Commit Graph

11712 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 6c5150f786
Merge pull request #9793 from hakman/root-vol-encrypt
Add flag for root volume encryption
2020-08-21 09:15:40 -07:00
Ciprian Hacman 2880e22bce Add flag for root volume encryption 2020-08-21 18:31:21 +03:00
Kubernetes Prow Robot 076df5ec84
Merge pull request #9782 from hakman/ignore-flannel-workaround
Ignore the disableTxChecksumOffloading flag for Flannel and Canal
2020-08-21 04:47:40 -07:00
Ciprian Hacman 68474f7793 Ignore the disableTxChecksumOffloading flag for Flannel and Canal 2020-08-21 07:55:25 +03:00
Kubernetes Prow Robot d617f98c07
Merge pull request #9789 from rifelpet/update-expected-cleanup
Unset more env vars in update-expected.sh
2020-08-20 10:03:23 -07:00
Peter Rifel 5052ae866a
Unset more env vars in update-expected.sh
this prevents spurious changes from being made based on the shell's env vars.

Also adding a parameter to override the package being updated, so that we dont need to test the full repo
2020-08-20 10:17:36 -05:00
Kubernetes Prow Robot 90fc25a25d
Merge pull request #9786 from MoShitrit/vpc-cni-1.7.0
Upgrade AWS VPC CNI to 1.7.0
2020-08-19 20:25:25 -07:00
MoShitrit 9bd7a350eb Upgrade AWS VPC CNI to 1.7.0 2020-08-19 21:51:22 -04:00
Kubernetes Prow Robot 899c43b23a
Merge pull request #9783 from hakman/weave-2.7.0
Update Weave Net to v2.7.0
2020-08-19 10:17:22 -07:00
Ciprian Hacman 5e8bfa06b6 Update Weave Net to v2.7.0 2020-08-19 19:42:02 +03:00
Kubernetes Prow Robot 8a81d94c7b
Merge pull request #9773 from victorfrancax1/7286
Adding support for permission boundaries for AWS IAM Roles
2020-08-19 06:51:11 -07:00
Kubernetes Prow Robot ba6fb0e5eb
Merge pull request #9780 from johngmyers/kubecfg-user
Put userid in kubecfg cert CommonName
2020-08-19 06:11:11 -07:00
Kubernetes Prow Robot 5b7d1d7c93
Merge pull request #9781 from johngmyers/update-notes
Add release note about cert expiration
2020-08-19 04:51:11 -07:00
Kubernetes Prow Robot fc198ff6f1
Merge pull request #9211 from mitch000001/9086-fix-openstack-metadata
feat(openstack): propagate cloud labels to machines
2020-08-19 00:49:10 -07:00
Michael Wagner df5cc6a71b feat(openstack): propagate cloud labels to machines 2020-08-19 09:05:51 +02:00
Kubernetes Prow Robot 9be8d8fcf5
Merge pull request #8687 from Rajpratik71/enhancement/apt
Enhancement in Ubuntu or debian apt-get and CI issue fix
2020-08-18 22:57:10 -07:00
Kubernetes Prow Robot 548beeb9c9
Merge pull request #9770 from hakman/squash-rel-notes
Squash patch versions of old release notes
2020-08-18 21:49:10 -07:00
Victor Ferreira 3aaa9a7c0f feat(aws): adding support to permission boundaries for IAM Roles 2020-08-19 01:16:13 -03:00
Kubernetes Prow Robot ee366e8958
Merge pull request #9779 from johngmyers/calico-client-iam
Don't give access to calico-client key when not needed
2020-08-18 21:07:11 -07:00
John Gardiner Myers 169d3e7e5b Add release note about cert expiration 2020-08-18 18:04:13 -07:00
Kubernetes Prow Robot f1a0e0312f
Merge pull request #9777 from hakman/containerd-1.4.0
Add support for containerd v1.4.0
2020-08-18 14:45:11 -07:00
John Gardiner Myers 7ab0a63571 Put userid in kubecfg cert CommonName 2020-08-18 14:04:42 -07:00
John Gardiner Myers ba96a84926 Don't give access to calico-client key when not needed 2020-08-18 13:45:27 -07:00
Kubernetes Prow Robot af1b935ce2
Merge pull request #9778 from olemarkus/openstack-fix-noisy-env-vars
Only add OS variables if they are needed
2020-08-18 13:05:10 -07:00
Ole Markus With 94833faca5 Only add OS variables if they are needed 2020-08-18 20:58:54 +02:00
Pratik raj e9bafc6785 Some debian package manager tweaks
By default, Ubuntu or Debian based "apt" or "apt-get" system installs recommended but not suggested packages .

By passing "--no-install-recommends" option, the user lets apt-get know not to consider recommended packages as a dependency to install.

This results in smaller downloads and installation of packages .

Refer to blog at [Ubuntu Blog](https://ubuntu.com/blog/we-reduced-our-docker-images-by-60-with-no-install-recommends) .

Signed-off-by: Pratik Raj <rajpratik71@gmail.com>
2020-08-18 23:36:18 +05:30
Kubernetes Prow Robot bacd944dea
Merge pull request #9776 from johngmyers/cni-client-certs
Issue the cilium etcd client cert out of kops-controller
2020-08-18 08:13:30 -07:00
Ciprian Hacman 537ad60191 Add support for containerd v1.4.0 2020-08-18 10:04:18 +03:00
Kubernetes Prow Robot ffe3b3468d
Merge pull request #9766 from hakman/distros
Use /etc/os-release to identify the distribution
2020-08-17 22:37:30 -07:00
John Gardiner Myers 07220797b4 Issue the cilium etcd client cert out of kops-controller 2020-08-17 21:15:34 -07:00
Kubernetes Prow Robot 21a9564fd6
Merge pull request #9760 from hakman/docker-iptables
Document Docker iptables settings
2020-08-17 07:50:19 -07:00
Kubernetes Prow Robot 9ff1605ebb
Merge pull request #9772 from rifelpet/klog2
Update more klog v1 references to v2
2020-08-17 07:10:18 -07:00
Kubernetes Prow Robot 655c424ded
Merge pull request #9755 from WarpRat/9750
Fix backwards compatibility when backend mode isn't set
2020-08-17 06:28:18 -07:00
Peter Rifel bae8150e12
Update more klog v1 references to v2
I missed these in the previous PR. This removes the direct dependency on v1 entirely.
The kubernetes 1.19 upgrade will remove the indirect reference on v1.
2020-08-17 07:44:48 -05:00
Kubernetes Prow Robot ddd842255e
Merge pull request #9771 from johngmyers/refactor-node-certs
Issue more certs out of kops-controller
2020-08-17 02:34:19 -07:00
John Gardiner Myers 2d898fa645 Inline some methods 2020-08-17 00:18:00 -07:00
John Gardiner Myers d05f9a3eff Don't issue certs for features not enabled 2020-08-16 23:40:43 -07:00
John Gardiner Myers b6947ccaee Use kops-controller to issue kube-router cert 2020-08-16 23:40:38 -07:00
John Gardiner Myers 8e43c1d637 Use kops-controller to issue kube-proxy cert 2020-08-16 23:36:42 -07:00
Ciprian Hacman 83740f50db Rename Legacy to 1.4 2020-08-17 09:33:46 +03:00
Ciprian Hacman 25cd219aad Squash release notes for v1.6.x 2020-08-17 09:33:46 +03:00
Ciprian Hacman a170c280ce Squash release notes for v1.7.x 2020-08-17 09:33:46 +03:00
Ciprian Hacman ce8edaf176 Squash release notes for v1.8.x 2020-08-17 09:33:46 +03:00
Robert Russell 1981c56f67 Fix backwards compatibility when backend mode isnt set 2020-08-16 23:05:04 -07:00
Ciprian Hacman f452ebf9da Document Docker iptables settings
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-17 08:09:38 +03:00
Ciprian Hacman 0da3980865 Use /etc/os-release to identify the distribution 2020-08-17 07:25:44 +03:00
Ciprian Hacman e29b84da01 Add tests for distributions 2020-08-17 07:25:43 +03:00
Ciprian Hacman 22ec1512dc Use numbers for distribution names 2020-08-17 07:25:43 +03:00
Ciprian Hacman 3825f657cc Use const for architectures and distributions 2020-08-17 07:25:43 +03:00
Ciprian Hacman 795373a499 Remove unused function 2020-08-17 07:25:43 +03:00