Commit Graph

2670 Commits

Author SHA1 Message Date
justinsb 169c96ba11 refactor: NetworkLoadBalancer Name should match Name tag
It was actually the terraform name, and didn't match the tag.

This change should have no externally-visible effect.
2024-01-28 16:19:02 -05:00
Jesse Haka 11e84b78f1 hack/update-expected 2024-01-22 19:02:44 +02:00
Jesse Haka 75659b6280 include kube-apiserver controlplane ports in dns=none 2024-01-22 18:41:30 +02:00
Kubernetes Prow Robot 9645e5c7e9
Merge pull request #16265 from borg-land/network-patch
gce: fix nlb firewall rules, operations and alias network subnets
2024-01-20 17:20:59 +01:00
Kubernetes Prow Robot 89b7b14176
Merge pull request #15829 from justinsb/refactor_forapiserver
Refactor: Replace ForAPIServer with WellKnownServices
2024-01-20 17:20:53 +01:00
upodroid f3bc523b17 fix nlb firewall rules, operations and alias network subnets 2024-01-20 13:41:16 +00:00
Ciprian Hacman 9f7c59236b Update containerd to v1.7.12 2024-01-18 05:27:41 +02:00
justinsb ae226db932 autogen: update expected test values for WellKnownServices 2024-01-12 16:06:43 -05:00
justinsb 50776a7e92 Refactor ForAPIServer
We instead return a list of the services we are supporting.

We can in future split out internal and external apiserver services.
2024-01-12 15:53:41 -05:00
Kubernetes Prow Robot c7ad6e9f22
Merge pull request #16239 from hakman/aws-ebs-csi-zone
aws: Update EBS CSI driver
2024-01-09 13:17:39 +01:00
Ciprian Hacman 4ebda3e955 aws: Update EBS CSI driver to v1.26.1 2024-01-09 12:28:32 +02:00
Ciprian Hacman 41d4e54920 Replace `k8s.io/utils/strings/slices` with `golang.org/x/exp/slices` 2024-01-09 08:40:57 +02:00
Ciprian Hacman 37a184601b aws: Update EBS CSI driver to v1.26.0 2024-01-05 19:13:01 +02:00
Kubernetes Prow Robot 120220913d
Merge pull request #16219 from ameukam/servicelinkrole-elasticlb
Add permission needed for service-linked role creation
2024-01-05 02:08:56 +01:00
Arnaud Meukam 282ae1335d
hack/update-expected.sh execution results
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2024-01-04 23:55:55 +01:00
Arnaud Meukam ce340c6059
Add permission needed for service-linked role creation
Attempting to fix:
  - https://github.com/kubernetes/kops/issues/16218

by adding the permission needed for the AWS CCM to create a service-linked role for the elastic lb service.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2024-01-04 23:19:14 +01:00
Kubernetes Prow Robot a8305d2a17
Merge pull request #16214 from hakman/cilium-1.14.5
Update to Cilium 1.14.5
2024-01-04 09:06:02 +01:00
Ciprian Hacman 5277835620 Update to Cilium 1.14.5 2024-01-04 06:49:21 +02:00
Peter Rifel 349de70cda
Add comment to remove unused IAM permissions in the future 2024-01-03 21:19:05 -06:00
Justin Santa Barbara 0300a3b858
Release 1.29.0-alpha.3 (#16183) 2023-12-21 14:24:27 +01:00
Peter Rifel 6e337da7f0
Always set the paginated instance group field 2023-12-20 20:05:48 -06:00
Ciprian Hacman e95dab5408 aws: Add KMS to EBS CSI Driver 2023-12-13 03:13:04 +02:00
Ciprian Hacman 24a8bc39d5 aws: Always add KMS permissions to control plane 2023-12-13 02:56:23 +02:00
Peter Rifel 5ce66a9d28
Upgrade Karpenter to v0.31.3 2023-12-07 19:12:06 -06:00
Kubernetes Prow Robot a4bd641630
Merge pull request #16050 from sl1pm4t/gcp-sa-issuer
gce: Add support for publishing Service Account Issuer documents to GCS
2023-12-03 01:41:43 +01:00
Kubernetes Prow Robot 7c17b16a96
Merge pull request #16099 from spotinst/feat/add_multi_arch_base127_rebase
Spotinst: Feature/add multi arch in VNG and resource tag specification
2023-11-23 15:59:58 +01:00
Peter Rifel 386352ea17
Upgrade AWS EBS CSI Driver to v1.25.0 2023-11-20 22:35:27 -06:00
AkiraFukushima 91d3e89313
Replace * in IAM tags when IRSA namespace has wildcard 2023-11-20 21:48:10 +09:00
yehielnetapp af19ad5664 add feature base 2023-11-12 14:19:37 +02:00
yehielnetapp 00fc4e78e8 add Label Resource Tag Specification Volumes 2023-11-12 14:19:15 +02:00
Ciprian Hacman 8916d1e547
Release 1.29.0-alpha.2 (#16095) 2023-11-11 13:29:12 +01:00
upodroid ecf212d736 add --node-instance-group flag to ginkgo 2023-10-26 23:08:18 +01:00
Kubernetes Prow Robot 165cbd5333
Merge pull request #15705 from zadjadr/feature/cilium-14
Bump to Cilium 1.14
2023-10-25 19:54:22 +02:00
shapirus dd665fbe1e Support setting cluster-autoscaler's skip-nodes-with-custom-controller-pods parameter 2023-10-25 14:03:57 +03:00
zadjadr 30aa24f6de
Update to Cilium 1.14.3 2023-10-24 16:59:21 +02:00
zadjadr 4dfaba5242
Bump Cilium to v1.14.2 2023-10-24 16:55:37 +02:00
Matt Morrison 811f7d0420
Push issuer documents to GCS 2023-10-24 07:57:21 +13:00
Ciprian Hacman ab05ebb28f Update containerd to v1.7.7 2023-10-22 13:45:12 +03:00
Matt Morrison 0be24991da
Add cloud-platform GCP VM scope 2023-10-11 19:59:25 +13:00
Ciprian Hacman 6dd31d9680 aws: Attach security group to NLBs for kops-controller 2023-10-08 09:16:35 +03:00
Kubernetes Prow Robot d2b789da07
Merge pull request #15993 from johngmyers/nlb-sg
aws: Attach security groups to NLBs
2023-10-07 10:57:01 +02:00
John Gardiner Myers 9f40d59545 Improve removal of orphaned security group rules 2023-10-06 22:33:31 -07:00
John Gardiner Myers 2fbc7cf979 aws: Attach security groups to NLBs 2023-10-06 22:33:31 -07:00
Kubernetes Prow Robot 24f23543b4
Merge pull request #15972 from borg-land/bump-gcp-ccm
Bump GCP CCM again
2023-10-07 03:41:20 +02:00
upodroid e08472ddc5 bump cloud-provider-gcp to latest build 2023-10-06 17:52:23 +01:00
Ciprian Hacman f26874c37e aws: Don't add dependency on additional CIDR for shared VPC 2023-10-03 07:24:12 +03:00
Mia-Cross e12f3dc07b
scaleway: terraform support (#15892)
* tasks dependencies

* FindAddresses should proceed even if LBID is empty

* refacto instance: handle several instances in IG + volumeSize in model

* refacto lb_backend: set servers' IPs in backend task rather than instance

* dns changes for tf support

* render Scaleway s3 objects + add zone to outputs

* add terraform support to documentation

* new instance unique name should be given according to actual instances names

* avoid untimely changes in tf + tag instance IPs to avoid orphaned IPs at cluster deletion

* update integration tests

* review comments

* add IPs to the resources to be deleted with the cluster

* add task + model for DNS record
2023-09-29 04:22:42 -07:00
upodroid d630f9c520 add missing rbac roles and don't run gkenetparamset controller 2023-09-28 12:06:52 +01:00
upodroid de0c99b192 bump gcp ccm image and dump more resources 2023-09-27 15:04:51 +01:00
Ciprian Hacman 626213c2c1 hack/update-expected.sh 2023-09-25 18:21:49 +02:00