Commit Graph

15739 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 5bfdefb43c
Merge pull request #12623 from johngmyers/cilium-ipv6-ipam
Never masquerade IPv6 with Cilium
2021-10-29 05:56:51 -07:00
Kubernetes Prow Robot 59a637e6de
Merge pull request #12538 from hierynomus/issue-12205
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
2021-10-29 03:10:51 -07:00
Jeroen van Erp 353be50f9b
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2021-10-29 10:30:44 +02:00
Kubernetes Prow Robot 26f2f9a1d8
Merge pull request #12631 from rifelpet/kubetest-more-resources
Dump more resource types from kubectl into cluster-info directory
2021-10-28 21:12:52 -07:00
Peter Rifel 422fbc571a
Dump more resource types from kubectl into cluster-info directory
`kubectl cluster-info dump` only covers some resource types. These additional resource types should help with troubleshooting prow jobs.
2021-10-28 22:31:17 -05:00
Kubernetes Prow Robot 2c3e794d37
Merge pull request #12277 from rifelpet/dns-error
Clarify the deployment responsible for API DNS in error message
2021-10-28 17:44:50 -07:00
Kubernetes Prow Robot 985c602137
Merge pull request #12626 from olemarkus/metrics-server-preferred-address
Use InternalIP as preferred kubelet address only in ivp6 mode
2021-10-28 14:53:00 -07:00
Peter Rifel 8d1d16c342
Clarify the deployment responsible for API DNS in error message 2021-10-28 11:29:38 -05:00
Kubernetes Prow Robot 69465a03cd
Merge pull request #12583 from olemarkus/server-side-apply
Use server-side apply for addons. Identify as kops
2021-10-28 08:56:27 -07:00
Kubernetes Prow Robot f61fc88ec8
Merge pull request #12624 from justinsb/up_show_plan
kubetest2: force printing of the plan on cluster creation
2021-10-28 07:20:27 -07:00
Ole Markus With ac3c22b431 Use InternalIP as preferred kubelet address only in ivp6 mode
As metrics-server rolls before the worker nodes, and worker nodes do not yet have IP SANs, upgrade breaks if InternalIP is used.
IPv6 never worked with hostnames, so there is no BC break there.
2021-10-28 16:06:40 +02:00
Kubernetes Prow Robot 4c934a4c39
Merge pull request #12625 from justinsb/kubetest2_remove_duplicate_flag
kubetest2: remove duplicate admin-access flag
2021-10-28 06:18:26 -07:00
justinsb 005d070f80 kubetest2: remove duplicate admin-access flag
It was being specified twice.
2021-10-28 08:37:00 -04:00
justinsb 6c14d0f6ef kubetest2: Add --admin flag to update 2021-10-28 08:36:05 -04:00
Kubernetes Prow Robot 211b4527d9
Merge pull request #12616 from johngmyers/ipv6-placeholder
Create placeholder DNS records of correct type for IPv6 clusters
2021-10-28 02:38:27 -07:00
John Gardiner Myers 7b5fdc7c43 Update automatically generated files 2021-10-27 23:40:02 -07:00
John Gardiner Myers 7cb4fbe91e Never masquerade IPv6 with Cilium 2021-10-27 23:40:02 -07:00
Kubernetes Prow Robot be571a435a
Merge pull request #12622 from hakman/find_ipv6_prefixes
Use instance metadata to find local IPv6 prefix
2021-10-27 22:31:03 -07:00
John Gardiner Myers 2328ec2044 Report the placeholder address that was found 2021-10-27 22:15:08 -07:00
Ciprian Hacman a3f4ed7502 Update node permissions 2021-10-28 07:47:09 +03:00
Ciprian Hacman bc8957a917 Use instance metadata to find local IPv6 prefix 2021-10-28 07:21:46 +03:00
justinsb c0b4de5feb kubetest2: force printing of the plan on cluster creation
When we run create with --yes, we skip printing the plan.  Instead, we
run a "normal" create, and then run an update.

We don't touch the terraform case, as there may be issues here and we
want to tackle those separately.
2021-10-27 23:36:30 -04:00
Kubernetes Prow Robot 489b817d2d
Merge pull request #12619 from justinsb/cleanup_long_route_names
GCE: Delete routes with long cluster names
2021-10-27 19:03:03 -07:00
justinsb 344cc3edef GCE: Delete routes with long cluster names
GCE "classic" networking sets up routes to each instance.  The route
name looks like `<cluster-name>-<uuid>`.

If the cluster name is long enough, it will be truncated.  This was
confusing the route cleanup logic.
2021-10-27 09:34:36 -04:00
Kubernetes Prow Robot 10e2f7a159
Merge pull request #12498 from justinsb/bazel-bin
Use .bazel-bin to help gopls & VSCode
2021-10-27 01:11:26 -07:00
Kubernetes Prow Robot 1b70a62d01
Merge pull request #12605 from johngmyers/ipv6-apiserver
Make dns-controller delete placeholder addresses for IPv6 cluster
2021-10-27 00:27:25 -07:00
Kubernetes Prow Robot b2a2e4e775
Merge pull request #12617 from johngmyers/ipv6-defaultss
Improve default CIDR assignments for IPv6
2021-10-26 23:37:32 -07:00
Kubernetes Prow Robot 77e6186fe4
Merge pull request #12615 from johngmyers/ciliuim-runtime-labels
Remove vestigial Cilium ContainerRuntimeLabels code
2021-10-26 23:37:25 -07:00
Kubernetes Prow Robot 228c82cb6e
Merge pull request #12571 from rifelpet/sqs-arn
Use the SQS Queue's ARN reference
2021-10-26 22:19:26 -07:00
Kubernetes Prow Robot 4c526aafbf
Merge pull request #12618 from rifelpet/gce_egress
Fix GCE router terraform reference
2021-10-26 21:17:27 -07:00
Peter Rifel 7f8e1b8182
Fix GCE router terraform reference 2021-10-26 22:37:58 -05:00
Kubernetes Prow Robot d8ea6aa819
Merge pull request #12600 from justinsb/gce_egress
GCE: support egress specification
2021-10-26 20:37:25 -07:00
John Gardiner Myers 46c1c24b48 Remove the DNSPreCreate feature flag 2021-10-26 20:13:01 -07:00
John Gardiner Myers d4cf1a80f0 Create placeholder DNS records of correct type for IPv6 clusters 2021-10-26 20:13:01 -07:00
John Gardiner Myers 07d9114fc2 Set NonMasqueradeCIDR to ::/0 for new IPv6 clusters 2021-10-26 19:22:00 -07:00
John Gardiner Myers 22bc45a358 Improve default CIDR assignments for IPv6 2021-10-26 18:40:35 -07:00
justinsb 5e4987b246 GCE: support egress specification
Empty or "nat" now defaults to creating a per-subnet NAT router for
private topologies.  "external" will assume that egress is configured
outside of kOps.
2021-10-26 21:37:03 -04:00
Kubernetes Prow Robot 3a056c288b
Merge pull request #12382 from justinsb/gce_subnet_support_refactor
GCE: improve network & subnet terraform support
2021-10-26 17:53:41 -07:00
John Gardiner Myers ad6235e428 Update automatically generated files 2021-10-26 16:12:50 -07:00
John Gardiner Myers fdc128fda4 Remove vestigial Cilium ContainerRuntimeLabels code 2021-10-26 16:10:21 -07:00
Kubernetes Prow Robot bfaee4e6ef
Merge pull request #12608 from johngmyers/external-ipv6
dns-controller: Treat IPv6 node addresses as both internal and external
2021-10-26 10:25:30 -07:00
justinsb 70eb71d336 Create bazel-bin -> .bazel-bin symlink
This should give us compatability without confusing vscode / gopls.
2021-10-26 08:04:08 -04:00
justinsb b43afba89a Replace bazel :gofmt target with direct invocation
The rule to run from the workspace is broken by the .bazel-bin change,
but bazel now supports direct invocation.
2021-10-26 08:04:08 -04:00
justinsb 05ae9aa5b4 Use .bazel-bin to help gopls & VSCode
This means that gopls will ignore the bazel-* symlinks, in particular
when using the go LSP plugin (gopls) with VSCode.

Idea from https://bitworking.org/news/2021/06/bazel-and-gopls/
2021-10-26 08:04:06 -04:00
Kubernetes Prow Robot 695fa39bfb
Merge pull request #12611 from olemarkus/kcm-nlb-permissions
Add permissions needed for KCM to provision NLBs
2021-10-26 01:23:30 -07:00
Ole Markus With 795ac25363 Add permissions needed for KCM to provision NLBs 2021-10-26 08:51:28 +02:00
John Gardiner Myers 540a1ca803 dns-controller: Treat IPv6 node addresses as both internal and external 2021-10-25 17:43:07 -07:00
justinsb caff7e36ad gce: open node->master ports for calico and cilium
We're taking the opportunity to pursue a locked-down model, but this
means we need to open ports explicitly.
2021-10-25 08:31:21 -04:00
John Gardiner Myers c58f104e4d Make dns-controller delete placeholder addresses for IPv6 cluster 2021-10-24 23:41:03 -07:00
Ciprian Hacman c0dfd17885 more feedback 2021-10-25 08:37:05 +03:00