Commit Graph

5229 Commits

Author SHA1 Message Date
Peter Rifel 4d2639095e
Upgrade EBS CSI driver to v1.6.0 2022-04-27 22:17:28 -05:00
Ciprian Hacman c8645f0156 Add support for Rocky Linux 8
... as an alternative to CentOS 8, after its deprecation and removal.
2022-04-26 12:23:14 +03:00
Nat Henderson 9b08c4bb51 Enable internal load balancers when running on GCP
* Add ILBs, broadly following the AWS model.  The following new
capabilities are added for clusters in GCP:
  * Cluster's spec.api.loadBalancer can be set to 'type: internal' on
    GCP.
    * Therefore, GCP can now create:
        * regional backend services
        * regional (non-legacy) healthchecks
        * firewall rules with "internal" load-balancing scheme
        * firewall rules with dot-notation-specified IP addresses
  * Cluster's spec.api.loadBalancer's 'subnets' field functions
    as in the AWS model.

A few incidental changes are included, either because this change
touched the relevant code or because my use case happened to trigger the
issues that are fixed here.

* Cluster's spec.networkID field can be prefixed by project to use
  GCP's common cross-project networking model.
    * The presumption is that all specified subnets belong to this
      network and therefore this project.

* Add missing operation wait on forwarding rule creation.

* Some Terraform output improvements:
    * Permit no-ACL files in GCS buckets in Terraform output.
    * Enable marginally better cross-resource reference in Terraform outputs
    * Add project to network + subnetwork literals in Terraform output.
    * Add terraform output to backend services and health checks.

Testing:
  * Add mocks for backend services and health checks.
  * Add minimal integration test - copied from gce_private and ilb added.
  * Add update cluster goldens.

Co-authored-by: Travis Reid <travis_reid@apple.com>
2022-04-25 13:31:47 -07:00
Peter Rifel 9073f605af
Upgrade flannel to 0.17.0 2022-04-23 08:11:53 -05:00
Bronson Mirafuentes f56dbad934 fix pod annotations in addon yamls 2022-04-21 11:10:03 -07:00
Peter Rifel 4e429bb2cc
Update control plane toleration for external-dns 2022-04-20 19:01:23 -05:00
Peter Rifel 8bc0240222
./hack/update-expected.sh 2022-04-19 16:52:48 -05:00
Peter Rifel abc6378656
Update remaining addon manifests for control-plane node role label 2022-04-19 16:52:06 -05:00
Kubernetes Prow Robot 1417a2b8f9
Merge pull request #13511 from heybronson/cas-pod-annotations
add cluster autoscaler pod annotations
2022-04-19 10:57:17 -07:00
Bronson Mirafuentes 67ad8582ee change template yaml 2022-04-18 10:52:52 -07:00
Bronson Mirafuentes 7c4f1646e3 add cluster autoscaler pod annotations 2022-04-18 10:32:52 -07:00
Ole Markus With 227dde3ce7 Update expected 2022-04-18 13:56:13 +02:00
Ole Markus With d8c414f583 Fix affinity and taints for NTH 2022-04-18 13:56:13 +02:00
Ole Markus With 51f5dd6d60 Fix affinity and taints for Cert Manager 2022-04-18 13:56:13 +02:00
Ole Markus With 64334f2e08 Fix affinity and taints for AWS EBS CSI driver 2022-04-18 13:56:13 +02:00
Ole Markus With 6b5153956a Fix affinity and taints for AWS LBC 2022-04-18 13:56:13 +02:00
Ole Markus With 1921afa852 Fix affinity and taints for cluster-autoscaler 2022-04-18 13:56:04 +02:00
Ole Markus With b4a5a10e69 Fix affinity and taints for calico 2022-04-18 13:55:51 +02:00
Ole Markus With a6b51bb863 Fix affinity and taints for dns-controller 2022-04-18 13:55:51 +02:00
Ole Markus With b1387368a6 Fix affinity and taints for cilium 2022-04-18 13:55:51 +02:00
Ole Markus With 1c5c339fac Fix affinity and taints for kops-controller 2022-04-18 13:55:51 +02:00
Ole Markus With 26f8a5d672 Fix affinity and taints for AWS CCM 2022-04-18 13:55:51 +02:00
Kubernetes Prow Robot 6d264080ed
Merge pull request #13484 from olemarkus/no-bazel-targets
Remove bazel targets and tools
2022-04-17 23:16:41 -07:00
Ciprian Hacman 3b9ff44838 Update Canal to v3.21.5 2022-04-17 07:40:46 +03:00
Ciprian Hacman 84a494617d Update Calico to v3.21.5 2022-04-17 07:40:37 +03:00
Ciprian Hacman 8b8dd8d2dd Use aws_s3_object instead of deprecated aws_s3_bucket_object 2022-04-13 16:49:03 +03:00
Moshe Shitrit 9c7d0ecaa5 output of hack/update-expected.sh 2022-04-12 11:52:41 -04:00
Moshe Shitrit f643559b6f bump aws cni to version 1.10.3 2022-04-12 11:49:26 -04:00
Ole Markus With ce2e877aeb Remove bazel files from vendor 2022-04-12 13:29:03 +02:00
Kubernetes Prow Robot 8120147889
Merge pull request #13326 from johngmyers/move-openstack
Move Openstack settings to cloudProvider.openstack
2022-04-10 00:10:05 -07:00
DingGGu 844931af53
Fix wrong label selector in NTH manifest 2022-04-09 17:16:55 +09:00
DingGGu bc320d8671
Fix missing role for EMIT_KUBERNETES_EVENTS option 2022-04-09 17:04:23 +09:00
DingGGu 1b9cf91684
Bump NTH to 1.16.1, use WithDefaultBool in gotemplate, set ExcludeLoadBalancers default true 2022-04-09 17:04:23 +09:00
DingGGu c1042f4a3b
Bump NTH 1.16 and add excludeFromLoadBalancers option 2022-04-09 17:04:16 +09:00
Ole Markus With 1fadc39a59 Add PDB for cilium operator 2022-04-09 07:06:59 +02:00
Ole Markus With a5fc9cd6a5 Add PDB for AWS LBC 2022-04-09 07:05:13 +02:00
Ole Markus With 8c235f363d Add PDB and topology constraints for NTH 2022-04-09 07:01:25 +02:00
John Gardiner Myers 6a621fcde5 Cleanup OpenStackOptionsBuilder 2022-04-07 14:52:25 -07:00
John Gardiner Myers aff5f587f3 Move Openstack settings to cloudProvider.openstack 2022-04-07 10:04:19 -07:00
Kubernetes Prow Robot 5cbb338528
Merge pull request #13065 from johngmyers/move-azure
Move Azure settings to cloudProvider.azure
2022-04-07 09:37:57 -07:00
Kubernetes Prow Robot 79dd445e39
Merge pull request #13461 from infonova/pick-the-right-os-server-group-for-ig
Pick the right OS server group when creating cloud groups
2022-04-07 07:49:58 -07:00
Kubernetes Prow Robot 44e7b24c89
Merge pull request #13464 from olemarkus/bump-cas-24
Bump Cert Manager to 1.8
2022-04-06 10:20:56 -07:00
Kubernetes Prow Robot f32503e413
Merge pull request #12919 from olemarkus/cilium-11-default
Use Cilium 1.11 as default
2022-04-06 04:18:56 -07:00
Ole Markus With 43bfb934e7 Bump Cert Manager to 1.8 2022-04-06 12:50:03 +02:00
Ciprian Hacman 6b661156b5 Add back hash for containerd v1.6.1 2022-04-06 07:36:55 +03:00
ederst f97d86e197 Pick the right OS server group when creating cloud groups
This fixes an issue where kops picks the last server group found on
OpenStack instead of the right one when getting the cloud groups.

For example, lets assume that kops created those server groups and they are returned in the order as shown here by the OpenStack API:

```
cluster-name-bastion
cluster-name-cp-0
cluster-name-worker
````

Now kops looks for nodes associated with the IG "bastion" and the
expected behavior would be that it ends up using "cluster-name-bastion".
However, it will actually end up  associating the cloud group with the
last server group, which is in this case "cluster-name-worker" due to
the reference switching to the last item when the loop is done.

In the worst case this could lead to kops deleting the wrong instances
when deleting an IG.

Not using the server group as a "by reference" argument when building
the cloud group fixes this behavior.
2022-04-06 00:10:44 +02:00
Kubernetes Prow Robot 340ff24468
Merge pull request #13453 from olemarkus/no-csi-snapshotter-without-snapshot
Don't run the CSI snapshot plugin if snapshot controller is not installed
2022-04-04 05:16:13 -07:00
Ciprian Hacman 42289b7faa Update containerd to v1.6.2 2022-04-04 09:01:10 +03:00
Kubernetes Prow Robot feb66910b1
Merge pull request #13318 from guillomep/allow_to_add_additional_routes
Possibility to add additional routes in route tables of subnets
2022-04-03 13:46:09 -07:00
Ole Markus With 79d9fa6aa7 Don't run the CSI snapshot plugin if snapshot controller is not installed 2022-04-02 21:51:20 +02:00