Commit Graph

908 Commits

Author SHA1 Message Date
jjinno 3463a9fd5e
update NPD to version 0.8.12
specifically to get multi-arch support
2022-10-04 15:51:46 -07:00
Thomas Colomb e5ddd5b0c3 cluster-autoscaler : Add scaleDownUnneededTime and scaleDownUnreadyTime 2022-10-04 18:57:21 +02:00
Ciprian Hacman 85026145a1 Always infer gossip DNS from cluster name 2022-10-02 12:54:37 +03:00
Ciprian Hacman 1eb35d9686
Release 1.26.0-alpha.1 (#14311) 2022-09-21 01:28:54 -07:00
Kubernetes Prow Robot d2f8b98f94
Merge pull request #14309 from hakman/hetzner_ccm_config
Hetzner: Generate CCM args from external CCM config
2022-09-21 00:36:53 -07:00
Ciprian Hacman d8b92aafae hetzner: Generate CCM args from external CCM config 2022-09-21 08:17:32 +03:00
Ole Markus With 74afb7aed0 Remove checks for k8s < 1.21 2022-09-19 19:12:53 +02:00
Ole Markus With e5d33401dc Remove k8s GTE 1.20 checks as it is always true 2022-09-17 20:17:23 +02:00
Ole Markus With 22687c48c2 Bump tests to supported k8s version 2022-09-17 20:17:15 +02:00
Ole Markus With 33fa4de890 Bump verbosity level for some log statements 2022-09-11 16:15:28 +02:00
Kubernetes Prow Robot d4b72f394a
Merge pull request #14229 from olemarkus/cert-manager-hostedzones
Allow cert-manager the privileges needed to resolve dns-01 challenges
2022-09-06 00:24:56 -07:00
Ole Markus With 5604fe1ad8 Bump cluster-autoscaler images 2022-09-05 21:35:24 +02:00
Ole Markus With 6548ca6ca7 Don't add add IAM vars to manifest if service account is not being created
In the case IRSA is optional for an addon, we shouldn't unconditinally add the IRSA bits to the manifest.
This is also a clean up. We no longer need to expand the list of well-known SAs as we already know which roles are being built
2022-09-04 08:28:32 +02:00
Ole Markus With 3518182e44 Add support for cert-manager dns-01 challenges 2022-09-04 08:19:22 +02:00
Ciprian Hacman 8b83dedf24
Release 1.25.0-beta.1 (#14210) 2022-08-31 03:43:00 -07:00
Kubernetes Prow Robot f4144b434e
Merge pull request #14207 from olemarkus/ccm-v125
Bumping AWS CCM to 1.25
2022-08-31 02:57:00 -07:00
Ole Markus With 24a5046cee Bumping AWS CCM to 1.25 2022-08-31 10:02:46 +02:00
Ciprian Hacman cf5e48c912 Run hack/update-expected.sh 2022-08-31 09:21:40 +03:00
Ciprian Hacman 6dbe334494 Update etcd-manager to v3.0.20220831 2022-08-31 09:16:15 +03:00
Kubernetes Prow Robot 5710b1ef2e
Merge pull request #14181 from hakman/hetzner_etcd-manager_ig
Run etcd-manager with instance group name as volume name tag for Hetzner
2022-08-30 05:19:02 -07:00
Kubernetes Prow Robot cddf2af026
Merge pull request #14187 from olemarkus/bump-nldc-125
Bump node local dns cache to 1.22.8
2022-08-26 01:00:25 -07:00
Ciprian Hacman 0aedf0bbef Update runc to v1.1.4 2022-08-26 03:31:16 +03:00
Ole Markus With 1a8236290d Bump node local dns cache to 1.22.8 2022-08-25 19:03:14 +02:00
Ciprian Hacman 13f768f50b Run etcd-manager with instance group name as volume name tag for Hetzner 2022-08-25 12:43:14 +03:00
Ole Markus With 0cd110d723 Bump node termination handler to 1.17.1 2022-08-24 21:52:52 +02:00
Ole Markus With 3265e9db0e Add default image for CAS that exists 2022-08-20 07:32:14 +02:00
Kubernetes Prow Robot c880da184d
Merge pull request #14137 from olemarkus/bump-cilium-118
Bump cilium to 1.11.8
2022-08-17 23:42:37 -07:00
Ole Markus With 65aaa8dfe7 Bump cilium to 1.11.8 2022-08-17 08:49:26 +02:00
Ole Markus With 579bbc443b Bump the CCM images 2022-08-16 14:28:17 +02:00
Ciprian Hacman b9394fed18 Run hack/update-expected.sh 2022-08-12 19:40:25 +03:00
Ciprian Hacman a32cf690bb Create etcd-manager config for each instance group 2022-08-10 11:04:36 +03:00
Ciprian Hacman 13a4e1ca46 Update containerd to v1.6.8 2022-08-10 04:31:58 +03:00
Ciprian Hacman 11a0f64cd8 Add option to configure runc version for containerd 2022-08-04 09:48:46 +03:00
justinsb 296e85a1f1 kube-scheduler: validate completed cluster in tests 2022-08-03 09:51:16 -04:00
justinsb c8deb1428d kube-scheduler: Add test for static manifests 2022-08-03 09:51:16 -04:00
justinsb 9bb1d3e114 Configuration file for kube-scheduler
We generate a kube-scheduler configuration file in the kops CLI, and
nodeup will use it if provided (instead of generating one).

We put the configuration file into the fileAssets.

Users can provide a kube-scheduler configuration in additional
objects, and this will be used as the base configuration (we add the
kubeconfig path).

Issue #13352

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2022-08-03 09:51:05 -04:00
Ole Markus With 2a21b49eea Fix IAM permissions for Karpenter 2022-08-01 08:43:21 +02:00
Ciprian Hacman 4dee7dd9a2
Release 1.25.0-alpha.2 (#14070) 2022-07-29 11:31:11 -07:00
Ciprian Hacman 45012d83bf Run hack/update-expected.sh 2022-07-27 21:55:34 +03:00
Ciprian Hacman 98ebfac085 Update etcd-manager to v3.0.20220727 2022-07-27 21:52:35 +03:00
Ciprian Hacman 7b99594f39 Run hack/update-expected.sh 2022-07-18 06:36:23 +03:00
Ciprian Hacman 1270963832 Update etcd-manager to v3.0.20220717 2022-07-18 06:34:40 +03:00
Ciprian Hacman 19ca0861a1 Add option to set etcd-manager backup interval 2022-07-14 09:58:19 +03:00
Ciprian Hacman 6c9b2c7b7b Bump EBS CSI driver to 1.8.0 2022-07-02 11:36:54 +03:00
Kubernetes Prow Robot d1c338ff19
Merge pull request #13917 from ReillyBrogan/reilly/cilium1116
Update Cilium to 1.11.6
2022-06-30 11:32:08 -07:00
Ole Markus With afd7c60d77 Make it possible to enable the shield addon for LBC 2022-06-30 16:23:08 +02:00
Reilly Brogan f3a421d600 Update Cilium to 1.11.6 2022-06-29 13:18:21 -05:00
Ciprian Hacman 4b637db62b
Release 1.25.0-alpha.1 (#13912)
* Release 1.25.0-alpha.1

* Squash release commit for more clarity
2022-06-29 05:32:06 -07:00
Ciprian Hacman 7356b0f233 Fix tests 2022-06-18 09:21:57 +03:00
Ciprian Hacman 11870286e0 Run hack/update-expected.sh 2022-06-18 09:01:23 +03:00
Ciprian Hacman e0a92f22f4 Update etcd-manager to v3.0.20220617 2022-06-18 08:59:55 +03:00
Ciprian Hacman 7ae4f85a69 Update AWS CCM images for k8s 1.20-1.22 2022-06-08 09:08:04 +03:00
Ole Markus With 0b3f01d363 Drop 1.19 AWS CCM 2022-06-07 15:55:04 +02:00
Ole Markus With 014f3d3e68 Remove CAS 1.19 2022-06-07 15:47:26 +02:00
Ole Markus With 921d1b8ce0 OIDC flags are no longer optional 2022-06-07 15:45:56 +02:00
Ole Markus With e4c10aa124 Rename default etcd variable 2022-06-07 15:38:09 +02:00
Ciprian Hacman 169bbd0826 Update containerd to v1.6.6 2022-06-07 09:16:54 +03:00
Ciprian Hacman 8b7711dd5e Update Docker to v20.10.17 2022-06-07 09:16:54 +03:00
Ciprian Hacman f95ef569a1
Release 1.24.0-beta.1 (#13730) 2022-06-04 07:10:20 -07:00
Ole Markus With 71ba1ea4f0 Bump NTH to 1.16.5 2022-05-31 21:12:16 +02:00
Ciprian Hacman 97b5795edb
Release 1.24.0-alpha.5 (#13675) 2022-05-21 09:10:00 -07:00
Ole Markus With 6471f2ce0b Bump EBS CSI driver to 1.6.2 2022-05-20 21:46:47 +02:00
Kubernetes Prow Robot 41e61ea3d8
Merge pull request #13662 from olemarkus/nth-bump-124
Bump NTH to 1.16.4 and add support for scheduled instance change events
2022-05-19 22:23:13 -07:00
Kubernetes Prow Robot 39f566edbf
Merge pull request #13666 from olemarkus/cilium-bump-124
Bump Cilium to 1.11.5
2022-05-18 16:24:14 -07:00
Ole Markus With d08c028747 Bump NTH to 1.16.4 and add support for scheduled instance change events 2022-05-18 21:48:28 +02:00
Ole Markus With 2d50b9ff2c Bump Cilium to 1.11.5
Since this introduced some backwards breaking RBAC changes, the manifest got forked
2022-05-18 21:44:19 +02:00
Ole Markus With f849ea01c9 Bump EBS CSI driver to 1.6.1 2022-05-18 20:46:47 +02:00
Steven E. Harris a1495ac4c8
Allow the AWS LB Controller to use WAFs
By introducing a few new fields within the Cluster spec's
"awsLoadBalancerController" field, allow users to enable the AWS Load
Balancer Controller to associate WAFs with EC2 Application Load
Balancers (ALBs). It's possible to enable separately use of two kinds
of WAF: WAF Classic and the never version 2-era WAF, the latter of
which bears no distinguishing name.

Retain our default configuration of the AWS Load Balancer Controller
in which this capability remains disabled via command-line flags,
overriding the controller program's enabling of this capability by
default.

Signed-off-by: Steven E. Harris <seh@panix.com>
2022-05-16 12:20:28 -04:00
Ciprian Hacman 361f90e732 Update AWS CCM to 13.05.2022 releases 2022-05-13 17:21:21 +03:00
Kubernetes Prow Robot ab7f721e08
Merge pull request #13639 from hakman/ignore_imagedigest
Ignore digest for kube-apiserver-healthcheck model test
2022-05-12 13:17:50 -07:00
Ole Markus With 674b479403 Bump cluster autoscaler image for 1.24 2022-05-12 20:36:55 +02:00
Ciprian Hacman 1132899e5a Ignore digest for kube-apiserver-healthcheck model test 2022-05-12 19:18:52 +03:00
Ciprian Hacman 5c5793a0c2 Temporally fix Test_RunKubeApiserverBuilder 2022-05-12 11:22:30 +03:00
Ciprian Hacman b048746adf Use fixed staging AWS CCM for k8s 1.24+ 2022-05-12 11:06:23 +03:00
Ciprian Hacman 68469601cd
Release 1.24.0-alpha.4 (#13631) 2022-05-11 02:36:52 -07:00
Peter Rifel ef3a96558f Update Karpenter to v0.10.0
./hack/update-expected.sh

Use default dns policy for webhook

Fix webhook svc target port

Fix provisioner to only contain launchTemplate
2022-05-11 07:25:36 +02:00
Ciprian Hacman eeb4252d48 Use latest staging AWS CCM for k8s 1.24+ 2022-05-10 11:43:32 +03:00
Kubernetes Prow Robot 6377b68811
Merge pull request #13572 from hakman/hetzner
Add initial support for Hetzner Cloud
2022-05-08 20:57:18 -07:00
Ciprian Hacman b5f14b589b Add initial support for Hetzner Cloud 2022-05-09 06:12:15 +03:00
Peter Rifel 7aae4d11c8
Add IRSA for kube-router 2022-05-05 21:51:01 -05:00
Ciprian Hacman 007b50cc89 Run hack/update-expected.sh 2022-05-03 20:05:38 +03:00
Ciprian Hacman 70718dde32 Update etcd-manager to v3.0.20220503 2022-05-03 20:04:10 +03:00
Ciprian Hacman 668d1809a8 Update containerd to v1.6.4 2022-05-03 19:25:14 +03:00
Ole Markus With 6df6857ad5 Bump cilium to 1.11.4 2022-05-02 13:26:00 +02:00
Kubernetes Prow Robot de20f2a0d8
Merge pull request #13588 from hakman/etcd-3.5.4
Update etcd to v3.5.4
2022-05-02 03:37:13 -07:00
Ciprian Hacman 75fac81273 Run hack/update-expected.sh 2022-05-02 10:33:26 +03:00
Ciprian Hacman 5b4daf85d0 Update etcd to v3.5.4 2022-05-02 10:32:13 +03:00
Ciprian Hacman 80493ed902 Update to etcd-manager 3.0.v3.0.20220417-19-g1140ce25 2022-05-02 10:31:05 +03:00
Peter Rifel ada9391887
Revert "Update containerd to v1.6.3"
This reverts commit 411adb2d74.
2022-04-30 06:03:41 -05:00
Kubernetes Prow Robot a08f450ef0
Merge pull request #13565 from rifelpet/ebs160
Upgrade EBS CSI Driver to v1.6.0
2022-04-30 02:05:13 -07:00
Ciprian Hacman 411adb2d74 Update containerd to v1.6.3 2022-04-30 05:50:19 +03:00
Peter Rifel 4d2639095e
Upgrade EBS CSI driver to v1.6.0 2022-04-27 22:17:28 -05:00
Peter Rifel 0eca23e864
Pin AWS CCM image tag for k8s 1.25
With the k8s 1.24 rc.0 published, our prow jobs that use k8s CI builds are now on k8s 1.25.
To avoid the panic occurring in the latest AWS CCM tag we have to pin 1.25 to the same tag as k8s 1.23 and 1.24
2022-04-21 06:09:28 -05:00
Steven E. Harris de1ecd844d
Allow cluster autoscaler to get EC2 instance types
When the cluster autoscaler builds its EC2 instance type catalog
dynamically instead of using only its statically defined set, grant it
the additional IAM permissions required to fetch the instance types
from the AWS API.
2022-04-20 12:22:28 -04:00
Ciprian Hacman b8d8f7b34d Revert to using 1.23.0-alpha.0 for AWS CCM 2022-04-19 04:18:23 +03:00
Ole Markus With 2d86420e77 Use Cluster Autoscaler 1.23 for k8s 1.24
We made this explicitly fail before because there is a risk of us forgetting to bump. I think, however, history has shown this risk is not very real
2022-04-18 12:39:20 +02:00
Kubernetes Prow Robot 1365bbb1d5
Merge pull request #13506 from olemarkus/ccm-stable
Bump CCM 1.22 and 1.23 images to stable versions
2022-04-18 00:04:41 -07:00
Ole Markus With 01d94fa392 Bump CCM 1.22 and 1.23 images to stable versions 2022-04-18 08:17:58 +02:00
Kubernetes Prow Robot 6d264080ed
Merge pull request #13484 from olemarkus/no-bazel-targets
Remove bazel targets and tools
2022-04-17 23:16:41 -07:00
justinsb 3027943dd2 Use etcd 3.5.3 instead of 3.5.1
3.5.3 includes the fixes for the potential etcd 3.5.x corruption
issues.
2022-04-17 17:04:46 -04:00
Ciprian Hacman 0643271a97 Revert "Enable etcd corruption check as mitigatio of 3.5 corruption issue"
This reverts commit 6d75f8f9f0.
2022-04-17 18:34:49 +03:00
justinsb 74397b2a4f Update to etcd-manager 3.0.20220417
In particular we want to pick up changes addressing the potential
corruption found in 3.5.0 - 3.5.2:

* Use etcd 3.5.3
* Pass the ETCD_EXPERIMENTAL_INITIAL_CORRUPT_CHECK for all 3.5 series
2022-04-17 10:29:01 -04:00
Ole Markus With ce2e877aeb Remove bazel files from vendor 2022-04-12 13:29:03 +02:00
Kubernetes Prow Robot 8120147889
Merge pull request #13326 from johngmyers/move-openstack
Move Openstack settings to cloudProvider.openstack
2022-04-10 00:10:05 -07:00
DingGGu 1b9cf91684
Bump NTH to 1.16.1, use WithDefaultBool in gotemplate, set ExcludeLoadBalancers default true 2022-04-09 17:04:23 +09:00
DingGGu c1042f4a3b
Bump NTH 1.16 and add excludeFromLoadBalancers option 2022-04-09 17:04:16 +09:00
John Gardiner Myers 6a621fcde5 Cleanup OpenStackOptionsBuilder 2022-04-07 14:52:25 -07:00
John Gardiner Myers aff5f587f3 Move Openstack settings to cloudProvider.openstack 2022-04-07 10:04:19 -07:00
Kubernetes Prow Robot 107fa6dcfb
Merge pull request #13454 from olemarkus/enable-etcd-corruption-check
Enable etcd corruption check as mitigatio of 3.5 corruption issue
2022-04-07 08:50:08 -07:00
Kubernetes Prow Robot f32503e413
Merge pull request #12919 from olemarkus/cilium-11-default
Use Cilium 1.11 as default
2022-04-06 04:18:56 -07:00
Ciprian Hacman 42289b7faa Update containerd to v1.6.2 2022-04-04 09:01:10 +03:00
Ole Markus With 6d75f8f9f0 Enable etcd corruption check as mitigatio of 3.5 corruption issue 2022-04-03 14:11:15 +02:00
Ole Markus With 3d77ab6139 Use Cilium 1.11 as default 2022-03-29 12:58:24 +02:00
Ole Markus With 93e35adebc update bazel 2022-03-26 18:50:14 +01:00
Ole Markus With e657a1a0f2 Remap images to add digest to them 2022-03-26 18:40:21 +01:00
Anthony Hausman 2b589d5914
FIX: Set default version into `model/components/nodeterminationhandler.go` 2022-03-23 11:56:38 +01:00
Bronson Mirafuentes e112d81025
Release 1.24.0-alpha.3 (#13372)
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 21:09:12 -07:00
Ciprian Hacman 30404d64a2 Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 09:01:59 +02:00
Ciprian Hacman a4ed2b0654 Migrate to registry.k8s.io
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 08:47:12 +02:00
Kubernetes Prow Robot 404e411103
Merge pull request #13330 from zetaab/feature/openstackgpu
Support GPU in OpenStack
2022-03-16 03:37:50 -07:00
Kubernetes Prow Robot aff109f9fc
Merge pull request #13343 from olemarkus/securitycontext
Add user to container securityContext and remove command
2022-03-14 02:48:21 -07:00
Jesse Haka a800218840 fixes 2022-03-11 12:01:20 +02:00
Ole Markus With 8524c3d320 Bump CCM 1.22 image. Use the 1.23 image for 1.24 due to latest being broken 2022-03-11 08:12:52 +01:00
Ole Markus With d7cb3bb1f7 Add user to container securityContext and remove command 2022-03-07 15:09:51 +01:00
Ciprian Hacman 2ff86a6656 Update containerd to v1.6.1
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-04 07:51:46 +02:00
John Gardiner Myers cac727c357 Make cloudProvider a struct in v1alpha3 API 2022-03-02 21:59:49 -08:00
John Gardiner Myers 70f7d9bdb2 Use function to get cloud provider from cluster spec 2022-03-02 21:59:47 -08:00
AkiraFukushima e5cf940d53
Add managed-by label to addon pods 2022-02-20 18:33:51 +09:00
Ciprian Hacman 843f89aedd Update containerd to v1.6.0
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-16 08:25:40 +02:00
Ciprian Hacman 5746093297 Install contained from the release package
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-14 11:27:26 +02:00
Ole Markus With 8b71cedccc Do not enable graceful shutdown if k8s version < 1.21 2022-02-12 19:13:52 +01:00
Ole Markus With 65c3a63d5d KCM should not run with leader migraton when aws ccm is enabled
AWS CCM is enabled by default in k8s 1.24, and KCM builder is now aware of that
2022-02-12 11:35:30 +01:00
Ole Markus With 2625264fe5 Add support for graceful node shutdown
Update docs/cluster_spec.md

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2022-02-11 20:51:02 +01:00
Kubernetes Prow Robot 95fc0ac5b8
Merge pull request #13212 from olemarkus/irsa-119
Fix irsa for k8s < 1.20
2022-02-09 12:25:49 -08:00
Ole Markus With 74e9a6cd18 Fix irsa for k8s < 1.20 2022-02-09 08:52:06 +01:00
Kubernetes Prow Robot 147052818b
Merge pull request #13203 from olemarkus/csi-featuregates
Fix CSI migration feature gates
2022-02-07 21:36:53 -08:00
Jiahui Feng b1dde24433 always enable Leader Election
for openstack CCM.
2022-02-07 15:31:21 -08:00
Ciprian Hacman f6d2502b85 Update containerd to v1.6.0-rc.3
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-08 20:03:10 +02:00
Jiahui Feng c57ed0c053 fix KCM logLevel not honored. 2022-02-07 14:34:35 -08:00
Kubernetes Prow Robot 70f3a2ec7f
Merge pull request #13187 from jiahuif-forks/feature/enable-leader-election
Always enable Leader Election for cloud-controller-manager
2022-02-05 06:30:50 -08:00
Ole Markus With 66e3202f34 Fix CSI migration feature gates
We had a bug for KCM feature gate, and the scheuler and apiserver gate was missing entirely.
2022-02-04 15:29:28 +01:00
Kubernetes Prow Robot 2fbc3e0671
Merge pull request #13198 from hakman/containerd-1.6.0-rc.2
Update containerd to v1.6.0-rc.2
2022-02-03 18:28:11 -08:00
Ciprian Hacman b961e03296 Update containerd to v1.6.0-rc.2
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-03 19:31:16 +02:00
justinsb 4f89c2e689 Update expected test output for etcd-manager bump 2022-02-03 11:21:54 -05:00
justinsb 97b7b90226 Update to etcd-manager v3.0.20220203
Relevant changes:

* Only emit GOMAXPROCS if non-zero [justinsb](https://github.com/justinsb) [284](https://github.com/kubernetes-sigs/etcdadm/pull/284)
* Set ETCD_STRICT_RECONFIG_CHECK [justinsb](https://github.com/justinsb) [286](https://github.com/kubernetes-sigs/etcdadm/pull/286)
* environment: ignore empty lines when converting to map [justinsb](https://github.com/justinsb) [285](https://github.com/kubernetes-sigs/etcdadm/pull/285)
* Fix ipv6 detection [olemarkus](https://github.com/olemarkus) [291](https://github.com/kubernetes-sigs/etcdadm/pull/291)
* Test for nil in to not found check [olemarkus](https://github.com/olemarkus) [292](https://github.com/kubernetes-sigs/etcdadm/pull/292)
2022-02-03 11:21:09 -05:00
Ole Markus With 6327cc378f Fix etcd-manager for ipv6 2022-02-03 12:59:26 +01:00
Jiahui Feng 0dfa8614b1 always enable Leader Election
for GCP cloud-controller-manager
2022-02-02 11:40:57 -08:00
Jiahui Feng d4b5742b5d always enable Leader Election
for AWS cloud-controller-manager
2022-02-02 11:40:34 -08:00
Ole Markus With af4d69cab3 Use etcd-manager pre-release until final release has been cut 2022-02-02 13:10:32 +01:00
Ole Markus With 994588c0fd Bump etcd-manager to v3.0.20220128 2022-01-30 07:13:32 +01:00