dntosas
0e8d189aee
[cilium] Add support for encryption via WireGuard
...
In this commit, we enable users to choose WireGuard as their prefered
encryption type, leveraging this new feature from Cilium.
Ref: https://cilium.io/blog/2021/05/20/cilium-110#wireguard
Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-16 14:08:59 +02:00
Kubernetes Prow Robot
3afe121a29
Merge pull request #12148 from olemarkus/reconcile-public
...
Reconcile if managedFile is public or not
2021-08-13 12:15:32 -07:00
Ole Markus With
67b4024694
Reconcile if managedFile is public or not
2021-08-13 20:20:44 +02:00
Antonio Ojea
f61a5d79ab
leverage proxy env variables
2021-08-13 19:27:17 +02:00
Ole Markus With
caf46fef6a
Bump AWS CSI Driver to 1.2.0
2021-08-13 11:14:05 +02:00
Kubernetes Prow Robot
b1e6064501
Merge pull request #12141 from olemarkus/cilium-bump-211
...
Bump cilium to 1.10.3
2021-08-12 13:11:50 -07:00
Ole Markus With
133eb1f7ba
Bump cilium to 1.10.3
2021-08-12 21:12:25 +02:00
Ole Markus With
57bd06b281
Bump Cert Manager for 1.22
2021-08-12 08:36:22 +02:00
Kubernetes Prow Robot
4a0fa2d108
Merge pull request #12122 from mitch000001/openstack-port-metadata
...
Openstack: add port metadata
2021-08-10 12:48:39 -07:00
Mike Splain
03a2557252
Fix cases when the VPC doesn't exist yet
2021-08-09 15:42:41 -04:00
Michael Wagner
99330549e4
feat(openstack): enrich ports with more metadata
...
The overall goal is to get rid of the specific port names and replace
them with hashed ones. This in turn allows us to introduce rolling
updates for Openstack in a later stage.
2021-08-09 08:49:12 +02:00
Kubernetes Prow Robot
e7b52981ab
Merge pull request #12119 from rifelpet/dns-controller-api
...
Update dns-controller to use networking.k8s.io/v1 Ingress API
2021-08-08 15:11:30 -07:00
Peter Rifel
95aa8953a2
./hack/update-expected.sh
2021-08-08 16:24:49 -04:00
Peter Rifel
b193d2d583
Update addon manifests referencing RBAC v1beta1
2021-08-08 16:12:39 -04:00
Peter Rifel
0789a5ad9c
./hack/update-expected.sh
2021-08-08 15:54:27 -04:00
Peter Rifel
7c2112b32d
Update dns-controller to use networking.k8s.io/v1 for watching Ingresses
2021-08-08 15:54:27 -04:00
Kubernetes Prow Robot
b858297fa4
Merge pull request #12114 from olemarkus/metrics-server-secure-not-insecure
...
Make metrics-server insecure if insecure is true
2021-08-07 15:13:36 -07:00
Kubernetes Prow Robot
64f00d71ae
Merge pull request #12109 from olemarkus/useserviceaccountexternalpermissions
...
Remove UseServiceAccountIAM feature flag and rename feature to UseServiceAccountExternalPermissions
2021-08-07 15:13:30 -07:00
Kubernetes Prow Robot
a9a5865032
Merge pull request #12111 from rifelpet/os-lb-vipacl
...
In-line openstack loadbalancer feature detection
2021-08-07 12:31:29 -07:00
Ole Markus With
0439bb0d76
Remove UseServiceAccountIAM feature flag and rename feature to UseServiceAccountExternalPermissions
2021-08-07 21:20:03 +02:00
Ole Markus With
612be4b1fc
Make metrics-server insecure if insecure is true
...
Also add tests for each variation to make sure this sticks
2021-08-07 20:44:50 +02:00
Ole Markus With
ce86d851aa
IRSA support for CCM
...
Update pkg/model/components/addonmanifests/awscloudcontroller/iam.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-08-07 10:27:36 +02:00
Kubernetes Prow Robot
76727cb4a0
Merge pull request #12108 from ReillyBrogan/debian11
...
Support Debian 11 Bullseye
2021-08-06 15:45:29 -07:00
Reilly Brogan
850bca8db6
Support Debian 11 Bullseye
2021-08-06 12:52:16 -05:00
Peter Rifel
ce821a614f
In-line openstack loadbalancer feature detection
...
This was our only reliance on cloud-provider-openstack which depends on k8s.io/kubernetes.
With the logic in-lined, kops no longer has any indirect dependencies of k/k
2021-08-06 08:19:53 -04:00
Kubernetes Prow Robot
c382408684
Merge pull request #12107 from olemarkus/fix-albc
...
Revert most of #12023 and keep awslbc on CP nodes
2021-08-05 11:23:19 -07:00
Ole Markus With
1839b1ac47
Revert most of #12023 and keep awslbc on CP nodes
2021-08-05 19:30:27 +02:00
John Gardiner Myers
832e773324
Update Kubernetes dependencies to 1.22.0
2021-08-04 16:54:07 -07:00
Kubernetes Prow Robot
d148cbed8d
Merge pull request #12049 from iGene/octavia_provider_option
...
Add Option to Specify OpenStack Octavia Provider
2021-08-04 01:33:24 -07:00
Kubernetes Prow Robot
3a293781a6
Merge pull request #11784 from ederst/add-os-config-drive
...
Launch Openstack instances with config drive
2021-08-04 00:49:24 -07:00
Kubernetes Prow Robot
3ee3e30267
Merge pull request #12096 from hakman/docker-20.10.8
...
Update Docker to v20.10.8
2021-08-03 21:39:24 -07:00
Ciprian Hacman
92ab49cdfb
Update Docker to v20.10.8
2021-08-04 06:19:43 +03:00
Kubernetes Prow Robot
283080bc30
Merge pull request #12083 from CheyiLin/nth
...
Add nth rebalance recommendation configs
2021-08-02 21:40:48 -07:00
Cheyi Lin
408bb7dfbe
Add nth rebalance recommendation configs
2021-08-02 16:20:17 +08:00
Ciprian Hacman
966d2d6308
Update Calico to v3.20.0
2021-08-02 08:51:37 +03:00
Kubernetes Prow Robot
a9207f4a6c
Merge pull request #12087 from johngmyers/sha256-manifest
...
Use SHA-256 for manifest hashes
2021-08-01 21:55:23 -07:00
John Gardiner Myers
d6a159a258
hack/update-expected.sh
2021-08-01 16:42:14 -07:00
John Gardiner Myers
03434509e2
Use SHA-256 for manifest hashes
2021-08-01 16:37:01 -07:00
Justin SB
912e28d95a
GCE: TargetPool should ignore Lifecycle field
...
It's an internal field, it shouldn't be detected as a change to apply.
2021-07-30 14:57:14 +00:00
Ciprian Hacman
541d328812
Update containerd to v1.4.9
2021-07-30 07:30:42 +03:00
Kubernetes Prow Robot
5bd6a49b26
Merge pull request #12062 from hakman/coredns-1.8.4
...
Update core-dns to v1.8.4
2021-07-29 11:14:57 -07:00
Kubernetes Prow Robot
8c5c8018db
Merge pull request #12065 from MoShitrit/aws-cni-1.9.0
...
Update AWS CNI to v1.9.0
2021-07-28 23:04:19 -07:00
Ciprian Hacman
fc3a103baf
Update core-dns to v1.8.4
2021-07-29 08:23:35 +03:00
Kubernetes Prow Robot
05964b9375
Merge pull request #12059 from hakman/containerd-1.4.8
...
Update containerd to v1.4.8
2021-07-28 22:20:19 -07:00
Moshe Shitrit
13a489571b
update auto-generated files after update-expected and verify-apimachinery
2021-07-29 00:19:44 -04:00
Moshe Shitrit
f0f15df565
update aws-cni version to 1.9.0
2021-07-29 00:05:20 -04:00
Ciprian Hacman
b6464658d4
Update containerd to v1.4.8
2021-07-29 05:27:10 +03:00
Kubernetes Prow Robot
81432c6d2f
Merge pull request #12043 from johngmyers/sts-region
...
Use regional STS endpoint
2021-07-28 01:39:35 -07:00
John Gardiner Myers
085b43e420
Clean up "kops get secrets"
2021-07-27 21:33:52 -07:00
Ching Kuo
7fba614a3c
Add Option to Specify OpenStack Octavia Provider
...
In newer version of OpenStack, there are multiple octavia provider to
choose from instead of only "octavia" as provider. This commit added a
command line option "os-octavia-provider", enabling user to specify the
octavia provider that will be use to create load balancers.
2021-07-27 15:15:17 +08:00