John Gardiner Myers
aa2dbcd6ea
hack/update-expected.sh
2021-11-15 18:55:59 -08:00
John Gardiner Myers
1001f1fbd7
Upgrade amazonvpc to v0.10.1
2021-11-15 18:54:24 -08:00
John Gardiner Myers
019fb7d35d
Add create cluster flag for enabling IRSA
2021-11-14 13:52:15 -08:00
Kubernetes Prow Robot
3ccb26cef2
Merge pull request #12724 from johngmyers/external-dns
...
Upgrade external-dns to 0.10.1 for Kubernetes >= 1.19
2021-11-14 07:14:47 -08:00
Ciprian Hacman
1620e6a8e1
Update containerd to v1.6.0-beta.2
2021-11-14 09:39:36 +02:00
John Gardiner Myers
8c8455b8f4
Upgrade external-dns to 0.10.1 for Kubernetes >= 1.19
2021-11-13 23:02:10 -08:00
Kubernetes Prow Robot
0e32d3dfe2
Merge pull request #12692 from johngmyers/watch-ingress
...
Watch Ingress by default when using the external-dns provider
2021-11-13 22:38:46 -08:00
Eng Zer Jun
425173ae9f
refactor: move from io/ioutil to io and os packages
...
The io/ioutil package has been deprecated as of Go 1.16, see
https://golang.org/doc/go1.16#ioutil . This commit replaces the existing
io/ioutil functions with their new definitions in io and os packages.
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2021-11-12 15:37:18 +08:00
Peter Rifel
b401ec55a3
Add missing status fields to IAMIdentityMapping v1 CRD
2021-11-11 20:28:59 -06:00
Peter Rifel
dba112a21f
Ignore white space when validating IAM policy size limits
...
The AWS documentation [0] mentions:
> IAM does not count white space when calculating the size of a policy against these quotas.
Therefore we should be excluding white space when performing this validation client-side.
[0] https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length
2021-11-09 07:31:21 -06:00
Alex Last
576cf726d1
Increase upup http response header timeout
2021-11-08 12:49:40 +00:00
John Gardiner Myers
241e0558cd
Watch Ingress by default when using the external-dns provider
2021-11-07 15:17:01 -08:00
Ciprian Hacman
f11aa9b014
Start IPv6 CIDR numbering from 0
2021-11-01 13:26:10 +02:00
John Gardiner Myers
3a97dbaa8d
Release 1.23.0-alpha.2
2021-10-31 13:46:07 -07:00
John Gardiner Myers
9f99d41323
IPv6 requires external CCM
2021-10-31 12:26:30 -07:00
John Gardiner Myers
80d73efb5a
Validate CNI can support IPv6
2021-10-30 17:08:12 -07:00
John Gardiner Myers
1ec56c509e
hack/update-expected.sh
2021-10-30 13:28:39 -07:00
John Gardiner Myers
2cebd7ece5
dns-controller: Filter node InternalIPs by pod network families
2021-10-30 13:28:39 -07:00
Kubernetes Prow Robot
5bfdefb43c
Merge pull request #12623 from johngmyers/cilium-ipv6-ipam
...
Never masquerade IPv6 with Cilium
2021-10-29 05:56:51 -07:00
Kubernetes Prow Robot
59a637e6de
Merge pull request #12538 from hierynomus/issue-12205
...
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
2021-10-29 03:10:51 -07:00
Jeroen van Erp
353be50f9b
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
...
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2021-10-29 10:30:44 +02:00
Kubernetes Prow Robot
985c602137
Merge pull request #12626 from olemarkus/metrics-server-preferred-address
...
Use InternalIP as preferred kubelet address only in ivp6 mode
2021-10-28 14:53:00 -07:00
Ole Markus With
ac3c22b431
Use InternalIP as preferred kubelet address only in ivp6 mode
...
As metrics-server rolls before the worker nodes, and worker nodes do not yet have IP SANs, upgrade breaks if InternalIP is used.
IPv6 never worked with hostnames, so there is no BC break there.
2021-10-28 16:06:40 +02:00
Kubernetes Prow Robot
211b4527d9
Merge pull request #12616 from johngmyers/ipv6-placeholder
...
Create placeholder DNS records of correct type for IPv6 clusters
2021-10-28 02:38:27 -07:00
John Gardiner Myers
7b5fdc7c43
Update automatically generated files
2021-10-27 23:40:02 -07:00
John Gardiner Myers
7cb4fbe91e
Never masquerade IPv6 with Cilium
2021-10-27 23:40:02 -07:00
Ciprian Hacman
bc8957a917
Use instance metadata to find local IPv6 prefix
2021-10-28 07:21:46 +03:00
Kubernetes Prow Robot
b2a2e4e775
Merge pull request #12617 from johngmyers/ipv6-defaultss
...
Improve default CIDR assignments for IPv6
2021-10-26 23:37:32 -07:00
Kubernetes Prow Robot
77e6186fe4
Merge pull request #12615 from johngmyers/ciliuim-runtime-labels
...
Remove vestigial Cilium ContainerRuntimeLabels code
2021-10-26 23:37:25 -07:00
Kubernetes Prow Robot
228c82cb6e
Merge pull request #12571 from rifelpet/sqs-arn
...
Use the SQS Queue's ARN reference
2021-10-26 22:19:26 -07:00
Peter Rifel
7f8e1b8182
Fix GCE router terraform reference
2021-10-26 22:37:58 -05:00
John Gardiner Myers
46c1c24b48
Remove the DNSPreCreate feature flag
2021-10-26 20:13:01 -07:00
John Gardiner Myers
d4cf1a80f0
Create placeholder DNS records of correct type for IPv6 clusters
2021-10-26 20:13:01 -07:00
John Gardiner Myers
07d9114fc2
Set NonMasqueradeCIDR to ::/0 for new IPv6 clusters
2021-10-26 19:22:00 -07:00
John Gardiner Myers
22bc45a358
Improve default CIDR assignments for IPv6
2021-10-26 18:40:35 -07:00
justinsb
5e4987b246
GCE: support egress specification
...
Empty or "nat" now defaults to creating a per-subnet NAT router for
private topologies. "external" will assume that egress is configured
outside of kOps.
2021-10-26 21:37:03 -04:00
Kubernetes Prow Robot
3a056c288b
Merge pull request #12382 from justinsb/gce_subnet_support_refactor
...
GCE: improve network & subnet terraform support
2021-10-26 17:53:41 -07:00
John Gardiner Myers
ad6235e428
Update automatically generated files
2021-10-26 16:12:50 -07:00
Ciprian Hacman
c0dfd17885
more feedback
2021-10-25 08:37:05 +03:00
Peter Rifel
95441e7c36
address feedback
2021-10-24 22:29:55 -06:00
Kubernetes Prow Robot
0628cc0a7c
Merge pull request #12601 from johngmyers/keyset-nocert
...
Handle keypair items without certificates
2021-10-24 19:54:22 -07:00
justinsb
3caa61bd20
gce: allow empty mode for shared Networks
2021-10-24 21:07:30 -04:00
John Gardiner Myers
d19d0ce8b3
Handle keypair items without certificates
2021-10-24 16:59:36 -07:00
justinsb
e3c3671f76
GCE: Support network deletion
2021-10-24 17:41:14 -04:00
justinsb
d363bf3dad
GCE: improve network & subnet terraform support
...
We should use the subnet spec in the Cluster, and default to creating
a new subnet/network, but allow an existing one to be specified.
2021-10-24 17:41:14 -04:00
justinsb
af76c4c20a
gce: allow router to refer to network object
...
This allows for our execution model to work a little more smoothly.
2021-10-24 09:19:06 -04:00
Kubernetes Prow Robot
6c040ab510
Merge pull request #12592 from johngmyers/byo-vpc
...
Support BYO IPv6
2021-10-24 01:40:22 -07:00
Kubernetes Prow Robot
7912fe22e8
Merge pull request #12590 from justinsb/gce_network_shared
...
GCE: Allow network to be marked as shared
2021-10-23 22:38:21 -07:00
John Gardiner Myers
7ab140d8bd
Support BYO IPv6
2021-10-23 21:22:36 -07:00
justinsb
860b033ddc
gce: allow network to be marked as shared
2021-10-23 23:54:39 -04:00