Commit Graph

16315 Commits

Author SHA1 Message Date
Ole Markus With 2f3b683ca0 Do not allow docker on k8s 1.24+
Update pkg/apis/kops/validation/validation.go

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-12-19 12:40:11 +01:00
Kubernetes Prow Robot 942d80801d
Merge pull request #12998 from justinsb/apiserver_advertise_address
componentconfig: expose advertise-address flag for kube-apiserver
2021-12-19 01:47:24 -08:00
Kubernetes Prow Robot c5ba4b0ad9
Merge pull request #12987 from justinsb/gce_network_cleanup
gce: clean up networking objects by reference
2021-12-19 00:51:25 -08:00
Kubernetes Prow Robot 2269009ddc
Merge pull request #12997 from justinsb/kops_controller_use_framework
kops-controller: use controller-runtime manager
2021-12-19 00:09:32 -08:00
Kubernetes Prow Robot 23622237a9
Merge pull request #12995 from rifelpet/tf-gcp-sa
Use terraform literals in GCP service account references
2021-12-19 00:09:24 -08:00
Kubernetes Prow Robot 1c467cefe6
Merge pull request #12999 from justinsb/publickey_helpers
Create helper functions for parsing public keys
2021-12-18 23:21:24 -08:00
Kubernetes Prow Robot 30017ef777
Merge pull request #12996 from justinsb/sftp_update
dep: update github.com/pkg/sftp
2021-12-18 22:39:25 -08:00
justinsb 71e5a21786 componentconfig: expose advertise-address flag for kube-apiserver
This flag determines which IPs are advertised inside the cluster, in
the "kubernetes" service in the "default" namespace.
2021-12-18 21:30:58 -05:00
justinsb aa04046ad0 Create helper functions for parsing public keys
These are useful when verifying and creating PKI signatures.
2021-12-18 19:42:39 -05:00
justinsb f60f2476ed kops-controller: use controller-runtime manager
This gives us access to a managed client, and it lets us hook into the
lifecycle.
2021-12-18 19:38:53 -05:00
justinsb b2cfc5c4c4 dep: update github.com/pkg/sftp
This picks up changes to use go errors, instead of the (deprecated?)
pkg/errors.
2021-12-18 19:37:16 -05:00
Peter Rifel 117639f7ec
Use terraform literals in GCP service account references 2021-12-18 16:39:16 -06:00
Kubernetes Prow Robot 43027b9998
Merge pull request #12988 from justinsb/gce_use_per_ig_serviceaccounts
gce: use per InstanceGroup serviceaccounts
2021-12-18 04:25:24 -08:00
Kubernetes Prow Robot 90d1d42fb1
Merge pull request #12993 from justinsb/nodeup_script_refactor
Refactor nodeup script to avoid action-at-a-distance
2021-12-17 19:27:24 -08:00
justinsb e2c28b062b Refactor nodeup script to avoid action-at-a-distance 2021-12-17 18:33:44 -05:00
justinsb 61e2cb2b73 gce: Fix google_project_iam_binding member -> members 2021-12-17 18:29:29 -05:00
Kubernetes Prow Robot 648858a78a
Merge pull request #12991 from justinsb/avoid_double_encoding_scripts
Avoid double-encoding templates
2021-12-17 15:16:01 -08:00
Kubernetes Prow Robot dd96fe347e
Merge pull request #12989 from justinsb/remove_unused_templateresource
Remove unused TemplateResource interface
2021-12-17 15:15:54 -08:00
Kubernetes Prow Robot 3dfd39198b
Merge pull request #12990 from justinsb/defend_nil_containerd
Defend against nil containerd
2021-12-17 13:59:54 -08:00
justinsb 0e1bbd58bd Avoid double-encoding templates
We were previously passing the template (with placeholders) through
MIME encoding.  This seems like it might fail rarely in
hard-to-understand ways.
2021-12-17 16:28:09 -05:00
justinsb 0e98ede864 Defend against nil containerd 2021-12-17 16:21:06 -05:00
justinsb f0c7ea6e05 Remove unused TemplateResource interface 2021-12-17 16:20:53 -05:00
justinsb 7270fd9165 Update expected test output 2021-12-17 12:57:14 -05:00
justinsb 8b3372ec76 Need to truncate gce serviceaccounts to max 30 characters 2021-12-17 12:57:14 -05:00
justinsb 2f1ce3fa14 Move string truncation to its own package 2021-12-17 12:57:14 -05:00
justinsb 746f886718 gce: use per instancegroup serviceaccounts
We no longer set the cloudconfig serviceaccount on new clusters, and
instead use a per-IG setting if this is not set.
2021-12-17 12:57:14 -05:00
justinsb 1eedb7ddee gce: clean up networking objects by reference
We try to avoid cleaning up by name, and prefer checking references to
(e.g. targeting) a known resource, like an instancegroup.
2021-12-17 10:08:09 -05:00
Kubernetes Prow Robot 3859fe3cf6
Merge pull request #12982 from justinsb/map_all_serviceaccounts
gce: map multiple serviceaccounts
2021-12-17 02:44:29 -08:00
Ciprian Hacman 3515f8e39b
Fix pull-kops-verify-gofmt 2021-12-17 12:02:51 +02:00
Kubernetes Prow Robot 2dd12d05b7
Merge pull request #12984 from olemarkus/alpha-dec
Promote alpha with December releases
2021-12-16 20:44:30 -08:00
Ole Markus With 261e2f429d Promote alpha with December releases 2021-12-16 20:53:53 +01:00
justinsb a0a67ebdab gce: map multiple serviceaccounts
Though it's currently an error to create an instance with more than
one serviceaccount, the GCE API and Terraform both support expressing
it in the model.  It's simpler to support the full model
expressiveness.
2021-12-16 09:48:49 -05:00
Kubernetes Prow Robot 9ed4ec13f0
Merge pull request #12979 from olemarkus/quote-values
Quote values and remove limits in karpenter provisioners
2021-12-15 12:35:52 -08:00
Ole Markus With 911e541360 Quote values and remove limits in karpenter provisioners 2021-12-15 20:51:55 +01:00
Kubernetes Prow Robot 8019c88b47
Merge pull request #12978 from justinsb/gce_use_serviceaccount_task
gce: Use ServiceAccount task when building model
2021-12-15 08:49:52 -08:00
justinsb 63e3d98443 gce: Use ServiceAccount task when building model
The next step towards supporting custom ServiceAccounts per IG
2021-12-15 11:08:51 -05:00
Kubernetes Prow Robot 711a6eb696
Merge pull request #12974 from hakman/unskip_runtime-class
Do not skip RuntimeClass tests
2021-12-15 07:26:18 -08:00
Ciprian Hacman 2cb6e0e0d4 Do not skip RuntimeClass tests 2021-12-15 16:39:41 +02:00
Kubernetes Prow Robot db791503dc
Merge pull request #12972 from hakman/unskip_hpa
Do not skip HPA tests
2021-12-15 06:16:19 -08:00
Kubernetes Prow Robot 38b5a41345
Merge pull request #12977 from olemarkus/docs-fix-perms
Add missing permissions
2021-12-15 02:10:19 -08:00
Ole Markus With ba49423d6d Add missing permissions 2021-12-15 10:29:21 +01:00
Ciprian Hacman c177ab09c2 Do not skip HPA tests 2021-12-15 10:21:22 +02:00
Kubernetes Prow Robot 7ccf0d6b7a
Merge pull request #12967 from hakman/controller-runtime-0.11.0
Update controller-runtime to v0.11.0
2021-12-15 00:12:19 -08:00
Kubernetes Prow Robot fcdd766bce
Merge pull request #12968 from hakman/containerd-1.6.0-b.4
Update containerd to v1.6.0-beta.4
2021-12-14 23:22:19 -08:00
Ciprian Hacman 48333f1bc6 Run hack/update-expected.sh 2021-12-15 08:34:52 +02:00
Ciprian Hacman 991eb70c71 Update containerd to v1.6.0-beta.4 2021-12-15 08:33:30 +02:00
Ciprian Hacman e529bac103 Update controller-runtime to v0.11.0 2021-12-15 07:49:53 +02:00
Kubernetes Prow Robot 424452a855
Merge pull request #12906 from olemarkus/karpenter
Support Karpenter
2021-12-14 13:58:50 -08:00
Kubernetes Prow Robot 4a8a128eea
Merge pull request #12902 from heybronson/conn-draining
wait for instances to drain from classic LB
2021-12-14 09:13:47 -08:00
Kubernetes Prow Robot c817ae469c
Merge pull request #12965 from rifelpet/remove-staticcheck
Remove verify-staticcheck
2021-12-14 07:17:47 -08:00