Commit Graph

4840 Commits

Author SHA1 Message Date
John Gardiner Myers aa2dbcd6ea hack/update-expected.sh 2021-11-15 18:55:59 -08:00
John Gardiner Myers 1001f1fbd7 Upgrade amazonvpc to v0.10.1 2021-11-15 18:54:24 -08:00
John Gardiner Myers 019fb7d35d Add create cluster flag for enabling IRSA 2021-11-14 13:52:15 -08:00
Kubernetes Prow Robot 3ccb26cef2
Merge pull request #12724 from johngmyers/external-dns
Upgrade external-dns to 0.10.1 for Kubernetes >= 1.19
2021-11-14 07:14:47 -08:00
Ciprian Hacman 1620e6a8e1 Update containerd to v1.6.0-beta.2 2021-11-14 09:39:36 +02:00
John Gardiner Myers 8c8455b8f4 Upgrade external-dns to 0.10.1 for Kubernetes >= 1.19 2021-11-13 23:02:10 -08:00
Kubernetes Prow Robot 0e32d3dfe2
Merge pull request #12692 from johngmyers/watch-ingress
Watch Ingress by default when using the external-dns provider
2021-11-13 22:38:46 -08:00
Kubernetes Prow Robot b5be7d0229
Merge pull request #12721 from zhengtianbao/fix#12717
Fix render template cilium AgentPrometheusPort into a UNICODE char error
2021-11-13 17:34:46 -08:00
Eng Zer Jun 425173ae9f
refactor: move from io/ioutil to io and os packages
The io/ioutil package has been deprecated as of Go 1.16, see
https://golang.org/doc/go1.16#ioutil. This commit replaces the existing
io/ioutil functions with their new definitions in io and os packages.

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2021-11-12 15:37:18 +08:00
zhengtianbao 55c3120ff6 Fix render template cilium AgentPrometheusPort into a UNICODE char 2021-11-12 14:45:45 +08:00
Kubernetes Prow Robot 7fe3d21c24
Merge pull request #12716 from rifelpet/authenticator-crdv1
Add missing status fields to IAMIdentityMapping v1 CRD
2021-11-11 20:42:29 -08:00
Kubernetes Prow Robot 4c4d616948
Merge pull request #12713 from estahn/patch-1
set calico-node readiness/liveness timeout to 10s
2021-11-11 19:36:28 -08:00
Kubernetes Prow Robot 88ffb9fd8f
Merge pull request #12682 from zhengtianbao/ipforwarding
[calico] Add support for allow_ip_forwarding field
2021-11-11 18:54:28 -08:00
Peter Rifel b401ec55a3
Add missing status fields to IAMIdentityMapping v1 CRD 2021-11-11 20:28:59 -06:00
Enrico Stahn afa7f5ba44
set calico-node readiness/liveness timeout to 10s
Provide calico-node with more time to come up.
2021-11-12 10:34:40 +11:00
liranp 5cd11ba326
feat(spot/addon): bump spotinst/ocean-controller to v1.0.79 2021-11-10 12:48:17 +02:00
Peter Rifel dba112a21f
Ignore white space when validating IAM policy size limits
The AWS documentation [0] mentions:

> IAM does not count white space when calculating the size of a policy against these quotas.

Therefore we should be excluding white space when performing this validation client-side.

[0] https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length
2021-11-09 07:31:21 -06:00
Alex Last 576cf726d1
Increase upup http response header timeout 2021-11-08 12:49:40 +00:00
John Gardiner Myers 241e0558cd Watch Ingress by default when using the external-dns provider 2021-11-07 15:17:01 -08:00
zhengtianbao 976e3c1f13 Add option to set allow_ip_forwarding for the calico network 2021-11-04 14:26:27 +08:00
Ciprian Hacman f11aa9b014 Start IPv6 CIDR numbering from 0 2021-11-01 13:26:10 +02:00
John Gardiner Myers 3a97dbaa8d Release 1.23.0-alpha.2 2021-10-31 13:46:07 -07:00
John Gardiner Myers 9f99d41323 IPv6 requires external CCM 2021-10-31 12:26:30 -07:00
John Gardiner Myers 80d73efb5a Validate CNI can support IPv6 2021-10-30 17:08:12 -07:00
John Gardiner Myers 1ec56c509e hack/update-expected.sh 2021-10-30 13:28:39 -07:00
John Gardiner Myers 2cebd7ece5 dns-controller: Filter node InternalIPs by pod network families 2021-10-30 13:28:39 -07:00
Ciprian Hacman b6565d86a2 Apply suggestions from code review 2021-10-30 20:57:40 +03:00
Ciprian Hacman 76898881cb Use prefixes for IPv6 with Calico 2021-10-30 20:57:40 +03:00
Kubernetes Prow Robot 5bfdefb43c
Merge pull request #12623 from johngmyers/cilium-ipv6-ipam
Never masquerade IPv6 with Cilium
2021-10-29 05:56:51 -07:00
Kubernetes Prow Robot 59a637e6de
Merge pull request #12538 from hierynomus/issue-12205
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
2021-10-29 03:10:51 -07:00
Jeroen van Erp 353be50f9b
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2021-10-29 10:30:44 +02:00
Kubernetes Prow Robot 985c602137
Merge pull request #12626 from olemarkus/metrics-server-preferred-address
Use InternalIP as preferred kubelet address only in ivp6 mode
2021-10-28 14:53:00 -07:00
Ole Markus With ac3c22b431 Use InternalIP as preferred kubelet address only in ivp6 mode
As metrics-server rolls before the worker nodes, and worker nodes do not yet have IP SANs, upgrade breaks if InternalIP is used.
IPv6 never worked with hostnames, so there is no BC break there.
2021-10-28 16:06:40 +02:00
Kubernetes Prow Robot 211b4527d9
Merge pull request #12616 from johngmyers/ipv6-placeholder
Create placeholder DNS records of correct type for IPv6 clusters
2021-10-28 02:38:27 -07:00
John Gardiner Myers 7b5fdc7c43 Update automatically generated files 2021-10-27 23:40:02 -07:00
John Gardiner Myers 7cb4fbe91e Never masquerade IPv6 with Cilium 2021-10-27 23:40:02 -07:00
Ciprian Hacman bc8957a917 Use instance metadata to find local IPv6 prefix 2021-10-28 07:21:46 +03:00
Kubernetes Prow Robot b2a2e4e775
Merge pull request #12617 from johngmyers/ipv6-defaultss
Improve default CIDR assignments for IPv6
2021-10-26 23:37:32 -07:00
Kubernetes Prow Robot 77e6186fe4
Merge pull request #12615 from johngmyers/ciliuim-runtime-labels
Remove vestigial Cilium ContainerRuntimeLabels code
2021-10-26 23:37:25 -07:00
Kubernetes Prow Robot 228c82cb6e
Merge pull request #12571 from rifelpet/sqs-arn
Use the SQS Queue's ARN reference
2021-10-26 22:19:26 -07:00
Peter Rifel 7f8e1b8182
Fix GCE router terraform reference 2021-10-26 22:37:58 -05:00
John Gardiner Myers 46c1c24b48 Remove the DNSPreCreate feature flag 2021-10-26 20:13:01 -07:00
John Gardiner Myers d4cf1a80f0 Create placeholder DNS records of correct type for IPv6 clusters 2021-10-26 20:13:01 -07:00
John Gardiner Myers 07d9114fc2 Set NonMasqueradeCIDR to ::/0 for new IPv6 clusters 2021-10-26 19:22:00 -07:00
John Gardiner Myers 22bc45a358 Improve default CIDR assignments for IPv6 2021-10-26 18:40:35 -07:00
justinsb 5e4987b246 GCE: support egress specification
Empty or "nat" now defaults to creating a per-subnet NAT router for
private topologies.  "external" will assume that egress is configured
outside of kOps.
2021-10-26 21:37:03 -04:00
Kubernetes Prow Robot 3a056c288b
Merge pull request #12382 from justinsb/gce_subnet_support_refactor
GCE: improve network & subnet terraform support
2021-10-26 17:53:41 -07:00
John Gardiner Myers ad6235e428 Update automatically generated files 2021-10-26 16:12:50 -07:00
John Gardiner Myers fdc128fda4 Remove vestigial Cilium ContainerRuntimeLabels code 2021-10-26 16:10:21 -07:00
Ciprian Hacman c0dfd17885 more feedback 2021-10-25 08:37:05 +03:00