hacman e608cd5265 Add support for Kubenet with containerd 2020-05-12 17:20:59 +03:00
Zhou Hao 1a1be5f60a model: add UT for DefaultInstanceGroupVolumeSize
Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>
2020-05-12 17:26:08 +08:00
John Gardiner Myers 23d48f01d6 Return cluster validation failure if ASG missing 2020-05-11 21:19:02 -07:00
Jesse Haka bdaeb6df36 upgrade to cinder v3 to use api 2020-05-11 08:06:13 +03:00
Martin Tomes 224351a4b7
Update pkg/apis/kops/instancegroup.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:32 +02:00
Martin Tomes dd67149e99
Update pkg/apis/kops/v1alpha2/instancegroup.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:17 +02:00
Kubernetes Prow Robot dbf709e975
Merge pull request #9098 from justinsb/enable_healthcheck_1_17_on_master
kube-apiserver-healthcheck: actually enable on 1.17
2020-05-08 11:59:51 -07:00
Justin Santa Barbara 8db0017e62 kube-apiserver-healthcheck: actually enable on 1.17
We cherry picked the support to 1.17, but now we need to activate the
feature.
2020-05-08 13:32:22 -04:00
Justin Santa Barbara 86fb6031fd Fix port conflict on etcd-cilium vs dns-controller memberlist
Both were allocated port 3993; etcd-cilium is new and so it is less
impactful to renumber that.
2020-05-08 10:53:53 -04:00
liranp 4f207e4ac3
feat(spotinst): allow users to disable the controller addon 2020-05-07 18:11:17 +03:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Jesse Haka facd12dd32
Revert "feat(openstack): propagate cloud labels to machines" 2020-05-07 12:06:58 +03:00
Kubernetes Prow Robot e4ca5a000d
Merge pull request #9068 from andersosthus/disable-attach-detach-sync
Added support for configuring disable-attach-detach-reconcile-sync in…
2020-05-06 10:25:08 -07:00
Kubernetes Prow Robot 4f6496c274
Merge pull request #9052 from johngmyers/natgateway-notfound
Treat NatGatewaysNotFound error as already-deleted
2020-05-06 06:49:21 -07:00
Anders Østhus 9409e2af67 Added support for configuring disable-attach-detach-reconcile-sync in k-c-m config 2020-05-05 15:26:58 +02:00
John Gardiner Myers 463456737c Treat NatGatewaysNotFound error as already-deleted 2020-05-04 20:33:21 -07:00
Kubernetes Prow Robot 7da181e7a4
Merge pull request #9049 from johngmyers/validate-more-static
Validate more static pods on masters
2020-05-04 10:56:26 -07:00
John Gardiner Myers 843e5b9b16 Move GCEServiceAccount into CloudConfig 2020-05-03 20:35:32 -07:00
John Gardiner Myers 06376302e4 Don't test static pods on non-ready nodes 2020-05-02 22:09:53 -07:00
John Gardiner Myers c524290f9e Test more static pods during cluster validation 2020-05-02 22:09:53 -07:00