Commit Graph

14406 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 559b57ea4c
Merge pull request #11381 from dntosas/addons-add-npd
[addons] Introduce NodeProblemDetector
2021-06-17 00:58:19 -07:00
Kubernetes Prow Robot d35bce0ff8
Merge pull request #11764 from olemarkus/cilium-etcd-fix
Don't try to build etcd-manager secrets for cilium twice
2021-06-17 00:14:20 -07:00
Kubernetes Prow Robot 190531f65a
Merge pull request #11778 from codablock/fix-kops-export
Also set haveUserInfo=true in case --user was provided in "kops export kubecfg"
2021-06-16 23:06:20 -07:00
dntosas 20124d3ba9
[addons] Introduce NodeProblemDetector
Node Problem Detector aims to make various node problems visible to
the upstream layers in the cluster management stack. It is a daemon
that runs on each node, detects node problems and reports them to apiserver
so to avoid scheduling new pods on bad nodes and also easily identify
which are the problems on underlying nodes.

Project Home: https://github.com/kubernetes/node-problem-detector

Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 21:00:22 +03:00
Kubernetes Prow Robot 8d91f868b1
Merge pull request #11780 from olemarkus/bump-cas-addon-version
Bump the cas addon version.
2021-06-16 04:13:58 -07:00
Ole Markus With 03ee36832d Bump the cas addon version.
Between kOps 1.19 and 1.20, the version went from 1.19.1 to 1.19.0, which prevents any further changes from being applied to the cluster. Bumping to 1.19.2 so that channels can apply again
2021-06-16 12:32:39 +02:00
Kubernetes Prow Robot 84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
Alexander Block 6ae8d8cc9e Also set haveUserInfo=true in case --user was provided in "kops export kubecfg"
Without setting it to true, --user is completely ignored.
2021-06-16 09:36:47 +02:00
Kubernetes Prow Robot 9753bd5b65
Merge pull request #11777 from hakman/viper_v1.8.0
Update github.com/spf13/viper to v1.8.0
2021-06-16 00:02:00 -07:00
dntosas 7bf65ff7ef
[cni/cilium] Add support for additional config options
In this commit, we enable users define their setup with following
additional fields:

- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy

Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.

Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Ole Markus With f80b550c7a Use internal name for cilium etcd if we do not enable api server nodes 2021-06-16 08:27:26 +02:00
Ciprian Hacman 8c5484945d Update github.com/spf13/viper to v1.8.0 2021-06-16 08:12:42 +02:00
Kubernetes Prow Robot caf41e899f
Merge pull request #11772 from johngmyers/smaller-podcidr
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 22:29:59 -07:00
Kubernetes Prow Robot d565d11266
Merge pull request #11775 from johngmyers/trim-worker-iam
Trim unnecessary paths from worker node IAM
2021-06-15 21:45:59 -07:00
John Gardiner Myers 4fe25196d8 Trim unnecessary paths from worker node IAM 2021-06-15 21:03:13 -07:00
Kubernetes Prow Robot fd0fc2febc
Merge pull request #11758 from olemarkus/e2e-irsa
Make it easy to run scenarios with irsa enabled
2021-06-15 16:51:45 -07:00
Kubernetes Prow Robot 847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig
Set containerd config on nodeup.Config instead of clusterspec
2021-06-15 15:13:43 -07:00
Kubernetes Prow Robot b0b1ae1ea7
Merge pull request #11771 from olemarkus/fix-default-sc
fix enable default SC when EBS driver is not installed
2021-06-15 14:29:43 -07:00
Kubernetes Prow Robot 3358042976
Merge pull request #11769 from yurrriq/patch-2
Fix typo in populate_instancegroup_spec.go
2021-06-15 13:41:43 -07:00
John Gardiner Myers e9317551f3 Allocate smaller IPv6 PodCIDRs by default 2021-06-15 13:31:49 -07:00
Ole Markus With 0798553565 fix enable default SC when EBS driver is not installed 2021-06-15 22:08:59 +02:00
Kubernetes Prow Robot 844fb2adcd
Merge pull request #11770 from yurrriq/patch-3
Fix typo in IRSA docs
2021-06-15 12:49:44 -07:00
Eric Bailey 3389dbbb29
Update cluster_spec.md
inlinePolicy isa []*iam.Statement
2021-06-15 14:08:26 -05:00
Eric Bailey f58482c584
Update populate_instancegroup_spec.go
fix typo: APIServrNodes -> APIServerNodes
2021-06-15 13:59:35 -05:00
Ole Markus With a3cfe8d098 Don't try to build etcd-manager secrets for cilium twice 2021-06-15 12:42:11 +02:00
Ole Markus With e7fa3fa82c Set containerd config on nodeup.Config instead of clusterspec
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)

Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
2021-06-15 11:08:22 +02:00
Kubernetes Prow Robot 7a017af159
Merge pull request #11725 from johngmyers/is-ipv6
Simplify Calico IPv6 configuration
2021-06-15 01:46:00 -07:00
Kubernetes Prow Robot 5300e58f0b
Merge pull request #11762 from johngmyers/ipv6-mask
Default the NodeCIDRMaskSize appropriately for IPv6
2021-06-15 01:06:00 -07:00
Kubernetes Prow Robot 4cd3b58e37
Merge pull request #11763 from johngmyers/ipv6-access
Make the AdminAccess default inclusive of IPv6
2021-06-14 23:30:01 -07:00
Kubernetes Prow Robot 222fd4be15
Merge pull request #11761 from johngmyers/override-tweak
Adjustments to SpecOverride
2021-06-14 22:50:01 -07:00
John Gardiner Myers 9d531edb85 hack/update-expected.sh 2021-06-14 21:51:40 -07:00
John Gardiner Myers 1356818d83 Make the AdminAccess default inclusive of IPv6 2021-06-14 21:51:17 -07:00
John Gardiner Myers 2f71fb2cf4 Default the NodeCIDRMaskSize appropriately for IPv6 2021-06-14 20:43:09 -07:00
John Gardiner Myers ead0941ae8 Make SpecOverride append to slices 2021-06-14 14:01:22 -07:00
John Gardiner Myers cab389f2f5 Rename --override to --set 2021-06-14 14:01:18 -07:00
Kubernetes Prow Robot bfd0b6d9ba
Merge pull request #11745 from johngmyers/remove-option
Allow unsetting fields from the command line
2021-06-14 09:31:04 -07:00
John Gardiner Myers 76fc012f96 Allow unsetting fields from the command line 2021-06-14 08:52:32 -07:00
John Gardiner Myers 07ee0c2206 Simplify Calico IPv6 configuration 2021-06-14 08:06:10 -07:00
Kubernetes Prow Robot 0347d79a14
Merge pull request #11754 from johngmyers/ipv6-cilium
Enable IPv6 support for Cilium
2021-06-14 07:27:04 -07:00
Kubernetes Prow Robot 392b517fda
Merge pull request #11756 from johngmyers/pod-cidr
Set default ClusterCIDR through the PodCIDR
2021-06-14 02:37:04 -07:00
Ole Markus With bc5c97ea95 Make it easy to run scenarios with irsa enabled 2021-06-14 09:09:09 +02:00
Kubernetes Prow Robot 9a5259c826
Merge pull request #11753 from johngmyers/cilium-masq
Cilium: disable masquerade by default when in ENI IPAM mode
2021-06-13 23:35:04 -07:00
John Gardiner Myers 51d0697dc3 Set default ClusterCIDR through the PodCIDR 2021-06-13 22:46:32 -07:00
Kubernetes Prow Robot 8b285d8435
Merge pull request #11755 from johngmyers/download-ipv6
Don't restrict nodeup download to IPv4
2021-06-13 22:29:03 -07:00
John Gardiner Myers 74a44c2270 Don't restrict nodeup download to IPv4 2021-06-13 21:46:58 -07:00
John Gardiner Myers 0b7f6e3082 Remove dead code 2021-06-13 21:37:01 -07:00
John Gardiner Myers 3cf8234d01 Cilium: disable masquerade by default when in ENI IPAM mode 2021-06-13 21:36:56 -07:00
John Gardiner Myers c0b54d980d Enable IPv6 support for Cilium 2021-06-13 20:47:44 -07:00
Kubernetes Prow Robot b29c612b9c
Merge pull request #11629 from hakman/ipv6_experimental_flag
Add --ipv6 experimental cli flag
2021-06-13 13:29:02 -07:00
Ciprian Hacman 2a11fa7dde Add --ipv6 experimental cli flag 2021-06-13 21:48:46 +02:00