Commit Graph

4171 Commits

Author SHA1 Message Date
John Gardiner Myers aa2dbcd6ea hack/update-expected.sh 2021-11-15 18:55:59 -08:00
John Gardiner Myers 1001f1fbd7 Upgrade amazonvpc to v0.10.1 2021-11-15 18:54:24 -08:00
John Gardiner Myers 019fb7d35d Add create cluster flag for enabling IRSA 2021-11-14 13:52:15 -08:00
Kubernetes Prow Robot 3ccb26cef2
Merge pull request #12724 from johngmyers/external-dns
Upgrade external-dns to 0.10.1 for Kubernetes >= 1.19
2021-11-14 07:14:47 -08:00
Ciprian Hacman 1620e6a8e1 Update containerd to v1.6.0-beta.2 2021-11-14 09:39:36 +02:00
John Gardiner Myers 8c8455b8f4 Upgrade external-dns to 0.10.1 for Kubernetes >= 1.19 2021-11-13 23:02:10 -08:00
Kubernetes Prow Robot 0e32d3dfe2
Merge pull request #12692 from johngmyers/watch-ingress
Watch Ingress by default when using the external-dns provider
2021-11-13 22:38:46 -08:00
Eng Zer Jun 425173ae9f
refactor: move from io/ioutil to io and os packages
The io/ioutil package has been deprecated as of Go 1.16, see
https://golang.org/doc/go1.16#ioutil. This commit replaces the existing
io/ioutil functions with their new definitions in io and os packages.

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2021-11-12 15:37:18 +08:00
Peter Rifel b401ec55a3
Add missing status fields to IAMIdentityMapping v1 CRD 2021-11-11 20:28:59 -06:00
Peter Rifel dba112a21f
Ignore white space when validating IAM policy size limits
The AWS documentation [0] mentions:

> IAM does not count white space when calculating the size of a policy against these quotas.

Therefore we should be excluding white space when performing this validation client-side.

[0] https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length
2021-11-09 07:31:21 -06:00
Alex Last 576cf726d1
Increase upup http response header timeout 2021-11-08 12:49:40 +00:00
John Gardiner Myers 241e0558cd Watch Ingress by default when using the external-dns provider 2021-11-07 15:17:01 -08:00
Ciprian Hacman f11aa9b014 Start IPv6 CIDR numbering from 0 2021-11-01 13:26:10 +02:00
John Gardiner Myers 3a97dbaa8d Release 1.23.0-alpha.2 2021-10-31 13:46:07 -07:00
John Gardiner Myers 9f99d41323 IPv6 requires external CCM 2021-10-31 12:26:30 -07:00
John Gardiner Myers 80d73efb5a Validate CNI can support IPv6 2021-10-30 17:08:12 -07:00
John Gardiner Myers 1ec56c509e hack/update-expected.sh 2021-10-30 13:28:39 -07:00
John Gardiner Myers 2cebd7ece5 dns-controller: Filter node InternalIPs by pod network families 2021-10-30 13:28:39 -07:00
Kubernetes Prow Robot 5bfdefb43c
Merge pull request #12623 from johngmyers/cilium-ipv6-ipam
Never masquerade IPv6 with Cilium
2021-10-29 05:56:51 -07:00
Kubernetes Prow Robot 59a637e6de
Merge pull request #12538 from hierynomus/issue-12205
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
2021-10-29 03:10:51 -07:00
Jeroen van Erp 353be50f9b
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2021-10-29 10:30:44 +02:00
Kubernetes Prow Robot 985c602137
Merge pull request #12626 from olemarkus/metrics-server-preferred-address
Use InternalIP as preferred kubelet address only in ivp6 mode
2021-10-28 14:53:00 -07:00
Ole Markus With ac3c22b431 Use InternalIP as preferred kubelet address only in ivp6 mode
As metrics-server rolls before the worker nodes, and worker nodes do not yet have IP SANs, upgrade breaks if InternalIP is used.
IPv6 never worked with hostnames, so there is no BC break there.
2021-10-28 16:06:40 +02:00
Kubernetes Prow Robot 211b4527d9
Merge pull request #12616 from johngmyers/ipv6-placeholder
Create placeholder DNS records of correct type for IPv6 clusters
2021-10-28 02:38:27 -07:00
John Gardiner Myers 7b5fdc7c43 Update automatically generated files 2021-10-27 23:40:02 -07:00
John Gardiner Myers 7cb4fbe91e Never masquerade IPv6 with Cilium 2021-10-27 23:40:02 -07:00
Ciprian Hacman bc8957a917 Use instance metadata to find local IPv6 prefix 2021-10-28 07:21:46 +03:00
Kubernetes Prow Robot b2a2e4e775
Merge pull request #12617 from johngmyers/ipv6-defaultss
Improve default CIDR assignments for IPv6
2021-10-26 23:37:32 -07:00
Kubernetes Prow Robot 77e6186fe4
Merge pull request #12615 from johngmyers/ciliuim-runtime-labels
Remove vestigial Cilium ContainerRuntimeLabels code
2021-10-26 23:37:25 -07:00
Kubernetes Prow Robot 228c82cb6e
Merge pull request #12571 from rifelpet/sqs-arn
Use the SQS Queue's ARN reference
2021-10-26 22:19:26 -07:00
Peter Rifel 7f8e1b8182
Fix GCE router terraform reference 2021-10-26 22:37:58 -05:00
John Gardiner Myers 46c1c24b48 Remove the DNSPreCreate feature flag 2021-10-26 20:13:01 -07:00
John Gardiner Myers d4cf1a80f0 Create placeholder DNS records of correct type for IPv6 clusters 2021-10-26 20:13:01 -07:00
John Gardiner Myers 07d9114fc2 Set NonMasqueradeCIDR to ::/0 for new IPv6 clusters 2021-10-26 19:22:00 -07:00
John Gardiner Myers 22bc45a358 Improve default CIDR assignments for IPv6 2021-10-26 18:40:35 -07:00
justinsb 5e4987b246 GCE: support egress specification
Empty or "nat" now defaults to creating a per-subnet NAT router for
private topologies.  "external" will assume that egress is configured
outside of kOps.
2021-10-26 21:37:03 -04:00
Kubernetes Prow Robot 3a056c288b
Merge pull request #12382 from justinsb/gce_subnet_support_refactor
GCE: improve network & subnet terraform support
2021-10-26 17:53:41 -07:00
John Gardiner Myers ad6235e428 Update automatically generated files 2021-10-26 16:12:50 -07:00
Ciprian Hacman c0dfd17885 more feedback 2021-10-25 08:37:05 +03:00
Peter Rifel 95441e7c36
address feedback 2021-10-24 22:29:55 -06:00
Kubernetes Prow Robot 0628cc0a7c
Merge pull request #12601 from johngmyers/keyset-nocert
Handle keypair items without certificates
2021-10-24 19:54:22 -07:00
justinsb 3caa61bd20 gce: allow empty mode for shared Networks 2021-10-24 21:07:30 -04:00
John Gardiner Myers d19d0ce8b3 Handle keypair items without certificates 2021-10-24 16:59:36 -07:00
justinsb e3c3671f76 GCE: Support network deletion 2021-10-24 17:41:14 -04:00
justinsb d363bf3dad GCE: improve network & subnet terraform support
We should use the subnet spec in the Cluster, and default to creating
a new subnet/network, but allow an existing one to be specified.
2021-10-24 17:41:14 -04:00
justinsb af76c4c20a gce: allow router to refer to network object
This allows for our execution model to work a little more smoothly.
2021-10-24 09:19:06 -04:00
Kubernetes Prow Robot 6c040ab510
Merge pull request #12592 from johngmyers/byo-vpc
Support BYO IPv6
2021-10-24 01:40:22 -07:00
Kubernetes Prow Robot 7912fe22e8
Merge pull request #12590 from justinsb/gce_network_shared
GCE: Allow network to be marked as shared
2021-10-23 22:38:21 -07:00
John Gardiner Myers 7ab140d8bd Support BYO IPv6 2021-10-23 21:22:36 -07:00
justinsb 860b033ddc gce: allow network to be marked as shared 2021-10-23 23:54:39 -04:00