Commit Graph

9925 Commits

Author SHA1 Message Date
Kubernetes Prow Robot a3633ad294
Merge pull request #8443 from johngmyers/k8s-deprecation-note
Add Kubernetes deprecation/removal release notes
2020-02-14 10:38:17 -08:00
Kubernetes Prow Robot 721ed47e9d
Merge pull request #8555 from rifelpet/aws-iam-authenticator-scratch
Switch AWS IAM Authenticator to use non-scratch image
2020-02-13 20:10:17 -08:00
Peter Rifel cd34cf41c5 Switch AWS IAM Authenticator to use non-scratch image
The authenticator binary uses glog which requires write access to the filesystem under /tmp
On the scratch image /tmp doesnt exist which caused a crash loop:

```
time="2020-02-14T02:06:00Z" level=info msg="creating event broadcaster"
time="2020-02-14T02:06:00Z" level=info msg="setting up event handlers"
W0214 02:06:00.358119       1 client_config.go:539] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
log: exiting because of error: log: cannot create log: open /tmp/aws-iam-authenticator.ip-X-X-X-X.aws-iam-authenticator.log.WARNING.20200214-020600.1: no such file or directory
```

Switching to debian-stretch fixed the issue although it could really be any of the other images in the release [0]

[0] https://github.com/kubernetes-sigs/aws-iam-authenticator/releases/tag/v0.5.0
2020-02-13 20:29:49 -06:00
Kubernetes Prow Robot f68a223596
Merge pull request #8547 from rifelpet/release-tag
Only create git tags with the v prefix
2020-02-13 13:16:35 -08:00
Kubernetes Prow Robot 4ad5dd7e83
Merge pull request #8548 from rifelpet/amazon-vpc-cni-1.6.0-iam
Update IAM permissions for amazon-vpc-cni-k8s 1.6.0
2020-02-13 10:20:35 -08:00
Kubernetes Prow Robot 91867ce4b5
Merge pull request #8220 from olemarkus/cilium-nodeport
Cilium nodeport
2020-02-13 09:18:36 -08:00
Peter Rifel bf42bb0e43 Update IAM permissions for amazon-vpc-cni-k8s 1.6.0 2020-02-13 11:10:38 -06:00
Peter Rifel 56cf8888c3 Only create git tags with the v prefix
The tagging of both formats was cherry-picked back to 1.15 and will be used in 1.16.0 stable.

I think having all 1.16.X and 1.17.X releases tagged with both formats is long enough, so I'm removing the non-prefixed tag for 1.18.0
2020-02-13 10:35:45 -06:00
Kubernetes Prow Robot cfe95a0efd
Merge pull request #8538 from hakman/amazon-vpc-cni-k8s-1.6.0
Update amazon-vpc-cni-k8s to v1.6.0
2020-02-13 05:22:34 -08:00
Dao Cong Tien 2c765eb835 Add unit test for pkg/nodelabels/builder.go
Signed-off-by: Dao Cong Tien <tiendc@vn.fujitsu.com>
2020-02-13 19:58:49 +07:00
Ciprian Hacman d5f96d7204 Update amazon-vpc-cni-k8s to v1.6.0 2020-02-13 10:32:51 +02:00
Kubernetes Prow Robot 46bfedfda5
Merge pull request #8535 from rifelpet/kops-controller-events
Add events RBAC permissions to kops-controller
2020-02-12 21:06:34 -08:00
Peter Rifel 5ea96fa6a0 Add events RBAC permissions to kops-controller
I noticed in our new kops-controller logs that there is a permission denied error at startup.

Apparently part of the leader election process involves creating and watching for events off of the kops-controller-leader configmap.
This will add the necessary permissions to silence this error.

https://storage.googleapis.com/kubernetes-jenkins/logs/ci-kubernetes-e2e-kops-aws/1227728236914413570/artifacts/ip-172-20-46-137.ap-northeast-2.compute.internal/kops-controller-6k9sz.log
2020-02-12 18:34:38 -06:00
liranp fb54cbfd1a
chore(spotinst): add OWNERS file to spotinst specific packages 2020-02-12 18:08:24 +02:00
Ole Markus With 5437f6c090 Small fix in the validation logic 2020-02-12 14:30:09 +01:00
Kubernetes Prow Robot cbee4dccba
Merge pull request #8532 from idealhack/channels/202002
channels: bump k8s versions after feb. patch releases
2020-02-12 05:02:50 -08:00
Yang Li d8166049aa channels: bump k8s versions after feb. patch releases 2020-02-12 17:57:28 +08:00
Kubernetes Prow Robot 548caf03bc
Merge pull request #8475 from tiendc/unit_test_pkg_jsonutils
Add unit test for pkg/jsonutils/streamwriter.go
2020-02-11 06:10:01 -08:00
Ole Markus With eee672f293 Fixes some issues with running Cilium nodeport
* Cilium need to talk to the internal cluster API on  public IPs instead of the internal service
* Tell people explicitly they have to disable kubeproxy so it won't conflict with nodeport
2020-02-11 10:14:59 +01:00
Kubernetes Prow Robot 5a163b237b
Merge pull request #8524 from justinsb/relnotes_1_17_0_alpha_4
Release notes for 1.17.0-alpha.4
2020-02-10 22:02:00 -08:00
Justin SB d42273c448
Release notes for 1.17.0-alpha.4 2020-02-11 00:10:12 -05:00
Dao Cong Tien ba68560229 Add unit test for pkg/jsonutils/streamwriter.go
Signed-off-by: Dao Cong Tien <tiendc@vn.fujitsu.com>
2020-02-11 11:42:42 +07:00
Kubernetes Prow Robot 4606e8ee79
Merge pull request #8423 from rifelpet/aws-authenticator-update
Update AWS IAM Authenticator to 0.5.0
2020-02-10 20:12:00 -08:00
Kubernetes Prow Robot 05de4bd401
Merge pull request #8522 from mikesplain/fix_machines_types
Fix Machine types vcpus
2020-02-10 19:32:09 -08:00
Kubernetes Prow Robot 4cea7ffe66
Merge pull request #8246 from bittopaz/ali-fix-lc
Alicloud: support modification of LaunchConfiguration
2020-02-10 19:32:01 -08:00
Kubernetes Prow Robot 0440876f31
Merge pull request #8497 from johngmyers/runasnonroot
Mark dns-controller and kops-controller as non-root
2020-02-10 18:48:00 -08:00
Kubernetes Prow Robot 3166d31da4
Merge pull request #8520 from rifelpet/cloudbuild-machinetype
Use larger machine type for cloudbuild jobs
2020-02-10 18:08:08 -08:00
Kubernetes Prow Robot d569a6dbfb
Merge pull request #8489 from olemarkus/stable-bump-feb
Bump alphas to stable
2020-02-10 18:08:00 -08:00
Mike Splain 685ca73255 Fix Machine types vcpus 2020-02-10 20:49:09 -05:00
Kubernetes Prow Robot 5c6ea40ff0
Merge pull request #8519 from justinsb/relnotes_1_16_0_beta_2
Release notes for 1.16.0-beta.2
2020-02-10 16:32:02 -08:00
Peter Rifel e506f1b356 Add support for custom environment variables to amazonvpc daemonset 2020-02-10 16:51:47 -06:00
Peter Rifel 79424e8562 Add env API field to amazonvpc 2020-02-10 16:38:09 -06:00
Peter Rifel f579824fdc Use larger machine type for cloudbuild jobs 2020-02-10 16:04:37 -06:00
Justin SB 2a611edb9e
Release notes for 1.16.0-beta.2 2020-02-10 16:22:52 -05:00
Kubernetes Prow Robot f400f74a3e
Merge pull request #8449 from johngmyers/validate-multiple
Return more errors at once during API validation
2020-02-10 09:47:54 -08:00
John Gardiner Myers 323130ebbf Merge branch 'master' into validate-multiple 2020-02-10 09:05:47 -08:00
Kubernetes Prow Robot 6deb088dab
Merge pull request #8518 from justinsb/try_to_create_tag_build
cloudbuild: Try uploading our binaries to the staging bucket also
2020-02-10 09:03:53 -08:00
Justin SB c78a04c7eb
cloudbuild: Try uploading our binaries to the staging bucket also
Adding build & upload of our binaries to the staging bucket, from the
trusted builder.
2020-02-10 11:27:45 -05:00
John Gardiner Myers 0c0e2dcf5f Add comment on initialization of kubernetesRelease 2020-02-10 08:14:17 -08:00
Kubernetes Prow Robot 6b4b003954
Merge pull request #8516 from geojaz/update_gce_lib
[vendoring] Update google libs to latest
2020-02-09 12:31:52 -08:00
eric-hole 3e36e19241 Updates googleapis to latest 2020-02-09 09:46:32 -08:00
Kubernetes Prow Robot f0dd2aeeab
Merge pull request #8514 from rifelpet/cloudbuild
Image Pushing - Remove .git dependency from get_workspace_status.sh
2020-02-08 13:21:52 -08:00
Peter Rifel d777347705 Remove .git dependency from get_workspace_status.sh
The image pushing postsubmit job [0] is one step closer to succeeding.

It currently fails because when the builder image uploads the kops directory to GCS for to be consumed by GCB, it excludes the .git directory [1].

This causes the job to fail because `make kops-controller-push` uses bazel which runs get_workspace_status.sh which aborts if the git commands fail.

The prow job doesnt contain much output but the GCB logs can be seen in GCS [2].

This PR removes the dependency on git commands.
I dont think any of the logic in the script will change because we already set VERSION [3] which is the only variable in get_workspace_status.sh that depends on git commands and is used to build and push the kops controller image.
[0] https://testgrid.k8s.io/sig-cluster-lifecycle-kops#kops-postsubmit-push-to-staging
[1] 18391d8986/images/builder/main.go (L87)
[2] gs://k8s-staging-kops-gcb/logs/log-a7dc3a24-97cd-42fe-bec3-971dc78a0e3a.txt
[3] b1276ac835/cloudbuild.yaml (L10)
2020-02-07 18:35:26 -06:00
Kubernetes Prow Robot b1276ac835
Merge pull request #8513 from justinsb/relnotes_1_15_2
Release notes for 1.15.2
2020-02-07 15:21:46 -08:00
Justin SB bc7e130006
Release notes for 1.15.2 2020-02-07 17:44:09 -05:00
Kubernetes Prow Robot 13b4e05679
Merge pull request #8461 from justinsb/use_bindmount_for_home_kubernetes_bin
Use BindMount task for /home/kubernetes/bin
2020-02-07 07:45:45 -08:00
Kubernetes Prow Robot d8a2e0b2a7
Merge pull request #8504 from hakman/containerd-1.3.3
Add support for containerd v1.3.3
2020-02-07 06:25:45 -08:00
Kubernetes Prow Robot 442ae92f70
Merge pull request #8505 from rifelpet/cloudbuild
Move cloudbuild.yaml to repo root
2020-02-07 05:43:42 -08:00
Peter Rifel b61c0ee371 Move cloudbuild.yaml to repo root
This file is used by the push-to-staging postsubmit job that builds images and pushes them to a staging repo.
When it was originally added, my theory for why the job was failing [0] is that we were only uploading the ci/postsubmit/push-to-staging directory to GCS for use in cloudbuild, when in reality we need to push the entire kops repo so it can run `make kops-controller-push`.

A while back I had updated the job to use the repo root but hadnt created the cloudbuild.yaml file there yet, so instead we've been getting a cloudbuild.yaml not found error [1].

This moves the cloudbuild.yaml into the repo root so that the current job configuration will recognize it and hopefully be able to run `make kops-controller-push` in GCB.

[0] https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/kops-postsubmit-push-to-staging/1209130004504383489
[1] https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/kops-postsubmit-push-to-staging/1213230826582446081
2020-02-07 06:04:10 -06:00
Justin SB 761cdfbd47
Use BindMount task for /home/kubernetes/bin
Without this, a reboot on COS does not remount /home/kubernetes/bin with exec permission.
2020-02-07 06:01:07 -05:00