Commit Graph

107 Commits

Author SHA1 Message Date
Justin SB 786423f617 Expose JWKS via a feature-flag
When the PublicJWKS feature-flag is set, we expose the apiserver JWKS
document publicly (including enabling anonymous access).  This is a
stepping stone to a more hardened configuration where we copy the JWKS
document to S3/GCS/etc.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 10:15:11 -04:00
ozdanborne 6ae4337249 remove nodeAffinity from typha 2020-08-27 12:59:08 -04:00
MoShitrit db0111acfe Upgrade AWS VPC CNI to 1.7.1 2020-08-26 13:54:01 -04:00
Kubernetes Prow Robot b00f8049b6
Merge pull request #9808 from hakman/kope-to-k8s.gcr.io
Pull images from k8s.gcr.io/kops instead of docker.io/kope
2020-08-26 07:18:05 -07:00
Kubernetes Prow Robot 154335e758
Merge pull request #9818 from hakman/kube-router-1.0.1
Update kube-router to v1.0.1
2020-08-26 01:46:03 -07:00
Ciprian Hacman fd62ca9e42 Update kube-router to v1.0.1 2020-08-26 10:53:22 +03:00
Ciprian Hacman eb218cdc1a Update Calico to v3.15.2 for k8s 1.16+ 2020-08-26 10:01:22 +03:00
Ciprian Hacman a4ff90205a Pull images from k8s.gcr.io/kops instead of docker.io/kope 2020-08-25 08:04:36 +03:00
Ciprian Hacman 2d61ab0876 Bump kops to v1.19.0-alpha.3 2020-08-23 12:07:44 +03:00
MoShitrit 9bd7a350eb Upgrade AWS VPC CNI to 1.7.0 2020-08-19 21:51:22 -04:00
Ciprian Hacman 5e8bfa06b6 Update Weave Net to v2.7.0 2020-08-19 19:42:02 +03:00
Kubernetes Prow Robot 655c424ded
Merge pull request #9755 from WarpRat/9750
Fix backwards compatibility when backend mode isn't set
2020-08-17 06:28:18 -07:00
Robert Russell 1981c56f67 Fix backwards compatibility when backend mode isnt set 2020-08-16 23:05:04 -07:00
John Gardiner Myers 00c60ddff6 Add server code to kops-controller 2020-08-15 09:46:30 -07:00
Kubernetes Prow Robot e2e5b00620
Merge pull request #9689 from secoya/master
Support for using hostPort when using kube-router
2020-08-14 01:08:22 -07:00
Anders Ingemann 905fac677b
kube-router: Enable BGP graceful restart 2020-08-14 09:29:51 +02:00
Ciprian Hacman baac575df2 Update cluster-proportional-autoscaler to v1.8.3 2020-08-13 07:44:19 +03:00
Peter Rifel 008c22d9c0
Upgrade AWS VPC CNI provider to 1.6.4
This adds support for arm64
2020-08-11 20:41:02 -05:00
Anders Ingemann 154d8220ba
Support for using hostPort when using kube-router 2020-08-11 10:52:07 +02:00
Ole Markus With 25d98796e2 Add cinder plugin 2020-08-11 10:15:12 +02:00
Robert Russell 6e5544f615 Allow configurable backend modes for aws-iam-authenticator 2020-08-06 21:37:55 -07:00
liranp 4990b71185
feat(spot): upgrade the controller (v1.0.63) 2020-08-06 15:00:04 +03:00
Ciprian Hacman 373510e01d Move cluster-proportional-autoscaler to worker nodes 2020-08-04 08:27:07 +03:00
John Gardiner Myers dc222a06b1 Upgrade cluster-proportional-autoscaler to multi-arch image 2020-08-03 21:39:41 -07:00
Ciprian Hacman 1c6597e177 Prefer nodes with "master" role for Canal Typha pods 2020-08-01 08:30:52 +03:00
Kubernetes Prow Robot 0bd76b5a76
Merge pull request #9656 from hakman/calico-3.15.1
Update Calico to v3.15.1 for k8s 1.16+
2020-07-31 06:39:11 -07:00
Ciprian Hacman 89b6d8f20a Update Calico to v3.15.1 for k8s 1.16+ 2020-07-31 15:54:53 +03:00
Justin SB c64abd4301 Release 1.19.0-alpha.2 2020-07-31 07:59:05 -04:00
Steven E. Harris 9a5e54699f Calico: upgrade "k8s-ec2-srcdst" to version v0.3.0
Upgrading the "k8s-ec2-srcdst" controller to this latest version
allows it to work correctly with the objects containing the new
"metadata.managedFields" field introduced in Kubernetes version
1.18.0.

The previous container image versions used a version of the
"client-go" library that was too old to consume these fields
correctly, causing the controller to fail repeatedly when trying to
read Node objects retrieved from the Kubernetes API server.
2020-07-29 09:30:16 -04:00
liranp a9f5ef8b9a
feat(spot): upgrade the controller (v1.0.62) 2020-07-28 11:08:45 +03:00
Ciprian Hacman 3336d7b309 Prefer nodes with "master" role for Calico Typha pods 2020-07-22 11:28:01 +03:00
Kubernetes Prow Robot 1a903f6fe8
Merge pull request #9547 from johngmyers/kuberouter-toleration
Widen the tolerations of kuberouter
2020-07-11 14:09:21 -07:00
John Gardiner Myers 53e07476df Widen the tolerations of kuberouter 2020-07-09 22:25:59 -07:00
John Gardiner Myers 9b978b5c30 Simplify rules for making bindata.go 2020-07-09 20:10:04 -07:00
Kubernetes Prow Robot 04ec3ddd13
Merge pull request #8991 from rdrgmnzs/aws-authenticator-update
Add healthcheck to aws-iam-authenticator
2020-07-09 19:28:35 -07:00
Kubernetes Prow Robot 60993a4d74
Merge pull request #9541 from rifelpet/coredns-170
Update CoreDNS to v1.7.0 - Take 2
2020-07-09 12:46:33 -07:00
Rodrigo Menezes e20f3ba0bc Add healthcheck 2020-07-09 12:23:37 -07:00
Sandeep Rajan af4d28db16
update expected test 2020-07-09 14:05:08 -05:00
Peter Rifel eae3fd8fc3
Update AWS IAM Authenticator to 0.5.1 2020-07-09 11:41:28 -05:00
Kubernetes Prow Robot 69d774c524
Merge pull request #9521 from hakman/flag_missing
Fix KubeDNS missing resourceVersion
2020-07-08 18:00:35 -07:00
Ciprian Hacman edfabfef87 Fix KubeDNS missing resourceVersion - update channel version 2020-07-08 08:36:39 +03:00
Ciprian Hacman 91074906cf Update kube-router to v1.0.0 2020-07-07 06:58:49 +03:00
Justin SB 591626af3c Release 1.19.0-alpha.1 2020-07-04 21:46:14 -04:00
Ole Markus With 263172caac Use new templates for cilium 1.8 2020-07-03 07:56:35 +02:00
Kubernetes Prow Robot 2b7c4089d6
Merge pull request #9462 from hakman/update-kube-dns
Update KubeDNS to v1.15.13
2020-06-30 13:54:07 -07:00
Ciprian Hacman b48c2c373f Update KubeDNS to v1.15.13 2020-06-30 12:10:51 +03:00
Ciprian Hacman 4ca7385081 Update Calico to v3.15.0 for k8s 1.16+ 2020-06-30 09:04:51 +03:00
liranp 8501747661
feat(spot): upgrade the controller (v1.0.61) 2020-06-28 17:02:44 +03:00
Ole Markus With 51235b2edc Deploy cilium etcd credentials if the cilium cluster exists 2020-06-27 07:11:19 +02:00
Kubernetes Prow Robot 909117a409
Merge pull request #9431 from olemarkus/arm64-fix-dns-1.13
Fix dns selectors for older k8s
2020-06-23 08:43:41 -07:00