Commit Graph

15564 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 97ecb437dd
Merge pull request #12403 from rifelpet/tf107
Upgrade terraform to 1.0.7
2021-09-24 01:57:24 -07:00
Anthony Hausman 8465290a4e
FIX: Correct documentation 2021-09-24 10:57:05 +02:00
Anthony Hausman 5e814f465d
Add support to configure Cilium CNI chaining
CNI chaining allows to use Cilium in combination with other CNI plugins.

With Cilium CNI chaining, the base network connectivity and IP address management is managed by the non-Cilium CNI plugin, but Cilium attaches eBPF programs to the network devices created by the non-Cilium plugin to provide L3/L4 network visibility, policy enforcement and other advanced features.

https://docs.cilium.io/en/v1.9/gettingstarted/cni-chaining/#cni-chaining

In our case, to be able to use the `HostPort` feature in our cluster, we need to enable the `portmap` plugin.
2021-09-24 10:39:22 +02:00
Ciprian Hacman b1be79800b Use host network when running docker 2021-09-24 11:15:13 +03:00
John Gardiner Myers 63009934e7 update-bazel.sh 2021-09-23 23:40:08 -07:00
John Gardiner Myers a5ed653f9d make apimachinery 2021-09-23 23:40:07 -07:00
John Gardiner Myers 29efbe5881 Create v1alpha3 API 2021-09-23 22:27:56 -07:00
Peter Rifel db5a1251c9
Upgrade terraform to 1.0.7 2021-09-23 22:49:25 -05:00
Kubernetes Prow Robot fbff2a14d9
Merge pull request #12402 from johngmyers/remove-addons-link
Fix link to addons documentation
2021-09-23 19:07:23 -07:00
John Gardiner Myers dacccdef40 Fix link to addons documentation 2021-09-23 14:47:02 -07:00
Reilly Brogan 9c6bf83c93 Update Cilium to 1.10.4
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4)
2021-09-23 13:08:57 -05:00
Reilly Brogan bce435da1c Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
- Cilium versions 1.10.4 and 1.9.10 now auto-mount the bpf file-system automatically
- Also remove redundant capabilities (these are already automatically granted by virtue of this being a privileged container)
2021-09-23 13:01:58 -05:00
Kubernetes Prow Robot 51afc01e08
Merge pull request #12396 from rifelpet/cloud-docs
Fix list of supported cloud providers in CLI docs
2021-09-22 23:29:10 -07:00
Kubernetes Prow Robot 693f997f3c
Merge pull request #12397 from rifelpet/dump-timeout
Decrease connection timeout when dumping logs from instances
2021-09-22 22:37:11 -07:00
Peter Rifel ca044455a3
Remove critical-pod scheduler annotation.
This is no longer recognized in all supported k8s versions (1.16+)

ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
Peter Rifel a6d47b6002
Decrease connection timeout when dumping logs from instances
This is currently over 2 minutes. This change should speed up the end of tests when SSH isn't available.
2021-09-22 21:09:13 -05:00
Peter Rifel 4e96f68497
Fix list of supported cloud providers in CLI docs 2021-09-22 20:49:28 -05:00
Kubernetes Prow Robot defcdedb68
Merge pull request #12366 from justinsb/zone_autocompletion
Support zone autocompletion
2021-09-22 17:45:10 -07:00
Ciprian Hacman 9b65facbea make gen-cli-docs 2021-09-23 03:02:55 +03:00
Kubernetes Prow Robot 74f9a8e2fb
Merge pull request #12342 from eddycharly/irsa-wildcard
feat: add support for wildcard in roles generated for IRSA
2021-09-22 16:09:10 -07:00
Charles-Edouard Brétéché 5f523366d6 feat: add support for wildcard in roles generated for IRSA 2021-09-23 00:24:45 +02:00
Kubernetes Prow Robot f7d1527502
Merge pull request #12392 from olemarkus/fix-channels-target
Make channels target phony
2021-09-22 14:38:34 -07:00
Ole Markus With 343e48d3a2 Make channels target phony 2021-09-22 22:52:51 +02:00
Kubernetes Prow Robot d60469ff09
Merge pull request #12391 from olemarkus/sleep-test
Add sleep to upgrade-ab scenario
2021-09-22 11:30:33 -07:00
Ole Markus With 5cdcff163c Add sleep to upgrade-ab scenario 2021-09-22 19:51:30 +02:00
Kubernetes Prow Robot 2f1c8133d5
Merge pull request #12389 from olemarkus/specific-taints
Add specific taints to dns-controller.
2021-09-22 08:38:02 -07:00
Ole Markus With f06fcc5af2 Add specific taints to dns-controller.
Also set kops-controller as cluster critical, not node critical
2021-09-22 16:40:08 +02:00
Kubernetes Prow Robot c410a6b41f
Merge pull request #12385 from hakman/remove_unneeded_sysctls
Remove unneeded network related sysctls
2021-09-22 00:34:02 -07:00
Stephen Augustus 44bd816911
release-process.md: Update references to artifact promotion
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-09-22 00:57:36 -04:00
Ciprian Hacman ce08ec68df Remove unneeded network related sysctls 2021-09-22 06:51:10 +03:00
Kubernetes Prow Robot 55f8b3ac3d
Merge pull request #12384 from justinsb/gce_open_ipip_for_calico
GCE: When using calico, need to open up ipip protocol
2021-09-21 19:30:01 -07:00
justinsb e2f7895700 GCE: When using calico, need to open up ipip protocol
We need to open up the ipip protocol, which wasn't previously enabled.

Future work could construct the firewall rules in a common library,
and then adapt them to the various clouds.
2021-09-21 21:20:24 -04:00
Kubernetes Prow Robot 6be5fa97d3
Merge pull request #12375 from hakman/go-1.17.1
Update Go to v1.17.1
2021-09-21 09:20:24 -07:00
Kubernetes Prow Robot bb81c744f0
Merge pull request #12379 from rifelpet/dump-k8s-ssh
kubetest2 - fix parsing output from toolbox dump
2021-09-21 07:34:24 -07:00
Peter Rifel e423650857
Fix parsing output of kops toolbox dump 2021-09-21 08:54:52 -05:00
Kubernetes Prow Robot 6de7bce8b6
Merge pull request #12371 from justinsb/gce_source_tags_not_on_additional_ips
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
2021-09-21 06:00:24 -07:00
justinsb 3e83b771d6 GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
Kubernetes Prow Robot be2676076c
Merge pull request #12334 from dntosas/bump-amis
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
2021-09-21 04:52:24 -07:00
Kubernetes Prow Robot 8f42a4a689
Merge pull request #12368 from justinsb/gce_firewall_rules_always_ipv6
GCE: Always have IPv6 rules in "ipv6 mode"
2021-09-20 20:38:23 -07:00
Kubernetes Prow Robot 252f52f53d
Merge pull request #12370 from justinsb/gce_subnet_deletion
GCE: Fix subnet deletion
2021-09-20 17:12:23 -07:00
Kubernetes Prow Robot 06924c58b7
Merge pull request #12373 from justinsb/gce_no_utility_subnets
GCE: Don't create utility subnets in private topology
2021-09-20 15:32:23 -07:00
Kubernetes Prow Robot 5175875e67
Merge pull request #11578 from justinsb/promote_cidrmap_package
Move cidrmap to subnet package
2021-09-20 07:42:10 -07:00
justinsb c7e6187493 Support zone completion
Refactor cloud listing & zone guessing into its own package.
2021-09-20 09:53:33 -04:00
Justin Santa Barbara 1db266f15a Move cidrmap to subnet package
This will enable reuse outside of gce.
2021-09-20 09:33:10 -04:00
justinsb 16fc5e8cec GCE: Don't create utility subnets in private topology
We don't need them on GCE, and in fact we don't support them with IP Alias.
2021-09-20 09:31:33 -04:00
justinsb 1823bc5963 GCE: Fix subnet deletion
Subnets are created & owned for IPAlias mode.  We weren't deleting
them because of a bug deleting when there is a hyphen in the name (and
by default they are named after the region, which has a hyphen).
2021-09-20 09:29:08 -04:00
justinsb 76f816f483 GCE: Always have IPv6 rules in "ipv6 mode"
If we don't specify some SourceRanges, it defaults to 0.0.0.0/0, which
is IPv4 and confusing.
2021-09-20 09:26:28 -04:00
Kubernetes Prow Robot 8b9f4ec41c
Merge pull request #12377 from rifelpet/dump-k8s-ssh
Fix parsing of kops toolbox dump yaml output
2021-09-20 05:44:09 -07:00
Peter Rifel 6deeda1ea2
Fix parsing of kops toolbox dump yaml output
Also add logging to help troubleshoot which command is failing
2021-09-20 07:06:08 -05:00
Kubernetes Prow Robot fb9a7f87c6
Merge pull request #12376 from justinsb/setlifecycleoverride_log_cleanup
Better logging in setLifecycleOverride
2021-09-20 05:02:10 -07:00