John Gardiner Myers
7cb4fbe91e
Never masquerade IPv6 with Cilium
2021-10-27 23:40:02 -07:00
John Gardiner Myers
fdc128fda4
Remove vestigial Cilium ContainerRuntimeLabels code
2021-10-26 16:10:21 -07:00
Kubernetes Prow Robot
f8ba8b11f7
Merge pull request #12437 from olemarkus/cas-delay
...
Make it possible to set CAS max-node-provision-time
2021-10-22 09:34:38 -07:00
Ole Markus With
11e68308d1
Disable CNP status updates by default
2021-10-20 14:01:48 +02:00
Ole Markus With
258fd4f9d9
Make it possible to set CAS max-node-provision-time
2021-10-20 13:53:37 +02:00
Peter Rifel
99c0778106
Upgrade EBS CSI driver to v1.4.0
2021-10-12 14:44:02 -07:00
Ciprian Hacman
efe21a8d1b
Run hack/update-expected.sh
2021-10-07 13:25:37 +03:00
Ciprian Hacman
78f136705e
Update etcd-manager to 3.0.20211007
2021-10-07 13:25:37 +03:00
Ciprian Hacman
4c8f887547
Update Docker to v20.10.9
2021-10-04 22:25:15 +03:00
Ciprian Hacman
af861a8e61
Update containerd to v1.4.11
2021-10-04 20:20:29 +03:00
John Gardiner Myers
3a346cdc37
Remove unnecessary code
2021-10-02 21:46:17 -07:00
John Gardiner Myers
0fd4dca30e
Remove dead code
2021-10-02 20:58:55 -07:00
Ole Markus With
8eef72d8e8
Bump CAS images
2021-10-02 09:13:22 +02:00
Ciprian Hacman
1ddc11f0a6
Update containerd to v1.4.10
2021-10-02 07:03:59 +03:00
Peter Rifel
88ddff3baf
Use separate cloud.config files for in-tree vs out-of-tree components
2021-09-30 09:20:33 -05:00
Kubernetes Prow Robot
ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
...
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Reilly Brogan
9c6bf83c93
Update Cilium to 1.10.4
...
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4 )
2021-09-23 13:08:57 -05:00
Peter Rifel
ca044455a3
Remove critical-pod scheduler annotation.
...
This is no longer recognized in all supported k8s versions (1.16+)
ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
justinsb
345f3d85f1
Fix controller defaults for both bootstrap tokens and ipv6
...
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Ole Markus With
dc4c559d41
Set some needed defaults for cloud ipam
2021-09-16 21:11:09 +02:00
Ole Markus With
384b9796f7
Don't set cluster ip if we use cloud ipam
2021-09-16 19:26:48 +02:00
Kubernetes Prow Robot
3fd7b446c0
Merge pull request #12305 from hakman/node_ip_families
...
Make AWS CCM NodeIPFamilies configurable
2021-09-12 06:26:14 -07:00
Kubernetes Prow Robot
2e3ca721a5
Merge pull request #12291 from hakman/aws-ccm-1.22.0-alpha.0
...
Default to latest staging image for AWS CCM
2021-09-12 06:26:07 -07:00
Kubernetes Prow Robot
1b431b4c9c
Merge pull request #11628 from olemarkus/gpu-runtime
...
Pre-install nvidia container runtime + drivers on GPU instances
2021-09-11 13:00:07 -07:00
Ciprian Hacman
cf8b11b0d4
Default to latest staging image for AWS CCM
2021-09-11 18:38:24 +03:00
Ole Markus With
bba3c3abfe
Bump aws ebs csi driver to 1.2.1
2021-09-11 14:15:31 +02:00
Ciprian Hacman
dde08e839d
Make AWS CCM NodeIPFamilies configurable
2021-09-11 13:09:08 +03:00
Peter Rifel
0d13da839a
Use MasterInternalName for gossip cluster SA issuer
...
This reverts a change introduced earlier in 1.22 that resulted in existing service account tokens becoming invalid after a kops upgrade.
2021-09-10 14:40:07 -04:00
Kubernetes Prow Robot
5a917b5186
Merge pull request #12104 from rifelpet/ccm-tag
...
Update AWS CCM tags
2021-09-09 02:54:11 -07:00
Peter Rifel
6a53285ffe
Move AWS CCM image logic into pkg/model and add 1.21 and 1.22 images
2021-09-08 20:56:39 -05:00
Simone Sciarrati
6773fdf495
option to omit --cluster-cidr from kubeproxy config
2021-09-08 14:46:06 +02:00
Ole Markus With
f5fed2a08d
Move nvidia config under containerd
2021-09-05 20:28:07 +02:00
Ole Markus With
2d013e460c
Install nvidia container runtime
2021-09-05 20:09:04 +02:00
Ole Markus With
c390d45f76
Set ipv6 nameservers on aws
...
AWS now provides ipv6 DNS server endpoint at a fixed address (rather than ipv4, which depends on the VPC CIDR block). This isn't provided in dhcp, and anyways we want to ensure we use this endpoint in ipv6 mode and not have ipv4 in the mix.
2021-09-03 09:47:37 +02:00
Kubernetes Prow Robot
c7eb08c76f
Merge pull request #12193 from olemarkus/protect-kernel-defaults
...
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-09-02 04:42:09 -07:00
dntosas
f558f2441a
[addons/nodelocaldns] Bump image to latest stable v1.20.0
...
As per
3b17e06879 ,
node-local-dns addon is now builded with latest coreDNS base v1.8 and
that brings great consistency between cache and upstream servers in a
manner of configuration, metrics name convention, etc.
So in this commit, we bump node-local-dns image to latest v1.20.0 which
is build upon latest coreDNS and also add support for overriding this
field.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-31 14:07:19 +03:00
John Gardiner Myers
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
John Gardiner Myers
f041bdafdc
More kops 1.23 updates
2021-08-28 11:54:39 -07:00
John Gardiner Myers
1ea4168cab
Release 1.23.0-alpha.1
2021-08-27 21:12:45 -07:00
Ole Markus With
b3982e1033
Apply suggestions from code review
...
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-08-27 06:45:50 +02:00
Ole Markus With
0152c23c1e
Remove externaldns feature flag
2021-08-27 06:30:01 +02:00
Ole Markus With
41c3ff2aac
Make external dns provider configurable
2021-08-27 06:28:02 +02:00
Ole Markus With
4ef0172ee9
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-08-23 11:48:20 +02:00
Amit Prasad
48fa73f3bb
Add option in Cluster Autoscaler AddOn for AWS EC2 Static instance list
2021-08-21 22:44:31 +05:30
Ole Markus With
83d818705e
Don't set encryption type if encryption is disabled
2021-08-16 14:08:59 +02:00
Ole Markus With
7534890b3a
Use enum for cilium encryption types
2021-08-16 14:08:59 +02:00
dntosas
0e8d189aee
[cilium] Add support for encryption via WireGuard
...
In this commit, we enable users to choose WireGuard as their prefered
encryption type, leveraging this new feature from Cilium.
Ref: https://cilium.io/blog/2021/05/20/cilium-110#wireguard
Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-16 14:08:59 +02:00
Ole Markus With
caf46fef6a
Bump AWS CSI Driver to 1.2.0
2021-08-13 11:14:05 +02:00
Ole Markus With
133eb1f7ba
Bump cilium to 1.10.3
2021-08-12 21:12:25 +02:00
Ole Markus With
4e589431d5
Bump CAS for 1.22
2021-08-11 09:55:03 +02:00