Commit Graph

2360 Commits

Author SHA1 Message Date
John Gardiner Myers b024338768 Always include load balancer domain in APIServer certificate 2022-12-17 16:14:08 -08:00
John Gardiner Myers 1b590f5111 Simplify 2022-12-17 10:16:22 -08:00
justinsb f4984dafab Support public buckets for serviceAccountIssuers on S3
S3 is also nudging towards bucket level permissions, so don't set an ACL when bucket is public.
2022-12-17 09:57:45 -08:00
Kubernetes Prow Robot ae9fd8c344
Merge pull request #14795 from johngmyers/aws-ccm-old
Upgrade older AWS CCM minor versions
2022-12-17 07:15:49 -08:00
Kubernetes Prow Robot 0f5fc06cec
Merge pull request #14771 from johngmyers/sqs-rebalance
Don't drain on rebalance recommendations in SQS mode unless configured
2022-12-17 07:15:42 -08:00
John Gardiner Myers 9de1ee9459 Upgrade older AWS CCM minor versions 2022-12-16 15:33:09 -08:00
John Gardiner Myers 30011e9f28 Upgrade AWS CCM to v1.26.0 2022-12-16 15:24:12 -08:00
Ciprian Hacman 5927c506d0 Update containerd to v1.6.13 2022-12-16 06:00:04 +02:00
Ciprian Hacman b9f7c2619b gce: Add support for clusters without DNS 2022-12-14 11:09:54 +02:00
Ciprian Hacman e622a5b6ce Update containerd to v1.6.12 2022-12-13 08:22:22 +02:00
Ciprian Hacman 41ada58944 Rename field from `ManagedFile.Public` to `ManagedFile.PublicACL` 2022-12-12 13:21:55 +02:00
John Gardiner Myers 55b46073b7 Don't drain on rebalance recommendations in SQS mode unless configured 2022-12-11 18:21:43 -08:00
Ole Markus With 00631f0c2e Bump EBS CSI driver to 1.13.0 2022-12-11 18:19:16 +01:00
Kubernetes Prow Robot 572b0655dc
Merge pull request #14732 from olemarkus/cilium-12
Bump cilium version to 1.12.4
2022-12-11 04:25:14 -08:00
Ciprian Hacman 09dc2c8455 Run hack/update-expected.sh 2022-12-09 08:01:54 +02:00
Ciprian Hacman 53060426db Update etcd-manager to v3.0.20221209 2022-12-09 07:52:27 +02:00
John Gardiner Myers 7c5b983490 Enable NTH Scheduled Event Draining by default 2022-12-08 19:02:44 -08:00
Kubernetes Prow Robot c692dd3292
Merge pull request #14738 from hakman/aws_tg_deregistration_delay
aws: Add support for managing target group attributes
2022-12-07 13:28:22 -08:00
Ole Markus With a5684f969f Bump cilium to 1.12.4 2022-12-07 18:33:03 +01:00
Ciprian Hacman 3a046ded6b aws: Add support for managing target group attributes 2022-12-07 18:56:14 +02:00
Ciprian Hacman 0c020cb6e9 Use EnsureTask to reference shared target groups 2022-12-07 18:37:33 +02:00
Ciprian Hacman 20805fe110 Run hack/update-expected.sh 2022-12-06 19:00:23 +02:00
Ciprian Hacman 73127ad23d Update etcd-manager to latest staging 2022-12-06 19:00:07 +02:00
Ciprian Hacman b111ea52e3 Update etcd to v3.5.6 2022-12-06 18:59:51 +02:00
Kubernetes Prow Robot f827ec7f54
Merge pull request #14721 from johngmyers/nth-default-queue
Change default for NTH Queue Processor mode to enabled
2022-12-06 03:18:36 -08:00
Kubernetes Prow Robot e5a835d287
Merge pull request #14706 from johngmyers/v1alpha3-networking
v1alpha3: move networking fields under networking
2022-12-05 21:34:38 -08:00
Leïla MARABESE 7247fdc199 rewording 2022-12-05 14:40:31 +01:00
Leïla MARABESE af2018261a using instance group tag as volumeNameTag in etcd 2022-12-05 14:40:31 +01:00
Leïla MARABESE 1bacbd591a fixed etcd + added machine type 2022-12-05 14:40:28 +01:00
Leïla MARABESE d93644a62c added volumes model and tasks for etcd-manager 2022-12-05 14:38:08 +01:00
Leïla MARABESE af19c467e8 added scaleway to all switches for cluster creation 2022-12-05 14:38:08 +01:00
John Gardiner Myers a22a33621c Change default for NTH Queue Processor mode to enabled 2022-12-04 15:56:18 -08:00
John Gardiner Myers be43dc2784 Extract NTH Queue mode enable check to struct receiver 2022-12-04 15:55:58 -08:00
Ciprian Hacman 71d0dfdc21 gce: Allow metrics-server to access kubelet API 2022-12-05 00:20:09 +02:00
Kubernetes Prow Robot 2fc25219be
Merge pull request #14715 from johngmyers/upgrade-nth
Upgrade Node Termination Handler to 1.18.1 and fix some issues
2022-12-04 13:13:54 -08:00
Ciprian Hacman 5df9d6eb85 gce: Set AUTOSCALER_ENV_VARS in instance template metadata 2022-12-04 18:25:11 +02:00
Ole Markus With d41ae73318 Use AWS CCM 1.26.0-alpha.1 for k8s 1.26 clusters 2022-12-04 12:15:41 +01:00
John Gardiner Myers 30970609ec Upgrade Node Termination Handler to 1.18.1 2022-12-03 21:42:56 -08:00
John Gardiner Myers 23900ef7a5 hack/update-expected.sh 2022-12-02 19:19:59 -08:00
John Gardiner Myers 235aa61594 v1alpha3: move networking fields under networking 2022-12-02 19:19:59 -08:00
Ciprian Hacman 4091fc00d6 Update OWNERS files 2022-12-02 07:19:59 +02:00
Kubernetes Prow Robot 670de031ee
Merge pull request #14694 from olemarkus/cilium-eni-fix
Fix Cilium ENI ipam
2022-12-01 17:49:54 -08:00
Ciprian Hacman dbef6209c2 Remove support for using Vault as state store
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2022-11-30 18:38:21 +02:00
Ole Markus With f0b0c76821 Fix Cilium ENI IPAM
The simplest working configuratin right now seems to be to enable BPF
masquerade and masquerade ipv4 traffic. The old setup with disabling
masquerade entirely no longer works.
2022-11-30 14:31:05 +01:00
John Gardiner Myers 76f71512cc v1alpha3: fix miscellaneous capitalization 2022-11-28 21:37:21 -08:00
Kubernetes Prow Robot 0b24fc108a
Merge pull request #14669 from johngmyers/cp-kubelet
v1alpha3: use new terminology for kubelet config
2022-11-28 21:35:22 -08:00
John Gardiner Myers 0424c474a3 Don't disable AWS src/dst checks in Calico IPv6 2022-11-25 20:57:48 -08:00
John Gardiner Myers 6536c0b301 v1alpha3: use new terminology for kubelet config 2022-11-25 16:53:23 -08:00
John Gardiner Myers c6349285d4
Release 1.26.0-alpha.2 (#14665) 2022-11-25 09:06:04 -08:00
Denis Moiseev e7c3dee038 Add `ec2:DescribeAvailabilityZones` to the AWS CCM permissions list
To workaround the issue with subnets auto-discovery [1]
AWS ccm needs to have permission to retrieve information about
availability zones (specifically to detect outpost, wavelength, and local zones [2]).

[1] https://github.com/kubernetes/cloud-provider-aws/issues/442
[2] https://github.com/kubernetes/cloud-provider-aws/pull/499
2022-11-25 11:04:27 +01:00
Ciprian Hacman 21e0110dc2 gce: Allow Cilium to connect to its etcd cluster 2022-11-24 21:03:16 +02:00
John Gardiner Myers de9055b588 Update control-plane terminology in CLI output strings 2022-11-23 21:32:10 -08:00
John Gardiner Myers 6c0603991b Create new clusters with updated control plane IG names 2022-11-22 22:09:08 -08:00
John Gardiner Myers 87925bf0ca Remove CloudFormation support 2022-11-22 21:02:50 -08:00
John Gardiner Myers b105aa6a86 hack/update-expected.sh 2022-11-22 17:15:51 -08:00
John Gardiner Myers d39ba74bd7 Change the control-plane IG role to "ControlPlane" in v1alpha3 API 2022-11-22 17:05:29 -08:00
Kubernetes Prow Robot e4606e8ed0
Merge pull request #14608 from hakman/kops-controller_apiserver_role
Don't serve config from kops-controller for APIServer nodes
2022-11-22 16:00:14 -08:00
Ciprian Hacman e51221ae3f Don't serve config from kops-controller for APIServer nodes 2022-11-22 22:17:39 +02:00
Kubernetes Prow Robot 70d0ff85c7
Merge pull request #14583 from heybronson/capacity-rebalance
aws: Add capacityRebalance flag for ASGs
2022-11-22 10:28:14 -08:00
Ole Markus With 2adc157749 Don't use ptr for CAS expander field 2022-11-22 13:52:08 +01:00
Bronson Mirafuentes 85898cba0b add capacityRebalance flag for ASGs 2022-11-21 08:47:40 -08:00
Leïla MARABESE c995357593 other fixes from review 2022-11-21 17:22:57 +01:00
Leïla MARABESE f7f89080c6 codegen + updated headers + refactoring after reviews 2022-11-21 11:46:29 +01:00
Leïla MARABESE 284e98288e ssh_key model + tasks 2022-11-21 11:46:29 +01:00
Leïla MARABESE 495b58ab2d instance model + tasks 2022-11-21 11:46:29 +01:00
Leïla MARABESE b00465a796 scaleway model context + fixed typo in env vars 2022-11-21 11:46:29 +01:00
John Gardiner Myers bc36f5b022 Rename ClusterSubnetSpec's ProviderID field to ID 2022-11-20 15:36:54 -08:00
John Gardiner Myers 5fca16aa30 v1alpha3: Move API-related settings under API 2022-11-19 10:27:12 -08:00
Ciprian Hacman d29812fc6e Replace fi.Bool/Float*/Int*/StringValue() with fi.ValueOf 2022-11-19 03:45:23 +02:00
Ciprian Hacman 8f79c9bd68 Replace fi.Bool/Float*/Int*/String() with fi.PtrTo() 2022-11-19 03:45:22 +02:00
Kubernetes Prow Robot d405d4c5a2
Merge pull request #14507 from johngmyers/internalname
Stop making MasterInternalName configurable
2022-11-18 13:38:29 -08:00
Ole Markus With 58195904ee Bump cilium to 1.11.11 2022-11-18 08:44:55 +01:00
John Gardiner Myers 8473e8b2e7 Stop making MasterInternalName configurable 2022-11-16 22:06:02 -08:00
Kubernetes Prow Robot 6f2ded7fb2
Merge pull request #14501 from hakman/kops-controller_for_config
Boot nodes without state store access
2022-11-16 08:32:50 -08:00
Ole Markus With e5142f6818 Add missing create tags permissions for cilium operator in ENI mode 2022-11-15 15:51:36 +01:00
Ciprian Hacman 309b37eadf Run hack/update-expected.sh 2022-11-15 14:51:54 +02:00
Ciprian Hacman 18b5dcd297 Boot nodes without state store access 2022-11-15 14:40:14 +02:00
Ciprian Hacman 7950163035 Update containerd to v1.6.10 2022-11-15 05:14:50 +02:00
Ciprian Hacman e6f9b45c78 aws: Fix TestPolicyGeneration output 2022-11-09 08:58:34 +02:00
Ciprian Hacman 9e4335b506 azure: Switch to using UserData instead of deprecated CustomData 2022-11-08 22:07:19 +02:00
Ciprian Hacman 7f67dcf52b azure: Add zone when creating etcd volumes 2022-11-08 20:33:05 +02:00
Kubernetes Prow Robot 8c5266dafe
Merge pull request #14509 from hakman/azure_experiments
azure: Update clients to latest (previous) versions
2022-11-08 10:32:21 -08:00
Ciprian Hacman 35f12c12b1 azure: Update clients to latest (previous) versions 2022-11-08 19:47:17 +02:00
Kubernetes Prow Robot f8fe433b4c
Merge pull request #14498 from johngmyers/topology-apiv5
Update TopologySpec for v1alpha3 API
2022-11-06 12:12:16 -08:00
Kubernetes Prow Robot f982934ae2
Merge pull request #14499 from johngmyers/delete-clb
aws: delete CLBs after migration to NLB
2022-11-06 10:20:15 -08:00
John Gardiner Myers 64be690211 Update TopologySpec for v1alpha3 API 2022-11-06 09:10:38 -08:00
Kubernetes Prow Robot 96acfc4ceb
Merge pull request #14452 from hakman/aws_none-dns_nlb
aws: Create cluster without DNS or Gossip
2022-11-05 22:30:15 -07:00
John Gardiner Myers 66eb76ada5 aws: delete CLBs after migration to NLB 2022-11-05 14:34:57 -07:00
Kubernetes Prow Robot cdd6fe3113
Merge pull request #14468 from johngmyers/bastion-nlb
Create NLB instead of CLB for bastion
2022-11-04 21:22:29 -07:00
Ciprian Hacman 85ab3e7d0d hetzner: Add listener for kops-controller when using it for node bootstrap 2022-11-03 17:27:40 +02:00
Ciprian Hacman 87240bd5a1 Add kops-controller target group only to master ASGs 2022-11-03 08:04:49 +02:00
Ciprian Hacman edb44610f7 aws: Create cluster without DNS or Gossip 2022-11-02 12:54:27 +02:00
Kubernetes Prow Robot 2c4808c5bd
Merge pull request #14440 from hakman/hetzner_no-dns_master
hetzner: Create cluster without DNS or Gossip
2022-11-02 02:02:47 -07:00
John Gardiner Myers c53c3bf8f8 Update images in tests 2022-11-01 17:04:43 -07:00
John Gardiner Myers 25b7dc21fa Create NLB instead of CLB for bastion 2022-10-29 17:00:00 -07:00
Ciprian Hacman 1d53eba4b3 aws: Set the target group health check interval to 10s 2022-10-29 10:30:50 +03:00
Ciprian Hacman 4e5ded6dc3 hetzner: Create cluster without DNS or Gossip 2022-10-27 11:29:37 +03:00
Ciprian Hacman dfc8af28d5 Update containerd to v1.6.9 2022-10-27 05:13:51 +03:00
John Gardiner Myers 87dbab9062 Remove dead code 2022-10-22 22:05:18 -07:00
Ciprian Hacman dc98c74428 Move Gossip check to cluster struct 2022-10-21 09:48:07 +03:00