Commit Graph

1943 Commits

Author SHA1 Message Date
Ole Markus With 3f265a43bb Remove networking flags as of k8s 1.24 2022-01-18 22:15:16 +01:00
Kubernetes Prow Robot 85732b4c4d
Merge pull request #13030 from johngmyers/v6-topology
Use IPv6-only subnets for worker nodes in private IPv6 topology
2022-01-18 10:58:40 -08:00
Kubernetes Prow Robot 7e645187bc
Merge pull request #13110 from olemarkus/no-dns-irsa-on-gossip
Do not create an IAM role for dns-controller on gossip clusters
2022-01-16 11:29:28 -08:00
Kubernetes Prow Robot b82a5d917e
Merge pull request #13093 from zetaab/fixmaster
fix ipv4+ipv6 sec groups/listeners in OpenStack
2022-01-16 03:37:27 -08:00
Ole Markus With 0ef596dd49 Do not create an IAM role for dns-controller on gossip clusters 2022-01-16 10:31:11 +01:00
Ciprian Hacman 678366b916 Update containerd to v1.6.0-rc.0
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-13 07:39:37 +02:00
Jesse Haka fbb8b1ff08 make gazelle 2022-01-12 15:13:08 +02:00
Jesse Haka acdca486e7 fix ipv4+ipv6 sec groups/listeners in OpenStack 2022-01-12 15:11:51 +02:00
Ciprian Hacman 3f6db14e89 Update containerd to v1.6.0-beta.5
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-07 10:18:10 +02:00
John Gardiner Myers 5385381633 Use IPv6-only subnets for worker nodes in private IPv6 topology 2022-01-06 21:00:00 -08:00
Kubernetes Prow Robot af7e6a4aeb
Merge pull request #12983 from zetaab/feature/drainos
Drain OpenStack loadbalancers
2022-01-03 02:23:00 -08:00
John Gardiner Myers d5ac8862d5 Release 1.24.0-alpha.2 2022-01-01 10:35:11 -08:00
John Gardiner Myers 4d4a4a9e01 Use latest GCP CCM for k8s 1.24 2021-12-31 17:31:12 -08:00
justinsb 45ad8b50ae Enhance AddHostPathMapping to support a fluent style
This allows for the helper to be used in more places.
2021-12-31 13:26:12 -05:00
Jesse Haka b88d110f58 Drain OpenStack loadbalancers 2021-12-31 13:16:02 +02:00
Ole Markus With ea9d0de847 Handle default in templating instead of ig population 2021-12-30 09:01:43 +01:00
Ole Markus With dd06cd337f Bump Cluster Autoscaler and update manifest 2021-12-29 18:06:27 +01:00
John Gardiner Myers dae281d30e Migrate to GCE CCM in k8s 1.24 2021-12-28 19:33:07 -08:00
Jiahui Feng f3ca669141 generated: ./hack/update-bazel.sh 2021-12-20 17:19:34 -08:00
Jiahui Feng 733f4d524f external CCM for GCE 2021-12-20 17:15:17 -08:00
justinsb 93a6871e9b gce: don't set per-IG permissions when using shared account
If we're using a cluster-level service-account, we shouldn't try to
set bucket permissions on a per-IG level.

For compatibility with the existing behavior, we simply don't set any
permissions in this case.
2021-12-28 10:10:16 -05:00
Ole Markus With b09241122f Support specifying instance requirements per IG
Update docs/instance_groups.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-12-24 21:19:58 +01:00
John Gardiner Myers f9071dd0d5 Allow IPv6-only subnets 2021-12-23 19:50:46 -08:00
Kubernetes Prow Robot 2f31054e19
Merge pull request #13007 from hakman/skip_non-masquerade-cidr
Use kubelet --non-masquerade-cidr only for Docker with kubenet
2021-12-21 18:49:36 -08:00
justinsb 994ac19b42 Use fi.Keyset instead of passing tasks around
Using a task leads to layering complexity.  We could introduce a new
type, but fi.Keyset is the type we seem to want.

(We could move Keyset out of fi, but we don't need to yet)

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-12-20 23:24:32 -05:00
justinsb e8ddfa4328 Update test data for bash return change 2021-12-20 10:12:07 -05:00
justinsb fdf412cdf5 nodeup bash script: use explicit return code
In bash, `return` returns the exit code of the last statement.  Being
explicit here is safer, and I believe in the first case (the cached
download) the value was actually incorrect.
2021-12-20 10:08:06 -05:00
Ole Markus With 00f8808ab1 Log the specific yaml segment that fails. Also remove redundant full manifest logging 2021-12-20 15:04:52 +01:00
Ciprian Hacman cb6d424675 Use kubelet --non-masquerade-cidr only for Docker with kubenet 2021-12-20 08:47:02 +02:00
John Gardiner Myers 3314c18e89 Support creating dualstack internal NLBs 2021-12-19 21:52:56 -08:00
Kubernetes Prow Robot 7ab4f43500
Merge pull request #12864 from johngmyers/rbn-subnet
Set Resource Based Naming on managed subnets
2021-12-19 21:03:25 -08:00
Kubernetes Prow Robot 43027b9998
Merge pull request #12988 from justinsb/gce_use_per_ig_serviceaccounts
gce: use per InstanceGroup serviceaccounts
2021-12-18 04:25:24 -08:00
justinsb e2c28b062b Refactor nodeup script to avoid action-at-a-distance 2021-12-17 18:33:44 -05:00
justinsb 0e1bbd58bd Avoid double-encoding templates
We were previously passing the template (with placeholders) through
MIME encoding.  This seems like it might fail rarely in
hard-to-understand ways.
2021-12-17 16:28:09 -05:00
justinsb 8b3372ec76 Need to truncate gce serviceaccounts to max 30 characters 2021-12-17 12:57:14 -05:00
justinsb 2f1ce3fa14 Move string truncation to its own package 2021-12-17 12:57:14 -05:00
justinsb 746f886718 gce: use per instancegroup serviceaccounts
We no longer set the cloudconfig serviceaccount on new clusters, and
instead use a per-IG setting if this is not set.
2021-12-17 12:57:14 -05:00
Kubernetes Prow Robot 8019c88b47
Merge pull request #12978 from justinsb/gce_use_serviceaccount_task
gce: Use ServiceAccount task when building model
2021-12-15 08:49:52 -08:00
justinsb 63e3d98443 gce: Use ServiceAccount task when building model
The next step towards supporting custom ServiceAccounts per IG
2021-12-15 11:08:51 -05:00
Ciprian Hacman 991eb70c71 Update containerd to v1.6.0-beta.4 2021-12-15 08:33:30 +02:00
Kubernetes Prow Robot 424452a855
Merge pull request #12906 from olemarkus/karpenter
Support Karpenter
2021-12-14 13:58:50 -08:00
Ole Markus With 0a6e329477 Use internal-elb as karpenter subnet selector 2021-12-13 21:11:56 +01:00
Ole Markus With b785965c50 Rename InstanceManager to Manager 2021-12-13 09:14:24 +01:00
Ole Markus With 0cfea49250 Do not expose the policy actions sets out of package 2021-12-13 09:14:20 +01:00
Robbie Lankford 88a9d50e73
fix ineffectual assignments 2021-12-12 18:16:46 -06:00
Ole Markus With d4ec7cc7e0 Make kops get instances work with karpenter 2021-12-12 19:33:41 +01:00
Ole Markus With 794cb72112 Karpenter addon
Constrain the instance types to what is supported by the AMI

Add taints and label to karpenter provisioner

Add instance types to karpenter provisioner
2021-12-12 19:33:41 +01:00
John Gardiner Myers a0736b3c29 Remove support for Aliyun/Alibaba Cloud 2021-12-11 21:49:13 -08:00
John Gardiner Myers c5e1dea184 Remove code for no-longer-supported k8s version 2021-12-11 16:30:51 -08:00
Ole Markus With 2088849768 Do not set insecure port on k8s 1.20+ 2021-12-11 12:44:56 +01:00