Commit Graph

3452 Commits

Author SHA1 Message Date
Ole Markus With 1868313497 Add snapshot-controller 2021-05-22 09:19:35 +02:00
Ole Markus With 5869d4e6d4 Bump default cilium to 1.9.7 2021-05-21 18:54:03 +02:00
Ole Markus With 46e13c0009 Bump snapshot-controller version
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>

Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-21 15:40:40 +02:00
Kubernetes Prow Robot 06835e219d
Merge pull request #11542 from rifelpet/tf-fn
Add support for arbitrary terraform functions
2021-05-21 06:30:53 -07:00
Kubernetes Prow Robot 8a6ec1416c
Merge pull request #11491 from olemarkus/cas-update-manifest
Update CAS manifest
2021-05-21 04:52:46 -07:00
Kubernetes Prow Robot 8e938ba5ee
Merge pull request #11500 from dntosas/coredns-bump-manifest
Bump CoreDNS manifests to latest stable version 1.8.3
2021-05-21 00:28:57 -07:00
Peter Rifel 01138a3995
Add support for arbitrary terraform functions
This allows terraformWriter.LiteralFunctionExpression to be used with any terraform function.

The arguments must be strings, which means that any string arguments must include quotes.
2021-05-19 22:40:34 -05:00
Kubernetes Prow Robot 6fa20ebe83
Merge pull request #11540 from rifelpet/tf-b64
Support terraform 0.12+'s filebase64() in json output
2021-05-19 20:35:04 -07:00
Kubernetes Prow Robot 4a5d04d94f
Merge pull request #11497 from johngmyers/cleanup-iam
Cleanup orphaned IAM service account roles in direct render
2021-05-19 18:35:05 -07:00
Peter Rifel c9f810d57e
Support terraform 0.12+'s filebase64() in json output
Originally the JSON output was meant as a bridge between the 0.11 and 0.12 support.
Now that we've dropped support for 0.11, we can use filebase64() instead of encoding the userdata in the file ourselves.
2021-05-19 17:42:50 -05:00
Kubernetes Prow Robot 12b98196aa
Merge pull request #11535 from hakman/containerd-1.4.6
Update containerd to v1.4.6
2021-05-19 12:00:51 -07:00
Ciprian Hacman 6e6a224f9d Update containerd to v1.4.6 2021-05-19 20:27:28 +03:00
Ole Markus With 2fb1861528 Update CAS manifest
Upstream examples were missing a number of improvements.
This commit also adds template functions for making controllers such as CAS more HA on HA clusters
2021-05-19 16:12:51 +02:00
Michael Wagner e4a2a5b86c feat(openstack): enable configuration of servergroup affinities
This enables us to change the ServerGroup affinity policies using
annotations on instance groups.

The default affinity policy still is "anti-affinity".
2021-05-19 13:11:08 +02:00
Kubernetes Prow Robot 16f7208c8c
Merge pull request #11525 from olemarkus/ebs-csi-default-fs
Set default fstype for ebs volumes to ext4
2021-05-19 02:38:51 -07:00
Ole Markus With 05cac12c19 Set default fstype for ebs volumes to ext4 2021-05-19 09:54:31 +02:00
Kubernetes Prow Robot e8e5bf2ed3
Merge pull request #11517 from olemarkus/aws-lb-default-tags
Add default tags to LB controller and cilium eni resources
2021-05-18 21:50:50 -07:00
Kubernetes Prow Robot fe7d6e5516
Merge pull request #11442 from hakman/ipv6
Add initial support for configuring IPv6 with AWS
2021-05-18 21:02:50 -07:00
Ciprian Hacman cedbe1f360 Add initial support for configuring IPv6 with AWS 2021-05-19 06:21:07 +03:00
Ole Markus With 22f3a4aff8 Add default tags to LB controller and cilium eni resources 2021-05-18 19:02:40 +02:00
Kubernetes Prow Robot a1e331a46b
Merge pull request #11498 from johngmyers/cloud-statusstore
Subsume StatusStore into fi.Cloud
2021-05-18 06:29:31 -07:00
liranp 6b61445414
feat(spot/addon): bump ocean-controller to 1.0.75 2021-05-18 13:55:58 +03:00
dntosas da42becf08
[addons/coredns] Bump manifests to latest stable version 1.8.3
In this commit, we update manifest files of CoreDNS. We also do a small
refactoring on yaml blocks to match the upstream source and to make
updating and reviewing procedures easier on the future.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-16 11:37:12 +03:00
Kubernetes Prow Robot 07a9ed9c27
Merge pull request #11459 from nettoclaudio/fix/add-rbac-endpointslices
fix(coredns/rbac): add permission to list and watch endpointslices
2021-05-16 01:07:59 -07:00
John Gardiner Myers dd605fdbc3 Subsume StatusStore into fi.Cloud 2021-05-15 17:39:32 -07:00
John Gardiner Myers 1dab19f499 Require fi.Cloud to implement kops.StatusStore 2021-05-15 15:54:38 -07:00
John Gardiner Myers 4090c07e01 Move ELB/NLB query functions into AWSCloud 2021-05-15 15:22:01 -07:00
John Gardiner Myers 4baf2cbdcf Delete IAM roles no longer in the model 2021-05-15 12:03:23 -07:00
John Gardiner Myers 11f28b6d90 Announce k8s removals two kOps versions in advance 2021-05-13 21:32:00 -07:00
Kubernetes Prow Robot b9382b55c4
Merge pull request #11368 from nckturner/aws-ccm-fixes-5-2
[AWS CCM] Permission to create SA token
2021-05-13 17:42:04 -07:00
Ciprian Hacman a39d829f1f Set canonical location for downloads to artifacts.k8s.io
And remove the legacy location for downloads.
2021-05-14 00:41:56 +03:00
Nick Turner 0239dc1f63 Permission to create servcice account tokens
* We need the ability to create service account token
  because this is required by clientbuilder/controller-manager
  framework which we will be using in 1.21.
* This is required for the CCM to use 1 SA per controller, which
  follows principle of least privilege and makes audit logs easier
  to understand
* Restricts token creation to resource names "node-controller",
  "service-controller", and "route-controller".
2021-05-13 14:16:59 -07:00
Kubernetes Prow Robot 3d5a4127b8
Merge pull request #11457 from nicktrav/nickt.force-send
upup: gcetasks: force send AutoCreateSubnetworks field when set to false
2021-05-13 08:16:26 -07:00
Kubernetes Prow Robot 8a28545288
Merge pull request #11460 from nicktrav/nickt.diffs
upup: gcetasks: fix diffs in instance template and router
2021-05-13 00:18:25 -07:00
Claudio Netto b53fba195d
tests: fixing the coredns manifest hash 2021-05-12 15:20:58 -03:00
Ciprian Hacman bdd63c917f Allow AWS instance types with multiple architectures
Older AWS instance types support both "i386" and "x86_64" architectures:
```
$ aws ec2 describe-instance-types --instance-types t2.micro
{
    "InstanceTypes": [
            "InstanceType": "t2.micro",
            "ProcessorInfo": {
                "SupportedArchitectures": [
                    "i386",
                    "x86_64"
                ],
```
2021-05-12 14:05:12 +03:00
Nick Travers ddaedb4ef9 upup: gcetasks: fix diffs in instance template and router
Use the last component of the self-url for a router's region, rather
than the full URL.

Explicitly set the boolean pointer for `HasExternalIP` if the interface
attached to the instance does not have an access config (i.e. has no
public internet access).

Without this patch, both the router and instance template show pending
updates, neither of which can be applied as both are immutable
resources.

Signed-off-by: Nick Travers <n.e.travers@gmail.com>
2021-05-11 13:39:36 -07:00
Kubernetes Prow Robot abc6bc087c
Merge pull request #11452 from johngmyers/refactor-lt
Simplify buildLaunchTemplateTask() part one
2021-05-11 11:56:37 -07:00
Nick Travers c4b9241141 upup: gcetasks: force send AutoCreateSubnetworks field when set to false
When a struct contains a default value, it is not present in the
serialized output attached to request bodies sent to GCP. In the case
that a user wishes to explicitly set the `AutoCreateSubnetworks` field
to `false`, the request sent to GCP does not contain this directive, and
the network is provisioned with the default of `true`.

Explicitly specify that the `false` value should be present on the
request sent to the GCP API, making use of the `ForceSendFields` field
in the requset struct.

Signed-off-by: Nick Travers <n.e.travers@gmail.com>
2021-05-11 09:37:36 -07:00
John Gardiner Myers 4657cb94d6 Refactor LaunchTemplate.AssociatePublicIP 2021-05-10 22:47:48 -07:00
Alexander Block 859171eeac Sort --extra-tags of ebs-csi-driver
Without sorting, the order is random and thus causes unnecessary cluster
updates.
2021-05-10 07:17:47 +02:00
Kubernetes Prow Robot 7db45cb5fa
Merge pull request #11418 from dntosas/aws-csi-ga-release
[addons/awscsidriver] Bump to GA release
2021-05-08 02:46:47 -07:00
dntosas f8ece50a96
[addons/awscsidriver] Bump to GA release
Bump version and manifests of AWS EBS CSI Driver to the first GA
release.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-08 11:47:43 +03:00
John Gardiner Myers 36f93d0069 hack/update-expected.sh 2021-05-07 23:40:03 -07:00
John Gardiner Myers d3469d6ec2 Remove code for no-longer-supported k8s versions 2021-05-07 23:40:03 -07:00
John Gardiner Myers 3aa8d40052 Release 1.22.0-alpha.1 2021-05-07 13:45:35 -07:00
John Gardiner Myers 81956f622c Prepare for kOps 1.22 2021-05-07 13:44:58 -07:00
John Gardiner Myers a159b69cec Remove the PublicJWKS feature flag 2021-05-06 11:05:24 -07:00
Kubernetes Prow Robot e3fbc2ad04
Merge pull request #11378 from olemarkus/cilium-no-hubble-no-secret
Don't try to mount hubble TLS on the agent if we don't use hubble
2021-05-04 04:05:11 -07:00
Ole Markus With 2c95c2fe50 Don't try to mount hubble TLS on the agent if we don't use hubble 2021-05-04 11:26:20 +02:00