Commit Graph

1665 Commits

Author SHA1 Message Date
Moshe Shitrit 03bc54e0d6 remove 'get' from aws-cni clusterRole to reflect https://github.com/aws/amazon-vpc-cni-k8s/pull/2058 2022-09-13 08:13:35 -04:00
Moshe Shitrit 731ebc2454 bump aws-cni to version 1.11.4 2022-09-12 22:15:36 -04:00
Ole Markus With f5e0feab5f Fix CAS cordon flag 2022-09-10 20:15:25 +02:00
Anthony Hausman af1ab751fd
aws-node-termination-handler: Add option to fetch node name through Kubernetes node `.spec.providerID`
Fetch node name through Kubernetes node `.spec.providerID` since Kops use InstanceID as node name.
 - 701db81ccf
2022-09-08 07:00:48 +02:00
Daniel Franca cdd0013b1f
Add support to --cordon-node-before-terminating on the cluster autoscaler addon (CordonNodeBeforeTerminating) 2022-09-06 17:03:24 +02:00
Kubernetes Prow Robot 75f541172d
Merge pull request #14226 from hakman/flannel-0.19.2
Update Flannel to v0.19.2
2022-09-05 12:17:01 -07:00
Ciprian Hacman c4decc2d11 Update Flannel to v0.19.2 2022-09-03 12:18:08 +03:00
Ciprian Hacman 083947b7fe Update Canal to v3.24.1 2022-09-03 10:58:07 +03:00
Ciprian Hacman 6a5ba584c5 Update Calico to v3.24.1 2022-09-03 10:58:06 +03:00
Kubernetes Prow Robot 9faeb5b8a9
Merge pull request #14203 from olemarkus/dcgm
Add support for installing dcgm exporter
2022-09-02 09:22:05 -07:00
Ciprian Hacman 8b83dedf24
Release 1.25.0-beta.1 (#14210) 2022-08-31 03:43:00 -07:00
Steven E. Harris 69f8191921
Calico: Work around host port/conntrack problem
In Calico's released versions, when using the eBPF data plane,
containers using host ports cannot respond to connection attempts
correctly. These container receive the packets from the client
forwarded after DNAT, but when they reply, there is no conntrack entry
for the would-be connection, so netfilter drops the reply packets,
preventing the connection from completing. The client never receives
the reply packets. The conntrack entry is missing because Calico
mistakenly attempts to optimize it away.

Work around the problem by disabling the Calico Felix program's
"BPFHostConntrackBypass" feature. This is a temporary measure until
the Calico maintainers can improve this feature to better handle host
port traffic, preserving these conntrack entries as intended.
2022-08-31 02:22:45 -04:00
Ole Markus With 98cd242673 Add support for installing dcgm exporter 2022-08-30 14:54:13 +02:00
Kubernetes Prow Robot fd2d6338bd
Merge pull request #14183 from olemarkus/karpenter-kubelet-config
Map up kubelet config to karpenter provisioners and add CCM startup taint
2022-08-27 02:54:35 -07:00
Kubernetes Prow Robot 5b6b06e764
Merge pull request #14186 from hakman/hetzner_csi-driver_latest
Update CSI driver to latest for Hetzner
2022-08-26 12:26:15 -07:00
Ole Markus With cb1b50ef1d Bump external-dns to 0.12.2 2022-08-26 11:46:58 +02:00
Ciprian Hacman c7afa8a9fc Update CSI driver to latest for Hetzner 2022-08-25 20:05:35 +03:00
Ole Markus With 1a8236290d Bump node local dns cache to 1.22.8 2022-08-25 19:03:14 +02:00
Ciprian Hacman 325f5e8987 Pass CSI driver manifest through kustomize 2022-08-25 19:49:15 +03:00
Kubernetes Prow Robot 2c4d414737
Merge pull request #14185 from olemarkus/bump-nvidia-device-driver
Bump the nvidia addon
2022-08-25 09:04:06 -07:00
Ole Markus With 76c7cba031 Bump nvidia device plugin to 0.12.2 2022-08-25 17:12:14 +02:00
Kubernetes Prow Robot 1c7e7413db
Merge pull request #14184 from olemarkus/bump-snapshot-controller-125
Bump snapshot-controller to 6.0.1
2022-08-25 05:24:07 -07:00
Ole Markus With 2db7ccb691 Bump snapshot-controller to 6.0.1 2022-08-25 12:57:16 +02:00
Ole Markus With 679135462d Map up kubelet config and add startup taints to karpeneter provisioner 2022-08-25 11:37:19 +02:00
Ole Markus With ba5cc618fa Bump Cert Manager to 1.9.1 2022-08-25 08:35:54 +02:00
Ole Markus With 1b5e90fa18 Bump AWS Load Balancer Controller to v2.4.3 2022-08-25 07:17:19 +02:00
Ole Markus With 0cd110d723 Bump node termination handler to 1.17.1 2022-08-24 21:52:52 +02:00
Kubernetes Prow Robot 939a62e424
Merge pull request #14173 from olemarkus/karpenter-16
Bump karpenter to 0.16
2022-08-24 06:22:03 -07:00
Ole Markus With 501e1afdc8 Bump karpenter to 0.16 2022-08-24 10:03:44 +02:00
Ole Markus With d98d96aead Fix policy API version for NTH 2022-08-24 09:08:09 +02:00
Ole Markus With a800a6b607 Fix policy API version for LBC 2022-08-24 09:05:21 +02:00
Ole Markus With 29bbfeff70 Bump karpenter to 0.15 and enable consolidation 2022-08-18 20:46:25 +02:00
Ole Markus With 6bd4a9ab28 Update karpenter manifest 2022-08-17 20:40:07 +02:00
Ole Markus With cae87bb208 Add deployment-specific selectors to nth pdb
If not, when migrating from imds-mode to sqs-mode, the selectors will match the daemonset pods, which doesn't work with pdb
2022-08-11 07:23:04 +02:00
Nicolas Sterchele 5b58586537
cilium: fix agent pod annotation templating 2022-08-10 14:14:19 +02:00
Moshe Shitrit a77f9efe24 bump aws cni to 1.11.13 2022-08-10 00:00:18 -04:00
Kubernetes Prow Robot 9ee09fde44
Merge pull request #14087 from olemarkus/hack-cert-manager-crds
Add back conversion struct to cert-manager CRDs
2022-08-03 15:53:46 -07:00
Ole Markus With 43c9232ae3 Add back conversion struct to cert-manager CRDs
A combination of apiserver map handling when using server-side apply, CA injection and resource validation made it impossible for kops to remove this struct. However, kops should claim ownership of all fields so we can remove them all in a future version
2022-08-03 14:14:58 +02:00
Nicolas Sterchele a1256cf6e6
aws-ebs-csi-driver: remove preStop hook
The hook can cause issue on execution, like

```
Exec lifecycle hook ([/bin/sh -c rm -rf
/registration/ebs.csi.aws.com-reg.sock /csi/csi.sock]) for Container
"node-driver-registrar" in Pod
"ebs-csi-node-96jbk_ebs-csi(a82c6d41-bd2b-42dd-b092-e3acd4c43b62)"
failed - error: command '/bin/sh -c rm -rf
/registration/ebs.csi.aws.com-reg.sock /csi/csi.sock' exited with 126: ,
message: "OCI runtime exec failed: exec failed: container_linux.go:370:
starting container process caused: exec: \"/bin/sh\": stat /bin/sh: no
such file or directory: unknown\r\n"
```

Moreover, it has been deleted from upstream driver, see this patch
6e59160eea

Signed-off-by: Nicolas Sterchele <foss@sterchelen.net>
2022-08-02 14:48:16 +02:00
Ole Markus With 8b9a194cb7 Fix karpenter PDB api version 2022-08-01 21:06:28 +02:00
Ole Markus With 8bcc640452 Make Karpenter respect IG's spec.Subnets
This will add tag all subnets with the IGs using that subnet

Update docs/operations/karpenter.md

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2022-08-01 21:06:24 +02:00
Ciprian Hacman 4dee7dd9a2
Release 1.25.0-alpha.2 (#14070) 2022-07-29 11:31:11 -07:00
Peter Rifel 116b887466 Remove namespaces from cluster-scoped resources in CNI manifests 2022-07-29 08:35:43 +03:00
Ciprian Hacman f77534b798 Update Canal to v3.23.3 2022-07-20 10:13:07 +03:00
Ciprian Hacman dc3ff3f3c7 Update Calico to v3.23.3 2022-07-20 09:58:33 +03:00
Kubernetes Prow Robot ea32e12ce7
Merge pull request #14005 from rifelpet/do-csi-420
Upgrade DO CSI controller to 4.2.0
2022-07-19 00:08:07 -07:00
Peter Rifel 40268c1342
Upgrade DO CSI driver to 4.2.0 2022-07-18 23:10:48 -06:00
Kubernetes Prow Robot 75e1dc55b9
Merge pull request #14001 from rifelpet/external-dns-namespace
Add missing namespace to external-dns Service
2022-07-18 21:52:06 -07:00
Peter Rifel 13a6b1d401
Add missing namespace field to external-dns Service 2022-07-18 21:10:19 -06:00
Ciprian Hacman a76fef1b2d Add option to set number of replicas for pod-identity-webhook 2022-07-16 07:23:54 +03:00