Commit Graph

621 Commits

Author SHA1 Message Date
Moustafa Baiou b050cd7450
gofmt with go@1.10 2019-01-27 15:53:21 -05:00
Moustafa Baiou 2028841338
fix integration test for unmanaged egress
gofmt
2019-01-27 15:53:21 -05:00
Arjun Comar 604f73d7cb
Updates to make External egress functional 2019-01-27 15:53:21 -05:00
Justin Santa Barbara 556ed2aace
Allow for "external" egress
We don't configure routing for a subnet when it is external.  In the
case when all subnets have external egress, we should not create any
route / network objects at all (e.g. no IGW)
2019-01-27 15:53:20 -05:00
Jan Wozniak f930ec3138 suffix openstack subnet name with cluster name 2019-01-23 23:12:45 +01:00
Kubernetes Prow Robot ea420dac78
Merge pull request #6351 from cisco-sso/os_full
Kops for Openstack
2019-01-23 10:35:20 -08:00
Kubernetes Prow Robot 7050d990d8
Merge pull request #6066 from gambol99/volumes
Additional Storage & Volume Mounting
2019-01-22 08:05:29 -08:00
Rohith 0bd9126387 - fixing up the iops issue, masking when not required i.e. when the volume type is not io1 for now 2019-01-22 14:29:02 +00:00
Kubernetes Prow Robot f6fe02eda5
Merge pull request #6297 from davidarcher/allow-pmtu-icmp-to-api-server-elb
AWS: Enable ICMP Type 3 Code 4 for API server ELBs
2019-01-21 07:46:26 -08:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) c9b5911b1c Openstack gopkg updates 2019-01-19 08:41:15 -07:00
Rohith df2d8dd304 - updating the basil requirements 2019-01-18 22:49:54 +00:00
Rohith 0e155b4c78 - changed tack and making them two separate features for now, one adding additional volumes and two mounting them. This should always allow for user to use epherimal devices as well
- updated the api specs and machinery
- adding the dependecies on the services when the volume mounts are enable (should probably false this if they don't effect the docker filesystem)
2019-01-18 22:49:38 +00:00
Rohith 08fb11c8cf - fixing up the iops to only be includes on io1 volume types 2019-01-18 22:45:05 +00:00
Rohith 5e262932ae - fixing up various linting issues and formatting 2019-01-18 22:45:05 +00:00
Rohith 5bfed5c63f - adding the additional volumes to the launchconfiguration 2019-01-18 22:45:05 +00:00
Jordan Liggitt 32f196fd71 Remove Initializers from default admission plugins 2019-01-16 16:49:46 -05:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 4f0169bb79 codegen 2019-01-16 09:30:40 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 4e752ca62d Openstack Environment Variable Mapping 2019-01-15 14:21:41 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 64b63ba6ae Removing references to drekle repo 2019-01-15 14:21:11 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) fb0939af9b Openstack Model, tasks, and cloud ops refactor 2019-01-15 14:16:08 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) af91543345 Checking in model and task dependencies 2019-01-15 14:13:53 -07:00
Jon Perritt 3064f6be15 server groups, lb, instance, and dns tasks, models and resources 2019-01-15 14:06:54 -07:00
David Archer 36d2282d6b AWS: Enable ICMP Type 3 Code 4 for API server ELBs 2019-01-12 07:20:17 -05:00
Kubernetes Prow Robot f5ce011fa0
Merge pull request #6242 from justinsb/bulk_fix_typos
Bulk spelling fixes
2018-12-21 07:45:14 -08:00
Kubernetes Prow Robot 7a629c7743
Merge pull request #5932 from rdrgmnzs/deps_for_1_12
Update to k8s 1.12 libraries
2018-12-20 15:42:36 -08:00
Justin SB 26bd75aecb
Bulk spelling fixes
Experimenting with my own spelling checker, these are the typos it caught.
2018-12-20 17:43:56 -05:00
Rodrigo Menezes a7903adfe8 Fix for when node and master use the same SG. 2018-12-06 01:05:54 -08:00
Rodrigo Menezes 2b9243ff8c Getting things ready for when we are ready for 1.12 2018-12-04 18:50:17 -08:00
Justin Santa Barbara 3405ee1382 Create separate certificate for etcd peer authentication
This works around the (very unusual) etcd changes for validation of
peer certificates by DNS lookup, which were introduced in etcd 3.2.

Issue #6024
2018-11-24 22:26:52 -05:00
k8s-ci-robot f4012407f8
Merge pull request #4762 from locationlabs/cni-ipvlan-vpc-k8s
Cni ipvlan vpc k8s support
2018-11-21 13:43:19 -08:00
k8s-ci-robot 35f0eaacd7
Merge pull request #6015 from spotinst/fix-lb-attachment
Spotinst: Skip the creation of LoadBalancerAttachment tasks if Spotinst is enabled
2018-11-13 03:20:57 -08:00
k8s-ci-robot 892d26eb1f
Merge pull request #6035 from Vlaaaaaaad/etcd-volume-docs
Document etcd volume options + fail fast if ratio is too high
2018-11-10 18:00:33 -08:00
k8s-ci-robot 5dce6b1e6f
Merge pull request #5875 from seanson/5700_add_flag_for_no_subnet_tags
#5700: Add command line flag for disabling Subnet ELB tags
2018-11-09 13:05:48 -08:00
Chris Phillips af7377d530 fix use of --networking in create cluster 2018-11-07 08:08:44 -08:00
Chris Phillips 2b9a56f8e6 rename to LyftVPC. Removes all the settings from the NetworkingSpec 2018-11-07 08:08:44 -08:00
Chris Phillips 3a8078763a Adds support for Lyft's cni-ipvlan-vpc-k8s
https://github.com/lyft/cni-ipvlan-vpc-k8s

This cni solution is slightly different in that it doesn't require running a daemonset

It requires:
  * a config file in /etc/cni/net.d
  * the binaries in /opt/cni/bin
  * adding the --node-ip param to the kubelet

This code is modeled after the AmazonVPC cni bits.

I've left the setup of the required subnets as an exercise to the reader.
2018-11-07 08:08:13 -08:00
Vlad Ionescu 098266e875
Fail fast if io2 iops to size ratio is too high
In AWS the ratio between volume IOPS and volume size must be at most 50,
otherwise volume will fail creating. See
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html,
specifically "_The maximum ratio of provisioned IOPS to requested volume size
(in GiB) is 50:1. For example, a 100 GiB volume can be provisioned with up to
5,000 IOPS._"

This commit adds the option of failing fast when creating a new cluster if the
ratio is higher than 50. Previously kops would send the API request to AWS, fail
and repeat until the timeout was reached.
2018-11-06 13:08:40 +02:00
Jay Eno e0948842f3
Update iam_builder_node_strict_ecr.json 2018-11-03 01:03:01 -06:00
Jay Eno e5c12bdbef
Update iam_builder_node_strict.json 2018-11-03 01:02:42 -06:00
Jay Eno b0201c5922
Update iam_builder_node_legacy.json 2018-11-03 01:02:24 -06:00
Jay Eno ccfee27165
Update iam_builder_master_strict_ecr.json 2018-11-03 01:01:47 -06:00
Jay Eno d7dab870c9
Update iam_builder_master_legacy.json 2018-11-03 01:01:08 -06:00
Jay Eno 107b079cf6
Add permission to check encryption policy on root bucket. 2018-11-02 23:50:30 -06:00
Jay Eno 7228721439
Update test for new role 2018-11-02 23:46:02 -06:00
Liran Polak 9db3567cac fix: skip the load balancer attachment 2018-10-29 22:28:15 +02:00
Justin SB 4b3e66b347
Use hostPID: true with etcd-manager
Addresses issues with mounting inside a container with systemd
("Failed to add PIDs to scope's control group: Invalid argument")
2018-10-18 20:20:11 -07:00
k8s-ci-robot 1fbc6331c6
Merge pull request #5922 from spotinst/feature-spotinst-aws
New integration: Spotinst
2018-10-15 09:26:13 -07:00
mooncake d75dc2745d Fix typos in files
Signed-off-by: mooncake <xcoder@tenxcloud.com>
2018-10-14 21:44:44 +08:00
Liran Polak 07a509b917 fix: rename autoscaler node labels metadata label 2018-10-14 12:51:38 +03:00
Liran Polak a8db93b7d4 fix: rename cluster_identifier field 2018-10-14 11:54:58 +03:00