Commit Graph

3296 Commits

Author SHA1 Message Date
Steven E. Harris 70e95fccf5 Copyedit the InstanceGroup-related documentation 2021-03-05 08:53:08 -05:00
Steven E. Harris e39c985ee7 Honor OS update policy at InstanceGroup level too
As with the Cluster-level "spec.updatePolicy" field, add a similar
field at the InstanceGroup level, allowing overriding of the
cluster-level choice in each InstanceGroup.

Introduce a new value for the field ("automatic") as equivalent to the
default value applied when the field is absent. Honoring this new
value allows disabling automatic updates at the cluster level, but
then enabling them again for particular InstanceGroups. Without such a
positive affirmation, it's not possible to override a cluster-level
"external" policy at the InstanceGroup level, as there's no way to
specify positively that you want to recover the default
value. Instead, expressing the explicit "automatic" value is clear and
unambiguous.
2021-03-05 08:53:07 -05:00
Ole Markus With 063e3f6c7b Use internal api url for jwks when required
The public api url cannot be used by pods and nodes if access is restricted. So by default we need to use the internal one.
This should finally pass the OIDC e2e test

For public access, api server must be publically available and anonymous
auth must be enabled
2021-03-05 06:52:51 +01:00
Kubernetes Prow Robot fcefcb59cc
Merge pull request #10945 from olemarkus/exclude-cp-nodes-from-lbs
Exclude CP nodes from load balancers
2021-03-03 05:21:21 -08:00
Kubernetes Prow Robot 83e1424280
Merge pull request #10957 from adrianmoisey/add_kubelet_arg_enable_cadvisor_json_endpoints
Add support for enable-cadvisor-json-endpoints with Kubelet
2021-03-02 23:47:19 -08:00
Adrian Moisey 9e18928fb3
Add support for enable-cadvisor-json-endpoints with Kubelet
Kubernetes 1.18 disables this by default.
For backwards compatibility with monitoring tools, it would be nice to
be able to re-enable this.

https://github.com/kubernetes/kubernetes/issues/68522
2021-03-03 09:06:06 +02:00
Peter Rifel ce51ec44bc
Use new CPUCredits IG spec field in launch templates 2021-03-02 22:54:29 -06:00
Peter Rifel bfd3d8a96b
Add new CPUCredits field to instance group spec 2021-03-01 23:01:20 -06:00
liranp 2abdb90c54
fix: don't skip lb attachments when hybrid is enabled 2021-03-01 14:07:22 +02:00
Yan Grunenberger 9d8dec60d6
Allow multi-CNI setups to set usesSecondaryIP (#10828)
* validation.go: remove checks on CNI

* move CNI block check to allow option with others CNI
2021-03-01 01:26:40 -08:00
Kubernetes Prow Robot c802127528
Merge pull request #10935 from cloudnatix/kenji/fix_node_name_conversion
Fix node label conversion in Azure
2021-03-01 00:38:40 -08:00
Kubernetes Prow Robot f294793e44
Merge pull request #10948 from rifelpet/tgw
Add AWS Transit Gateway support
2021-02-28 23:46:50 -08:00
Kenji Kaneda a2bfbdd4cb Fix node label conversion in Azure
As Azure doesn't allow "/" in label keys, we used to convert "/" to
"_", but we didn't convert back "_" to "/" in kops-controller.

Change the code to store a label key in a tag value so that we don't
need to worry about escaping.
2021-02-28 22:35:12 -08:00
Justin SB 09f7f6f039 Update etcd-manager to 3.0.20210228
Changes:

* Add user agent to etcd-manager requests [#395](https://github.com/kopeio/etcd-manager/pull/395)
* Add etcd-manager metrics, add openstack API metrics [#396](https://github.com/kopeio/etcd-manager/pull/396)
* Make discovery poll interval configurable [#397](https://github.com/kopeio/etcd-manager/pull/397)
* Add log levels to prevent too verbose logging [#394](https://github.com/kopeio/etcd-manager/pull/394)
2021-02-28 20:41:30 -05:00
Peter Rifel 577df0addf
Add support for defining a transit gateway for a default route
I opted to just use a *string for the TGW ID in the route task rather than a full TGW task because kops will never be creating TGWs itself, they will always be defined by ID.
2021-02-28 12:38:29 -06:00
Ole Markus With bca857326f Add standard labels to all resources 2021-02-28 07:43:58 +01:00
Ole Markus With d4f28f2986 Allow nil values in manifests 2021-02-28 07:26:48 +01:00
Kubernetes Prow Robot a043925cb6
Merge pull request #10910 from olemarkus/fix-cloudlabel-validation
Further improve cloudLabel validation
2021-02-27 12:48:39 -08:00
Ole Markus With 32fce0d59c Exclude CP nodes from load balancers 2021-02-27 20:14:31 +01:00
Kubernetes Prow Robot 6e7f635edb
Merge pull request #10940 from hakman/sort-external-policies
Sort external policies when checking for changes
2021-02-27 10:06:38 -08:00
Ciprian Hacman 925350f836 Sort external policies when checking for changes 2021-02-27 11:36:07 +02:00
Barry Melbourne 659bfa0daf Update Controller Runtime Go module to v0.8.2 2021-02-25 20:34:12 +00:00
Kubernetes Prow Robot 9c5c186442
Merge pull request #10915 from t1cg/caw/publicLoadbalancer
add support for azure public loadbalancer
2021-02-24 19:51:24 -08:00
liranp 955e5072dc
fix: prevent igs with same suffix from being deleted 2021-02-24 17:53:34 +02:00
Kubernetes Prow Robot 1b42286cfe
Merge pull request #10832 from rifelpet/aws-sdk
Add Tagging to Instance Profiles and OIDC Providers
2021-02-24 05:40:50 -08:00
Collin Woodruff ee7fc850ff add support for azure public loadbalancer 2021-02-23 17:42:33 -05:00
Ole Markus With cf8bdcea4d Further improve cloudLabel validation
We were too strict on some labels that blocked common use cases such as CAS. At the same time we allowed IG-level cloudLabels that could result in broken clusters
2021-02-23 13:33:49 +01:00
Kubernetes Prow Robot a424958e83
Merge pull request #10872 from timothyclarke/feature/NLB-EIP
Adding Elastic IP Allocations to NLB API
2021-02-22 23:48:03 -08:00
Nicholas Galantowicz 616d446658 add usage of subnet and routetable shared resources in azure 2021-02-22 15:28:55 -05:00
Kubernetes Prow Robot 4e8c655899
Merge pull request #10897 from olemarkus/remove-1-14-support
Enforce 1.14 deprecation
2021-02-22 06:01:43 -08:00
Ole Markus With 4d4bcba315 Enforce 1.14 deprecation 2021-02-21 17:59:39 +01:00
Kubernetes Prow Robot 6123c85047
Merge pull request #10884 from hakman/fix-validate-instance-type-and-image
Improve machine type and image validation
2021-02-19 09:44:25 -08:00
Ciprian Hacman dee13cecca Improve machine type and image validation 2021-02-19 18:28:57 +02:00
Timothy Clarke d59faa329e
Revert "Simplifying conditional per code review comments"
This reverts commit 1a3c675212
as it turned an optional feature subnets[0].allocationID into a required one
2021-02-19 11:19:36 +00:00
Timothy Clarke 1a3c675212
Simplifying conditional per code review comments 2021-02-19 10:46:39 +00:00
Kubernetes Prow Robot 2659a57a9b
Merge pull request #10879 from olemarkus/1-21-fixes
Fixes for 1.21 e2e tests
2021-02-18 23:50:24 -08:00
Ole Markus With 9a13837629 Fix JWKS path for volume projection 2021-02-18 22:07:35 +01:00
Ole Markus With 4ee43a849c k/k changed the feature gate for disabling in-tree CSI 2021-02-18 21:12:51 +01:00
Bharath Vedartham e2bf86a0d3 Add unit tests 2021-02-19 01:20:23 +05:30
Bharath Vedartham 92be20f2d5 Add validation for ami arch to instance type arch 2021-02-19 01:20:06 +05:30
Timothy Clarke 1577b0a54b
Adding Elastic IP Allocations to NLB API 2021-02-18 12:27:28 +00:00
Ole Markus With 8486650c33 Add support for cluster autoscaler 1.20.x
Update upup/models/cloudup/resources/addons/cluster-autoscaler.addons.k8s.io/k8s-1.15.yaml.template

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-02-17 14:05:09 +01:00
Alexander Block 8f0cb3af1f Actually enable systemd cgroup for containerd 2021-02-16 18:46:00 +01:00
Ciprian Hacman 4f70c4237c Update mock to v1.21.0-alpha.1 2021-02-16 14:19:58 +02:00
Ciprian Hacman 35ea2f49b3 Release 1.21.0-alpha.1 2021-02-16 10:44:34 +02:00
Kubernetes Prow Robot 2db0b18145
Merge pull request #10619 from NickSchleicher/azureNodeLabelTags
Use correct tag when creating node labels from azure cloud tags
2021-02-15 16:13:06 -08:00
Peter Rifel b285794f02
Update CloudLabels field description 2021-02-15 17:03:17 -06:00
Peter Rifel d52fd9f76c
Add tagging support to AWS Instance Profiles and OIDC Providers 2021-02-15 16:48:43 -06:00
Peter Rifel 6e6e072d93
Use AWS SDK const for IAM entities not found 2021-02-15 15:53:59 -06:00
Kubernetes Prow Robot cd10383fa0
Merge pull request #10741 from codablock/nlb-subnets
Allow to control which subnets and IPs get used for the API loadbalancer
2021-02-14 14:23:06 -08:00