Commit Graph

4591 Commits

Author SHA1 Message Date
dntosas 0e8d189aee [cilium] Add support for encryption via WireGuard
In this commit, we enable users to choose WireGuard as their prefered
encryption type, leveraging this new feature from Cilium.

Ref: https://cilium.io/blog/2021/05/20/cilium-110#wireguard

Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-16 14:08:59 +02:00
Kubernetes Prow Robot 3afe121a29
Merge pull request #12148 from olemarkus/reconcile-public
Reconcile if managedFile is public or not
2021-08-13 12:15:32 -07:00
Ole Markus With 67b4024694 Reconcile if managedFile is public or not 2021-08-13 20:20:44 +02:00
Antonio Ojea f61a5d79ab leverage proxy env variables 2021-08-13 19:27:17 +02:00
Ole Markus With caf46fef6a Bump AWS CSI Driver to 1.2.0 2021-08-13 11:14:05 +02:00
Kubernetes Prow Robot b1e6064501
Merge pull request #12141 from olemarkus/cilium-bump-211
Bump cilium to 1.10.3
2021-08-12 13:11:50 -07:00
Ole Markus With 133eb1f7ba Bump cilium to 1.10.3 2021-08-12 21:12:25 +02:00
Ole Markus With 57bd06b281 Bump Cert Manager for 1.22 2021-08-12 08:36:22 +02:00
Kubernetes Prow Robot 4a0fa2d108
Merge pull request #12122 from mitch000001/openstack-port-metadata
Openstack: add port metadata
2021-08-10 12:48:39 -07:00
Mike Splain 03a2557252 Fix cases when the VPC doesn't exist yet 2021-08-09 15:42:41 -04:00
Michael Wagner 99330549e4 feat(openstack): enrich ports with more metadata
The overall goal is to get rid of the specific port names and replace
them with hashed ones. This in turn allows us to introduce rolling
updates for Openstack in a later stage.
2021-08-09 08:49:12 +02:00
Kubernetes Prow Robot e7b52981ab
Merge pull request #12119 from rifelpet/dns-controller-api
Update dns-controller to use networking.k8s.io/v1 Ingress API
2021-08-08 15:11:30 -07:00
Peter Rifel 95aa8953a2
./hack/update-expected.sh 2021-08-08 16:24:49 -04:00
Peter Rifel b193d2d583
Update addon manifests referencing RBAC v1beta1 2021-08-08 16:12:39 -04:00
Peter Rifel 0789a5ad9c
./hack/update-expected.sh 2021-08-08 15:54:27 -04:00
Peter Rifel 7c2112b32d
Update dns-controller to use networking.k8s.io/v1 for watching Ingresses 2021-08-08 15:54:27 -04:00
Kubernetes Prow Robot b858297fa4
Merge pull request #12114 from olemarkus/metrics-server-secure-not-insecure
Make metrics-server insecure if insecure is true
2021-08-07 15:13:36 -07:00
Kubernetes Prow Robot 64f00d71ae
Merge pull request #12109 from olemarkus/useserviceaccountexternalpermissions
Remove UseServiceAccountIAM feature flag and rename feature to UseServiceAccountExternalPermissions
2021-08-07 15:13:30 -07:00
Kubernetes Prow Robot a9a5865032
Merge pull request #12111 from rifelpet/os-lb-vipacl
In-line openstack loadbalancer feature detection
2021-08-07 12:31:29 -07:00
Ole Markus With 0439bb0d76 Remove UseServiceAccountIAM feature flag and rename feature to UseServiceAccountExternalPermissions 2021-08-07 21:20:03 +02:00
Ole Markus With 612be4b1fc Make metrics-server insecure if insecure is true
Also add tests for each variation to make sure this sticks
2021-08-07 20:44:50 +02:00
Ole Markus With ce86d851aa IRSA support for CCM
Update pkg/model/components/addonmanifests/awscloudcontroller/iam.go

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-08-07 10:27:36 +02:00
Kubernetes Prow Robot 76727cb4a0
Merge pull request #12108 from ReillyBrogan/debian11
Support Debian 11 Bullseye
2021-08-06 15:45:29 -07:00
Reilly Brogan 850bca8db6 Support Debian 11 Bullseye 2021-08-06 12:52:16 -05:00
Peter Rifel ce821a614f
In-line openstack loadbalancer feature detection
This was our only reliance on cloud-provider-openstack which depends on k8s.io/kubernetes.

With the logic in-lined, kops no longer has any indirect dependencies of k/k
2021-08-06 08:19:53 -04:00
Kubernetes Prow Robot c382408684
Merge pull request #12107 from olemarkus/fix-albc
Revert most of #12023 and keep awslbc on CP nodes
2021-08-05 11:23:19 -07:00
Ole Markus With 1839b1ac47 Revert most of #12023 and keep awslbc on CP nodes 2021-08-05 19:30:27 +02:00
John Gardiner Myers 832e773324 Update Kubernetes dependencies to 1.22.0 2021-08-04 16:54:07 -07:00
Kubernetes Prow Robot d148cbed8d
Merge pull request #12049 from iGene/octavia_provider_option
Add Option to Specify OpenStack Octavia Provider
2021-08-04 01:33:24 -07:00
Kubernetes Prow Robot 3a293781a6
Merge pull request #11784 from ederst/add-os-config-drive
Launch Openstack instances with config drive
2021-08-04 00:49:24 -07:00
Kubernetes Prow Robot 3ee3e30267
Merge pull request #12096 from hakman/docker-20.10.8
Update Docker to v20.10.8
2021-08-03 21:39:24 -07:00
Ciprian Hacman 92ab49cdfb Update Docker to v20.10.8 2021-08-04 06:19:43 +03:00
Kubernetes Prow Robot 283080bc30
Merge pull request #12083 from CheyiLin/nth
Add nth rebalance recommendation configs
2021-08-02 21:40:48 -07:00
Cheyi Lin 408bb7dfbe Add nth rebalance recommendation configs 2021-08-02 16:20:17 +08:00
Ciprian Hacman 966d2d6308 Update Calico to v3.20.0 2021-08-02 08:51:37 +03:00
Kubernetes Prow Robot a9207f4a6c
Merge pull request #12087 from johngmyers/sha256-manifest
Use SHA-256 for manifest hashes
2021-08-01 21:55:23 -07:00
John Gardiner Myers d6a159a258 hack/update-expected.sh 2021-08-01 16:42:14 -07:00
John Gardiner Myers 03434509e2 Use SHA-256 for manifest hashes 2021-08-01 16:37:01 -07:00
Justin SB 912e28d95a GCE: TargetPool should ignore Lifecycle field
It's an internal field, it shouldn't be detected as a change to apply.
2021-07-30 14:57:14 +00:00
Ciprian Hacman 541d328812 Update containerd to v1.4.9 2021-07-30 07:30:42 +03:00
Kubernetes Prow Robot 5bd6a49b26
Merge pull request #12062 from hakman/coredns-1.8.4
Update core-dns to v1.8.4
2021-07-29 11:14:57 -07:00
Kubernetes Prow Robot 8c5c8018db
Merge pull request #12065 from MoShitrit/aws-cni-1.9.0
Update AWS CNI to v1.9.0
2021-07-28 23:04:19 -07:00
Ciprian Hacman fc3a103baf Update core-dns to v1.8.4 2021-07-29 08:23:35 +03:00
Kubernetes Prow Robot 05964b9375
Merge pull request #12059 from hakman/containerd-1.4.8
Update containerd to v1.4.8
2021-07-28 22:20:19 -07:00
Moshe Shitrit 13a489571b update auto-generated files after update-expected and verify-apimachinery 2021-07-29 00:19:44 -04:00
Moshe Shitrit f0f15df565 update aws-cni version to 1.9.0 2021-07-29 00:05:20 -04:00
Ciprian Hacman b6464658d4 Update containerd to v1.4.8 2021-07-29 05:27:10 +03:00
Kubernetes Prow Robot 81432c6d2f
Merge pull request #12043 from johngmyers/sts-region
Use regional STS endpoint
2021-07-28 01:39:35 -07:00
John Gardiner Myers 085b43e420 Clean up "kops get secrets" 2021-07-27 21:33:52 -07:00
Ching Kuo 7fba614a3c Add Option to Specify OpenStack Octavia Provider
In newer version of OpenStack, there are multiple octavia provider to
choose from instead of only "octavia" as provider. This commit added a
command line option "os-octavia-provider", enabling user to specify the
octavia provider that will be use to create load balancers.
2021-07-27 15:15:17 +08:00