Commit Graph

6566 Commits

Author SHA1 Message Date
Spike Curtis 1540f906d2 Don't set kube-proxy cluster-cidr with aws-vpc-cni
Signed-off-by: Spike Curtis <spike@tigera.io>
2018-08-03 15:48:14 -07:00
Patrick Harböck 9e891656fa Add amazon.com image owner alias and Amazon Linux 2 documentation 2018-08-03 19:58:46 +02:00
k8s-ci-robot b213de6c25
Merge pull request #5566 from justinsb/remove_getasgforinstance_Iam
Remove GetAsgForInstance IAM permission
2018-08-02 09:41:29 -07:00
Justin Santa Barbara a7b22b4876 Remove GetAsgForInstance IAM permission
It isn't a valid IAM permission - it was introduced in error, but IAM
is kind enough to ignore it.

Fixes #5549
2018-08-02 11:27:29 -04:00
k8s-ci-robot cfaf0b7b96
Merge pull request #5550 from Rajat-0/spell_fix
Spell Fix: Fixing spelling of "Kubernetes" in doc
2018-07-30 06:58:57 -07:00
Martynas Pumputis 6026498e4b Bump Weave Net to v2.4.0
- New manifest for k8s 1.8.0 due to FileOrCreate mount type.
- RBAC for updating NetworkUnavailable node status.
- Dropped support for legacy NetworkPolicy (k8s pre-1.7).

Full changelog: https://github.com/weaveworks/weave/releases/tag/v2.4.0
2018-07-30 09:57:43 +02:00
Rajat Sharma b97c1bcbb4
Spell Fix: Fixing spelling of "Kubernetes" in doc 2018-07-30 12:21:13 +05:30
k8s-ci-robot 5fe9c6d409
Merge pull request #5546 from ms4720/master
one word change to docs grammar tense issue ran -> run
2018-07-29 10:42:57 -07:00
k8s-ci-robot 94d960ca87
Merge pull request #5513 from ripta/load-client-auth-plugins
Load client-auth plugins
2018-07-29 01:34:56 -07:00
k8s-ci-robot 397c6a30db
Merge pull request #5523 from mikesplain/parallel_bazel-crossbuild-kops
Parallel bazel crossbuild kops
2018-07-28 23:35:56 -07:00
Marc Spitzer d7516fc76e grammar tense issue ran -> run 2018-07-29 14:32:41 +08:00
k8s-ci-robot ed7408540b
Merge pull request #5507 from mikesplain/fix_gendocs
Fix api-gen-docs dependencies
2018-07-28 22:46:56 -07:00
k8s-ci-robot b1e1715ff1
Merge pull request #5544 from justinsb/error_handling_3
Add error handling (logging) when we fail to close a file
2018-07-28 20:30:56 -07:00
Justin Santa Barbara 288c5aaf01 Add error handling (logging) when we fail to close a file
More missing error handling

Follows on from #5543
2018-07-28 16:50:13 -04:00
k8s-ci-robot 6bb8d451dd
Merge pull request #5542 from justinsb/fix_missing_errors_1
Add missing error handling when reading stdin
2018-07-27 23:20:57 -07:00
k8s-ci-robot 67df8e80d0
Merge pull request #5541 from justinsb/validate_additional_policies
Validate IAM additionalPolicies
2018-07-27 22:38:57 -07:00
k8s-ci-robot 4db4af6117
Merge pull request #5543 from justinsb/error_handling_2
Add error handling for failed deletion of tempfiles
2018-07-27 22:00:06 -07:00
k8s-ci-robot c79d60182f
Merge pull request #5540 from mikesplain/fix_aws_cluster_validation
amazon-vpc-routed-eni cloudprovider check
2018-07-27 21:59:56 -07:00
Justin Santa Barbara 8f15a58e8c Validate IAM additionalPolicies
We now validate them with the cluster, so we should give early and
clear feedback if the IAM policy is not valid.
2018-07-27 15:22:24 -04:00
k8s-ci-robot d7486e490f
Merge pull request #5533 from justinsb/hotfix_5522
Check errors when parsing JSON on IAM policies
2018-07-27 12:20:56 -07:00
Justin Santa Barbara 6505dc08f6 Add error handling for failed deletion of tempfiles
We create a helper package `try`
2018-07-27 15:14:08 -04:00
Justin Santa Barbara 8433e67891 Add missing error handling when reading stdin
I'm guessing that if a pipe breaks that we wouldn't handle it
correctly otherwise.
2018-07-27 14:50:33 -04:00
Mike Splain abb88b43fe CloudProvider is defined in the Cluster Spec.
CloudProvider can be set at the kubelet level, however
if the user overrides kubelet values, CloudProvider isn't always
set at this point, leading to an error.
2018-07-27 10:16:06 -04:00
k8s-ci-robot 31f961f212
Merge pull request #5534 from justinsb/fix_typo_in_comment
Fix typo in comment
2018-07-27 00:50:56 -07:00
k8s-ci-robot ccf486e937
Merge pull request #5535 from justinsb/another_hack_update_expected
Add HACK_UPDATE_EXPECTED_IN_PLACE for cloudformation output
2018-07-27 00:05:57 -07:00
k8s-ci-robot 8d165840e3
Merge pull request #5536 from justinsb/fix_additional_policies
Some tweaks around IAM additional policies
2018-07-26 23:15:57 -07:00
Justin Santa Barbara f3fb513852 Remove unnecessary reflect.ValueOf
We can replace with a simpler string cast
2018-07-27 00:58:14 -04:00
Justin Santa Barbara 78c81e39a7 Add HACK_UPDATE_EXPECTED_IN_PLACE for cloudformation output 2018-07-27 00:57:45 -04:00
Justin Santa Barbara bd8514bfb1 Fix typo in comment 2018-07-27 00:56:20 -04:00
Justin Santa Barbara 3ddf598448 Check errors when parsing JSON on IAM policies
We weren't checking the error code, and this led to #5522
2018-07-27 00:54:57 -04:00
Justin Santa Barbara 38fd71605e Add test for additionalPolicies 2018-07-27 00:18:53 -04:00
k8s-ci-robot 8169f14124
Merge pull request #5525 from zivagolee/kuberouter_tolerations
add wider tolerations to the kube-router daemonset
2018-07-26 17:30:57 -07:00
k8s-ci-robot 62cef683c0
Merge pull request #5529 from rekcah78/add-new-instance-types
Add new instance types r5, r5d, z1d
2018-07-26 16:49:56 -07:00
Christophe Gasmi 11d523a222 add r5, r5d, z1d instance types 2018-07-27 00:27:58 +02:00
Zivago Lee a846b217c1 bump version 2018-07-26 07:45:42 -07:00
Zivago Lee f4002a2143 add wider tolerations to the kube-router daemonset 2018-07-26 00:35:39 -07:00
Ripta Pasay 217136039d Load client-auth plugins
Without this change, for example, kops connections using OIDC to the
cluster will receive this error message:

> cannot build kube client for "$CLUSTER_NAME": No Auth Provider found
> for name "oidc"

kubernetes/client-go#345 suggests importing the package path
`plugin/pkg/client/auth/oidc` from `client-go`, but looking at the code
`plugin/pkg/client/auth` will actually handle loading all known auth
plugins for us.
2018-07-25 22:36:21 +00:00
Mike Splain 9ea2ccfd33 Drop experimential from platforms 2018-07-25 16:32:12 -04:00
Mike Splain 5220a12825 Run in parallel so it goes faster 2018-07-25 16:26:20 -04:00
k8s-ci-robot e58587233e
Merge pull request #5517 from justinsb/docker_from_targz
Docker installation from tar.gz
2018-07-25 08:16:56 -07:00
k8s-ci-robot 73e9638749
Merge pull request #5516 from justinsb/kops_set_fix_example
kops set: fix example
2018-07-25 07:20:56 -07:00
k8s-ci-robot 6eeb497a1e
Merge pull request #5515 from justinsb/makefile_tweak_push_run_targets
makefile: tweaks to push & run targets
2018-07-25 06:26:56 -07:00
Justin Santa Barbara 2d76046f85 kops set: fix example
The example included an incorrect field specifier.
2018-07-24 23:22:42 -04:00
Justin Santa Barbara 2faa68426f Docker installation from tar.gz
Ubuntu 18.04 doesn't have a package for docker 17.03, but we can still
support it by using the tar.gz package.

This could be a nice fallback for other operating systems in future,
and it might prove to be more reliable than the OS packages.

But start with supporting ubuntu 18.04 with older docker versions!
2018-07-24 21:58:54 -04:00
Justin Santa Barbara e857d35fbc makefile: tweaks to push & run targets
They would otherwise fail the first time they were run.
2018-07-24 21:58:09 -04:00
k8s-ci-robot 86e8820a7e
Merge pull request #5511 from justinsb/ssh_user_image_sniff
Add ssh user to kops toolbox dump
2018-07-24 16:28:55 -07:00
Justin Santa Barbara 5933aed899 Add ssh user to kops toolbox dump
Where we can identify the SSH user to use, we can include it in kops
toolbox dump.  This is a precursor to trying to better understand
what's in an image (warnings about NVME or network drivers, or showing
the correct SSH username)
2018-07-24 17:18:40 -04:00
k8s-ci-robot b36c67f81c
Merge pull request #5508 from ihoegen/master
Add authentication-token-webhook-cache-ttl flag to kubelet config
2018-07-24 11:52:56 -07:00
Ian Hoegen 0fbba7fa6e Move AuthenticationTokenWebhook flag from api to kubelet, add authentication-token-webhook-cache-ttl to kubelet as well 2018-07-24 11:05:50 -07:00
Mike Splain a291b6161e Fix api-gen-docs 2018-07-24 10:00:43 -04:00