Commit Graph

2535 Commits

Author SHA1 Message Date
liranp 23c0cdab36
feat(spotinst): new hybrid mode 2020-05-23 21:39:04 +03:00
Kubernetes Prow Robot a31abc8873
Merge pull request #9156 from Hellcatlk/UnitTestCase2
Add unit test case for pkg/apis/kops/util/versions_test.go
2020-05-23 07:45:11 -07:00
John Gardiner Myers af90ecdddf Reduce test flakiness 2020-05-22 19:33:01 -07:00
Kubernetes Prow Robot e6d73b5ba0
Merge pull request #9135 from justinsb/gce_no_hostname_no_worries
GCE: don't rely on hostname being correct
2020-05-22 17:43:10 -07:00
Kubernetes Prow Robot 212ac0a5fa
Merge pull request #9112 from Hellcatlk/UnitTestCase
Add unit test case for pkg/k8sversion/version_test.go
2020-05-22 01:36:50 -07:00
Kubernetes Prow Robot ee504ac781
Merge pull request #9116 from srikiz/DO-LB-HandleUpdates
[Digital Ocean] Handle logic for kops edit/update cluster
2020-05-22 01:02:37 -07:00
ZouYu 956f07188f Add unit test case for pkg/apis/kops/util/versions_test.go
Signed-off-by: ZouYu <zouy.fnst@cn.fujitsu.com>
2020-05-22 15:23:25 +08:00
Kubernetes Prow Robot 2c899d859a
Merge pull request #9104 from hakman/containerd-kubenet
Add support for Kubenet with containerd
2020-05-21 22:20:38 -07:00
John Gardiner Myers 8a6d29cd40 Remove support for reading legacy-format keypairs 2020-05-20 13:28:13 -07:00
Kubernetes Prow Robot 83c2a0885e
Merge pull request #8989 from hs0210/work
Add unit test for func matchesElbTags
2020-05-19 22:08:30 -07:00
Kubernetes Prow Robot 96819c2e48
Merge pull request #8950 from justinsb/apiserver-test1
Create golden image test for nodeup kube-apiserver
2020-05-19 22:08:18 -07:00
Kubernetes Prow Robot 204cf58c96
Merge pull request #9124 from johngmyers/bastion-private
Don't put bastions in the utility subnets
2020-05-19 21:26:18 -07:00
Kubernetes Prow Robot 26421c3081
Merge pull request #9133 from justinsb/service_account_jwks_uri_flag
Map kube-apiserver service-account-jwks-uri flag
2020-05-19 20:54:18 -07:00
Ciprian Hacman 9d666c73bc Use components.UsesKubenet to check if Kubenet is required 2020-05-19 20:43:33 +03:00
Justin Santa Barbara 35c6056fb2 Create golden image test for nodeup kube-apiserver
The building of the manifests for nodeup tasks can be a little opaque;
create a test to verify and expose what is happening.
2020-05-18 06:42:16 -04:00
Kubernetes Prow Robot 2e5d4761d0
Merge pull request #8464 from justinsb/google_clouddns_delete_records
DNS: Don't try to apply empty changesets
2020-05-17 16:17:36 -07:00
Kubernetes Prow Robot bda2a15ee6
Merge pull request #9024 from tomesm/support_launch_template
Added Launch Template support for instance interruption behavior
2020-05-17 15:35:36 -07:00
Justin Santa Barbara 3306549749 Add general contract test for IsEmpty
This was the root bug that was causing the over-logging on GCE.
2020-05-17 17:11:01 -04:00
Justin Santa Barbara 7e710e85d9 DNS: Apply should be a no-op when empty
Document the contract a bit more, change the signature by adding a
context arg and following through to make sure we honor the contract
everywhere.
2020-05-17 16:45:08 -04:00
Justin SB 5ed11fd9c7 GCE: don't rely on hostname being correct
Distros that use systemd for DHCP often don't have the hostname
correct, due to e.g. the requirement for policy kit.

We don't rely on it being set correctly on other clouds; no real
reason to require it on GCP either!
2020-05-17 15:20:58 -04:00
Justin SB ae4381c555 Map kube-apiserver service-account-jwks-uri flag
This is needed/useful for identity federation to AWS.
2020-05-16 22:03:47 -04:00
Kubernetes Prow Robot 66b5322037
Merge pull request #8960 from q384566678/add-ut
add some unit tests
2020-05-16 15:37:36 -07:00
Kubernetes Prow Robot 50a1a8edfb
Merge pull request #9121 from atmosx/master
Add EC2 Instance LifeCycle label
2020-05-15 11:17:37 -07:00
Panagiotis Atmatzidis 31acabf8cd
Add EC2 instance lifecycle label to nodes
When using a "mixed instance policy"[1] instance group spot and onDemand nodes are part of the same
ASG. The ASG handles the percentage of spot vs onDemand instances. There are no annotations, EC2 tags or labels to identify which
instances are onDemand vs spot. There is a field called `InstanceLifecycle` accessible through `EC2.DescribeInstances`.

The field `InstanceLifecycle` is available only in `spot` and
`scheduled` AWS EC2 instance types.

This PR introduces a new label to be attached on AWS EC2 spot nodes.

The label is:

```
node-role.kubernetes.io/spot-worker: "true"
```

or

```
node-role.kubernetes.io/scheduled-worker: "true"
```

[^1]: https://github.com/kubernetes/kops/blob/master/docs/instance_groups.md#mixedinstancepolicy-aws-only
2020-05-15 09:33:37 +03:00
Srikanth f46ebbc7af Incorporate review comments 2020-05-14 17:25:25 +05:30
Kubernetes Prow Robot a454f0ff83
Merge pull request #9118 from johngmyers/validate-missing-asg
Return cluster validation failure if ASG missing
2020-05-13 14:36:23 -07:00
John Gardiner Myers 154833e652 Fail cluster validation if too few nodes for ig's target size 2020-05-12 22:28:26 -07:00
John Gardiner Myers ec4fe1e7e8 Don't put bastions in the utility subnets 2020-05-12 22:06:34 -07:00
Kubernetes Prow Robot d7d61c683d
Merge pull request #9091 from spotinst/feat-addon-featureflag
Spotinst: Allow users to disable the controller add-on
2020-05-12 09:34:22 -07:00
Ciprian Hacman e608cd5265 Add support for Kubenet with containerd 2020-05-12 17:20:59 +03:00
Zhou Hao 1a1be5f60a model: add UT for DefaultInstanceGroupVolumeSize
Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>
2020-05-12 17:26:08 +08:00
Srikanth c68f013468 Fix static checks 2020-05-12 10:02:58 +05:30
John Gardiner Myers 23d48f01d6 Return cluster validation failure if ASG missing 2020-05-11 21:19:02 -07:00
Srikanth 203449d7ac Minor changes for code cleanup 2020-05-12 00:29:02 +05:30
Srikanth b6a197e02e Update minor changes 2020-05-11 15:10:52 +05:30
Srikanth 5d3f2447e4 Changes for handling kops update 2020-05-11 15:10:52 +05:30
Jesse Haka bdaeb6df36 upgrade to cinder v3 to use api 2020-05-11 08:06:13 +03:00
ZouYu 41a216a50c add unit test case for pkg/k8sversion/version_test.go
Signed-off-by: ZouYu <zouy.fnst@cn.fujitsu.com>
2020-05-11 09:53:05 +08:00
Martin Tomes 224351a4b7
Update pkg/apis/kops/instancegroup.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:32 +02:00
Martin Tomes dd67149e99
Update pkg/apis/kops/v1alpha2/instancegroup.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:17 +02:00
Kubernetes Prow Robot dbf709e975
Merge pull request #9098 from justinsb/enable_healthcheck_1_17_on_master
kube-apiserver-healthcheck: actually enable on 1.17
2020-05-08 11:59:51 -07:00
Justin Santa Barbara 8db0017e62 kube-apiserver-healthcheck: actually enable on 1.17
We cherry picked the support to 1.17, but now we need to activate the
feature.
2020-05-08 13:32:22 -04:00
Justin Santa Barbara 86fb6031fd Fix port conflict on etcd-cilium vs dns-controller memberlist
Both were allocated port 3993; etcd-cilium is new and so it is less
impactful to renumber that.
2020-05-08 10:53:53 -04:00
liranp 4f207e4ac3
feat(spotinst): allow users to disable the controller addon 2020-05-07 18:11:17 +03:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Jesse Haka facd12dd32
Revert "feat(openstack): propagate cloud labels to machines" 2020-05-07 12:06:58 +03:00
Kubernetes Prow Robot e4ca5a000d
Merge pull request #9068 from andersosthus/disable-attach-detach-sync
Added support for configuring disable-attach-detach-reconcile-sync in…
2020-05-06 10:25:08 -07:00
Kubernetes Prow Robot 4f6496c274
Merge pull request #9052 from johngmyers/natgateway-notfound
Treat NatGatewaysNotFound error as already-deleted
2020-05-06 06:49:21 -07:00
Anders Østhus 9409e2af67 Added support for configuring disable-attach-detach-reconcile-sync in k-c-m config 2020-05-05 15:26:58 +02:00
John Gardiner Myers 463456737c Treat NatGatewaysNotFound error as already-deleted 2020-05-04 20:33:21 -07:00