Ole Markus With
fd7490e3e2
Only add floating IPs to nodes if we have a public topology for nodes
2020-07-12 21:08:13 +02:00
Ole Markus With
b508696cf2
Make Instance task depend on floating ip
...
Originally, floating ips depended on instances, but this causes a dependency cycle now that bootstrap scripts require all IPs for the API cert.
This also requires using networking API for creating floating ips instead of compute so that we can name (and later tag) the floating IPs, which is necessary to know which floating IP belongs to which instance prior to association
2020-07-12 21:08:13 +02:00
Ole Markus With
4a16223361
Create master API security group unconditionally
...
Needed somewhere anyway. Failing to create this one errors with missing task
2020-07-12 21:08:13 +02:00
John Gardiner Myers
f4f4763dc2
Refactor more certs to be issued by nodeup
2020-06-28 23:12:13 -07:00
Kubernetes Prow Robot
f9262b91e7
Merge pull request #9450 from johngmyers/refactor-apiserver-lb
...
Refactor how api-server addresses are exported from tasks
2020-06-28 22:08:15 -07:00
John Gardiner Myers
86f157fa27
Refactor how api-server addresses are exported from tasks
2020-06-26 21:38:39 -07:00
John Gardiner Myers
013f9bf914
Create bootstrap script in a Task
2020-06-26 19:11:40 -07:00
John Gardiner Myers
cef5b175c7
Rename BootstrapScript to BootstrapScriptBuilder
2020-06-26 10:57:36 -07:00
John Gardiner Myers
87446f8894
Make all users of userdata declare it as a dependency
2020-06-26 10:31:52 -07:00
John Gardiner Myers
304476cebf
Refactor BootstrapScript
2020-06-18 22:17:39 -07:00
Ciprian Hacman
95aca3def5
ARM64 support - Update bazel files
2020-06-19 04:42:11 +03:00
Ciprian Hacman
602cb825e7
ARM64 support - Update bootstrap script for multi-arch
2020-06-19 04:42:11 +03:00
Ole Markus With
991549a5f4
Remove support for Romana
2020-06-03 08:23:53 +02:00
John Gardiner Myers
ec4fe1e7e8
Don't put bastions in the utility subnets
2020-05-12 22:06:34 -07:00
Jesse Haka
facd12dd32
Revert "feat(openstack): propagate cloud labels to machines"
2020-05-07 12:06:58 +03:00
Michael Wagner
fc5807d374
feat(openstack): propagate cloud labels to machines
2020-04-27 15:58:02 +02:00
Jesse Haka
d694a6f66d
add support for AllowedCIDRs
2020-03-17 17:33:11 +02:00
Peter Rifel
a999b3ea61
fix OWNERS labels format
...
These need to be lists
2020-03-10 22:47:50 -05:00
tanjunchen
977f987d65
fix-pkg-staticcheck and remove the repeat code
2019-12-03 10:32:37 +08:00
Jesse Haka
b77a58a896
add protocol4 as allowed to master
2019-10-28 11:57:51 +02:00
Jesse Haka
a09a920e92
fix firewalls for openstack
2019-10-27 21:58:40 +02:00
Jesse Haka
f65b0f3bda
return fatal if no network found
2019-10-27 08:22:52 +02:00
Jesse Haka
5e3b94ae17
use existing network and subnet
2019-10-27 08:21:25 +02:00
Justin SB
b6862103bb
Change default port for memberlist from 3997
...
We had a port collision on 3997; change the default memberlist ports
to avoid the collision (we haven't shipped a release with this in it).
Also create a go file so that we can use constants to keep track of
our port numbers, rather than magic values.
2019-10-14 07:26:27 -04:00
tanjunchen
8fe36dc72c
fix-up some staticcheck error
2019-10-06 10:40:13 +08:00
Kubernetes Prow Robot
f671873629
Merge pull request #7652 from OpenSource-THG/master
...
Openstack block device mapping support
2019-10-03 14:27:56 -07:00
Michael Wagner
044e05cbe7
chore(openstack): use InstanceGroup zones as AV
2019-09-27 09:45:34 +02:00
chentanjun
3d1966df84
fix-up some spelling mistakes in /pkg
2019-09-26 10:15:44 +08:00
Teodor Todorov
8d28efb50f
Merge branch 'master' into master
2019-09-25 10:07:50 +01:00
Michael Wagner
8e156c7eb1
chore(openstack): also propagate additional sgs to ports
2019-09-24 13:39:29 +02:00
Michael Wagner
f6b6bc5e90
feat(openstack): propagate additional security groups
...
This uses the specified additional security groups and adds them to the
instance port
2019-09-24 13:39:29 +02:00
Teodor Todorov
fac5969001
Allow OS instances to boot from volume
2019-09-23 18:04:25 +01:00
Michael Wagner
d8eccfd45b
feat(openstack): value public IP association from IG spec
2019-09-23 14:17:25 +02:00
Michael Wagner
9cdba4d391
tests(openstack): refine user data comparison
2019-09-23 14:09:07 +02:00
Kubernetes Prow Robot
5fa9425802
Merge pull request #7644 from zetaab/feature/floatingtype
...
Use without external router (OpenStack)
2019-09-21 06:45:24 -07:00
Jesse Haka
026e258105
fix tests
2019-09-21 12:36:27 +03:00
Jesse Haka
c0759525fc
Use without external router
2019-09-21 11:21:21 +03:00
Jesse Haka
25623d91f1
fix instance name
2019-09-20 21:45:28 +03:00
Kubernetes Prow Robot
3b9821d5c5
Merge pull request #7474 from nebril/cilium-standalone
...
Change Cilium templates to standalone version
2019-09-18 14:01:00 -07:00
Kubernetes Prow Robot
4b490d0b54
Merge pull request #7561 from zetaab/feature/cleansecgroup
...
Clean security groups if api/ssh ips are removed from config
2019-09-16 07:26:40 -07:00
Michael Wagner
b2f3963cdb
chore(provider/openstack): use ips from associated subnets
...
This changes values the provided instance group subnet and uses the IPs
from that subnet.
2019-09-13 12:21:10 +02:00
Michael Wagner
cf8cfbe9ba
chore(openstack): add tests to server group model builder
2019-09-13 12:21:04 +02:00
Maciej Kwiek
74e10dadec
Change Cilium templates to standalone version
...
This commit doesn't include any Cilium configuration, just takes the
quick install yaml from
https://github.com/cilium/cilium/blob/v1.6.0/install/kubernetes/quick-install.yaml
Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
2019-09-12 17:23:50 +02:00
Jesse Haka
6278fec373
fix kubelet sg rules
2019-09-12 18:05:03 +03:00
Jesse Haka
9f2f3ccf25
clean security groups
2019-09-12 18:05:03 +03:00
mikesplain
9e55b8230a
Update copyright notices
...
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Jesse Haka
74bf559afa
open ports for etcd-manager
2019-08-13 16:48:59 +03:00
Jesse Haka
ad3a14f994
move getserver floatingip to common function
2019-06-25 10:00:07 +03:00
Jesse Haka
97301ebf30
add api sg group only to masters
2019-06-24 10:15:32 +03:00
Jesse Haka
ddaa0dd502
Possibility to use openstack without lbaas
2019-06-24 08:56:34 +03:00