Commit Graph

15364 Commits

Author SHA1 Message Date
Justin Santa Barbara 1db266f15a Move cidrmap to subnet package
This will enable reuse outside of gce.
2021-09-20 09:33:10 -04:00
Kubernetes Prow Robot 8b9f4ec41c
Merge pull request #12377 from rifelpet/dump-k8s-ssh
Fix parsing of kops toolbox dump yaml output
2021-09-20 05:44:09 -07:00
Peter Rifel 6deeda1ea2
Fix parsing of kops toolbox dump yaml output
Also add logging to help troubleshoot which command is failing
2021-09-20 07:06:08 -05:00
Kubernetes Prow Robot fb9a7f87c6
Merge pull request #12376 from justinsb/setlifecycleoverride_log_cleanup
Better logging in setLifecycleOverride
2021-09-20 05:02:10 -07:00
justinsb 856a321a6f Better logging in setLifecycleOverride
Remove the log message at V(8), it doesn't include any real
signal.  This method also gets called a lot!

Also differentiate between the expected and unexpected cases when a
task implements/does not implement HasLifecycle.
2021-09-20 07:13:55 -04:00
Kubernetes Prow Robot 3101180638
Merge pull request #12372 from rifelpet/dump-k8s-ssh
kubetest2 - add support for dumping k8s resources via SSH
2021-09-19 21:26:09 -07:00
Kubernetes Prow Robot a14f822f81
Merge pull request #12374 from justinsb/check_for_containerd_nil
Fix nil pointer error where containerd is not in use
2021-09-19 20:34:09 -07:00
justinsb 8c66610b8d Fix nil pointer error where containerd is not in use
We need to check for nil.

We could consider using Getters.
2021-09-19 21:59:22 -04:00
Peter Rifel 5526744471
kubetest2 - add support for dumping k8s resources via SSH
Some of our jobs are currently failing because `kops validate cluster` times out waiting for the k8s API DNS record to be updated.
To assist in troubleshooting, we can get insight into the k8s resources present on the cluster even though the DNS record hasnt been set if we use kubectl on the control plane host via SSH.

This will SSH into a control plane host when the local kubectl dump fails.
2021-09-19 18:21:37 -05:00
Kubernetes Prow Robot 5ef81d99c6
Merge pull request #12367 from justinsb/aws_refactor_subnet
AWS: Move some subnet functions into AWS model
2021-09-19 15:22:08 -07:00
Kubernetes Prow Robot 07ef70f34d
Merge pull request #12369 from justinsb/imdbv2_is_only-for_aws
Only configure IMDSv2 on AWS
2021-09-19 11:42:08 -07:00
justinsb e21a20e863 Only configure IMDSv2 on AWS
These aren't used on other clouds.
2021-09-19 14:00:54 -04:00
justinsb 99764fb168 AWS: Move some subnet functions into AWS model
We want to move all these eventually, and this is preparing for better
GCE subnet support.
2021-09-19 12:08:09 -04:00
Kubernetes Prow Robot 9eb28b93fe
Merge pull request #12365 from rifelpet/sctp
Fix version check in cilium SCTP test skipping
2021-09-19 08:38:08 -07:00
Kubernetes Prow Robot 34bad9bfc9
Merge pull request #12360 from hakman/calico-3.20.1
Update Calico to v3.20.1
2021-09-19 07:54:08 -07:00
Peter Rifel cf16b4a6bf
Fix version check in cilium SCTP test skipping 2021-09-19 09:12:05 -05:00
Kubernetes Prow Robot 66edcba37b
Merge pull request #12354 from justinsb/kcm_conditions_fix
Fix controller defaults for both bootstrap tokens and ipv6
2021-09-19 06:48:08 -07:00
Kubernetes Prow Robot 8ab1f8bbc4
Merge pull request #12355 from justinsb/gate_ipv6_permissions
Only add IPv6 IAM permissions if using IPv6
2021-09-19 00:54:08 -07:00
Kubernetes Prow Robot 14ee53b1a7
Merge pull request #12356 from justinsb/dev-build-aws
Script for iterating development on AWS
2021-09-19 00:08:08 -07:00
Ciprian Hacman faa66c6597 Update Calico to v3.20.1 2021-09-19 09:31:39 +03:00
Kubernetes Prow Robot a68294c03f
Merge pull request #12357 from justinsb/ec2_pending_should_be_terminated
Recognize pending EC2 instances as needed deletion
2021-09-18 23:20:08 -07:00
justinsb fc04d91bc7 Recognize pending EC2 instances as needed deletion
They should be deleted as they will presumably be running shortly.

Also, this function is used from `kops dump cluster` where presumably
instances are more likely to be pending.
2021-09-18 16:10:29 -04:00
justinsb db1ba01e94 Only add IPv6 IAM permissions if using IPv6
This avoids users wondering what these permissions are for until we
need them.
2021-09-18 13:49:40 -04:00
Justin SB 1562ce4e8a Script for iterating development on AWS
Somewhat opinionated, but should be an easy and quick way to build for
dev in most cases.
2021-09-18 13:42:14 -04:00
Kubernetes Prow Robot 7f7a78a285
Merge pull request #12322 from rifelpet/managed-files2
Create a second Terraform provider for managed files
2021-09-18 10:30:08 -07:00
justinsb 345f3d85f1 Fix controller defaults for both bootstrap tokens and ipv6
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Kubernetes Prow Robot e8e09d5956
Merge pull request #12353 from hakman/ebs-csi-ipv6
Fix EC2 IPv6 endpoint for EBS CSI Driver controller
2021-09-18 09:16:07 -07:00
Ciprian Hacman fa853add24 Fix EC2 IPv6 endpoint for EBS CSI Driver controller 2021-09-18 18:34:13 +03:00
Kubernetes Prow Robot 8d49409d1f
Merge pull request #12352 from eddycharly/fix-docs-etcd-backups
fix: etcd backup docs
2021-09-18 06:52:08 -07:00
Kubernetes Prow Robot e1d8d12efb
Merge pull request #12351 from eddycharly/clean-comment
fix: remove inconsistent comment
2021-09-18 05:50:09 -07:00
Charles-Edouard Brétéché 735497442d fix: etcd backup docs 2021-09-18 14:15:31 +02:00
Charles-Edouard Brétéché 1353039fac fix: remove inconsistent comment 2021-09-18 14:04:22 +02:00
Kubernetes Prow Robot f5cc9f6729
Merge pull request #12349 from hakman/aws-ebs-csi-ipv6
Use EC2 and Metadata IPv6 endpoints in IPv6 mode for EBS CSI Driver
2021-09-18 05:02:07 -07:00
Ciprian Hacman bc6705c956 Use EC2 and Metadata IPv6 endpoints in IPv6 mode for EBS CSI Driver 2021-09-18 14:22:22 +03:00
Kubernetes Prow Robot b746093e02
Merge pull request #12348 from rifelpet/cilium-sctp
Skip SCTP e2e tests on cilium + k8s 1.23
2021-09-18 02:22:07 -07:00
Peter Rifel 8d14376708
Skip SCTP e2e tests on cilium + k8s 1.23 2021-09-17 19:30:20 -05:00
Peter Rifel 476eb96970
./hack/update-expected.sh 2021-09-17 18:08:59 -05:00
Peter Rifel 0449d6e36f
Upgrade TF to 0.15 and include the provider's configuration_aliases 2021-09-17 18:08:59 -05:00
Peter Rifel 7eaa647b2a
Include the provider alias on TerraformPath resources that reference their provider 2021-09-17 18:08:59 -05:00
Peter Rifel 0f67cb1edb
Include second tf provider when ConfigBase implements TerraformPath 2021-09-17 18:08:58 -05:00
Peter Rifel c3a7f9f75a
Add TerraformProvider definition to TerraformPath interface 2021-09-17 18:08:58 -05:00
Peter Rifel ff50a52ae0
Add API field for managed files terraform provider config 2021-09-17 18:08:58 -05:00
Peter Rifel 3ec1295cf0
Add support for writing lists of terraform literals 2021-09-17 18:08:57 -05:00
Kubernetes Prow Robot 6612ba12a5
Merge pull request #12341 from rifelpet/managed-files3
Deprecate TerraformJSON feature flag
2021-09-17 16:02:08 -07:00
Peter Rifel 3cc7162089
Remove TerraformJSON test
The FF is deprecated and would require a lot of effort to support disabling TerraformManagedFiles (which is required) in this one integration test case
2021-09-17 06:42:27 -05:00
Peter Rifel eaea60ff07
Disallow TerraformJSON + TerraformManagedFiles and deprecate TerraformJSON 2021-09-17 06:42:07 -05:00
Kubernetes Prow Robot ea5e302a84
Merge pull request #12298 from rifelpet/imds-ipv6-tf
Add IMDS IPv6 endpoint in terraform
2021-09-17 00:33:01 -07:00
Peter Rifel 9a193d4001
Fix example permissions boundary ARN 2021-09-16 20:11:33 -05:00
Peter Rifel 5247bb8cc2
./hack/update-expected.sh 2021-09-16 20:04:36 -05:00
Peter Rifel 0bcd39e905
Add IPv6 IMDS terraform support
This requires bumping the minimum aws provider version to the version that includes the support
2021-09-16 20:02:03 -05:00