Ole Markus With
2f3b683ca0
Do not allow docker on k8s 1.24+
...
Update pkg/apis/kops/validation/validation.go
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-12-19 12:40:11 +01:00
Kubernetes Prow Robot
942d80801d
Merge pull request #12998 from justinsb/apiserver_advertise_address
...
componentconfig: expose advertise-address flag for kube-apiserver
2021-12-19 01:47:24 -08:00
Kubernetes Prow Robot
c5ba4b0ad9
Merge pull request #12987 from justinsb/gce_network_cleanup
...
gce: clean up networking objects by reference
2021-12-19 00:51:25 -08:00
Kubernetes Prow Robot
2269009ddc
Merge pull request #12997 from justinsb/kops_controller_use_framework
...
kops-controller: use controller-runtime manager
2021-12-19 00:09:32 -08:00
Kubernetes Prow Robot
23622237a9
Merge pull request #12995 from rifelpet/tf-gcp-sa
...
Use terraform literals in GCP service account references
2021-12-19 00:09:24 -08:00
Kubernetes Prow Robot
1c467cefe6
Merge pull request #12999 from justinsb/publickey_helpers
...
Create helper functions for parsing public keys
2021-12-18 23:21:24 -08:00
Kubernetes Prow Robot
30017ef777
Merge pull request #12996 from justinsb/sftp_update
...
dep: update github.com/pkg/sftp
2021-12-18 22:39:25 -08:00
justinsb
71e5a21786
componentconfig: expose advertise-address flag for kube-apiserver
...
This flag determines which IPs are advertised inside the cluster, in
the "kubernetes" service in the "default" namespace.
2021-12-18 21:30:58 -05:00
justinsb
aa04046ad0
Create helper functions for parsing public keys
...
These are useful when verifying and creating PKI signatures.
2021-12-18 19:42:39 -05:00
justinsb
f60f2476ed
kops-controller: use controller-runtime manager
...
This gives us access to a managed client, and it lets us hook into the
lifecycle.
2021-12-18 19:38:53 -05:00
justinsb
b2cfc5c4c4
dep: update github.com/pkg/sftp
...
This picks up changes to use go errors, instead of the (deprecated?)
pkg/errors.
2021-12-18 19:37:16 -05:00
Peter Rifel
117639f7ec
Use terraform literals in GCP service account references
2021-12-18 16:39:16 -06:00
Kubernetes Prow Robot
43027b9998
Merge pull request #12988 from justinsb/gce_use_per_ig_serviceaccounts
...
gce: use per InstanceGroup serviceaccounts
2021-12-18 04:25:24 -08:00
Kubernetes Prow Robot
90d1d42fb1
Merge pull request #12993 from justinsb/nodeup_script_refactor
...
Refactor nodeup script to avoid action-at-a-distance
2021-12-17 19:27:24 -08:00
justinsb
e2c28b062b
Refactor nodeup script to avoid action-at-a-distance
2021-12-17 18:33:44 -05:00
justinsb
61e2cb2b73
gce: Fix google_project_iam_binding member -> members
2021-12-17 18:29:29 -05:00
Kubernetes Prow Robot
648858a78a
Merge pull request #12991 from justinsb/avoid_double_encoding_scripts
...
Avoid double-encoding templates
2021-12-17 15:16:01 -08:00
Kubernetes Prow Robot
dd96fe347e
Merge pull request #12989 from justinsb/remove_unused_templateresource
...
Remove unused TemplateResource interface
2021-12-17 15:15:54 -08:00
Kubernetes Prow Robot
3dfd39198b
Merge pull request #12990 from justinsb/defend_nil_containerd
...
Defend against nil containerd
2021-12-17 13:59:54 -08:00
justinsb
0e1bbd58bd
Avoid double-encoding templates
...
We were previously passing the template (with placeholders) through
MIME encoding. This seems like it might fail rarely in
hard-to-understand ways.
2021-12-17 16:28:09 -05:00
justinsb
0e98ede864
Defend against nil containerd
2021-12-17 16:21:06 -05:00
justinsb
f0c7ea6e05
Remove unused TemplateResource interface
2021-12-17 16:20:53 -05:00
justinsb
7270fd9165
Update expected test output
2021-12-17 12:57:14 -05:00
justinsb
8b3372ec76
Need to truncate gce serviceaccounts to max 30 characters
2021-12-17 12:57:14 -05:00
justinsb
2f1ce3fa14
Move string truncation to its own package
2021-12-17 12:57:14 -05:00
justinsb
746f886718
gce: use per instancegroup serviceaccounts
...
We no longer set the cloudconfig serviceaccount on new clusters, and
instead use a per-IG setting if this is not set.
2021-12-17 12:57:14 -05:00
justinsb
1eedb7ddee
gce: clean up networking objects by reference
...
We try to avoid cleaning up by name, and prefer checking references to
(e.g. targeting) a known resource, like an instancegroup.
2021-12-17 10:08:09 -05:00
Kubernetes Prow Robot
3859fe3cf6
Merge pull request #12982 from justinsb/map_all_serviceaccounts
...
gce: map multiple serviceaccounts
2021-12-17 02:44:29 -08:00
Ciprian Hacman
3515f8e39b
Fix pull-kops-verify-gofmt
2021-12-17 12:02:51 +02:00
Kubernetes Prow Robot
2dd12d05b7
Merge pull request #12984 from olemarkus/alpha-dec
...
Promote alpha with December releases
2021-12-16 20:44:30 -08:00
Ole Markus With
261e2f429d
Promote alpha with December releases
2021-12-16 20:53:53 +01:00
justinsb
a0a67ebdab
gce: map multiple serviceaccounts
...
Though it's currently an error to create an instance with more than
one serviceaccount, the GCE API and Terraform both support expressing
it in the model. It's simpler to support the full model
expressiveness.
2021-12-16 09:48:49 -05:00
Kubernetes Prow Robot
9ed4ec13f0
Merge pull request #12979 from olemarkus/quote-values
...
Quote values and remove limits in karpenter provisioners
2021-12-15 12:35:52 -08:00
Ole Markus With
911e541360
Quote values and remove limits in karpenter provisioners
2021-12-15 20:51:55 +01:00
Kubernetes Prow Robot
8019c88b47
Merge pull request #12978 from justinsb/gce_use_serviceaccount_task
...
gce: Use ServiceAccount task when building model
2021-12-15 08:49:52 -08:00
justinsb
63e3d98443
gce: Use ServiceAccount task when building model
...
The next step towards supporting custom ServiceAccounts per IG
2021-12-15 11:08:51 -05:00
Kubernetes Prow Robot
711a6eb696
Merge pull request #12974 from hakman/unskip_runtime-class
...
Do not skip RuntimeClass tests
2021-12-15 07:26:18 -08:00
Ciprian Hacman
2cb6e0e0d4
Do not skip RuntimeClass tests
2021-12-15 16:39:41 +02:00
Kubernetes Prow Robot
db791503dc
Merge pull request #12972 from hakman/unskip_hpa
...
Do not skip HPA tests
2021-12-15 06:16:19 -08:00
Kubernetes Prow Robot
38b5a41345
Merge pull request #12977 from olemarkus/docs-fix-perms
...
Add missing permissions
2021-12-15 02:10:19 -08:00
Ole Markus With
ba49423d6d
Add missing permissions
2021-12-15 10:29:21 +01:00
Ciprian Hacman
c177ab09c2
Do not skip HPA tests
2021-12-15 10:21:22 +02:00
Kubernetes Prow Robot
7ccf0d6b7a
Merge pull request #12967 from hakman/controller-runtime-0.11.0
...
Update controller-runtime to v0.11.0
2021-12-15 00:12:19 -08:00
Kubernetes Prow Robot
fcdd766bce
Merge pull request #12968 from hakman/containerd-1.6.0-b.4
...
Update containerd to v1.6.0-beta.4
2021-12-14 23:22:19 -08:00
Ciprian Hacman
48333f1bc6
Run hack/update-expected.sh
2021-12-15 08:34:52 +02:00
Ciprian Hacman
991eb70c71
Update containerd to v1.6.0-beta.4
2021-12-15 08:33:30 +02:00
Ciprian Hacman
e529bac103
Update controller-runtime to v0.11.0
2021-12-15 07:49:53 +02:00
Kubernetes Prow Robot
424452a855
Merge pull request #12906 from olemarkus/karpenter
...
Support Karpenter
2021-12-14 13:58:50 -08:00
Kubernetes Prow Robot
4a8a128eea
Merge pull request #12902 from heybronson/conn-draining
...
wait for instances to drain from classic LB
2021-12-14 09:13:47 -08:00
Kubernetes Prow Robot
c817ae469c
Merge pull request #12965 from rifelpet/remove-staticcheck
...
Remove verify-staticcheck
2021-12-14 07:17:47 -08:00