Ole Markus With
ce2e877aeb
Remove bazel files from vendor
2022-04-12 13:29:03 +02:00
Ole Markus With
f8525ce6f9
Add integration test for really long cluster names
2022-03-15 20:44:26 +01:00
Jeroen van Erp
255a0322c9
Allow PrefixList for sshAccess and kubernetesApiAccess
...
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2022-02-15 14:37:28 +01:00
Ole Markus With
ea9d0de847
Handle default in templating instead of ig population
2021-12-30 09:01:43 +01:00
Ole Markus With
66e6ed0850
Delete ENIs tagged with k8s tags
2021-12-22 21:45:01 +01:00
Kubernetes Prow Robot
7ab4f43500
Merge pull request #12864 from johngmyers/rbn-subnet
...
Set Resource Based Naming on managed subnets
2021-12-19 21:03:25 -08:00
Ole Markus With
a4e609c450
Set the default LT version to the new LT version
2021-12-11 14:53:05 +01:00
John Gardiner Myers
9f9316a921
Set Resource Based Naming on managed subnets
2021-12-05 17:42:29 -08:00
Peter Rifel
fd2370c8e8
Ignore InvalidAction errors when tagging IAM Instance Profiles
2021-12-02 08:12:16 -06:00
Ciprian Hacman
ea7df00719
Run hack/update-gofmt.sh
2021-12-01 22:39:50 +02:00
John Gardiner Myers
b2e9d809b7
Support IPv6 private topology
2021-11-16 21:38:03 -08:00
Peter Rifel
5d82ce0b5f
Update cloudmock and integration test inputs to use aws-test partition
2021-10-29 23:07:30 -05:00
Peter Rifel
cedb8f813c
Use the SQS Queue's ARN reference
2021-10-20 20:47:26 -07:00
Ole Markus With
d98994686a
Use sg rule ids and tags where possible
2021-09-12 14:32:58 +02:00
Peter Rifel
60c86e1a44
Enable IMDS IPv6 endpoint when IPv6AddressCount > 0
2021-09-09 07:24:14 -05:00
John Gardiner Myers
4152667f28
Remove dead code
2021-07-14 20:05:47 -07:00
Ciprian Hacman
7bc629b683
Use DualStack API NLB for IPv6
2021-06-26 19:16:46 +03:00
John Gardiner Myers
024b3653c0
Set lifecycle on WarmPool task
2021-05-28 20:05:44 -07:00
Ciprian Hacman
cedbe1f360
Add initial support for configuring IPv6 with AWS
2021-05-19 06:21:07 +03:00
Kubernetes Prow Robot
2649cbc598
Merge pull request #10995 from haugenj/release-1.19
...
Add NTH Queue Processor Mode
2021-04-22 12:15:58 -07:00
Ole Markus With
020652e096
Add ability to enable/configure warm pool for ASG
...
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-04-20 09:02:09 +02:00
Jason Haugen
cceb9dd296
lifecycle integ test, docs, & small cleanup
2021-04-19 15:43:06 -05:00
Jason Haugen
318a116ba6
fix staticcheck
2021-04-19 15:43:05 -05:00
Jason Haugen
10df4a9a14
integ tests
2021-04-19 15:43:05 -05:00
Jason Haugen
fe78fa5fb7
run make verify
2021-04-19 15:43:05 -05:00
Jason Haugen
c8bb48ba81
fix existing tests
2021-04-19 15:43:05 -05:00
Ole Markus With
09615935fd
Make kOps CLI handle ASG warm pools
2021-04-15 11:10:23 +02:00
Peter Rifel
51cec7e556
Use "tag on create" for EIPs, NLBs, and TargetGroups
...
These are the remaining resources that support "tag on create" of which we werent taking advantage.
This allows more fine-grained IAM permissions for the kops cli.
2021-03-22 07:21:51 -05:00
Bharath Vedartham
0c0767c0c9
Remove support for launch configurations
2021-03-09 09:04:15 +02:00
Peter Rifel
2ebd448602
Add integration test for transit gateway support
2021-02-28 13:02:11 -06:00
Kubernetes Prow Robot
1b42286cfe
Merge pull request #10832 from rifelpet/aws-sdk
...
Add Tagging to Instance Profiles and OIDC Providers
2021-02-24 05:40:50 -08:00
Timothy Clarke
1577b0a54b
Adding Elastic IP Allocations to NLB API
2021-02-18 12:27:28 +00:00
Peter Rifel
d52fd9f76c
Add tagging support to AWS Instance Profiles and OIDC Providers
2021-02-15 16:48:43 -06:00
Peter Rifel
6e6e072d93
Use AWS SDK const for IAM entities not found
2021-02-15 15:53:59 -06:00
Kubernetes Prow Robot
cd10383fa0
Merge pull request #10741 from codablock/nlb-subnets
...
Allow to control which subnets and IPs get used for the API loadbalancer
2021-02-14 14:23:06 -08:00
Peter Rifel
c91ea29cb8
Add cloudmock support for launch template versions and updating ASGs
2021-02-06 23:06:46 -06:00
Alexander Block
49e7ec8890
Use SubnetMappings for NLBs instead of Subnets
...
SubnetMappings allow to explicitely set the private IPv4 address that
must be used for the NLB.
SubnetMappings and Subnets in the AWS API are compatible as long as the
address settings are not changes, making this commit backwards compatible.
2021-02-05 17:53:20 +01:00
Ciprian Hacman
d18a02df73
Add throughput field for gp3 volumes to mock
2021-01-21 09:00:58 +02:00
Peter Rifel
4ee5d7a543
Add tagging support for AWS IAM Roles
2020-12-23 15:11:07 -06:00
Peter Rifel
1760d06332
cloudmock - guard the VPC CIDR association calls with a mutex
...
This should fix a flaky TestLifecycleComplex test that I've only been able to repro <1% of the time.
2020-12-16 20:32:35 -06:00
Bharath Vedartham
7f6e125733
Add support for aws ec2 instance metadata v2
...
A new field is add to the InstanceGroup spec with 2 sub fields,
HTTPPutResponseHopLimit and HTTPTokens. These fields enable the user
to disable IMDv1 for instances within an instance group.
By default, both IMDv1 and IMDv2 are enabled in instances in an instance group.
2020-12-07 02:57:02 +05:30
Ciprian Hacman
e11d934268
Add option to reuse existing Elastic IPs for NAT gateways
2020-12-06 09:37:17 +02:00
Ciprian Hacman
fdf976809e
Use pagination when listing LaunchTemplates
2020-11-09 21:41:58 +02:00
Ciprian Hacman
ed37c34a92
Use LaunchTemplate id instead of name for ASGs
2020-11-09 21:41:56 +02:00
Ciprian Hacman
565adceab9
Use LaunchTemplate versions instead of timestamped LaunchTemplates
2020-11-09 21:40:33 +02:00
Peter Rifel
11bf3ff202
Add missing cloudmock functionality for enabling lifecycle integration test on complex cluster
2020-10-30 10:06:36 -05:00
Peter Rifel
839a1185cf
Create cloudmock implementations for elbv2 API calls used by future NLB support
2020-10-30 10:06:36 -05:00
Peter Rifel
b81f9b290f
Add a test ensuring shared VPCs dont have unrelated CIDR blocks disassociated
2020-10-02 14:23:16 -05:00
Justin SB
786423f617
Expose JWKS via a feature-flag
...
When the PublicJWKS feature-flag is set, we expose the apiserver JWKS
document publicly (including enabling anonymous access). This is a
stepping stone to a more hardened configuration where we copy the JWKS
document to S3/GCS/etc.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 10:15:11 -04:00
Peter Rifel
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00