Commit Graph

1350 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 5b1ffe535b
Merge pull request #16920 from rsafonseca/apiserver_env
Add support for configuring environment variables on kube-apiserver
2024-10-27 15:48:53 +00:00
Rafael da Fonseca 8b89e826d1 Add support for configuring environment variables on kube-apiserver 2024-10-25 10:44:14 +01:00
Rafael da Fonseca 7d673c0f7c Remove targetRamMb option, which was removed in kubernetes 1.24. Add watchCache and watchCacheSizes apiserver flags 2024-10-25 09:16:12 +01:00
Ciprian Hacman 453fc6de93 aws: Don't set MACAddressPolicy=none for Ubuntu 24.04 with VPC CNI 2024-10-06 15:48:58 +03:00
justinsb 8f1dae2785 Tweak kube-apiserver timeouts
It looks like the kube-apiserver startup has slowed down a lot
(e.g. creating a lot of RBAC stuff), and this likely times out with
the current settings on smaller machines (as found by our
VMs-in-github-actions tests).

Increase the timeouts, aligning with k/k and using the newer healthcheck endpoints.
2024-09-07 11:46:11 -04:00
justinsb 7f58570a04 metal: stub out functions to enable cluster creation
Start adding the minimal implementation such that we can `kops create cluster`
2024-08-29 22:39:48 -04:00
justinsb 733cce10b5 cleanup: better error messages for kube-apiserver healthcheck manifest
We log the full path, and use %w.
2024-08-27 08:50:01 -04:00
justinsb 3646a610b1 refactor: Move GetCloudProvider to cluster
This lets us use labels (or annotations), meaning we can experiment
with different clouds without changing the API.

We also add initial (experimental/undocumented) support for exposing a "Metal" provider.
2024-08-26 08:20:37 -04:00
Peter Rifel 0db825e20b
Dont install libcgroup on Rocky 9 2024-06-15 15:37:02 -05:00
Grégory SANCHEZ cb75d8ab71
feat(components): permit to define kube-controller-manager and kube-scheduler resources
Signed-off-by: Grégory SANCHEZ <gregory.sanchez@icloud.com>
2024-06-07 08:56:14 +02:00
Ciprian Hacman d33047cf7d hack/update-expected.sh 2024-05-07 18:58:14 +03:00
Peter Rifel 62df0dba04
Migrate AWS Verifier to aws-sdk-go-v2 2024-05-05 08:39:20 -04:00
Jesse Haka dd073d7c02 Support Authentication Config in APIserver 2024-05-04 14:51:45 +03:00
Jesse Haka a35c4f3c52 append AdditionalServiceAccountIssuers flags 2024-04-29 13:28:17 +03:00
Jesse Haka e60531d2a5 Support multiple service-account-issuer flags 2024-04-29 13:06:49 +03:00
Ciprian Hacman f073917ef1 aliyun: Remove some leftovers 2024-04-26 12:13:15 +03:00
cuiyourong 0aebba8798 Fix function name in comment
Signed-off-by: cuiyourong <cuiyourong@gmail.com>
2024-04-23 18:07:40 +08:00
Kubernetes Prow Robot 0449554565
Merge pull request #16486 from h3poteto/iss-16425-regexp
Fix getting crictl assets
2024-04-22 09:11:34 -07:00
AkiraFukushima ec47b3fea6
Make crictl and nerdctl error message to warning level 2024-04-22 22:53:38 +09:00
AkiraFukushima f9d6ff1d6a
Fix getting crictl assets
because multiple crictl binaries are found when you specify containerd packages
2024-04-22 22:12:01 +09:00
Ciprian Hacman b3e2797a79 hack/update-expected.sh 2024-04-22 11:20:15 +03:00
Peter Rifel 2bf59688c2
Migrate instance types to aws-sdk-go-v2 2024-04-13 16:01:41 -04:00
Peter Rifel 4418e65232
Migrate nodeup to aws-sdk-go-v2 2024-03-24 18:05:26 -05:00
Ciprian Hacman 66d4e9b559 Add validation to help users move from usePolicyConfigMap 2024-02-28 21:52:52 +02:00
Kubernetes Prow Robot 7385490512
Merge pull request #16383 from h3poteto/iss-15969/cli
Install nerdctl and crictl on nodes
2024-02-26 09:03:21 -08:00
Evan Lezar b76a215e5e Update NVIDIA Container Toolkit URL
The NVIDIA Container Toolkit packaging has been simplified to produce
a single deb (or rpm) package. This means that the URL is no longer
distribution dependent and the stable/deb repository path is used
instead.

Signed-off-by: Evan Lezar <evanlezar@gmail.com>
2024-02-26 09:30:44 +02:00
AkiraFukushima bd9cf4a3dc
Fix nits error messages 2024-02-26 00:05:31 +09:00
AkiraFukushima 2beee63f3e
Install crictl on node 2024-02-25 12:40:12 +09:00
AkiraFukushima d6e74ef9a1
Install nerdctl on nodes 2024-02-23 23:02:05 +09:00
Davanum Srinivas 29408196ca
Add support for AL2023 AMI to use Amazon VPC CNI
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-12 23:13:33 -05:00
Davanum Srinivas e1d696ab00
Set LimitNOFILE to 1048576 instead of `infinity`
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-08 09:50:19 -05:00
Moshe Vayner 1342fd1afa fix(nodeup): set `MACAddressPolicy` to `none` when using AWS CNI and Ubuntu 22.04 2024-02-02 23:03:30 -05:00
Jesse Haka f445dfc456
Revert "Don't set LimitNoFile for containerd systemd unit file" 2024-01-30 17:35:47 +02:00
Dmytro Kozlovskyi d9075f1d18 aws: fix maxPods when cilium ipam is used
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2024-01-17 16:12:09 +02:00
Ciprian Hacman 3c7e05f335 aws: Set provider ID when starting kubelet 2024-01-05 10:18:48 +02:00
Ciprian Hacman 91b261c86d aws: Use IMDS to retrieve certificate names 2024-01-04 18:02:01 +02:00
Ciprian Hacman f0376b7b2f aws: Retrieve instance info only when max pods is not set 2024-01-04 12:37:31 +02:00
Ciprian Hacman 62f9d4df6d Update k8s.io/* to v0.29.0 2024-01-02 08:46:39 +02:00
Ciprian Hacman 0be02417df gce: Remove custom resolver 2023-12-23 08:17:47 +02:00
upodroid 275c948cb6 stop specifying LimitNoFILE 2023-12-03 21:57:46 +00:00
justinsb 010a0d5e4c feat: Support PKI bootstrap
Similar to the TPM bootstrapping on GCE (indeed, a lot of the code is
modified from there), but we verify the PKI signature against a public
key in a Host CRD object.
2023-11-30 18:35:58 -05:00
Ciprian Hacman 3597bddeaf Fix vet error 2023-11-04 05:57:08 +02:00
Ciprian Hacman 7a1af66152 Add option to provide additional config entries for containerd 2023-10-27 08:56:34 +03:00
Kubernetes Prow Robot f7bd516b79
Merge pull request #15994 from fmuyassarov/add-nri-support
containerd: introduce a new field to enable NRI
2023-10-21 04:52:02 +02:00
Feruzjon Muyassarov 0aeab5e523 containerd: introduce a new field containerd.nri to enable NRI
Node Resource Interface (NRI) is a common framework for plugging
domain or vendor-specific custom logic into container runtime like
containerd. This commit introduces a new congiguration field
`containerd.nri`, providing cluster admins the flexibility to opt
in for this feature in containerd and tune some of its parameters.
By default, NRI is disabled here in accordance with the containerd's
default config file.

Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@intel.com>
2023-10-21 00:26:54 +03:00
upodroid 2b056b9b17 add support for auth-provider-gcp cred provider 2023-10-10 10:29:16 +01:00
upodroid 587233bddc fix cos mounter url 2023-09-14 21:31:36 +01:00
Ciprian Hacman 6e6a2a4e7b Address review comments 2023-09-05 12:34:20 +03:00
Ciprian Hacman c43b48a8d8 Remove Docker config option 2023-09-05 07:22:33 +03:00
John Gardiner Myers 1ea0fd3004 AWS always uses resource-based names 2023-09-04 16:08:48 -07:00