Kubernetes Prow Robot
97ecb437dd
Merge pull request #12403 from rifelpet/tf107
...
Upgrade terraform to 1.0.7
2021-09-24 01:57:24 -07:00
Anthony Hausman
8465290a4e
FIX: Correct documentation
2021-09-24 10:57:05 +02:00
Anthony Hausman
5e814f465d
Add support to configure Cilium CNI chaining
...
CNI chaining allows to use Cilium in combination with other CNI plugins.
With Cilium CNI chaining, the base network connectivity and IP address management is managed by the non-Cilium CNI plugin, but Cilium attaches eBPF programs to the network devices created by the non-Cilium plugin to provide L3/L4 network visibility, policy enforcement and other advanced features.
https://docs.cilium.io/en/v1.9/gettingstarted/cni-chaining/#cni-chaining
In our case, to be able to use the `HostPort` feature in our cluster, we need to enable the `portmap` plugin.
2021-09-24 10:39:22 +02:00
Ciprian Hacman
b1be79800b
Use host network when running docker
2021-09-24 11:15:13 +03:00
John Gardiner Myers
63009934e7
update-bazel.sh
2021-09-23 23:40:08 -07:00
John Gardiner Myers
a5ed653f9d
make apimachinery
2021-09-23 23:40:07 -07:00
John Gardiner Myers
29efbe5881
Create v1alpha3 API
2021-09-23 22:27:56 -07:00
Peter Rifel
db5a1251c9
Upgrade terraform to 1.0.7
2021-09-23 22:49:25 -05:00
Kubernetes Prow Robot
fbff2a14d9
Merge pull request #12402 from johngmyers/remove-addons-link
...
Fix link to addons documentation
2021-09-23 19:07:23 -07:00
John Gardiner Myers
dacccdef40
Fix link to addons documentation
2021-09-23 14:47:02 -07:00
Reilly Brogan
9c6bf83c93
Update Cilium to 1.10.4
...
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4 )
2021-09-23 13:08:57 -05:00
Reilly Brogan
bce435da1c
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
...
- Cilium versions 1.10.4 and 1.9.10 now auto-mount the bpf file-system automatically
- Also remove redundant capabilities (these are already automatically granted by virtue of this being a privileged container)
2021-09-23 13:01:58 -05:00
Kubernetes Prow Robot
51afc01e08
Merge pull request #12396 from rifelpet/cloud-docs
...
Fix list of supported cloud providers in CLI docs
2021-09-22 23:29:10 -07:00
Kubernetes Prow Robot
693f997f3c
Merge pull request #12397 from rifelpet/dump-timeout
...
Decrease connection timeout when dumping logs from instances
2021-09-22 22:37:11 -07:00
Peter Rifel
ca044455a3
Remove critical-pod scheduler annotation.
...
This is no longer recognized in all supported k8s versions (1.16+)
ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
Peter Rifel
a6d47b6002
Decrease connection timeout when dumping logs from instances
...
This is currently over 2 minutes. This change should speed up the end of tests when SSH isn't available.
2021-09-22 21:09:13 -05:00
Peter Rifel
4e96f68497
Fix list of supported cloud providers in CLI docs
2021-09-22 20:49:28 -05:00
Kubernetes Prow Robot
defcdedb68
Merge pull request #12366 from justinsb/zone_autocompletion
...
Support zone autocompletion
2021-09-22 17:45:10 -07:00
Ciprian Hacman
9b65facbea
make gen-cli-docs
2021-09-23 03:02:55 +03:00
Kubernetes Prow Robot
74f9a8e2fb
Merge pull request #12342 from eddycharly/irsa-wildcard
...
feat: add support for wildcard in roles generated for IRSA
2021-09-22 16:09:10 -07:00
Charles-Edouard Brétéché
5f523366d6
feat: add support for wildcard in roles generated for IRSA
2021-09-23 00:24:45 +02:00
Kubernetes Prow Robot
f7d1527502
Merge pull request #12392 from olemarkus/fix-channels-target
...
Make channels target phony
2021-09-22 14:38:34 -07:00
Ole Markus With
343e48d3a2
Make channels target phony
2021-09-22 22:52:51 +02:00
Kubernetes Prow Robot
d60469ff09
Merge pull request #12391 from olemarkus/sleep-test
...
Add sleep to upgrade-ab scenario
2021-09-22 11:30:33 -07:00
Ole Markus With
5cdcff163c
Add sleep to upgrade-ab scenario
2021-09-22 19:51:30 +02:00
Kubernetes Prow Robot
2f1c8133d5
Merge pull request #12389 from olemarkus/specific-taints
...
Add specific taints to dns-controller.
2021-09-22 08:38:02 -07:00
Ole Markus With
f06fcc5af2
Add specific taints to dns-controller.
...
Also set kops-controller as cluster critical, not node critical
2021-09-22 16:40:08 +02:00
Kubernetes Prow Robot
c410a6b41f
Merge pull request #12385 from hakman/remove_unneeded_sysctls
...
Remove unneeded network related sysctls
2021-09-22 00:34:02 -07:00
Stephen Augustus
44bd816911
release-process.md: Update references to artifact promotion
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-09-22 00:57:36 -04:00
Ciprian Hacman
ce08ec68df
Remove unneeded network related sysctls
2021-09-22 06:51:10 +03:00
Kubernetes Prow Robot
55f8b3ac3d
Merge pull request #12384 from justinsb/gce_open_ipip_for_calico
...
GCE: When using calico, need to open up ipip protocol
2021-09-21 19:30:01 -07:00
justinsb
e2f7895700
GCE: When using calico, need to open up ipip protocol
...
We need to open up the ipip protocol, which wasn't previously enabled.
Future work could construct the firewall rules in a common library,
and then adapt them to the various clouds.
2021-09-21 21:20:24 -04:00
Kubernetes Prow Robot
6be5fa97d3
Merge pull request #12375 from hakman/go-1.17.1
...
Update Go to v1.17.1
2021-09-21 09:20:24 -07:00
Kubernetes Prow Robot
bb81c744f0
Merge pull request #12379 from rifelpet/dump-k8s-ssh
...
kubetest2 - fix parsing output from toolbox dump
2021-09-21 07:34:24 -07:00
Peter Rifel
e423650857
Fix parsing output of kops toolbox dump
2021-09-21 08:54:52 -05:00
Kubernetes Prow Robot
6de7bce8b6
Merge pull request #12371 from justinsb/gce_source_tags_not_on_additional_ips
...
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
2021-09-21 06:00:24 -07:00
justinsb
3e83b771d6
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
...
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
Kubernetes Prow Robot
be2676076c
Merge pull request #12334 from dntosas/bump-amis
...
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
2021-09-21 04:52:24 -07:00
Kubernetes Prow Robot
8f42a4a689
Merge pull request #12368 from justinsb/gce_firewall_rules_always_ipv6
...
GCE: Always have IPv6 rules in "ipv6 mode"
2021-09-20 20:38:23 -07:00
Kubernetes Prow Robot
252f52f53d
Merge pull request #12370 from justinsb/gce_subnet_deletion
...
GCE: Fix subnet deletion
2021-09-20 17:12:23 -07:00
Kubernetes Prow Robot
06924c58b7
Merge pull request #12373 from justinsb/gce_no_utility_subnets
...
GCE: Don't create utility subnets in private topology
2021-09-20 15:32:23 -07:00
Kubernetes Prow Robot
5175875e67
Merge pull request #11578 from justinsb/promote_cidrmap_package
...
Move cidrmap to subnet package
2021-09-20 07:42:10 -07:00
justinsb
c7e6187493
Support zone completion
...
Refactor cloud listing & zone guessing into its own package.
2021-09-20 09:53:33 -04:00
Justin Santa Barbara
1db266f15a
Move cidrmap to subnet package
...
This will enable reuse outside of gce.
2021-09-20 09:33:10 -04:00
justinsb
16fc5e8cec
GCE: Don't create utility subnets in private topology
...
We don't need them on GCE, and in fact we don't support them with IP Alias.
2021-09-20 09:31:33 -04:00
justinsb
1823bc5963
GCE: Fix subnet deletion
...
Subnets are created & owned for IPAlias mode. We weren't deleting
them because of a bug deleting when there is a hyphen in the name (and
by default they are named after the region, which has a hyphen).
2021-09-20 09:29:08 -04:00
justinsb
76f816f483
GCE: Always have IPv6 rules in "ipv6 mode"
...
If we don't specify some SourceRanges, it defaults to 0.0.0.0/0, which
is IPv4 and confusing.
2021-09-20 09:26:28 -04:00
Kubernetes Prow Robot
8b9f4ec41c
Merge pull request #12377 from rifelpet/dump-k8s-ssh
...
Fix parsing of kops toolbox dump yaml output
2021-09-20 05:44:09 -07:00
Peter Rifel
6deeda1ea2
Fix parsing of kops toolbox dump yaml output
...
Also add logging to help troubleshoot which command is failing
2021-09-20 07:06:08 -05:00
Kubernetes Prow Robot
fb9a7f87c6
Merge pull request #12376 from justinsb/setlifecycleoverride_log_cleanup
...
Better logging in setLifecycleOverride
2021-09-20 05:02:10 -07:00