be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
fd08e2b047
Run hack/update-expected.sh
2021-07-08 22:12:12 +03:00
1e41439e36
Use etcd v3.5.0 for Kubernetes 1.22+
2021-07-08 22:09:22 +03:00
186aaf6d96
hack/update-expected.sh
2021-07-01 14:45:32 -07:00
7162a7473a
Remove dead code
2021-07-01 13:58:51 -07:00
2faf28379a
Refactor etcd-client-cilium secrets
2021-06-25 23:57:23 -07:00
f80b550c7a
Use internal name for cilium etcd if we do not enable api server nodes
2021-06-16 08:27:26 +02:00
e0915887ed
Move asset copying out of apply_cluster
2021-06-05 21:17:50 -07:00
fc4f0888ac
hack/update-expected.sh
2021-06-02 23:02:17 -07:00
7c9e7e9286
Make Lifecycle field non-pointer
2021-06-02 23:02:16 -07:00
36f93d0069
hack/update-expected.sh
2021-05-07 23:40:03 -07:00
d3469d6ec2
Remove code for no-longer-supported k8s versions
2021-05-07 23:40:03 -07:00
c1dd7e7698
Use etcd-manager built from etcdadm repo
...
We can now use etcd-manager as built from the kubernetes-sigs/etcdadm
repo.
2021-05-08 07:11:21 +03:00
689b76d0ff
Mark control-plane node for update when etcd manager config changes
2021-05-02 08:50:42 +03:00
75047c6513
Mount /run inside etcd-manager pods for systemd mounts
2021-04-29 10:15:58 +03:00
20bd724f5e
Add support for scaling out the control plane with dedicated apiserver nodes
...
Ensure apiserver role can only be used on AWS (because of firewalling)
Apply api-server label to CP as well
Consolidate node not ready validation message
Guard apiserver nodes with a feature flag
Rename Apiserver role to APIServer
Add an integration test for apiserver nodes
Rename Apiserver role to APIServer
Enumerate all roles in rolling update docs
Apply suggestions from code review
Co-authored-by: Steven E. Harris <seh@panix.com>
2021-03-20 20:57:00 +01:00
8fa6be1b03
Add etcd-manager discoveryPollInterval option
2021-03-04 09:35:05 +02:00
09f7f6f039
Update etcd-manager to 3.0.20210228
...
Changes:
* Add user agent to etcd-manager requests [#395 ](https://github.com/kopeio/etcd-manager/pull/395 )
* Add etcd-manager metrics, add openstack API metrics [#396 ](https://github.com/kopeio/etcd-manager/pull/396 )
* Make discovery poll interval configurable [#397 ](https://github.com/kopeio/etcd-manager/pull/397 )
* Add log levels to prevent too verbose logging [#394 ](https://github.com/kopeio/etcd-manager/pull/394 )
2021-02-28 20:41:30 -05:00
659bfa0daf
Update Controller Runtime Go module to v0.8.2
2021-02-25 20:34:12 +00:00
e0c3490cc3
Add support for creating world-readable managedFiles
2021-02-09 21:06:28 +01:00
28f184f68a
etcd-manager: Update to 3.0.20210122
...
Upstream changes:
* Release notes for 3.0.20201209
* Handling hanging list command from etcd client during reconciliation loop
* Update dependencies to match kOps 1.19
* Include IPs in peer certificates
* Use etcd v3.4.13 in tests
* Eager-broadcast leadership on every leader iteration
* Update Go to 1.15.7
2021-01-22 16:01:03 -05:00
a61caea8d2
Add Azure support
...
This commit contains all changes required to support Azure
(https://github.com/kubernetes/kops/issues/3957 ).
2020-12-21 08:27:54 -08:00
1945a656a0
Remove deprecated ResourceHolder
...
Cleaning up what is now dead code.
2020-12-19 23:15:37 -05:00
dc48ca6905
Update etcd-manager to 20201209
...
Highlights:
* Fix arm64 images, which were built with an incorrect base image.
* Initial (experimental) Azure support
Full change list:
* Update Kops dependency for Azure Blob Storage support [#372 ](https://github.com/kopeio/etcd-manager/pull/372 )
* Exclude gazelle from tools/deb-tools [#373 ](https://github.com/kopeio/etcd-manager/pull/373 )
* Regenerate bazel in tools/deb-tools [#374 ](https://github.com/kopeio/etcd-manager/pull/374 )
* Release notes for 3.0.20201202 [#375 ](https://github.com/kopeio/etcd-manager/pull/375 )
* Remove travis CI [#377 ](https://github.com/kopeio/etcd-manager/pull/377 )
* Fix vendor generation for tools/deb-tools subproject [#376 ](https://github.com/kopeio/etcd-manager/pull/376 )
* Add script to verify image hashes [#380 ](https://github.com/kopeio/etcd-manager/pull/380 )
* Fix some incorrect base image hashes for arm64 [#379 ](https://github.com/kopeio/etcd-manager/pull/379 )
* Support Azure [#378 ](https://github.com/kopeio/etcd-manager/pull/378 )
* Add more descriptions to wait loops [#383 ](https://github.com/kopeio/etcd-manager/pull/383 )
* Rename fields in the azure client struct [#382 ](https://github.com/kopeio/etcd-manager/pull/382 )
* Fix small typo in code comment [#381 ](https://github.com/kopeio/etcd-manager/pull/381 )
2020-12-09 09:30:44 -05:00
0ea98a1e87
Update etcd-manager to 3.0.20201202
...
The important PR we want to pick up is 369, fixing a bug when
ListenMetricsURLS is set as an env var.
Full changelist:
* Release notes for 3.0.20201117 [#364 ](https://github.com/kopeio/etcd-manager/pull/364 )
* Fix gofmt [#365 ](https://github.com/kopeio/etcd-manager/pull/365 )
* Add gofmt check to github actions [#366 ](https://github.com/kopeio/etcd-manager/pull/366 )
* Add boilerplate to tools/deb-tools/main.go [#367 ](https://github.com/kopeio/etcd-manager/pull/367 )
* Do not set ListenMetricsURLS [#369 ](https://github.com/kopeio/etcd-manager/pull/369 )
* Fix bazel formatting [#370 ](https://github.com/kopeio/etcd-manager/pull/370 )
2020-12-02 12:08:37 -05:00
4853bf982a
Use etcd v3.4.13 for k8s v1.19+
2020-11-20 14:25:22 +02:00
d516fb7d9c
Update etcd-manager to 3.0.20201117
...
Release notes for 3.0.20201117:
* Release notes for 3.0.20200531
* Adds support for using OS application credentials
* Fixes usage of OpenStack Swift reauthentication
* Move from debian-hyperkube-base to debian-base
* Add license headers to each file
* Fix some typos picked up by verify-spelling
* Fix some problems with trailing spaces
* Add support for etcd 3.4.13
* Switch to gcr.io/cloud-marketplace-containers/google/debian10 - Fix
for #340 option 1
* Support for ARM64
* BUG: OpenStack ignore AvailabilityZone in discovery
* Added full cinder ID to candidateDeviceNodes
* feat(etcd-manager-ctl): use backupname to delete backup instead of timestamp
* Update kops to pick up AllowAuth Openstack
* Build base image by raw expansion of deb packages
* Switch the cloudbuild docker image, locking to 2.2.0
* Fix build on case-insensitive file systems (MacOS)
* Set AltNames on server certificates
* govet: Fix a log message
2020-11-17 22:03:30 -05:00
c117d8d924
feat: Make etcd-manager log verbosity configurable
2020-11-12 09:58:09 +01:00
2ac17bee69
Remove code for no-longer-supported k8s releases
2020-10-29 16:45:53 -07:00
b158ffab04
Refactor: KopsModelContext embeds IAMModelContext
...
go syntax makes this an annoying change, unfortunately.
2020-08-25 11:22:34 -04:00
dd75c1ed91
make apimachinery crds gomod, update-expected.sh
2020-08-24 10:58:09 -05:00
7d9f0a06cf
Update API slice fields to not use pointers
...
This is causing problems with the Kubernetes 1.19 code-generator.
A nil entry in these slices wouldn't be valid anyways, so this should have no impact.
2020-08-24 07:46:38 -05:00
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
ac13557e03
Add missing lifecycle to etcd keypair tasks
2020-07-11 22:27:53 -07:00
0c62641dad
Merge pull request #9354 from johngmyers/refactor-certs-2
...
Continue refactoring certs into nodeup
2020-07-06 17:13:57 -07:00
627b71557e
Fix where etcd-cluster-spec is writen when etcd's BackupStore is defined - v2
2020-07-02 00:01:43 -07:00
d2e270c844
update-expected.sh
2020-06-28 23:12:13 -07:00
e88e0cf7ec
Remove code supporting dropped k8s versions
2020-06-04 12:11:51 -07:00
564d3d4ddc
Update etcd-manager to 3.0.20200531
2020-06-01 13:08:59 +03:00
bb8c6b9fbe
Update etcd-manager to 3.0.20200527
...
Changes since 3.0.20200429:
* Use env vars to customize backup retention
* Use next attachment point when device already in use
* Simplify uploading backups
2020-05-27 01:44:18 -04:00
8a6d29cd40
Remove support for reading legacy-format keypairs
2020-05-20 13:28:13 -07:00
35c6056fb2
Create golden image test for nodeup kube-apiserver
...
The building of the manifests for nodeup tasks can be a little opaque;
create a test to verify and expose what is happening.
2020-05-18 06:42:16 -04:00
75fd939a62
kube-apiserver: healthcheck via sidecar container
...
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled. That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.
Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.
This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
35a42c37e4
Add etcd 3.3.17 to supported etcd version list
2020-04-30 01:35:50 +00:00
3f77222cf3
Update to etcd-manager 3.0.20200429
...
Adds support for new AWS regions
Full changes
* Upgrade aws-sdk-go [#320 ](https://github.com/kopeio/etcd-manager/pull/320 )
* Release notes for 3.0.20200428 [#319 ](https://github.com/kopeio/etcd-manager/pull/319 )
2020-04-29 08:33:19 -04:00
eb3ef1a9bb
Update to etcd-manager 3.0.20200428
...
Contains the workaround for 1-year certificate expiry.
Full changes
* Release notes for 3.0.20200307 [#303 ](https://github.com/kopeio/etcd-manager/pull/303 )
* Add support for etcd 3.3.17 [#304 ](https://github.com/kopeio/etcd-manager/pull/304 )
* Adding client usage extension for server cert (#305 ) [#306 ](https://github.com/kopeio/etcd-manager/pull/306 )
* Add a check to renew certificates on startup if they expire in 60 days or less [#309 ](https://github.com/kopeio/etcd-manager/pull/309 )
* Try github actions [#310 ](https://github.com/kopeio/etcd-manager/pull/310 )
* Upgrade bazel to 2.2.0 [#311 ](https://github.com/kopeio/etcd-manager/pull/311 )
* Update to go 1.13.10 [#314 ](https://github.com/kopeio/etcd-manager/pull/314 )
* Bazel: update dependency [#316 ](https://github.com/kopeio/etcd-manager/pull/316 )
* e2e tests should wait for cluster readiness [#318 ](https://github.com/kopeio/etcd-manager/pull/318 )
* Remove old bazel versions from travis [#317 ](https://github.com/kopeio/etcd-manager/pull/317 )
* Always renew certificates [#313 ](https://github.com/kopeio/etcd-manager/pull/313 )
2020-04-28 09:15:02 -04:00
869ab75dea
Use etcd-manager for the cilium etcd cluster
2020-04-16 08:42:59 +02:00
7e16cad334
Add test and rebase
2020-03-12 10:54:16 -07:00
5901ba05fc
updated to use #8455
2020-03-12 10:25:52 -07:00
301463577e
Allow users to overwrite etcd settings.
...
Fix typo
fix env vars config ordering
2020-03-12 10:25:52 -07:00
John Gardiner Myers