John Gardiner Myers
60ae29c93c
Refactor EncryptionConfig
2021-06-27 08:45:05 -07:00
Kubernetes Prow Robot
22c11c10f1
Merge pull request #11848 from johngmyers/cilium-etcd-client
...
Refactor etcd-client-cilium secrets
2021-06-27 04:01:24 -07:00
Ciprian Hacman
7969f57d07
Address review comments
2021-06-26 21:27:00 +03:00
Ciprian Hacman
7bc629b683
Use DualStack API NLB for IPv6
2021-06-26 19:16:46 +03:00
John Gardiner Myers
91fff31697
Control plane nodes need the etcd-clients-ca-cilium keypair
2021-06-26 00:04:52 -07:00
John Gardiner Myers
2faf28379a
Refactor etcd-client-cilium secrets
2021-06-25 23:57:23 -07:00
John Gardiner Myers
1752f0f4db
Move most of nodeup.Config out of userdata
2021-06-25 22:25:49 -07:00
Ciprian Hacman
580129ce00
Run hack/update-expected.sh
2021-06-25 19:25:01 +03:00
Ciprian Hacman
2f3bad686a
Remove version from addons
2021-06-25 19:25:01 +03:00
Kubernetes Prow Robot
89ad2bc453
Merge pull request #11810 from hakman/ipv6_disable_calico_awssrcdstcheck
...
Enable cross-subnet mode with Calico by default
2021-06-25 01:08:45 -07:00
Kubernetes Prow Robot
830dbab873
Merge pull request #11862 from johngmyers/prune-spotinst
...
Remove obsolete Spotinst manifest
2021-06-24 22:50:45 -07:00
Kubernetes Prow Robot
21a3e80ce8
Merge pull request #11861 from johngmyers/bootstrap-simplify
...
Don't include irrelevant bootstrap addons
2021-06-24 22:12:45 -07:00
John Gardiner Myers
f50a615f8c
Remove obsolete Spotinst manifest
2021-06-24 21:21:55 -07:00
Ciprian Hacman
a12b3145ee
Enable cross-subnet mode with Calico by default
2021-06-25 07:13:20 +03:00
Kubernetes Prow Robot
87238db23e
Merge pull request #11846 from hakman/cni-0.9.1
...
Update CNI plugins to v0.9.1
2021-06-24 20:40:45 -07:00
John Gardiner Myers
a8b9aa13eb
Don't include irrelevant bootstrap addons
2021-06-24 20:34:17 -07:00
Kubernetes Prow Robot
82c050c382
Merge pull request #11816 from MoShitrit/fix-11144-aws-cni-config
...
Make aws-cni config more flexible and generalized
2021-06-23 08:12:11 -07:00
Ciprian Hacman
cc850de7a4
Update CNI plugins to v0.9.1
2021-06-23 08:08:01 +03:00
Kubernetes Prow Robot
d5119c0338
Merge pull request #11833 from johngmyers/update-on-primary-change
...
Mark nodes NeedsUpdate when keys they use change
2021-06-22 08:11:58 -07:00
Moshe Shitrit
6dee0ad09e
Comment-out hardcoded default values and add the overriden ones as template functions for ease of customization
...
Update auto-generated files
2021-06-22 12:26:28 +03:00
Ciprian Hacman
d8b03da8ae
Set priority class for AWS CCM addon
2021-06-22 06:32:53 +03:00
John Gardiner Myers
a83bf7b20f
Mark nodes NeedsUpdate when keys they use change
2021-06-21 19:37:23 -07:00
Kubernetes Prow Robot
17c2edc3a1
Merge pull request #11811 from olemarkus/ebs-bump
...
Add back createvolume to master + bump ebs driver
2021-06-21 02:19:03 -07:00
Kubernetes Prow Robot
eb7ba5e943
Merge pull request #9229 from johngmyers/version-fullcluster
...
Put versioned API of cluster into state store
2021-06-21 01:32:52 -07:00
Ole Markus With
b3f274e140
Apply permissions to master role when irsa is not used
2021-06-21 08:56:11 +02:00
Ciprian Hacman
f0955ad9d2
Set EnableExternalCloudController to true by default
2021-06-21 06:37:43 +02:00
Ciprian Hacman
65d21ee463
Pre-pull container images from list of desired prefixes
2021-06-20 23:01:52 +02:00
John Gardiner Myers
0dee785ebf
Pass multiple CA certs to kops-controller client
2021-06-19 10:50:53 -07:00
Ole Markus With
507402e315
Fail early if policy size is too large
...
This will then also be caught by integration tests
2021-06-19 10:04:11 +02:00
Kubernetes Prow Robot
5582e27adb
Merge pull request #11805 from MoShitrit/aws-cni-1.8.0
...
Upgrade AWS CNI to latest release 1.8.0
2021-06-18 11:04:06 -07:00
Moshe Shitrit
da35c2a6d6
update-expected after aws-cni version bump
2021-06-18 18:48:09 +03:00
Kubernetes Prow Robot
135cdf3461
Merge pull request #11789 from johngmyers/seed-rng
...
Seed the random number generator on AWS
2021-06-18 08:48:06 -07:00
Ole Markus With
33a7de60a7
Enable IRSA for EBS CSI Driver
2021-06-18 08:05:59 +02:00
John Gardiner Myers
42bf3ee85b
Seed the random number generator on AWS
2021-06-17 22:59:43 -07:00
Kubernetes Prow Robot
7ec956dd00
Merge pull request #11748 from olemarkus/irsa-cas
...
Enable ability to use IRSA for cluster autoscaler
2021-06-17 21:00:05 -07:00
Kubernetes Prow Robot
559b57ea4c
Merge pull request #11381 from dntosas/addons-add-npd
...
[addons] Introduce NodeProblemDetector
2021-06-17 00:58:19 -07:00
John Gardiner Myers
53695fc183
Put versioned API of cluster into state store
2021-06-16 19:33:46 -07:00
dntosas
20124d3ba9
[addons] Introduce NodeProblemDetector
...
Node Problem Detector aims to make various node problems visible to
the upstream layers in the cluster management stack. It is a daemon
that runs on each node, detects node problems and reports them to apiserver
so to avoid scheduling new pods on bad nodes and also easily identify
which are the problems on underlying nodes.
Project Home: https://github.com/kubernetes/node-problem-detector
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 21:00:22 +03:00
Ole Markus With
6e8e027aff
Enable IRSA for Cluster Autoscaler
2021-06-16 18:03:11 +02:00
Kubernetes Prow Robot
8d91f868b1
Merge pull request #11780 from olemarkus/bump-cas-addon-version
...
Bump the cas addon version.
2021-06-16 04:13:58 -07:00
Ole Markus With
03ee36832d
Bump the cas addon version.
...
Between kOps 1.19 and 1.20, the version went from 1.19.1 to 1.19.0, which prevents any further changes from being applied to the cluster. Bumping to 1.19.2 so that channels can apply again
2021-06-16 12:32:39 +02:00
Kubernetes Prow Robot
84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
...
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
dntosas
7bf65ff7ef
[cni/cilium] Add support for additional config options
...
In this commit, we enable users define their setup with following
additional fields:
- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy
Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.
Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Kubernetes Prow Robot
caf41e899f
Merge pull request #11772 from johngmyers/smaller-podcidr
...
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 22:29:59 -07:00
Kubernetes Prow Robot
847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig
...
Set containerd config on nodeup.Config instead of clusterspec
2021-06-15 15:13:43 -07:00
Kubernetes Prow Robot
b0b1ae1ea7
Merge pull request #11771 from olemarkus/fix-default-sc
...
fix enable default SC when EBS driver is not installed
2021-06-15 14:29:43 -07:00
John Gardiner Myers
e9317551f3
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 13:31:49 -07:00
Ole Markus With
0798553565
fix enable default SC when EBS driver is not installed
2021-06-15 22:08:59 +02:00
Eric Bailey
f58482c584
Update populate_instancegroup_spec.go
...
fix typo: APIServrNodes -> APIServerNodes
2021-06-15 13:59:35 -05:00
Ole Markus With
e7fa3fa82c
Set containerd config on nodeup.Config instead of clusterspec
...
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)
Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
2021-06-15 11:08:22 +02:00