Commit Graph

3625 Commits

Author SHA1 Message Date
Kubernetes Prow Robot d97eb510dc
Merge pull request #9973 from olemarkus/cleanup-cloud
Build cloud outside of PerformAssignments
2020-09-22 23:42:08 -07:00
Ole Markus With 7bc17f4b1f Build cloud outside of PerformAssignments
We tend to build cloud, call some method, and then build cloud over
again. It would be easier to just pass the first one along.

Passing along cloud would also make it easier to mock cloud.
2020-09-23 07:54:28 +02:00
Kubernetes Prow Robot c000f678b2
Merge pull request #9972 from olemarkus/cleanup-consolidate-cluster-builder
Consolidate all buildMinimalClusters into a generic test cluster builder
2020-09-22 22:52:08 -07:00
Alexander Block 9aef3dba87 Update manifestHash for networking.cilium.io/k8s-1.12-v1.8.yaml 2020-09-22 17:09:41 +02:00
Alexander Block 1bd219f790 Add missing permissions for cilium-operator
These became required a few cilium versions ago.
2020-09-22 16:19:07 +02:00
Ole Markus With 6797998ac1 Consolidate all buildMinimalClusters into a generic test cluster builder 2020-09-19 19:55:19 +02:00
Kubernetes Prow Robot b6d023d5d9
Merge pull request #9965 from olemarkus/openstack-fix-fip-description
Fix fip description
2020-09-19 02:56:28 -07:00
Kubernetes Prow Robot 255cd59b67
Merge pull request #9964 from rifelpet/sa-partition
Add AWS partition support to iam service account roles
2020-09-18 06:48:46 -07:00
Kubernetes Prow Robot 6bf2e1e8c2
Merge pull request #9971 from zetaab/ifxbool
OpenStack: allow to specify storageClass creation to false
2020-09-18 05:18:45 -07:00
Kubernetes Prow Robot f07d248a24
Merge pull request #9958 from hakman/hash-mirrors
Use all kops mirrors to determine artifacts hashes
2020-09-18 04:00:45 -07:00
Jesse Haka 55e9ee6bf2 fix go template 2020-09-18 13:21:35 +03:00
Kubernetes Prow Robot e7bfedd1ac
Merge pull request #9921 from olemarkus/nth
Add addon for aws node termination handler
2020-09-18 03:10:45 -07:00
Ciprian Hacman 0c6f1c733c Use all kops mirrors to determine artifacts hashes 2020-09-18 09:44:37 +03:00
Ole Markus With c7930ac477 Fix fip description
Set description field on existing floating ips
2020-09-18 07:20:47 +02:00
Jesse Haka 5d455f655b add clustername for filters 2020-09-17 23:55:21 +03:00
Ole Markus With b9212f85ad Add addon for aws node termination handler 2020-09-17 21:09:28 +02:00
Peter Rifel d4d4545345
Add AWS partition support to iam service account roles 2020-09-17 10:01:27 -05:00
Peter Rifel f0b94c7b5c
Add instance groups to bootstrapchannelbuilder tests
Also updates some clusters to 1.19 to exercise the kops-controller node bootstrapping logic
2020-09-17 08:31:40 -05:00
Adam Smith 2fb1a4ecd2 Support ChainInsertMode config option for Calico Networking 2020-09-16 10:38:45 +01:00
Ciprian Hacman 0eb626fcdd Release 1.19.0-alpha.4 2020-09-16 11:37:38 +03:00
Ole Markus With d3ae52ce4b Remove template function test to make bazel happy
This test is sort of redundant when we have integration tests etc covering rendering of these templates
2020-09-15 20:43:21 +02:00
Ole Markus With 926a0bc7c1 Block external CCM for k8s less than 1.13 2020-09-15 15:51:23 +02:00
Kubernetes Prow Robot f89d3ebde5
Merge pull request #9936 from zetaab/fixopenstack
use subnet also when creating floatingip
2020-09-15 06:30:07 -07:00
Jesse Haka b465466993 recompile bindata 2020-09-15 15:03:38 +03:00
Jesse Haka e6c61d68fd add kube-system psp to system:nodes 2020-09-15 14:57:13 +03:00
Jesse Haka 8b02114d2f
Update upup/pkg/fi/cloudup/openstacktasks/floatingip.go
Co-authored-by: Ole Markus With <olemarkus@gmail.com>
2020-09-15 13:22:52 +03:00
Jesse Haka 82fbc1603a use subnet also when creating floatingip 2020-09-15 09:30:44 +03:00
Kubernetes Prow Robot a93febf5a6
Merge pull request #9911 from hakman/fix-gossip
Allow the BootstrapClient task to run after Protokube
2020-09-13 21:10:57 -07:00
Kubernetes Prow Robot 7a81b3e10e
Merge pull request #9900 from olemarkus/kops-get-instances-nil-pointer
Continue if asg instance is unknown
2020-09-13 16:14:57 -07:00
Kubernetes Prow Robot 58092b5666
Merge pull request #9925 from olemarkus/cas-fixes
Add missing flags to cluster autoscaler template
2020-09-13 00:58:57 -07:00
Justin SB 2a44cb7f16 Update script and testdata CA keypair
If we generate with the wrong type (usages), the keypair will be
regenerated.
2020-09-12 16:21:15 -04:00
Ole Markus With 2b5950c24c Add missing flags to template 2020-09-12 08:24:29 +02:00
Ciprian Hacman 07ffd665a7 Allow container runtime to run before BootstrapKubeconfig 2020-09-12 08:13:40 +03:00
Ciprian Hacman fe3adb1fe3 Force BootstrapClient to run after Protokube 2020-09-12 08:06:21 +03:00
Justin SB 08ce1dacaf Add missing setResources on CA task
Otherwise it doesn't work the first time round, in the JWKS scenario.
2020-09-11 09:17:55 -04:00
Andreas Strikos 93c44d867a Remove force_tcp flag for nodelocalcache dot zone
Forcing all DNS communication go through TCP can lead to increased
latency and slower DNS responses since a lot of upstream DNS
servers are not optimized for TCP traffic.
An example is AWS's VPC DNS server that sending all the DNS traffic
through TCP cause it to increase the latencies for this requests.
The kubernetes version has already changed this configmap to skip
force_tcp flag for the . zone, so it makes sense to follow their
example.
Reference https://github.com/kubernetes/kubernetes/blob/master/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml#L100
2020-09-11 09:58:27 +02:00
John Gardiner Myers 8adb8e9868 Get launch template versions after filtering templates 2020-09-09 23:04:54 -07:00
Kubernetes Prow Robot 036ea69525
Merge pull request #9352 from justinsb/irsa_with_public
Simplified form of IAM Roles for ServiceAccounts
2020-09-09 22:23:44 -07:00
Ole Markus With f6abac3ec2 Continue if asg instance is unknown
Most likely this comes from ASG thinking the instance is inService, but it is terminating when we run describe from EC2
2020-09-10 07:09:05 +02:00
Kubernetes Prow Robot 4508406515
Merge pull request #9908 from rdrgmnzs/CacheNodeidentityInfo
Allow caching of Nodeidentity Info in kops-controller for AWS.
2020-09-09 13:01:44 -07:00
Rodrigo Menezes 4c057f138a Allow caching of Nodeidentity Info in kops-controller for AWS to reduce the number of DescribeInstances API calls. 2020-09-09 22:11:29 +03:00
Kubernetes Prow Robot 8a07275bbf
Merge pull request #9901 from commixon/nodelocalcache-configure-resources
Nodelocalcache configure resources
2020-09-09 09:19:08 -07:00
Chris Loukas 65610dbcee Update NodeLocalDNSConfig with Mem/CPU requests
Add NodeLocalDNS.CPURequest and NodeLocalDNS.MemoryRequest to
configure resource requests.

If not explicitly set, fall back to 25m and 5Mi
2020-09-09 18:40:14 +03:00
Kubernetes Prow Robot 900e3c1b46
Merge pull request #9894 from hakman/calico-3.16.1
Update Calico to v3.16.1
2020-09-09 08:03:52 -07:00
Justin SB a61ecf4c58 Refactor to use interface for iam Subjects
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
Justin SB ccc814dfbc Create tests for JWKS scenarios 2020-09-09 09:57:06 -04:00
Justin SB 8498ac9dbb Create PublicJWKS feature flag
This should be much easier to start and to get under testing; it only
works with a load balancer, it sets the apiserver into anonymous-auth
allowed, it grants the anonymous auth user permission to read our jwks
tokens.  But it shouldn't need a second bucket or anything of that
nature.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:06 -04:00
John Gardiner Myers 0cb9eed851 Add missing spot support to launch template direct render 2020-09-08 23:20:29 -07:00
Ciprian Hacman 0357d33ff6 Update Calico to v3.16.1 2020-09-09 06:37:27 +03:00
Kubernetes Prow Robot 68b2302b48
Merge pull request #9885 from olemarkus/encryptionconfig-warn
Errors when encryptionConfig is enabled, but no encryptionconfig secret
2020-09-08 11:09:45 -07:00