John Gardiner Myers
4baf2cbdcf
Delete IAM roles no longer in the model
2021-05-15 12:03:23 -07:00
Kubernetes Prow Robot
06151727aa
Merge pull request #11470 from rifelpet/oidc-gossip
...
Use kubernetes.default for OIDC discovery in gossip clusters
2021-05-12 16:04:25 -07:00
Peter Rifel
9165309032
Use kubernetes.default for OIDC discovery in gossip clusters
...
It doesn't make sense to use a gossip hostname as the discovery url because it wont be resolveable.
For gossip clusters that dont provide a public VFS store, we can at least use kubernetes.default for internal oidc usage.
2021-05-12 14:18:53 -05:00
Kubernetes Prow Robot
1144c1b559
Merge pull request #11461 from johngmyers/refactor-lt-2
...
Simplify buildLaunchTemplateTask() part two
2021-05-12 08:32:16 -07:00
Kubernetes Prow Robot
31d32cdc88
Merge pull request #11462 from olemarkus/cas-1-21
...
Add support for CAS 1.21.0
2021-05-12 02:07:38 -07:00
Ole Markus With
103e3f3b7e
Add support for CAS 1.21.0
2021-05-12 08:10:36 +02:00
John Gardiner Myers
0c1f9f4772
Refactor LaunchTemplate.SecurityGroups
2021-05-11 14:48:00 -07:00
John Gardiner Myers
5d3af39311
Refactor LaunchTemplate.UserData
2021-05-11 14:48:00 -07:00
John Gardiner Myers
4a5e46922f
Refactor LaunchTemplate.Tenancy
2021-05-11 14:48:00 -07:00
John Gardiner Myers
4d9018282c
Refactor LaunchTemplate.SSHKey
2021-05-11 14:48:00 -07:00
John Gardiner Myers
b0bcf40921
Refactor LaunchTemplate.RootVolumeEncryptionKey
2021-05-11 14:48:00 -07:00
John Gardiner Myers
945e56294f
Refactor LaunchTemplate.RootVolumeEncryption
2021-05-11 14:48:00 -07:00
John Gardiner Myers
1a39c9060e
Refactor LaunchTemplate.RootVolumeSize
2021-05-11 14:48:00 -07:00
John Gardiner Myers
3097a3a746
Refactor LaunchTemplate.RootVolumeOptimization
2021-05-11 14:48:00 -07:00
John Gardiner Myers
436dbe8435
Refactor LaunchTemplate.RootVolumeIops
2021-05-11 14:47:57 -07:00
John Gardiner Myers
01a55812ac
Refactor LaunchTemplate.RootVolumeType
2021-05-11 13:38:20 -07:00
John Gardiner Myers
a4898c9d7d
Refactor LaunchTemplate.InstanceType
2021-05-10 23:22:41 -07:00
John Gardiner Myers
d2adf498f6
Refactor LaunchTemplate.InstanceMonitoring
2021-05-10 23:12:21 -07:00
John Gardiner Myers
a1db8f1e82
Refactor LaunchTemplate.InstanceInterruptionBehavior
2021-05-10 23:11:17 -07:00
John Gardiner Myers
d0793bd6ed
Refactor LaunchTemplate.ImageID
2021-05-10 23:08:21 -07:00
John Gardiner Myers
bfd8034cce
Refactor LaunchTemplate.IAMInstanceProfile
2021-05-10 23:08:21 -07:00
John Gardiner Myers
07aa346e68
Refactor LaunchTemplate.HTTPTokens
2021-05-10 23:08:20 -07:00
John Gardiner Myers
98502cd0b2
Refactor LaunchTemplate.HTTPPutResponseHopLimit
2021-05-10 23:08:16 -07:00
John Gardiner Myers
33590eb617
Refactor LaunchTemplate.CPUCredits
2021-05-10 23:07:24 -07:00
John Gardiner Myers
0557414111
Refactor LaunchTemplate.BlockDeviceMappings
2021-05-10 22:51:00 -07:00
John Gardiner Myers
4657cb94d6
Refactor LaunchTemplate.AssociatePublicIP
2021-05-10 22:47:48 -07:00
Kubernetes Prow Robot
7db45cb5fa
Merge pull request #11418 from dntosas/aws-csi-ga-release
...
[addons/awscsidriver] Bump to GA release
2021-05-08 02:46:47 -07:00
dntosas
f8ece50a96
[addons/awscsidriver] Bump to GA release
...
Bump version and manifests of AWS EBS CSI Driver to the first GA
release.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-08 11:47:43 +03:00
John Gardiner Myers
36f93d0069
hack/update-expected.sh
2021-05-07 23:40:03 -07:00
John Gardiner Myers
d3469d6ec2
Remove code for no-longer-supported k8s versions
2021-05-07 23:40:03 -07:00
Ciprian Hacman
305e4bbe99
Use etcd-backup built from etcdadm repo
2021-05-08 07:11:21 +03:00
Justin SB
c1dd7e7698
Use etcd-manager built from etcdadm repo
...
We can now use etcd-manager as built from the kubernetes-sigs/etcdadm
repo.
2021-05-08 07:11:21 +03:00
John Gardiner Myers
3aa8d40052
Release 1.22.0-alpha.1
2021-05-07 13:45:35 -07:00
Kubernetes Prow Robot
f0307cdcc9
Merge pull request #11393 from olemarkus/fix-lb-controller-nlb-permissions
...
Add elasticloadbalancing:ModifyTargetGroupAttributes to aws lb controller
2021-05-07 03:57:03 -07:00
John Gardiner Myers
8bac63f951
Don't publish OIDC discovery if DiscoveryStore not set
2021-05-06 13:35:57 -07:00
John Gardiner Myers
8823f30ad7
Recognize the ServiceAccountIssuerDiscovery featue gate
2021-05-06 08:57:37 -07:00
Ole Markus With
cd9ddd6716
Add elasticloadbalancing:ModifyTargetGroupAttributes to aws lb controller
2021-05-06 15:27:39 +02:00
Kubernetes Prow Robot
a04d787d81
Merge pull request #11392 from olemarkus/guard-sa-remap
...
Don't add IRSA env vars if feature flag is not enabled
2021-05-06 03:57:16 -07:00
Ole Markus With
5d4f6e6dee
Don't add IRSA env vars if feature flag is not enabled
2021-05-06 11:18:07 +02:00
John Gardiner Myers
d21cb0f306
Use consistent ServiceAccountJWKSURI default for PublicJWKS
2021-05-06 00:15:15 -07:00
Ole Markus With
aadcd9d448
Add more support for cilium 1.10
2021-05-03 16:10:56 +02:00
Kubernetes Prow Robot
b054fb37b7
Merge pull request #11016 from olemarkus/irsa-custom
...
user-configurable IAM roles for ServiceAccounts
2021-05-02 11:16:01 -07:00
Ciprian Hacman
689b76d0ff
Mark control-plane node for update when etcd manager config changes
2021-05-02 08:50:42 +03:00
Ole Markus With
6f8b3647cf
Add support for IRSA in he api
...
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-01 16:03:42 +02:00
Ciprian Hacman
d64cfba365
Mark control-plane node for update when etcd volume size changes
...
etcd-manager expands the data volume on restart to the max available.
2021-05-01 12:06:22 +03:00
Ole Markus With
5ca7c9b5d7
Use VFS as service account issuer if configured
...
Also add an integration test that uses VFS
2021-04-30 21:02:30 +02:00
Ole Markus With
460586833b
Add toggle for AWS OIDC provider. Free it from any feature flag
2021-04-30 19:19:06 +02:00
Ole Markus With
25b5f0cfb2
Move publicDataStore to serviceAccountIssuerDiscovery.discoveryStore
2021-04-30 19:19:06 +02:00
Ole Markus With
0f545f8659
Split oidc_provider
...
* one builder concerned with publishing issuer discovery metadata
* one builder concerned with creating aws oidc provider
2021-04-30 18:05:20 +02:00
Kubernetes Prow Robot
7a63ed8f5c
Merge pull request #11360 from dntosas/nth-resources
...
[addons/nth] Add capability to define resources
2021-04-30 07:53:58 -07:00