Commit Graph

2061 Commits

Author SHA1 Message Date
Justin SB 0cda0f5068 Support authentication helper for kubectl
We create a simple exec plugin command which can create and renew
short-lived admin credentials on the fly, essentially leveraging the
security of the underlying cloud credentials.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 15:16:20 -04:00
Ole Markus With ff6c04938d Add kops delete instance command
Add support for deleting instance by k8s node name

Add yes flag
2020-08-28 08:43:30 +02:00
Peter Rifel d0b8c654bd
Add --internal flag for export kubecfg that targets the internal dns name
Kops creates an "api.internal.$clustername" dns A record that points to the master IP(s)

This adds a flag that will use that name and force the CA cert to be included.
This is a workaround for client certificate authentication not working on API ELBs with ACM certificates.
The ELB has a TLS listener rather than TCP, so the client certificate is not passed through to the apiserver.
Using --internal will bypass the API ELB so that the client certificate will be passed directly to the apiserver.
This also requires that the masters' security groups allow 443 access from the client which this does not handle automatically.
2020-08-26 21:15:18 -05:00
Victor Ferreira 486eca13cf docs(iam_roles): adding docs on Permissions Boundaries 2020-08-25 11:31:54 -03:00
Ciprian Hacman 56994de81c Release notes for 1.19.0-alpha.3 2020-08-24 20:05:56 +03:00
Kubernetes Prow Robot 2439466956
Merge pull request #9797 from olemarkus/openstack-docs
Update the openstack getting started docs
2020-08-22 01:27:40 -07:00
Ole Markus With a63a8464db Update the openstack getting started docs 2020-08-22 09:39:40 +02:00
Kubernetes Prow Robot 9344a694b3
Merge pull request #9791 from johngmyers/deprecate-bootstrap-tokens
De-emphasize bootstrap tokens and document node authorization as depr…
2020-08-22 00:05:39 -07:00
Peter Rifel 2d29f84922
Fix feature flag typo in release notes 2020-08-21 14:31:03 -05:00
John Gardiner Myers 171791aae2 De-emphasize bootstrap tokens and document node authorization as deprecated 2020-08-20 21:11:23 -07:00
Kubernetes Prow Robot 5b7d1d7c93
Merge pull request #9781 from johngmyers/update-notes
Add release note about cert expiration
2020-08-19 04:51:11 -07:00
Kubernetes Prow Robot 548beeb9c9
Merge pull request #9770 from hakman/squash-rel-notes
Squash patch versions of old release notes
2020-08-18 21:49:10 -07:00
John Gardiner Myers 169d3e7e5b Add release note about cert expiration 2020-08-18 18:04:13 -07:00
Kubernetes Prow Robot 21a9564fd6
Merge pull request #9760 from hakman/docker-iptables
Document Docker iptables settings
2020-08-17 07:50:19 -07:00
Kubernetes Prow Robot 655c424ded
Merge pull request #9755 from WarpRat/9750
Fix backwards compatibility when backend mode isn't set
2020-08-17 06:28:18 -07:00
Ciprian Hacman 83740f50db Rename Legacy to 1.4 2020-08-17 09:33:46 +03:00
Ciprian Hacman 25cd219aad Squash release notes for v1.6.x 2020-08-17 09:33:46 +03:00
Ciprian Hacman a170c280ce Squash release notes for v1.7.x 2020-08-17 09:33:46 +03:00
Ciprian Hacman ce8edaf176 Squash release notes for v1.8.x 2020-08-17 09:33:46 +03:00
Robert Russell 1981c56f67 Fix backwards compatibility when backend mode isnt set 2020-08-16 23:05:04 -07:00
Ciprian Hacman f452ebf9da Document Docker iptables settings
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-17 08:09:38 +03:00
Peter Rifel 4d9f0128a3
Upgrade to klog2
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
Kubernetes Prow Robot ec8b47d725
Merge pull request #9593 from johngmyers/kubectl-lifetime
Reduce the lifetime of exported kubecfg credentials
2020-08-14 19:24:18 -07:00
Peter Rifel 7bd0bd987a
Add the client cert / ACM cert known issue to the 1.18 release notes 2020-08-14 14:14:16 -05:00
Kubernetes Prow Robot 651727f705
Merge pull request #9719 from johngmyers/shared-subnet-doc
Update shared-VPC documentation
2020-08-13 20:32:20 -07:00
liranp 1ebc93e49f
doc(spot/ocean): add support for instance types in launchspec 2020-08-13 16:37:04 +03:00
Ciprian Hacman 7aa332d14f Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-13 09:25:36 +03:00
Ciprian Hacman b83b35291a Replace Kops with _kops_ 2020-08-13 04:59:55 +03:00
Ciprian Hacman 61d6712a2e Deprecate kope.io 2020-08-13 04:58:48 +03:00
Ciprian Hacman a9b3d1e99e Update images docs 2020-08-12 10:42:55 +03:00
Ciprian Hacman fc363560e2 Reorder images in alphabetic order 2020-08-12 09:08:23 +03:00
John Gardiner Myers 402bcbbea2 Update shared-VPC documentation 2020-08-11 22:49:13 -07:00
Kubernetes Prow Robot b7871e2e72
Merge pull request #9478 from bwagner5/feat-instance-selector
Add instance-selector cmd to toolbox
2020-08-11 14:15:45 -07:00
Brandon Wagner c4e2497a8a change defaults 2020-08-11 15:40:54 -05:00
Ole Markus With 25d98796e2 Add cinder plugin 2020-08-11 10:15:12 +02:00
Brandon Wagner 2d6d7ec4ad update cli docs 2020-08-10 17:13:49 -05:00
Brandon Wagner 602564d26c use byte quantity flag instead of int MiBs for memory args 2020-08-10 16:16:51 -05:00
Brandon Wagner b4bc9b5d56 update cli docs for instance-selector 2020-08-10 16:16:51 -05:00
Brandon Wagner 9d9ca8441e feat toolbox instance-selector implementation 2020-08-10 16:16:51 -05:00
Ciprian Hacman 15a329db98 Update docs for Amazon Linux 2 2020-08-10 17:54:36 +03:00
Kubernetes Prow Robot ea2d0da1cc
Merge pull request #8577 from justinsb/dump
Capture logs from a kops cluster
2020-08-09 17:18:19 -07:00
Ciprian Hacman f772c552e7 Remove outdated docs for Calico 2020-08-08 11:08:26 +03:00
Ciprian Hacman dcef2ff689 Update example for Resources Reservation 2020-08-08 11:08:26 +03:00
Robert Russell 6e5544f615 Allow configurable backend modes for aws-iam-authenticator 2020-08-06 21:37:55 -07:00
John Gardiner Myers 63c4cf018c Update releases.md and alpha channel for 1.18.0 release 2020-08-02 17:08:48 -07:00
Justin SB 5195aab224
Release notes for 1.18.0 2020-08-02 19:12:33 -04:00
Kubernetes Prow Robot 492696f358
Merge pull request #9660 from justinsb/new_release_process
Document new release process for kops 1.19 and on
2020-07-31 14:53:42 -07:00
Peter Rifel ba680bf30c
Update docs/release-process.md 2020-07-31 15:28:55 -05:00
Kubernetes Prow Robot 489e41dbb1
Merge pull request #9658 from justinsb/relnotes_1_19_0_alpha_2
Release notes for 1.19.0-alpha.2
2020-07-31 07:47:07 -07:00
Justin SB 388ddc3cfa Document new release process for kops 1.19 and on
Promoting the staging build, for eventual "lights off" / "hands off" releases.
2020-07-31 10:41:24 -04:00
Justin SB a4af33850f Release notes for 1.19.0-alpha.2 2020-07-31 09:10:05 -04:00
Ciprian Hacman 89b6d8f20a Update Calico to v3.15.1 for k8s 1.16+ 2020-07-31 15:54:53 +03:00
Peter Rifel 40a25bd8ba
Expose private key as a flag 2020-07-24 20:15:45 -05:00
Frank Yang 00325f57dd fix(docs): render double curly braces 2020-07-25 00:53:33 +08:00
Peter Rifel 1faeb36d37
Address feedback and test failures 2020-07-22 22:19:00 -05:00
Peter Rifel 485f95a88b
Add the new kops feature table to a handful of feature sections 2020-07-19 18:01:18 -05:00
Peter Rifel 1873b45e8b
remove creationTimestamp fields from manifest examples 2020-07-19 16:32:33 -05:00
John Gardiner Myers a45b07c156 Reduce the lifetime of exported kubecfg credentials 2020-07-17 22:39:01 -07:00
John Gardiner Myers 9693da66b3 Remove support for legacy IAM permissions 2020-07-17 20:08:17 -07:00
mikesplain 0c275ed7d3
Remove min width on tables 2020-07-17 16:34:51 -04:00
Kubernetes Prow Robot 022fec8606
Merge pull request #9471 from johngmyers/ig-per-zone
Create one nodes instance group per zone
2020-07-17 12:34:54 -07:00
John Gardiner Myers e9b8e4e39a Create zero-node IGs if more zones than nodes 2020-07-17 11:26:09 -07:00
John Gardiner Myers fbc235a3fe Create one nodes IG per zone 2020-07-17 11:26:09 -07:00
John Gardiner Myers 3201cc4dd8 Require extra flag when updating cluster with downgraded kops version 2020-07-17 11:11:12 -07:00
Kubernetes Prow Robot 6f3c067e5e
Merge pull request #9280 from olemarkus/no-admin
Specify user on export kubecfg
2020-07-17 11:00:51 -07:00
Kubernetes Prow Robot 9d675e3f5c
Merge pull request #9555 from MoShitrit/issue-9151
Adding feature stability table to docs and including one example for encryption support in cilium
2020-07-16 09:57:41 -07:00
MoShitrit de5efe6779 Changing table width to 'fit-content' for kops_feature_table 2020-07-14 11:25:10 -04:00
Justin SB 2d16fbb3f1 Release notes for 1.18.0-beta.2 2020-07-13 12:58:59 -04:00
MoShitrit 553def8171 Adding feature stability table for encryption support 2020-07-12 19:03:09 -04:00
William Hutcheson a48e4eb874 Remove excess newlines from Lyft docs 2020-07-09 17:30:35 +01:00
William Hutcheson 89b208be3b Add Lyft environment variable documentation 2020-07-09 17:27:45 +01:00
Kubernetes Prow Robot 58abaac891
Merge pull request #9461 from nikola-milikic/patch-1
Fix a link typo in the networking.md
2020-07-08 04:47:09 -07:00
Ole Markus With d084d9d3c1 Document the cilium-etcd networking provider 2020-07-07 21:06:23 +02:00
Ole Markus With aab5054ffc Add networking provider for using etcd-manager for cilium
This is the only feasible way of adding the additional etcd cluster for a cilium e2e test
2020-07-07 21:06:21 +02:00
Kubernetes Prow Robot 3d972f8051
Merge pull request #9516 from concaf/concaf/addons/ambassador-docs
Add Ambassador documentation to addons docs
2020-07-07 04:35:58 -07:00
Shubham 275e93969c Add Ambassador documentation to addons docs 2020-07-07 15:09:36 +05:30
Kubernetes Prow Robot f5c7003aff
Merge pull request #9509 from rifelpet/amazonvpc-docs
Update AWS VPC CNI docs to use `--networking amazonvpc`
2020-07-06 18:41:57 -07:00
Peter Rifel 7582109b23
Update AWS VPC CNI docs to use --networking amazonvpc 2020-07-06 17:40:21 -05:00
Kubernetes Prow Robot 030b7dc740
Merge pull request #9442 from MoShitrit/docs-update
Fixing typos and rewording docs/examples/basic-requirements.md
2020-07-06 07:02:51 -07:00
Moshe Shitrit e5e49c6c4a Apply suggestions from code review
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-07-06 03:07:59 -04:00
Moshe Shitrit f6d69bca41
Apply suggestions from code review
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-07-06 02:43:53 -04:00
Kubernetes Prow Robot a97fc42666
Merge pull request #9491 from johngmyers/nodeport-dns
Default ClusterDNS appropriately when NodeLocalDNS is enabled
2020-07-05 22:28:50 -07:00
Justin SB bcd827f5ca Release notes for 1.17.1 2020-07-05 23:14:57 -04:00
Justin SB 184f07747d Release notes for 1.16.4 2020-07-05 22:10:51 -04:00
Justin SB c87509a333 Release notes for 1.19.0-alpha.1 2020-07-05 16:59:16 -04:00
John Gardiner Myers 004f7b578f Default ClusterDNS appropriately when NodeLocalDNS is enabled 2020-07-03 16:57:03 -07:00
Peter Rifel 7b17c2ab92
Update terraform docs with version compatibility
Also remove some outdated terraform instructions (0.7 was released in 2016)
2020-07-03 10:01:38 -05:00
Kubernetes Prow Robot 219147e2f4
Merge pull request #9348 from johngmyers/rollingupdate-disable
Create separate field for disabling rolling updates
2020-07-02 09:08:47 -07:00
Ole Markus With d529afe637 Only enable nodeport by default if k8s is 1.12 or newer 2020-06-29 21:42:09 +02:00
Ole Markus With 4d1897ab90 Enable nodeport by default 2020-06-29 21:42:09 +02:00
MoShitrit 1ada0aa5c9 Fixing typos and rewording 2020-06-29 14:38:03 -04:00
Kubernetes Prow Robot 1de9112f5a
Merge pull request #9454 from olemarkus/docs-cilium-nodeport-comment
Cilium requires manual restart when migrating to nodeport
2020-06-29 10:21:25 -07:00
Nikola Milikic e51941f2dd
Fix a link typo in the networking.md 2020-06-29 13:26:12 +02:00
Kubernetes Prow Robot 679b9db9a1
Merge pull request #9422 from johngmyers/trim-loader
Remove dead cloudup code
2020-06-28 13:42:14 -07:00
Ole Markus With 01f5fec1cb Cilium requires manual restart when migrating to nodeport 2020-06-27 13:10:03 +02:00
Ole Markus With 2fd6e52af7
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-06-27 07:43:30 +02:00
Ole Markus With fea1aa0ae8 Improve cilium feature documentation 2020-06-27 07:11:19 +02:00
Ole Markus With 72fd007acf Don't export admin user by default. Allow specifying existing user when exporting context 2020-06-24 19:54:25 +02:00
John Gardiner Myers a76a1cd127 Remove unused model options 2020-06-21 22:37:16 -07:00
MoShitrit 86a23d8090 Typo and wording fix to getting_started/commands doc 2020-06-21 11:19:57 -04:00