kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,969 Commits 31 Branches 256 Tags 544 MiB
Commit Graph

1065 Commits

Author SHA1 Message Date
Peter Rifel 7d665022e3
Unconditionally reenable KMS and Volume Limit tests 
Fixes for these tests have now been released in all applicable k8s version markers
 2021-07-09 07:22:42 -04:00
John Gardiner Myers 86c9ee5506 hack/update-expected.sh 2021-07-09 00:20:18 -07:00
John Gardiner Myers cdf26302b2 hack/update-expected.sh 2021-07-08 18:46:03 -07:00
Ciprian Hacman fd08e2b047 Run hack/update-expected.sh 2021-07-08 22:12:12 +03:00
Ole Markus With 2d56558efe Run cert-manager cainjector on CP nodes as well 2021-07-06 16:05:41 +02:00
Kubernetes Prow Robot 0e458331b0
Merge pull request #11934 from olemarkus/cm-webhook-cp 
Schedule certmanager webhook on control plane
 2021-07-06 02:18:20 -07:00
Ole Markus With 735d9a898c Remove unused golden files from manyaddons test 2021-07-06 08:52:56 +02:00
Ole Markus With 561161291f Schedule certmanager webhook on control plane 2021-07-06 08:45:12 +02:00
John Gardiner Myers 9c83afb739 Remove obsolete files 2021-07-05 23:11:17 -07:00
Kubernetes Prow Robot 2e4a1ae143
Merge pull request #11921 from johngmyers/rename-k8s-ca 
Rename the "ca" keyset to "kubernetes-ca"
 2021-07-03 21:48:18 -07:00
Kubernetes Prow Robot 98465174cb
Merge pull request #11923 from rifelpet/upgrade-scenario 
Set KOPS_RUN_TOO_NEW_VERSION in scenario scripts
 2021-07-03 19:16:18 -07:00
Peter Rifel aaf5054138
Set KOPS_RUN_TOO_NEW_VERSION in scenario scripts 
We already do this in kubetest2-kops. This sets it in scenario scripts so that any `kops` commands behave identically.
 2021-07-03 21:36:18 -04:00
Kubernetes Prow Robot cf834ce5fc
Merge pull request #11843 from olemarkus/reduce-policy-size-further 
Reduce policy size further
 2021-07-03 17:58:18 -07:00
John Gardiner Myers 5834fc2690 hack/update-expected.sh 2021-07-03 17:33:13 -07:00
John Gardiner Myers 04943c8e3b Upgrade Cobra to 1.2.1 2021-07-02 10:39:53 -07:00
Peter Rifel c5fbcccfa6
Update pause image to 3.5 2021-07-02 06:40:27 -04:00
Kubernetes Prow Robot 6689850ebc
Merge pull request #11906 from johngmyers/refactor-aggregator 
Refactor apiserver-aggregator-ca
 2021-07-01 23:32:13 -07:00
John Gardiner Myers 5c5969d102 hack/update-expected.sh 2021-07-01 22:25:51 -07:00
John Gardiner Myers 186aaf6d96 hack/update-expected.sh 2021-07-01 14:45:32 -07:00
John Gardiner Myers cfe22f814e Upgrade cobra and viper 2021-07-01 12:59:43 -07:00
Peter Rifel 13f4305b9c
Include GCP Project in terraform HCL2 output 
This has been included in the JSON output but was missing from HCL2
 2021-07-01 09:23:37 -04:00
Ole Markus With aad2912710 Add sets for the remaining addons 2021-07-01 10:37:57 +02:00
Ole Markus With df5b58b1b3 Add sets for the typical default role perms 2021-07-01 10:28:01 +02:00
Ole Markus With 37271998e1 Use sets for aws lbc permissions 2021-07-01 10:19:40 +02:00
Ole Markus With c7bd1c1529 Add s3 policies to integration tests 2021-07-01 09:26:58 +02:00
Ole Markus With 9885714957 Use NewPolicy for the non-master roles 2021-07-01 09:19:35 +02:00
Ole Markus With 19833e6b73 Use sets for ebscsidriver permissions 2021-07-01 09:02:04 +02:00
Ole Markus With 73850bb390 Build kops for the lb controller presubmit 2021-07-01 08:27:01 +02:00
John Gardiner Myers 0f1de5cfc8 hack/update-expected.sh 2021-06-30 18:55:35 -07:00
Kubernetes Prow Robot 52afacd05c
Merge pull request #9621 from johngmyers/tf-managed 
Render managed files with Terraform
 2021-06-29 19:27:03 -07:00
srikiz 8e68cca9eb Increase droplet size 2021-06-29 11:07:38 +05:30
John Gardiner Myers e90f2cc834 hack/update-expected.sh 2021-06-28 13:48:35 -07:00
Kubernetes Prow Robot ee048e89e7
Merge pull request #11872 from johngmyers/refactor-serviceaccount 
Refactor nodeup APIServer builder, part one
 2021-06-28 10:42:01 -07:00
Peter Rifel 6f00d07192
Kubetest2 - set --node-os-arch flag instead of skipping kubectl test on arm64 2021-06-27 23:16:56 -04:00
Kubernetes Prow Robot 917c965c8f
Merge pull request #11873 from hakman/avoid_spurious_changes 
Avoid spurious changes for ASG InstanceProtection and LT InstanceMonitoring
 2021-06-27 19:59:24 -07:00
John Gardiner Myers 7dfe9d82ab hack/update-expected.sh 2021-06-27 08:45:06 -07:00
John Gardiner Myers fdf034058d hack/update-expected.sh 2021-06-27 08:45:05 -07:00
Kubernetes Prow Robot 22c11c10f1
Merge pull request #11848 from johngmyers/cilium-etcd-client 
Refactor etcd-client-cilium secrets
 2021-06-27 04:01:24 -07:00
Ciprian Hacman 348eed772a Avoid spurious changes for ASG InstanceProtection and LT InstanceMonitoring 2021-06-27 10:08:13 +03:00
Ciprian Hacman 7bc629b683 Use DualStack API NLB for IPv6 2021-06-26 19:16:46 +03:00
John Gardiner Myers 91fff31697 Control plane nodes need the etcd-clients-ca-cilium keypair 2021-06-26 00:04:52 -07:00
John Gardiner Myers 2ef765bbcb hack/update-expected.sh 2021-06-26 00:01:34 -07:00
John Gardiner Myers 89209df150 hack/update-expected.sh 2021-06-25 22:25:50 -07:00
Ciprian Hacman d7f405f65a Decrease default values for net.ipv4.tcp_rmem and net.ipv4.tcp_wmem 2021-06-25 21:27:56 +03:00
Moshe Shitrit 47ef8e32cc update-expected 2021-06-25 13:02:40 +03:00
Kubernetes Prow Robot 89ad2bc453
Merge pull request #11810 from hakman/ipv6_disable_calico_awssrcdstcheck 
Enable cross-subnet mode with Calico by default
 2021-06-25 01:08:45 -07:00
Ciprian Hacman a12b3145ee Enable cross-subnet mode with Calico by default 2021-06-25 07:13:20 +03:00
Ole Markus With a66fe95f58 Update helm to v3.6.1 2021-06-24 21:40:06 +02:00
John Gardiner Myers dcf973a898 Improve image copying 2021-06-23 23:51:09 -07:00
Kubernetes Prow Robot 1123b552df
Merge pull request #11851 from rifelpet/kubetest2 
Escape --skip-regex pattern
 2021-06-23 06:40:10 -07:00
Peter Rifel 397d52d508
Escape --skip-regex pattern 2021-06-23 07:42:21 -05:00
Kubernetes Prow Robot 9b0489bcb2
Merge pull request #11842 from rifelpet/kubetest2 
Only set default --skip-regex if it hasn't been set
 2021-06-22 08:51:58 -07:00
Kubernetes Prow Robot d5119c0338
Merge pull request #11833 from johngmyers/update-on-primary-change 
Mark nodes NeedsUpdate when keys they use change
 2021-06-22 08:11:58 -07:00
Kubernetes Prow Robot 4e1e199993
Merge pull request #11840 from olemarkus/fix-ebs-csi-regex 
Fix skip regex for ebs csi test
 2021-06-22 07:07:58 -07:00
Peter Rifel 3897799f6a
Only set default --skip-regex if it hasn't been set 2021-06-22 08:50:24 -05:00
Peter Rifel 5f13d2d945
Kubetest2 - Add --skip-regex logic 
This will move the logic from build_jobs.py into kubetest2 itself.
This way we can rely on this logic from scenario scripts and other places that arent directly set by build_jobs.py.
 2021-06-22 08:23:44 -05:00
Ole Markus With 7e74c02a5d Fix skip regex 2021-06-22 15:04:46 +02:00
Ole Markus With f49e0f856f Don't copy kops if binary path is not set 2021-06-22 13:09:02 +02:00
Ole Markus With 56aa339f2c Avoid using subshells that swallow env vars 2021-06-22 13:09:02 +02:00
John Gardiner Myers 7dea5af9be hack/update-expected.sh 2021-06-21 19:37:24 -07:00
John Gardiner Myers 48c42fe37f hack/update-expected.sh 2021-06-21 16:10:07 -07:00
John Gardiner Myers d5cea85f7c Use stable keyset IDs 2021-06-21 16:10:06 -07:00
Peter Rifel c6bdce3b98
Ignore failing tests in upgrade scenario 
These are being skipped in certain k8s versions. Until we can dynamically determine which tests to skip based on k8s version (like build_jobs.py generates) we can just skip these two tests for all k8s versions.
 2021-06-21 17:31:13 -05:00
Ole Markus With 3c7b92e56c Run scenarios as presubmit tests 2021-06-21 11:36:05 +02:00
Ole Markus With 79a2c111f2 Remove redundant permissions 2021-06-21 08:59:54 +02:00
Ole Markus With 14fb35d0d0 Bump EBS Driver to 1.1.0 2021-06-21 08:56:11 +02:00
Ole Markus With b3f274e140 Apply permissions to master role when irsa is not used 2021-06-21 08:56:11 +02:00
Kubernetes Prow Robot f1b718db68
Merge pull request #11821 from olemarkus/skip-ebs-csi-flakes 
skip flaking ebs csi flakes
 2021-06-20 16:36:51 -07:00
Ciprian Hacman 65d21ee463 Pre-pull container images from list of desired prefixes 2021-06-20 23:01:52 +02:00
Ciprian Hacman e347841aa3 Add integration test for Warm Pool images 2021-06-20 23:01:52 +02:00
Kubernetes Prow Robot e4eff07c81
Merge pull request #11809 from johngmyers/rotate-5 
Include multiple cluster CAs in trust stores
 2021-06-20 13:20:51 -07:00
Ole Markus With c52241e1e0 skip flaking ebs csi flakes 2021-06-20 21:41:45 +02:00
Ole Markus With 778323eec9 Add missing lbc permission 2021-06-19 20:03:40 +02:00
John Gardiner Myers 0700ef64a0 hack/update-expected.sh 2021-06-19 10:56:24 -07:00
John Gardiner Myers 07474c6d30 Fix CA keys for all integration tests 2021-06-19 10:50:53 -07:00
Ole Markus With cc24bbb3c1 Remove some bashism 2021-06-19 13:46:42 +02:00
Ole Markus With b37bc7578e Reduce master policy size for lb controller 2021-06-19 10:12:22 +02:00
Ole Markus With 507402e315 Fail early if policy size is too large 
This will then also be caught by integration tests
 2021-06-19 10:04:11 +02:00
Kubernetes Prow Robot 23ab07e7b8
Merge pull request #11788 from cardoe/fix-swift 
bump the version of gophercloud
 2021-06-18 22:42:50 -07:00
Kubernetes Prow Robot 135cdf3461
Merge pull request #11789 from johngmyers/seed-rng 
Seed the random number generator on AWS
 2021-06-18 08:48:06 -07:00
Ole Markus With 33a7de60a7 Enable IRSA for EBS CSI Driver 2021-06-18 08:05:59 +02:00
John Gardiner Myers b1e77af664 hack/update-expected.sh 2021-06-17 23:03:52 -07:00
Doug Goldstein 80da992275
bump the version of gophercloud 
Since the v1.19.0 release of kOps the OpenStack integration has been
broken because gophercloud made a change to start escaping all path
names for files stored in swift. kOps used a file with a slash in it
which was getting escaped and then not handled correctly. This has been
fixed in upstream gophercloud with gophercloud/gophercloud#2160 which
was included in gophercloud v0.18.0. Bump is for issue #9933.
 2021-06-16 11:50:13 -05:00
Ole Markus With 6e8e027aff Enable IRSA for Cluster Autoscaler 2021-06-16 18:03:11 +02:00
Ciprian Hacman 8c5484945d Update github.com/spf13/viper to v1.8.0 2021-06-16 08:12:42 +02:00
Kubernetes Prow Robot fd0fc2febc
Merge pull request #11758 from olemarkus/e2e-irsa 
Make it easy to run scenarios with irsa enabled
 2021-06-15 16:51:45 -07:00
Kubernetes Prow Robot 847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig 
Set containerd config on nodeup.Config instead of clusterspec
 2021-06-15 15:13:43 -07:00
Ole Markus With e7fa3fa82c Set containerd config on nodeup.Config instead of clusterspec 
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)

Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
 2021-06-15 11:08:22 +02:00
Kubernetes Prow Robot 4cd3b58e37
Merge pull request #11763 from johngmyers/ipv6-access 
Make the AdminAccess default inclusive of IPv6
 2021-06-14 23:30:01 -07:00
John Gardiner Myers 9d531edb85 hack/update-expected.sh 2021-06-14 21:51:40 -07:00
John Gardiner Myers cab389f2f5 Rename --override to --set 2021-06-14 14:01:18 -07:00
Ole Markus With bc5c97ea95 Make it easy to run scenarios with irsa enabled 2021-06-14 09:09:09 +02:00
John Gardiner Myers 74a44c2270 Don't restrict nodeup download to IPv4 2021-06-13 21:46:58 -07:00
Ciprian Hacman 2a11fa7dde Add --ipv6 experimental cli flag 2021-06-13 21:48:46 +02:00
Ciprian Hacman fcfba36b14 Pre-add integration test for creating an IPv6 cluster 2021-06-13 13:09:40 +02:00
Kubernetes Prow Robot cfc93e5178
Merge pull request #9294 from johngmyers/refactor-nodeup-context 
Remove InstanceGroup from NodeupModelContext
 2021-06-12 13:43:01 -07:00
Kubernetes Prow Robot 562200bb5c
Merge pull request #11739 from olemarkus/e2e-channels-scenario 
Add test scenario for if channels is able to delete dangling resources
 2021-06-11 17:18:59 -07:00
Ole Markus With bd8815eefd Add test scenario for if channels is able to delete dangling resources 2021-06-11 15:02:47 +02:00
Kubernetes Prow Robot f5176c57ae
Merge pull request #11738 from olemarkus/remove-k8s-upgrade-script 
Remove k8s-upgrade script as upgrade-ab is now used instead
 2021-06-11 00:58:59 -07:00
Ole Markus With f255993ef2 Remove k8s-upgrade script as upgrade-ab is now used instead 2021-06-11 08:46:02 +02:00