Commit Graph

2659 Commits

Author SHA1 Message Date
Ciprian Hacman 4ebda3e955 aws: Update EBS CSI driver to v1.26.1 2024-01-09 12:28:32 +02:00
Ciprian Hacman 37a184601b aws: Update EBS CSI driver to v1.26.0 2024-01-05 19:13:01 +02:00
Kubernetes Prow Robot 120220913d
Merge pull request #16219 from ameukam/servicelinkrole-elasticlb
Add permission needed for service-linked role creation
2024-01-05 02:08:56 +01:00
Arnaud Meukam 282ae1335d
hack/update-expected.sh execution results
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2024-01-04 23:55:55 +01:00
Arnaud Meukam ce340c6059
Add permission needed for service-linked role creation
Attempting to fix:
  - https://github.com/kubernetes/kops/issues/16218

by adding the permission needed for the AWS CCM to create a service-linked role for the elastic lb service.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2024-01-04 23:19:14 +01:00
Kubernetes Prow Robot a8305d2a17
Merge pull request #16214 from hakman/cilium-1.14.5
Update to Cilium 1.14.5
2024-01-04 09:06:02 +01:00
Ciprian Hacman 5277835620 Update to Cilium 1.14.5 2024-01-04 06:49:21 +02:00
Peter Rifel 349de70cda
Add comment to remove unused IAM permissions in the future 2024-01-03 21:19:05 -06:00
Justin Santa Barbara 0300a3b858
Release 1.29.0-alpha.3 (#16183) 2023-12-21 14:24:27 +01:00
Peter Rifel 6e337da7f0
Always set the paginated instance group field 2023-12-20 20:05:48 -06:00
Ciprian Hacman e95dab5408 aws: Add KMS to EBS CSI Driver 2023-12-13 03:13:04 +02:00
Ciprian Hacman 24a8bc39d5 aws: Always add KMS permissions to control plane 2023-12-13 02:56:23 +02:00
Peter Rifel 5ce66a9d28
Upgrade Karpenter to v0.31.3 2023-12-07 19:12:06 -06:00
Kubernetes Prow Robot a4bd641630
Merge pull request #16050 from sl1pm4t/gcp-sa-issuer
gce: Add support for publishing Service Account Issuer documents to GCS
2023-12-03 01:41:43 +01:00
Kubernetes Prow Robot 7c17b16a96
Merge pull request #16099 from spotinst/feat/add_multi_arch_base127_rebase
Spotinst: Feature/add multi arch in VNG and resource tag specification
2023-11-23 15:59:58 +01:00
Peter Rifel 386352ea17
Upgrade AWS EBS CSI Driver to v1.25.0 2023-11-20 22:35:27 -06:00
AkiraFukushima 91d3e89313
Replace * in IAM tags when IRSA namespace has wildcard 2023-11-20 21:48:10 +09:00
yehielnetapp af19ad5664 add feature base 2023-11-12 14:19:37 +02:00
yehielnetapp 00fc4e78e8 add Label Resource Tag Specification Volumes 2023-11-12 14:19:15 +02:00
Ciprian Hacman 8916d1e547
Release 1.29.0-alpha.2 (#16095) 2023-11-11 13:29:12 +01:00
upodroid ecf212d736 add --node-instance-group flag to ginkgo 2023-10-26 23:08:18 +01:00
Kubernetes Prow Robot 165cbd5333
Merge pull request #15705 from zadjadr/feature/cilium-14
Bump to Cilium 1.14
2023-10-25 19:54:22 +02:00
shapirus dd665fbe1e Support setting cluster-autoscaler's skip-nodes-with-custom-controller-pods parameter 2023-10-25 14:03:57 +03:00
zadjadr 30aa24f6de
Update to Cilium 1.14.3 2023-10-24 16:59:21 +02:00
zadjadr 4dfaba5242
Bump Cilium to v1.14.2 2023-10-24 16:55:37 +02:00
Matt Morrison 811f7d0420
Push issuer documents to GCS 2023-10-24 07:57:21 +13:00
Ciprian Hacman ab05ebb28f Update containerd to v1.7.7 2023-10-22 13:45:12 +03:00
Matt Morrison 0be24991da
Add cloud-platform GCP VM scope 2023-10-11 19:59:25 +13:00
Ciprian Hacman 6dd31d9680 aws: Attach security group to NLBs for kops-controller 2023-10-08 09:16:35 +03:00
Kubernetes Prow Robot d2b789da07
Merge pull request #15993 from johngmyers/nlb-sg
aws: Attach security groups to NLBs
2023-10-07 10:57:01 +02:00
John Gardiner Myers 9f40d59545 Improve removal of orphaned security group rules 2023-10-06 22:33:31 -07:00
John Gardiner Myers 2fbc7cf979 aws: Attach security groups to NLBs 2023-10-06 22:33:31 -07:00
Kubernetes Prow Robot 24f23543b4
Merge pull request #15972 from borg-land/bump-gcp-ccm
Bump GCP CCM again
2023-10-07 03:41:20 +02:00
upodroid e08472ddc5 bump cloud-provider-gcp to latest build 2023-10-06 17:52:23 +01:00
Ciprian Hacman f26874c37e aws: Don't add dependency on additional CIDR for shared VPC 2023-10-03 07:24:12 +03:00
Mia-Cross e12f3dc07b
scaleway: terraform support (#15892)
* tasks dependencies

* FindAddresses should proceed even if LBID is empty

* refacto instance: handle several instances in IG + volumeSize in model

* refacto lb_backend: set servers' IPs in backend task rather than instance

* dns changes for tf support

* render Scaleway s3 objects + add zone to outputs

* add terraform support to documentation

* new instance unique name should be given according to actual instances names

* avoid untimely changes in tf + tag instance IPs to avoid orphaned IPs at cluster deletion

* update integration tests

* review comments

* add IPs to the resources to be deleted with the cluster

* add task + model for DNS record
2023-09-29 04:22:42 -07:00
upodroid d630f9c520 add missing rbac roles and don't run gkenetparamset controller 2023-09-28 12:06:52 +01:00
upodroid de0c99b192 bump gcp ccm image and dump more resources 2023-09-27 15:04:51 +01:00
Ciprian Hacman 626213c2c1 hack/update-expected.sh 2023-09-25 18:21:49 +02:00
Ciprian Hacman b5aedcf73b Update etcd-manager to v3.0.20230925 2023-09-25 18:17:44 +02:00
Ciprian Hacman dbe05d8895 Update Karpenter to v0.30.0 2023-09-24 01:53:10 +02:00
Kubernetes Prow Robot d82d574dbe
Merge pull request #15955 from justinsb/gce_network_tags_work_with_ipv6
gce ipv6: we can use network tags with ipv6 addresses
2023-09-23 12:52:55 -07:00
justinsb 4557f9b655 gce ipv6: we can use network tags with ipv6 addresses
These work with IPv6, and this means we don't need to set up the (more
fragile) CIDR based rules.
2023-09-23 08:39:30 -04:00
Jun Mukai 0573e6d39e Fix minor typos for karpenter setup.
`on-demand` is the right string to indicate OnDemand in Karpenter.
See: https://github.com/aws/karpenter-core/blob/main/pkg/apis/v1alpha5/labels.go#L30
As the result it does not fall back to ondemand instances.

Also add `ec2:DescribeImages` to karpenter IAM policies -- it's
noted in https://karpenter.sh/docs/getting-started/migrating-from-cas/#create-iam-roles
(the list also has DeleteLaunchTemplates but I don't think this
is necessary for kOps).
2023-09-20 09:57:46 -07:00
Dan Ports ae1584c6f0 Add Cognito permissions for AWS LBC. 2023-09-14 12:15:30 -04:00
Zadjad Rezai 592e84d042 Populate ingress spec values only when needed
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>

fmt
2023-09-10 09:05:51 +02:00
zadjadr 61d036933e hardcode ingress secrets namespace & lb mode 2023-09-10 08:57:04 +02:00
zadjadr 4807f2c0c6 Implement Cilium Ingress 2023-09-10 08:57:03 +02:00
John Gardiner Myers 9ae4e967d1
Release 1.29.0-alpha.1 (#15889) 2023-09-07 22:00:13 -07:00
Ciprian Hacman 120c0b65aa hack/update-expected.sh 2023-09-05 12:34:20 +03:00