Commit Graph

2500 Commits

Author SHA1 Message Date
John Gardiner Myers 3cf8234d01 Cilium: disable masquerade by default when in ENI IPAM mode 2021-06-13 21:36:56 -07:00
Kubernetes Prow Robot e7550dcefc
Merge pull request #11730 from OutdatedVersion/patch-1
Hyperlink Sprig reference
2021-06-13 03:19:01 -07:00
Kubernetes Prow Robot c2efa079a3
Merge pull request #11733 from olemarkus/docs-update-note
Add small note about rotating cluster after backup restore
2021-06-11 11:09:01 -07:00
Ole Markus With 63f624764f
Update docs/operations/etcd_backup_restore_encryption.md
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-06-11 18:53:18 +02:00
Kubernetes Prow Robot 84cecd531b
Merge pull request #11630 from johngmyers/deprecate-cloudformation
Deprecate CloudFormation support
2021-06-10 08:49:27 -07:00
Ole Markus With fea2a08b1c Add small note about rotating cluster after backup restore 2021-06-10 09:08:04 +02:00
Peter Rifel 4196459bc1
Update release branch docs with kubetest2 presubmit job 2021-06-09 22:16:08 -05:00
Ben Watkins b8daa77dfa
Hyperlink Sprig reference 2021-06-09 17:56:13 -05:00
Ole Markus With 6115afd4f5 Make relnotes match the new max hop limit IMDS behaviour 2021-06-07 09:33:18 +02:00
Kubernetes Prow Robot ff9d0c8766
Merge pull request #11654 from johngmyers/asset-doc
Create document on asset repositories
2021-06-06 21:52:46 -07:00
Kubernetes Prow Robot ea4895218c
Merge pull request #11706 from johngmyers/legacy-iam-doc
Remove documentation of legacy IAM permissions
2021-06-06 20:34:39 -07:00
John Gardiner Myers a09d10776d Create document on asset repositories 2021-06-06 20:34:34 -07:00
Kubernetes Prow Robot 2d86a85b36
Merge pull request #11700 from johngmyers/copy-assets
Move asset copying out of apply_cluster
2021-06-06 16:38:38 -07:00
John Gardiner Myers 8a4bc51afa Remove documentation of legacy IAM permissions 2021-06-06 11:40:50 -07:00
Kubernetes Prow Robot 9984ba079c
Merge pull request #11701 from olemarkus/fix-ebs-csi-role-crb
Fix the CSI EBS DS CRB.
2021-06-06 11:08:38 -07:00
Ole Markus With 8f8d6deb17 Fix the CSI EBS DS CRB. 2021-06-06 19:23:22 +02:00
John Gardiner Myers e0915887ed Move asset copying out of apply_cluster 2021-06-05 21:17:50 -07:00
Kubernetes Prow Robot 29c85c6d09
Merge pull request #11696 from johngmyers/deprecate-os
Deprecate old OS versions
2021-06-05 01:54:38 -07:00
Kubernetes Prow Robot 83cd195aa2
Merge pull request #11329 from olemarkus/ig-max-hop-limit
Set IMDSv2 on by default for nodes and apiservers
2021-06-05 01:14:38 -07:00
Ole Markus With b3a60d3bc2 Set IMDSv2 on by default for nodes
Bastion, nodes, and api servers get limit of 1
API servers tend to run pods requiring metadata access. The hop limit
depends on CNI, but all should work with a limit of 3.
2021-06-05 08:17:12 +02:00
John Gardiner Myers 2a5e4ef647 Deprecate old OS versions 2021-06-04 22:52:53 -07:00
Kubernetes Prow Robot 9dc88c75db
Merge pull request #11695 from johngmyers/release-assets
Update release process documentation
2021-06-04 21:54:38 -07:00
John Gardiner Myers d04c2acf24
Address review comment
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-06-04 21:16:47 -07:00
John Gardiner Myers ba36b37afa Simplify release notes compilation steps 2021-06-04 20:24:38 -07:00
John Gardiner Myers bfdcde26cc Fix binary promotion PR process 2021-06-04 19:58:10 -07:00
John Gardiner Myers d7e5edcabc Release notes for 1.21.0-beta.3 2021-06-04 19:29:13 -07:00
John Gardiner Myers 326a4beb49 Don't describe CloudLabels as being AWS-specific 2021-06-01 23:32:22 -07:00
Kubernetes Prow Robot bcad681f7b
Merge pull request #11653 from olemarkus/docs-remove-static-addons
Remove docs on static addons
2021-05-31 20:40:27 -07:00
Ole Markus With ea03e77058 Remove docs on static addons
The kOps addon has become one of the kOps big strenght. However, the static addons have been unmaintained for years and few of them actually work anymore.
2021-05-31 21:27:19 +02:00
Kubernetes Prow Robot ef43708cac
Merge pull request #11642 from olemarkus/docs-satv
Update the service account issuer discovery documentation
2021-05-31 08:52:26 -07:00
Ole Markus With 2657c9bdc8 Update the service account issuer discovery documentation 2021-05-31 10:28:29 +02:00
John Gardiner Myers b82b129a54 Remove fallback support for legacy IAM 2021-05-30 16:52:42 -07:00
Kubernetes Prow Robot 02034d0daf
Merge pull request #11617 from johngmyers/assets
Add "kops get assets" command
2021-05-30 10:48:26 -07:00
John Gardiner Myers d878274767 Deprecate CloudFormation support 2021-05-30 10:43:04 -07:00
John Gardiner Myers 35588137b7 Simplify release steps 2021-05-28 22:55:36 -07:00
John Gardiner Myers 4c2508b6ec Add "kops get assets" command 2021-05-28 21:33:46 -07:00
John Gardiner Myers 3f24a29cca Change toolbox template flag for consistency 2021-05-27 20:42:16 -07:00
Kubernetes Prow Robot 26309f0016
Merge pull request #11581 from johngmyers/release-process
Add to release process documentation
2021-05-27 10:54:23 -07:00
Kubernetes Prow Robot adbbc6831d
Merge pull request #11606 from olemarkus/docs-snapshot-controller
Add documentation about snapshot-controller
2021-05-26 22:18:23 -07:00
Kubernetes Prow Robot 46e1616467
Merge pull request #11605 from olemarkus/enable-aws-csi-by-default
Enable AWS EBS CSI driver by default
2021-05-26 21:34:23 -07:00
Ole Markus With 4323a10130 Add documentation about snapshot-controller 2021-05-26 09:31:26 +02:00
Ole Markus With 04b15e404e Enable AWS EBS CSI driver by default 2021-05-26 08:47:14 +02:00
Kubernetes Prow Robot 7a143b913d
Merge pull request #11600 from olemarkus/relnodes-additions
Add a note about NTH Queue Process mode
2021-05-25 09:20:36 -07:00
Ole Markus With 621fc463f3
Update docs/releases/1.21-NOTES.md
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-25 17:39:38 +02:00
John Gardiner Myers be494f4d46 Add to release process documentation 2021-05-25 08:11:48 -07:00
Ole Markus With 9a33564d35 Add a note about NTH Queue Process mode 2021-05-25 15:49:14 +02:00
Ciprian Hacman 7c45a0172b Cleanup Docs 2021-05-25 08:48:16 +03:00
John Gardiner Myers b8859a0aea Add release note for AWS shared config 2021-05-23 15:25:29 -07:00
Kubernetes Prow Robot f4995c3bab
Merge pull request #11572 from hakman/release-proces_nits
Improve some small issues with the release process
2021-05-23 11:33:38 -07:00
Ciprian Hacman 49cb740157 Improve some small issues with the release process 2021-05-23 20:40:02 +03:00
John Gardiner Myers 29f611c783 Release notes for 1.21.0-beta.2 2021-05-22 22:33:07 -07:00
Kubernetes Prow Robot 0d92bfee56
Merge pull request #11557 from olemarkus/docs-cilium-hubble
Add hubble documentation
2021-05-21 12:38:11 -07:00
Ole Markus With 6ddd084464 Add hubble documentation 2021-05-21 20:38:50 +02:00
John Gardiner Myers 7dc24b8221 Document updating conformance is first stable minor release only 2021-05-21 10:58:43 -07:00
Alex Berenshtein 89779761eb
Update etcd_backup_restore_encryption.md 2021-05-19 17:29:35 +03:00
Peter Rifel ff97f1e77e
Include new pipeline job in the release branch process 2021-05-17 19:27:14 -05:00
Kubernetes Prow Robot d8b4caedc2
Merge pull request #11489 from johngmyers/fix-deprecations
Adjust deprecation announcements
2021-05-13 23:16:04 -07:00
John Gardiner Myers 11f28b6d90 Announce k8s removals two kOps versions in advance 2021-05-13 21:32:00 -07:00
John Gardiner Myers 0c1d3b0f1a Defer removal of legacy node labels 2021-05-13 21:24:22 -07:00
John Gardiner Myers f5e641bcd7 Add link to release notes on first beta release 2021-05-13 16:51:19 -07:00
Ciprian Hacman a39d829f1f Set canonical location for downloads to artifacts.k8s.io
And remove the legacy location for downloads.
2021-05-14 00:41:56 +03:00
Kubernetes Prow Robot c13a8f48a7
Merge pull request #11434 from johngmyers/release-process-2
More release process documentation improvements
2021-05-13 11:02:39 -07:00
Kubernetes Prow Robot cde83af1be
Merge pull request #11485 from johngmyers/support-range
Reduce kOps supported version range
2021-05-13 10:18:38 -07:00
John Gardiner Myers e0b5a89ab2 Reduce kOps supported version range 2021-05-13 08:03:51 -07:00
Kubernetes Prow Robot 2ffacc8109
Merge pull request #11474 from justinsb/relnotes_1.19.3
Release notes for 1.19.3
2021-05-12 21:42:24 -07:00
Kubernetes Prow Robot 23fd665844
Merge pull request #11475 from justinsb/master
Release notes for 1.20.1
2021-05-12 21:00:25 -07:00
Kubernetes Prow Robot a86f386cda
Merge pull request #11473 from rifelpet/release-docs-tg
Add instructions for updating the k8s versions periodic jobs
2021-05-12 19:54:26 -07:00
Justin SB a3275bbee1 Release notes for 1.20.1 2021-05-12 22:39:43 -04:00
Justin SB 4d76b6fa58 Release notes for 1.19.3 2021-05-12 22:37:45 -04:00
Peter Rifel b6839608fd
Add instructions for updating the k8s versions periodic jobs 2021-05-12 17:51:28 -05:00
Kubernetes Prow Robot 834c2b49ef
Merge pull request #11451 from johngmyers/relnotes-22
Add missing carryover items from 1.21 release notes
2021-05-12 00:37:38 -07:00
John Gardiner Myers 08917363c0 Add missing carryover items from 1.21 release notes 2021-05-10 22:21:36 -07:00
John Gardiner Myers baa37e78d6 Fix typo in 1.22 release notes 2021-05-10 08:56:17 -07:00
John Gardiner Myers 0af201efb3 More release process documentation improvements 2021-05-09 14:40:05 -07:00
Kubernetes Prow Robot d04946d983
Merge pull request #11439 from johngmyers/1.22-notes
Start release notes for 1.22
2021-05-09 13:17:08 -07:00
Kubernetes Prow Robot 36ed711869
Merge pull request #11438 from johngmyers/1.21-k8s-removal
Carry forward 1.20 deprecations to 1.21 release notes
2021-05-09 13:17:02 -07:00
Kubernetes Prow Robot 0e1a65bd5a
Merge pull request #11428 from hakman/container-runtime_default
Create new clusters without forcing a container runtime
2021-05-09 13:16:48 -07:00
Ciprian Hacman 54961e4ae5 Create new clusters without forcing a container runtime
Decide which container runtime to use later in model, based on Kubernetes version and other settings.
2021-05-09 21:43:58 +03:00
John Gardiner Myers 81524731a0 Start release notes for 1.22 2021-05-09 11:22:09 -07:00
John Gardiner Myers d7a3fcb499 Carry forward 1.20 deprecations to 1.21 release notes 2021-05-09 11:10:14 -07:00
John Gardiner Myers aca8e9b079 Release notes for 1.21.0-beta.1 2021-05-09 10:47:55 -07:00
Ciprian Hacman cad44f1e45 Fix references to v1.20 in v1.21 release notes 2021-05-09 11:46:11 +03:00
John Gardiner Myers e68edd63c9 Update the release process documentation 2021-05-07 23:25:23 -07:00
John Gardiner Myers fe1e850cab Simplify use of hack/set-version 2021-05-07 21:09:11 -07:00
Aðalsteinn Rúnarsson f029de6b46 Update default volume types in Cluster Documentation
The default volume type for root & etcd has been updated from `gp2` to `gp3` as of v1.20.0

Updating the doc to reflect this change and add io2 as well as well as note which types can be configured with iops and throughput options.

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2021-05-07 14:54:03 +00:00
John Gardiner Myers 7275340637
Apply suggestions from code review
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-06 18:59:08 -07:00
John Gardiner Myers 116b749368 Documentation and release note for IRSA 2021-05-06 14:28:21 -07:00
Kubernetes Prow Robot 8409917287
Merge pull request #10656 from keithlayne/patch-1
Quote `grep` patterns in docs/rotate-secrets.md
2021-05-06 12:24:00 -07:00
Alexander Block d1ab0af511 Allow cert-manager to be provisioned externally 2021-04-30 20:33:59 +02:00
John Gardiner Myers 428041bc0f Add cluster-level warmPool settings 2021-04-25 20:22:04 -07:00
John Gardiner Myers 0647563da8 Improve warm pool documentation 2021-04-24 10:48:05 -07:00
Kubernetes Prow Robot 7efc6d6cf3
Merge pull request #11307 from olemarkus/warm-documentation
Add warm pool docs and release notes
2021-04-24 02:49:22 -07:00
Kubernetes Prow Robot bc20262a47
Merge pull request #11281 from javipolo/cert-manager-default-issuer
Add ability to set a default Issuer in certManager addon
2021-04-24 01:21:14 -07:00
Ole Markus With c18a210124 Add warm pool docs and release notes 2021-04-24 09:45:41 +02:00
Jason Haugen c2a9bdc515 fix permissions required for NTH Queue Processor 2021-04-23 13:10:29 -05:00
Peter Rifel c653a83be9
Document the newly required SQS permissions for NTH 2021-04-23 09:31:10 -05:00
Jason Haugen 36722afb0f change casing Asg->ASG 2021-04-22 13:07:01 -05:00
Javi Polo bf20c6a4b7 Add ability to set a default Issuer in certManager addon 2021-04-21 22:39:25 +02:00
Jason Haugen 7e48dad4d2 add ManagedAsgTag, merge templates, improve docs 2021-04-19 16:51:08 -05:00
Jason Haugen cceb9dd296 lifecycle integ test, docs, & small cleanup 2021-04-19 15:43:06 -05:00
Kubernetes Prow Robot 146f9b4cbb
Merge pull request #11248 from dntosas/cilium-resources
[cilium] Add support for choosing resources
2021-04-19 10:23:45 -07:00
dntosas 55524935d7
[cilium] Add support for choosing resources
Cilium as a CNI is a critical component for the cluster so it would be safe
to have some guaranteed resources as well as allowing the users to
define them based on their needs.

In this commit, we init default requested resources and add the
capability of user-defined values.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-04-19 11:30:02 +03:00
dntosas 0d12f8bfac
[docs] Add a note for updating hashes when changing addon manifests
Signed-off-by: dntosas <ntosas@gmail.com>
2021-04-19 11:11:39 +03:00
John Gardiner Myers 3fe51f2a68 Update rolling update documentation 2021-04-18 15:41:55 -07:00
Kubernetes Prow Robot 2714c66f95
Merge pull request #10672 from hakman/remove-blm-banner
Remove BLM banner
2021-04-15 07:01:50 -07:00
Kubernetes Prow Robot 2f1c8f3969
Merge pull request #11186 from integrii/patch-1
Update kops_create_secret_dockerconfig.md
2021-04-15 05:55:50 -07:00
Ciprian Hacman 6c284a886b Apply suggestions from code review 2021-04-15 11:42:27 +03:00
Eric Greer 21c6007e71 Update kops_create_secret_dockerconfig.md
Today we were implementing an authenticated docker user, but it was unclear how exactly to do that.  We learned that simply making this secret within kops was all that was needed for the docker config to start appearing on newly built nodes.  It would be nice if the documentation here reflected that.  It would have saved us some time.
2021-04-15 11:30:54 +03:00
xiaorunkun df908fbed8 Correct typos 2021-04-15 10:31:02 +03:00
Kubernetes Prow Robot 98ddb40259
Merge pull request #11233 from hakman/relnotes_1.21.0-alpha.3
Release notes for 1.21.0-alpha.3
2021-04-14 03:30:42 -07:00
Ciprian Hacman 80f63a3446 Release notes for 1.21.0-alpha.3 2021-04-14 10:22:17 +03:00
yojay11717 71d84f6375 fix a typo 2021-04-14 14:38:35 +08:00
Peter Rifel 3e4919de7d
Update IG tutorial for per-AZ node groups 2021-04-12 21:21:07 -07:00
John Gardiner Myers 492a2422d7 Update release compatibility matrix 2021-04-10 19:37:01 -07:00
Justin SB 63ebbe556a Docs: Remove 'prerelease' warning from 1.20
Also fix a small typo I noticed in the 1.19 notes.
2021-04-10 14:56:51 -04:00
Justin SB 994e0e2feb Release notes for 1.20.0 2021-04-10 09:42:57 -04:00
Kubernetes Prow Robot e465d57d81
Merge pull request #11189 from recollir/patch-1
Update cilium.md
2021-04-09 13:45:16 -07:00
Justin SB 6cb7a5be67 Release notes for 1.19.2 2021-04-09 11:30:50 -04:00
Federico Hernandez 927429bea7
Update cilium.md
Link to Cilium doc about NodePort resulted in a 404.
2021-04-09 08:50:31 +02:00
Kenji Kaneda baff30d66e Add an option to skip NTP installation
Add NTPConfig to ClusterSpec. NTPConfig has the SkipInstall option.

https://github.com/kubernetes/kops/issues/9661
2021-03-31 12:33:32 -07:00
Kubernetes Prow Robot 50b89a0c25
Merge pull request #11151 from maoyangLiu/master
fix the mistake link in addons.md
2021-03-28 12:06:45 -07:00
Kubernetes Prow Robot e4be5dcece
Merge pull request #11150 from allir/patch-1
Update Getting Started AWS guide
2021-03-28 11:24:44 -07:00
Kubernetes Prow Robot 0a84e898f2
Merge pull request #11153 from justinsb/expand_help_on_user-Flags
Expand flag help on --user flags
2021-03-27 11:20:43 -07:00
Justin Santa Barbara e34d9bb579 Expand flag help on --user flags
It wasn't entirely clear to me that this had to be the name of a user
kubeconfig section.
2021-03-27 13:41:10 -04:00
Justin Santa Barbara 1a9dd01811 Clarify release notes around exporting kubeconfig
Make a clearer distinction between exporting kubeconfig (including
server endpoints / certificates) vs exporting credentials.

Issue #11021
2021-03-27 06:58:40 -04:00
maoyangLiu 107c4572a5 fix the mistake link 2021-03-27 14:06:51 +08:00
Aðalsteinn Rúnarsson c8af7fa8bb
Update Getting Started AWS guide
Fix some markdown linting and also fix headings. 

"Create Cluster" was top level heading so it breaks the right hand side table of contents as it will stop listing the headings after that point.
2021-03-26 20:11:21 +00:00
Luke Hinds 5fbbe3dd9d Change registrable domains to placeholders
An issue was raised to the product security commitee that the
aws example domains in kops documentation were registrable and
could be used for various attacks against users (should they
run the specific examples)

Signed-off-by: Luke Hinds <lhinds@redhat.com>
2021-03-26 10:50:04 +00:00
Igor Lončarević 604a2eaa04
Update cluster_spec.md
Example contains wrong reference. 

The correct one is: allocationId, not allocationID
2021-03-25 16:08:37 +01:00
Kubernetes Prow Robot a01ee1d0fe
Merge pull request #11140 from jurriaanpro/cluster-autoscaler-add-scale-down-delay-after-add
Add scaleDownDelayAfterAdd to clusterAutoscaler spec
2021-03-25 05:57:29 -07:00
jurriaanpro 25955ceb6b Add scaleDownDelayAfterAdd to clusterAutoscaler spec 2021-03-25 11:23:48 +01:00
Barry Melbourne 05123faf5a Update containerd to v1.3.10/v1.4.4 2021-03-23 17:02:01 +00:00
Ciprian Hacman f28e1e3927 Update release process docs 2021-03-22 12:52:28 +02:00
Ciprian Hacman 6bc4d986d2 Release notes for 1.21.0-alpha.2 2021-03-22 11:51:13 +02:00
Kubernetes Prow Robot d0b175fb2b
Merge pull request #11090 from olemarkus/docs-apiserver-nodes
Add docs about dedicated apiserver ndoes
2021-03-22 00:37:44 -07:00
Justin SB b69b440c2e Add values page
As discussed in #10672, we are maintaining the BLM statement on a page
dedicated to our values.

Additional values mirror the kubernetes project values.  We can
document additional values by agreement in office hours.
2021-03-21 10:35:46 -04:00
Ole Markus With 29d5494940 Add docs about dedicated apiserver ndoes 2021-03-21 07:41:18 +01:00
Kubernetes Prow Robot d2ba0b9f1e
Merge pull request #11071 from danmx/patch-1
fix(docs): cpuCFSQuotaPeriod needs a feature gate
2021-03-20 20:23:42 -07:00
Ole Markus With 20bd724f5e Add support for scaling out the control plane with dedicated apiserver nodes
Ensure apiserver role can only be used on AWS (because of firewalling)

Apply api-server label to CP as well

Consolidate node not ready validation message

Guard apiserver nodes with a feature flag

Rename Apiserver role to APIServer

Add an integration test for apiserver nodes

Rename Apiserver role to APIServer

Enumerate all roles in rolling update docs

Apply suggestions from code review

Co-authored-by: Steven E. Harris <seh@panix.com>
2021-03-20 20:57:00 +01:00
Peter Rifel 08b263b8f6
Fix GCE channels version constraints
Previously k8s 1.17+ would always match with COS rather than Ubuntu 20.04 because of the unbound version range.
This updates 1.18+ clusters to use Ubuntu 20.04 to match AWS.

This should fix the failure to download logs via SSH here: https://prow.k8s.io/view/gs/kubernetes-jenkins/logs/e2e-kops-gce-kubetest2/1373013584195358720
The instance groups confirm the use of COS rather than u2004: https://storage.googleapis.com/kubernetes-jenkins/logs/e2e-kops-gce-kubetest2/1373013584195358720/artifacts/instancegroups.yaml
2021-03-19 22:34:31 -05:00
Daniel Iziourov f0ce7708d2
fix(docs): cpuCFSQuotaPeriod needs a feature gate 2021-03-19 11:27:25 +01:00
Kubernetes Prow Robot 9ddc1bdeda
Merge pull request #11041 from hakman/bazel-3.5.0
Update Bazel to v3.5.0
2021-03-18 10:29:20 -07:00
Ciprian Hacman 47fb5f1d8c Update docs to mention Bazelisk 2021-03-18 18:49:13 +02:00
yojay 7c76ec4def corret a word for readme 2021-03-18 20:01:32 +08:00
Adrian Mester ae782e8792 fix CNI bin path in troubleshoot.md 2021-03-16 12:08:44 +02:00
Kubernetes Prow Robot 9dfbd03fa6
Merge pull request #11046 from hakman/channels-arm64
Add channels entries for image architecture
2021-03-15 12:16:34 -07:00
Ciprian Hacman 55f8c70779 Add channels entries for image architecture 2021-03-15 20:36:37 +02:00
Barry Melbourne e30bf1cf35 Update Go modules to latest versions 2021-03-14 15:08:27 +00:00
Ciprian Hacman 722b9e3b62 Release notes for 1.20.0-beta.2 2021-03-12 19:39:23 +02:00
Bharath Vedartham 1243e6b4e2 Add to 1.21 release notes 2021-03-09 23:21:42 +05:30