Commit Graph

589 Commits

Author SHA1 Message Date
John Gardiner Myers 7cb4fbe91e Never masquerade IPv6 with Cilium 2021-10-27 23:40:02 -07:00
John Gardiner Myers fdc128fda4 Remove vestigial Cilium ContainerRuntimeLabels code 2021-10-26 16:10:21 -07:00
Kubernetes Prow Robot f8ba8b11f7
Merge pull request #12437 from olemarkus/cas-delay
Make it possible to set CAS max-node-provision-time
2021-10-22 09:34:38 -07:00
Ole Markus With 11e68308d1 Disable CNP status updates by default 2021-10-20 14:01:48 +02:00
Ole Markus With 258fd4f9d9 Make it possible to set CAS max-node-provision-time 2021-10-20 13:53:37 +02:00
Peter Rifel 99c0778106
Upgrade EBS CSI driver to v1.4.0 2021-10-12 14:44:02 -07:00
Ciprian Hacman efe21a8d1b Run hack/update-expected.sh 2021-10-07 13:25:37 +03:00
Ciprian Hacman 78f136705e Update etcd-manager to 3.0.20211007 2021-10-07 13:25:37 +03:00
Ciprian Hacman 4c8f887547 Update Docker to v20.10.9 2021-10-04 22:25:15 +03:00
Ciprian Hacman af861a8e61 Update containerd to v1.4.11 2021-10-04 20:20:29 +03:00
John Gardiner Myers 3a346cdc37 Remove unnecessary code 2021-10-02 21:46:17 -07:00
John Gardiner Myers 0fd4dca30e Remove dead code 2021-10-02 20:58:55 -07:00
Ole Markus With 8eef72d8e8 Bump CAS images 2021-10-02 09:13:22 +02:00
Ciprian Hacman 1ddc11f0a6 Update containerd to v1.4.10 2021-10-02 07:03:59 +03:00
Peter Rifel 88ddff3baf
Use separate cloud.config files for in-tree vs out-of-tree components 2021-09-30 09:20:33 -05:00
Kubernetes Prow Robot ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Reilly Brogan 9c6bf83c93 Update Cilium to 1.10.4
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4)
2021-09-23 13:08:57 -05:00
Peter Rifel ca044455a3
Remove critical-pod scheduler annotation.
This is no longer recognized in all supported k8s versions (1.16+)

ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
justinsb 345f3d85f1 Fix controller defaults for both bootstrap tokens and ipv6
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Ole Markus With dc4c559d41 Set some needed defaults for cloud ipam 2021-09-16 21:11:09 +02:00
Ole Markus With 384b9796f7 Don't set cluster ip if we use cloud ipam 2021-09-16 19:26:48 +02:00
Kubernetes Prow Robot 3fd7b446c0
Merge pull request #12305 from hakman/node_ip_families
Make AWS CCM NodeIPFamilies configurable
2021-09-12 06:26:14 -07:00
Kubernetes Prow Robot 2e3ca721a5
Merge pull request #12291 from hakman/aws-ccm-1.22.0-alpha.0
Default to latest staging image for AWS CCM
2021-09-12 06:26:07 -07:00
Kubernetes Prow Robot 1b431b4c9c
Merge pull request #11628 from olemarkus/gpu-runtime
Pre-install nvidia container runtime + drivers on GPU instances
2021-09-11 13:00:07 -07:00
Ciprian Hacman cf8b11b0d4 Default to latest staging image for AWS CCM 2021-09-11 18:38:24 +03:00
Ole Markus With bba3c3abfe Bump aws ebs csi driver to 1.2.1 2021-09-11 14:15:31 +02:00
Ciprian Hacman dde08e839d Make AWS CCM NodeIPFamilies configurable 2021-09-11 13:09:08 +03:00
Peter Rifel 0d13da839a
Use MasterInternalName for gossip cluster SA issuer
This reverts a change introduced earlier in 1.22 that resulted in existing service account tokens becoming invalid after a kops upgrade.
2021-09-10 14:40:07 -04:00
Kubernetes Prow Robot 5a917b5186
Merge pull request #12104 from rifelpet/ccm-tag
Update AWS CCM tags
2021-09-09 02:54:11 -07:00
Peter Rifel 6a53285ffe
Move AWS CCM image logic into pkg/model and add 1.21 and 1.22 images 2021-09-08 20:56:39 -05:00
Simone Sciarrati 6773fdf495 option to omit --cluster-cidr from kubeproxy config 2021-09-08 14:46:06 +02:00
Ole Markus With f5fed2a08d Move nvidia config under containerd 2021-09-05 20:28:07 +02:00
Ole Markus With 2d013e460c Install nvidia container runtime 2021-09-05 20:09:04 +02:00
Ole Markus With c390d45f76 Set ipv6 nameservers on aws
AWS now provides ipv6 DNS server endpoint at a fixed address (rather than ipv4, which depends on the VPC CIDR block). This isn't provided in dhcp, and anyways we want to ensure we use this endpoint in ipv6 mode and not have ipv4 in the mix.
2021-09-03 09:47:37 +02:00
Kubernetes Prow Robot c7eb08c76f
Merge pull request #12193 from olemarkus/protect-kernel-defaults
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-09-02 04:42:09 -07:00
dntosas f558f2441a
[addons/nodelocaldns] Bump image to latest stable v1.20.0
As per
 3b17e06879,
 node-local-dns addon is now builded with latest coreDNS base v1.8 and
 that brings great consistency between cache and upstream servers in a
 manner of configuration, metrics name convention, etc.

 So in this commit, we bump node-local-dns image to latest v1.20.0 which
 is build upon latest coreDNS and also add support for overriding this
 field.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-31 14:07:19 +03:00
John Gardiner Myers be8933b577 Remove code for unsupported features 2021-08-28 13:49:55 -07:00
John Gardiner Myers f041bdafdc More kops 1.23 updates 2021-08-28 11:54:39 -07:00
John Gardiner Myers 1ea4168cab Release 1.23.0-alpha.1 2021-08-27 21:12:45 -07:00
Ole Markus With b3982e1033 Apply suggestions from code review
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-08-27 06:45:50 +02:00
Ole Markus With 0152c23c1e Remove externaldns feature flag 2021-08-27 06:30:01 +02:00
Ole Markus With 41c3ff2aac Make external dns provider configurable 2021-08-27 06:28:02 +02:00
Ole Markus With 4ef0172ee9 Enable protect-kernel-defaults by default and set the correct sysctls in nodeup 2021-08-23 11:48:20 +02:00
Amit Prasad 48fa73f3bb Add option in Cluster Autoscaler AddOn for AWS EC2 Static instance list 2021-08-21 22:44:31 +05:30
Ole Markus With 83d818705e Don't set encryption type if encryption is disabled 2021-08-16 14:08:59 +02:00
Ole Markus With 7534890b3a Use enum for cilium encryption types 2021-08-16 14:08:59 +02:00
dntosas 0e8d189aee [cilium] Add support for encryption via WireGuard
In this commit, we enable users to choose WireGuard as their prefered
encryption type, leveraging this new feature from Cilium.

Ref: https://cilium.io/blog/2021/05/20/cilium-110#wireguard

Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-16 14:08:59 +02:00
Ole Markus With caf46fef6a Bump AWS CSI Driver to 1.2.0 2021-08-13 11:14:05 +02:00
Ole Markus With 133eb1f7ba Bump cilium to 1.10.3 2021-08-12 21:12:25 +02:00
Ole Markus With 4e589431d5 Bump CAS for 1.22 2021-08-11 09:55:03 +02:00