Commit Graph

87 Commits

Author SHA1 Message Date
Ole Markus With fd7490e3e2 Only add floating IPs to nodes if we have a public topology for nodes 2020-07-12 21:08:13 +02:00
Ole Markus With b508696cf2 Make Instance task depend on floating ip
Originally, floating ips depended on instances, but this causes a dependency cycle now that bootstrap scripts require all IPs for the API cert.
This also requires using networking API for creating floating ips instead of compute so that we can name (and later tag) the floating IPs, which is necessary to know which floating IP belongs to which instance prior to association
2020-07-12 21:08:13 +02:00
Ole Markus With 4a16223361 Create master API security group unconditionally
Needed somewhere anyway. Failing to create this one errors with missing task
2020-07-12 21:08:13 +02:00
John Gardiner Myers f4f4763dc2 Refactor more certs to be issued by nodeup 2020-06-28 23:12:13 -07:00
Kubernetes Prow Robot f9262b91e7
Merge pull request #9450 from johngmyers/refactor-apiserver-lb
Refactor how api-server addresses are exported from tasks
2020-06-28 22:08:15 -07:00
John Gardiner Myers 86f157fa27 Refactor how api-server addresses are exported from tasks 2020-06-26 21:38:39 -07:00
John Gardiner Myers 013f9bf914 Create bootstrap script in a Task 2020-06-26 19:11:40 -07:00
John Gardiner Myers cef5b175c7 Rename BootstrapScript to BootstrapScriptBuilder 2020-06-26 10:57:36 -07:00
John Gardiner Myers 87446f8894 Make all users of userdata declare it as a dependency 2020-06-26 10:31:52 -07:00
John Gardiner Myers 304476cebf Refactor BootstrapScript 2020-06-18 22:17:39 -07:00
Ciprian Hacman 95aca3def5 ARM64 support - Update bazel files 2020-06-19 04:42:11 +03:00
Ciprian Hacman 602cb825e7 ARM64 support - Update bootstrap script for multi-arch 2020-06-19 04:42:11 +03:00
Ole Markus With 991549a5f4 Remove support for Romana 2020-06-03 08:23:53 +02:00
John Gardiner Myers ec4fe1e7e8 Don't put bastions in the utility subnets 2020-05-12 22:06:34 -07:00
Jesse Haka facd12dd32
Revert "feat(openstack): propagate cloud labels to machines" 2020-05-07 12:06:58 +03:00
Michael Wagner fc5807d374 feat(openstack): propagate cloud labels to machines 2020-04-27 15:58:02 +02:00
Jesse Haka d694a6f66d add support for AllowedCIDRs 2020-03-17 17:33:11 +02:00
Peter Rifel a999b3ea61 fix OWNERS labels format
These need to be lists
2020-03-10 22:47:50 -05:00
tanjunchen 977f987d65 fix-pkg-staticcheck and remove the repeat code 2019-12-03 10:32:37 +08:00
Jesse Haka b77a58a896 add protocol4 as allowed to master 2019-10-28 11:57:51 +02:00
Jesse Haka a09a920e92 fix firewalls for openstack 2019-10-27 21:58:40 +02:00
Jesse Haka f65b0f3bda return fatal if no network found 2019-10-27 08:22:52 +02:00
Jesse Haka 5e3b94ae17 use existing network and subnet 2019-10-27 08:21:25 +02:00
Justin SB b6862103bb
Change default port for memberlist from 3997
We had a port collision on 3997; change the default memberlist ports
to avoid the collision (we haven't shipped a release with this in it).

Also create a go file so that we can use constants to keep track of
our port numbers, rather than magic values.
2019-10-14 07:26:27 -04:00
tanjunchen 8fe36dc72c fix-up some staticcheck error 2019-10-06 10:40:13 +08:00
Kubernetes Prow Robot f671873629
Merge pull request #7652 from OpenSource-THG/master
Openstack block device mapping support
2019-10-03 14:27:56 -07:00
Michael Wagner 044e05cbe7 chore(openstack): use InstanceGroup zones as AV 2019-09-27 09:45:34 +02:00
chentanjun 3d1966df84 fix-up some spelling mistakes in /pkg 2019-09-26 10:15:44 +08:00
Teodor Todorov 8d28efb50f
Merge branch 'master' into master 2019-09-25 10:07:50 +01:00
Michael Wagner 8e156c7eb1 chore(openstack): also propagate additional sgs to ports 2019-09-24 13:39:29 +02:00
Michael Wagner f6b6bc5e90 feat(openstack): propagate additional security groups
This uses the specified additional security groups and adds them to the
instance port
2019-09-24 13:39:29 +02:00
Teodor Todorov fac5969001
Allow OS instances to boot from volume 2019-09-23 18:04:25 +01:00
Michael Wagner d8eccfd45b feat(openstack): value public IP association from IG spec 2019-09-23 14:17:25 +02:00
Michael Wagner 9cdba4d391 tests(openstack): refine user data comparison 2019-09-23 14:09:07 +02:00
Kubernetes Prow Robot 5fa9425802
Merge pull request #7644 from zetaab/feature/floatingtype
Use without external router (OpenStack)
2019-09-21 06:45:24 -07:00
Jesse Haka 026e258105 fix tests 2019-09-21 12:36:27 +03:00
Jesse Haka c0759525fc Use without external router 2019-09-21 11:21:21 +03:00
Jesse Haka 25623d91f1 fix instance name 2019-09-20 21:45:28 +03:00
Kubernetes Prow Robot 3b9821d5c5
Merge pull request #7474 from nebril/cilium-standalone
Change Cilium templates to standalone version
2019-09-18 14:01:00 -07:00
Kubernetes Prow Robot 4b490d0b54
Merge pull request #7561 from zetaab/feature/cleansecgroup
Clean security groups if api/ssh ips are removed from config
2019-09-16 07:26:40 -07:00
Michael Wagner b2f3963cdb chore(provider/openstack): use ips from associated subnets
This changes values the provided instance group subnet and uses the IPs
from that subnet.
2019-09-13 12:21:10 +02:00
Michael Wagner cf8cfbe9ba chore(openstack): add tests to server group model builder 2019-09-13 12:21:04 +02:00
Maciej Kwiek 74e10dadec Change Cilium templates to standalone version
This commit doesn't include any Cilium configuration, just takes the
quick install yaml from
https://github.com/cilium/cilium/blob/v1.6.0/install/kubernetes/quick-install.yaml

Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
2019-09-12 17:23:50 +02:00
Jesse Haka 6278fec373 fix kubelet sg rules 2019-09-12 18:05:03 +03:00
Jesse Haka 9f2f3ccf25 clean security groups 2019-09-12 18:05:03 +03:00
mikesplain 9e55b8230a Update copyright notices
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Jesse Haka 74bf559afa open ports for etcd-manager 2019-08-13 16:48:59 +03:00
Jesse Haka ad3a14f994 move getserver floatingip to common function 2019-06-25 10:00:07 +03:00
Jesse Haka 97301ebf30 add api sg group only to masters 2019-06-24 10:15:32 +03:00
Jesse Haka ddaa0dd502 Possibility to use openstack without lbaas 2019-06-24 08:56:34 +03:00