Commit Graph

3063 Commits

Author SHA1 Message Date
John Gardiner Myers 60ae29c93c Refactor EncryptionConfig 2021-06-27 08:45:05 -07:00
Kubernetes Prow Robot 22c11c10f1
Merge pull request #11848 from johngmyers/cilium-etcd-client
Refactor etcd-client-cilium secrets
2021-06-27 04:01:24 -07:00
Ciprian Hacman 7969f57d07 Address review comments 2021-06-26 21:27:00 +03:00
Ciprian Hacman 7bc629b683 Use DualStack API NLB for IPv6 2021-06-26 19:16:46 +03:00
John Gardiner Myers 91fff31697 Control plane nodes need the etcd-clients-ca-cilium keypair 2021-06-26 00:04:52 -07:00
John Gardiner Myers 2faf28379a Refactor etcd-client-cilium secrets 2021-06-25 23:57:23 -07:00
John Gardiner Myers 1752f0f4db Move most of nodeup.Config out of userdata 2021-06-25 22:25:49 -07:00
Ciprian Hacman 580129ce00 Run hack/update-expected.sh 2021-06-25 19:25:01 +03:00
Ciprian Hacman 2f3bad686a Remove version from addons 2021-06-25 19:25:01 +03:00
Kubernetes Prow Robot 89ad2bc453
Merge pull request #11810 from hakman/ipv6_disable_calico_awssrcdstcheck
Enable cross-subnet mode with Calico by default
2021-06-25 01:08:45 -07:00
Kubernetes Prow Robot 830dbab873
Merge pull request #11862 from johngmyers/prune-spotinst
Remove obsolete Spotinst manifest
2021-06-24 22:50:45 -07:00
Kubernetes Prow Robot 21a3e80ce8
Merge pull request #11861 from johngmyers/bootstrap-simplify
Don't include irrelevant bootstrap addons
2021-06-24 22:12:45 -07:00
John Gardiner Myers f50a615f8c Remove obsolete Spotinst manifest 2021-06-24 21:21:55 -07:00
Ciprian Hacman a12b3145ee Enable cross-subnet mode with Calico by default 2021-06-25 07:13:20 +03:00
Kubernetes Prow Robot 87238db23e
Merge pull request #11846 from hakman/cni-0.9.1
Update CNI plugins to v0.9.1
2021-06-24 20:40:45 -07:00
John Gardiner Myers a8b9aa13eb Don't include irrelevant bootstrap addons 2021-06-24 20:34:17 -07:00
Kubernetes Prow Robot 82c050c382
Merge pull request #11816 from MoShitrit/fix-11144-aws-cni-config
Make aws-cni config more flexible and generalized
2021-06-23 08:12:11 -07:00
Ciprian Hacman cc850de7a4 Update CNI plugins to v0.9.1 2021-06-23 08:08:01 +03:00
Kubernetes Prow Robot d5119c0338
Merge pull request #11833 from johngmyers/update-on-primary-change
Mark nodes NeedsUpdate when keys they use change
2021-06-22 08:11:58 -07:00
Moshe Shitrit 6dee0ad09e Comment-out hardcoded default values and add the overriden ones as template functions for ease of customization
Update auto-generated files
2021-06-22 12:26:28 +03:00
Ciprian Hacman d8b03da8ae Set priority class for AWS CCM addon 2021-06-22 06:32:53 +03:00
John Gardiner Myers a83bf7b20f Mark nodes NeedsUpdate when keys they use change 2021-06-21 19:37:23 -07:00
Kubernetes Prow Robot 17c2edc3a1
Merge pull request #11811 from olemarkus/ebs-bump
Add back createvolume to master + bump ebs driver
2021-06-21 02:19:03 -07:00
Kubernetes Prow Robot eb7ba5e943
Merge pull request #9229 from johngmyers/version-fullcluster
Put versioned API of cluster into state store
2021-06-21 01:32:52 -07:00
Ole Markus With b3f274e140 Apply permissions to master role when irsa is not used 2021-06-21 08:56:11 +02:00
Ciprian Hacman f0955ad9d2 Set EnableExternalCloudController to true by default 2021-06-21 06:37:43 +02:00
Ciprian Hacman 65d21ee463 Pre-pull container images from list of desired prefixes 2021-06-20 23:01:52 +02:00
John Gardiner Myers 0dee785ebf Pass multiple CA certs to kops-controller client 2021-06-19 10:50:53 -07:00
Ole Markus With 507402e315 Fail early if policy size is too large
This will then also be caught by integration tests
2021-06-19 10:04:11 +02:00
Kubernetes Prow Robot 5582e27adb
Merge pull request #11805 from MoShitrit/aws-cni-1.8.0
Upgrade AWS CNI to latest release 1.8.0
2021-06-18 11:04:06 -07:00
Moshe Shitrit da35c2a6d6 update-expected after aws-cni version bump 2021-06-18 18:48:09 +03:00
Kubernetes Prow Robot 135cdf3461
Merge pull request #11789 from johngmyers/seed-rng
Seed the random number generator on AWS
2021-06-18 08:48:06 -07:00
Ole Markus With 33a7de60a7 Enable IRSA for EBS CSI Driver 2021-06-18 08:05:59 +02:00
John Gardiner Myers 42bf3ee85b Seed the random number generator on AWS 2021-06-17 22:59:43 -07:00
Kubernetes Prow Robot 7ec956dd00
Merge pull request #11748 from olemarkus/irsa-cas
Enable ability to use IRSA for cluster autoscaler
2021-06-17 21:00:05 -07:00
Kubernetes Prow Robot 559b57ea4c
Merge pull request #11381 from dntosas/addons-add-npd
[addons] Introduce NodeProblemDetector
2021-06-17 00:58:19 -07:00
John Gardiner Myers 53695fc183 Put versioned API of cluster into state store 2021-06-16 19:33:46 -07:00
dntosas 20124d3ba9
[addons] Introduce NodeProblemDetector
Node Problem Detector aims to make various node problems visible to
the upstream layers in the cluster management stack. It is a daemon
that runs on each node, detects node problems and reports them to apiserver
so to avoid scheduling new pods on bad nodes and also easily identify
which are the problems on underlying nodes.

Project Home: https://github.com/kubernetes/node-problem-detector

Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 21:00:22 +03:00
Ole Markus With 6e8e027aff Enable IRSA for Cluster Autoscaler 2021-06-16 18:03:11 +02:00
Kubernetes Prow Robot 8d91f868b1
Merge pull request #11780 from olemarkus/bump-cas-addon-version
Bump the cas addon version.
2021-06-16 04:13:58 -07:00
Ole Markus With 03ee36832d Bump the cas addon version.
Between kOps 1.19 and 1.20, the version went from 1.19.1 to 1.19.0, which prevents any further changes from being applied to the cluster. Bumping to 1.19.2 so that channels can apply again
2021-06-16 12:32:39 +02:00
Kubernetes Prow Robot 84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
dntosas 7bf65ff7ef
[cni/cilium] Add support for additional config options
In this commit, we enable users define their setup with following
additional fields:

- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy

Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.

Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Kubernetes Prow Robot caf41e899f
Merge pull request #11772 from johngmyers/smaller-podcidr
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 22:29:59 -07:00
Kubernetes Prow Robot 847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig
Set containerd config on nodeup.Config instead of clusterspec
2021-06-15 15:13:43 -07:00
Kubernetes Prow Robot b0b1ae1ea7
Merge pull request #11771 from olemarkus/fix-default-sc
fix enable default SC when EBS driver is not installed
2021-06-15 14:29:43 -07:00
John Gardiner Myers e9317551f3 Allocate smaller IPv6 PodCIDRs by default 2021-06-15 13:31:49 -07:00
Ole Markus With 0798553565 fix enable default SC when EBS driver is not installed 2021-06-15 22:08:59 +02:00
Eric Bailey f58482c584
Update populate_instancegroup_spec.go
fix typo: APIServrNodes -> APIServerNodes
2021-06-15 13:59:35 -05:00
Ole Markus With e7fa3fa82c Set containerd config on nodeup.Config instead of clusterspec
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)

Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
2021-06-15 11:08:22 +02:00