Commit Graph

18026 Commits

Author SHA1 Message Date
Steven E. Harris 17e9c6eca2
OIDC: Tolerate extra service-account key set items
When reading the kOps "service-account" key set in preparation for
publishing the OIDC JWKS file (such as to S3 alongside the discovery
document), in some cases the set contains items that either lack an
X.509 certificate or contain such a certificate issued for a subject
with common name other than "service-account." Ignore these extra key
set items and instead only project JWKS keys for those with an X.509
certificate with the expected subject common name.
2022-08-24 10:07:20 -04:00
Kubernetes Prow Robot 939a62e424
Merge pull request #14173 from olemarkus/karpenter-16
Bump karpenter to 0.16
2022-08-24 06:22:03 -07:00
Ole Markus With 7ab7cfda69 Don't explicitly set karpenter provisioner label
It's past on as other labels through the CAS cloud labels
2022-08-24 12:39:52 +02:00
Kubernetes Prow Robot d69403e55c
Merge pull request #14170 from olemarkus/skip-metadata-concealment
Skip tests related to metadata concealment on GCE k8s <= 1.23
2022-08-24 03:02:25 -07:00
Kubernetes Prow Robot d57d751204
Merge pull request #14169 from olemarkus/aws-lbc-policy-fix
Fix policy API version for LBC and NTH
2022-08-24 01:42:36 -07:00
Kubernetes Prow Robot 2a99db2c2f
Merge pull request #13052 from rifelpet/sa-tags
Tag IAM Roles with service account info
2022-08-24 01:42:24 -07:00
Ole Markus With 501e1afdc8 Bump karpenter to 0.16 2022-08-24 10:03:44 +02:00
Ole Markus With f159bb65de Skip tests related to metadata concealment on GCE k8s <= 1.23 2022-08-24 09:27:25 +02:00
Kubernetes Prow Robot 7b71fef460
Merge pull request #14167 from olemarkus/v125-deps
Bump K8s libs to 0.25.0
2022-08-24 00:26:24 -07:00
Ole Markus With 0bf9be4526 Update expected 2022-08-24 09:11:13 +02:00
Ole Markus With d98d96aead Fix policy API version for NTH 2022-08-24 09:08:09 +02:00
Ole Markus With a800a6b607 Fix policy API version for LBC 2022-08-24 09:05:21 +02:00
Ole Markus With 9e5b662dde Remove unused hostmount package 2022-08-24 08:39:11 +02:00
Kubernetes Prow Robot 50e61eeeef
Merge pull request #14168 from hakman/ssh-key_trim_space
Trim space around SSH public key
2022-08-23 23:13:49 -07:00
Ciprian Hacman 407ee77041 Trim space around SSH public key 2022-08-24 08:32:01 +03:00
Ole Markus With 7bc8281e54 Bump K8s libs to 0.25.0
This also bumps go mod version to 1.19
2022-08-24 07:17:14 +02:00
Peter Rifel 5ee973e5c3
./hack/update-expected.sh 2022-08-23 19:19:58 -05:00
Peter Rifel f79a126bd2
Add service account tags to IAM Roles 2022-08-23 19:13:51 -05:00
Kubernetes Prow Robot 57fd9722b5
Merge pull request #14166 from olemarkus/e2e-ab-latest-download
Fix the non-ci markers
2022-08-23 04:07:24 -07:00
Ole Markus With cbd12bbee4 Fix the non-ci markers 2022-08-23 12:23:32 +02:00
Kubernetes Prow Robot 655811cce6
Merge pull request #14163 from olemarkus/e2e-ab-not-ci-download
Don't set unused test package flags to empty string
2022-08-22 12:50:09 -07:00
Ole Markus With a1e1a82245 Don't set unused test package flags to empty string 2022-08-22 19:47:31 +02:00
Kubernetes Prow Robot a8acccf6a0
Merge pull request #14161 from olemarkus/e2e-ab-ci-download
Fix test package location when using k8s ci versions in the upgrade AB scenario
2022-08-22 09:01:43 -07:00
Ole Markus With 9b6dd0eb85 Fix test package location when using k8s ci versions in the upgrade AB scenario 2022-08-22 14:08:04 +02:00
Kubernetes Prow Robot d26eeb678a
Merge pull request #14159 from olemarkus/iprof
Fix bugs and typo in iam resource deletion logic
2022-08-21 11:47:37 -07:00
Ole Markus With eb003a19b1 Fix bugs and typo in iam resource deletion logic 2022-08-21 20:01:20 +02:00
Kubernetes Prow Robot dc79885536
Merge pull request #14158 from olemarkus/fix-etcd-docs
Update and clean up etcdcli and etcd backup documentation
2022-08-21 02:45:42 -07:00
Kubernetes Prow Robot 45dc1f1cfe
Merge pull request #14155 from olemarkus/ignore-no-such-entity
Fix no such entity check for iam profiles and roles
2022-08-21 02:45:35 -07:00
Kubernetes Prow Robot a92cb0eec1
Merge pull request #14157 from kubernetes/dependabot/github_actions/peter-evans/create-pull-request-4.1.1
Bump peter-evans/create-pull-request from 4.0.4 to 4.1.1
2022-08-21 01:25:35 -07:00
Ole Markus With c0114f0f29
Use correct command for fetching the cluster spec
Co-authored-by: Alex Simenduev <shamil.si@gmail.com>
2022-08-21 10:16:41 +02:00
Ole Markus With dd9b40a751 Update and clean up etcdcli and etcd backup documentation 2022-08-21 09:43:54 +02:00
Kubernetes Prow Robot 731da137c9
Merge pull request #14156 from kubernetes/dependabot/github_actions/actions/dependency-review-action-2.1.0
Bump actions/dependency-review-action from 2.0.4 to 2.1.0
2022-08-21 00:41:36 -07:00
dependabot[bot] a8e0c781bf
Bump peter-evans/create-pull-request from 4.0.4 to 4.1.1
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 4.0.4 to 4.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](923ad837f1...18f90432be)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-21 06:14:33 +00:00
dependabot[bot] ada8d1b904
Bump actions/dependency-review-action from 2.0.4 to 2.1.0
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.0.4 to 2.1.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](94145f3150...23d1ffffb6)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-21 06:14:31 +00:00
Ole Markus With 084ecac2bb Fix no such entity check for iam profiles and roles 2022-08-21 07:29:30 +02:00
Kubernetes Prow Robot 87de208fcd
Merge pull request #14153 from olemarkus/ignore-404-deletion
Ignore entities not found when deleting IAM roles and profiles
2022-08-20 10:45:35 -07:00
Ole Markus With 578e27bb5f Ignore entities not found when deleting IAM roles and profiles 2022-08-20 18:58:04 +02:00
Kubernetes Prow Robot 92a456283c
Merge pull request #14152 from MoShitrit/k8s-releases-alpha-2022-08-20
Bump k8s releases and Ubuntu AMI version in Alpha
2022-08-20 09:53:35 -07:00
Moshe Shitrit 055f1a4d27 bump aws ubuntu version in alpha 2022-08-20 12:11:41 -04:00
Moshe Shitrit 5d775f9532 bump k8s versions in alpha 2022-08-20 12:11:16 -04:00
Kubernetes Prow Robot 3d84f3ca87
Merge pull request #14030 from justinsb/applylib
Introduce library for applying objects
2022-08-20 07:21:35 -07:00
Ole Markus With 4a3274bb5a Update expected 2022-08-20 15:36:39 +02:00
Ole Markus With 1955a8cef3 Set podManifestPath for nodeup model tests 2022-08-20 15:35:17 +02:00
Ole Markus With d471845dce Move merging of kubelet configs to populate instance groups so we have only one place to fetch them
The kubelet config can be configured in a number of places. Merge them earlier so we only need to check the config in the IG kubeletConfig
2022-08-20 15:35:15 +02:00
Ole Markus With 86be353777 Use testhelper for generating test IG 2022-08-20 15:34:22 +02:00
Ole Markus With 24d6b8f5fc Return error if podManifestPath has not been set 2022-08-20 15:34:22 +02:00
Ole Markus With d4ea445f24 Remove redundant buildKubeletConfig function 2022-08-20 15:34:22 +02:00
Kubernetes Prow Robot e8fcb0c132
Merge pull request #14150 from olemarkus/cas-default-image2
Add default image for CAS that exists
2022-08-20 03:29:46 -07:00
Kubernetes Prow Robot 8f20d22ef7
Merge pull request #14127 from olemarkus/write-ig-input
Write the user provided IG spec to state store instead of the full spec
2022-08-20 03:29:35 -07:00
Kubernetes Prow Robot e1fcbd6af2
Merge pull request #14151 from olemarkus/plug-iam-role-leak
Plug the IAM role leak
2022-08-20 02:25:35 -07:00