Commit Graph

715 Commits

Author SHA1 Message Date
Steven E. Harris 9a5e54699f Calico: upgrade "k8s-ec2-srcdst" to version v0.3.0
Upgrading the "k8s-ec2-srcdst" controller to this latest version
allows it to work correctly with the objects containing the new
"metadata.managedFields" field introduced in Kubernetes version
1.18.0.

The previous container image versions used a version of the
"client-go" library that was too old to consume these fields
correctly, causing the controller to fail repeatedly when trying to
read Node objects retrieved from the Kubernetes API server.
2020-07-29 09:30:16 -04:00
liranp a9f5ef8b9a
feat(spot): upgrade the controller (v1.0.62) 2020-07-28 11:08:45 +03:00
Ciprian Hacman 3336d7b309 Prefer nodes with "master" role for Calico Typha pods 2020-07-22 11:28:01 +03:00
John Gardiner Myers 53e07476df Widen the tolerations of kuberouter 2020-07-09 22:25:59 -07:00
Kubernetes Prow Robot 04ec3ddd13
Merge pull request #8991 from rdrgmnzs/aws-authenticator-update
Add healthcheck to aws-iam-authenticator
2020-07-09 19:28:35 -07:00
Kubernetes Prow Robot 60993a4d74
Merge pull request #9541 from rifelpet/coredns-170
Update CoreDNS to v1.7.0 - Take 2
2020-07-09 12:46:33 -07:00
Rodrigo Menezes e20f3ba0bc Add healthcheck 2020-07-09 12:23:37 -07:00
Sandeep Rajan 73f12e937e
update coredns to v1.7.0 2020-07-09 14:05:00 -05:00
Peter Rifel eae3fd8fc3
Update AWS IAM Authenticator to 0.5.1 2020-07-09 11:41:28 -05:00
Kubernetes Prow Robot 69d774c524
Merge pull request #9521 from hakman/flag_missing
Fix KubeDNS missing resourceVersion
2020-07-08 18:00:35 -07:00
Pedro H. Spagiari 15c241b2cd fix(upup/models/cloudup/resources/addons/kube-dns.addons.k8s.io) missing resourceVersion 2020-07-08 08:07:44 +03:00
Ciprian Hacman 91074906cf Update kube-router to v1.0.0 2020-07-07 06:58:49 +03:00
Justin SB 591626af3c Release 1.19.0-alpha.1 2020-07-04 21:46:14 -04:00
Ole Markus With 263172caac Use new templates for cilium 1.8 2020-07-03 07:56:35 +02:00
Kubernetes Prow Robot 2b7c4089d6
Merge pull request #9462 from hakman/update-kube-dns
Update KubeDNS to v1.15.13
2020-06-30 13:54:07 -07:00
Ciprian Hacman b48c2c373f Update KubeDNS to v1.15.13 2020-06-30 12:10:51 +03:00
Ciprian Hacman 4ca7385081 Update Calico to v3.15.0 for k8s 1.16+ 2020-06-30 09:04:51 +03:00
liranp 8501747661
feat(spot): upgrade the controller (v1.0.61) 2020-06-28 17:02:44 +03:00
Ole Markus With 51235b2edc Deploy cilium etcd credentials if the cilium cluster exists 2020-06-27 07:11:19 +02:00
Kubernetes Prow Robot 909117a409
Merge pull request #9431 from olemarkus/arm64-fix-dns-1.13
Fix dns selectors for older k8s
2020-06-23 08:43:41 -07:00
Ole Markus With a9300601c2 Fix dns selectors for older k8s 2020-06-23 12:19:23 +02:00
Kubernetes Prow Robot 9708057692
Merge pull request #9404 from vgunapati/dns-controller-fix
Fix: dns-controller: 3999 port address already in use
2020-06-22 18:31:41 -07:00
Author Name deaeba1e57
Fix: dns-controller: 3999 port address already in use 2020-06-22 17:54:03 -07:00
Ole Markus With 7b95edc507 Make dns pods work on arm64 clusters
* Use multiarch where possible. Remove hardcoded use of amd64-only images.
 * Remove Arch templating function as an approach using this will not
   work anyway
 * No multiarch version of dns autoscaler, so force this one to run on
   master for now.
2020-06-21 20:32:27 +02:00
MoShitrit 1c1044bd69 Upgrade Amazon VPC CNI to 1.6.3 2020-06-19 16:23:18 -04:00
Kubernetes Prow Robot eb39ab7349
Merge pull request #9355 from johngmyers/move-port
Move host-network services off of port 8080
2020-06-16 09:10:04 -07:00
Kubernetes Prow Robot 39db604e0c
Merge pull request #9295 from olemarkus/cilium-component
Validate cilium version
2020-06-15 10:21:56 -07:00
John Gardiner Myers 5babf00646 Move node-local-dns healthcheck to port 3989 2020-06-12 22:00:15 -07:00
Josh Branham fe173d6d5d Explicitly set default storageclass to support upgrades 2020-06-11 13:00:26 -04:00
Ciprian Hacman df1302887e Update Weave Net to 2.6.5 2020-06-11 09:09:59 +03:00
Ole Markus With e09365b6c2 Validate cilium version 2020-06-11 07:38:14 +02:00
Ole Markus With 39751cfe63 Set cilium defaults in code 2020-06-11 07:38:13 +02:00
Ciprian Hacman c4d10a1bb0 Update Weave for CVE-2020-13597 2020-06-06 13:19:49 +03:00
John Gardiner Myers e88e0cf7ec Remove code supporting dropped k8s versions 2020-06-04 12:11:51 -07:00
Kubernetes Prow Robot 5cc1b5ad8e
Merge pull request #9268 from hakman/calico-CVE-2020-13597
Update Calico and Canal for CVE-2020-13597
2020-06-04 04:03:14 -07:00
Kubernetes Prow Robot c6dcaa8199
Merge pull request #9154 from MoShitrit/issue-9031
Add support for encryption in Cilium
2020-06-04 03:11:15 -07:00
Ciprian Hacman b1ee578e5c Update Calico and Canal for CVE-2020-13597 2020-06-04 11:40:34 +03:00
Kubernetes Prow Robot c8674f23a0
Merge pull request #9253 from olemarkus/cilium-ipv4
Don't make it possible to toggle ipv4/6. We only support ipv4 anyway
2020-06-03 14:02:43 -07:00
Kubernetes Prow Robot 4fe5ad03f8
Merge pull request #9255 from olemarkus/romana-remove
Remove romana support
2020-06-03 13:24:59 -07:00
Kubernetes Prow Robot 4ef6bbe229
Merge pull request #9175 from mtl-wgtwo/calico-ip-detection-method
Enable configuration of the calico IP_AUTODETECTION_METHOD  and IP6_AUTODETECTION_METHOD
2020-06-03 06:24:18 -07:00
Ole Markus With 991549a5f4 Remove support for Romana 2020-06-03 08:23:53 +02:00
Ole Markus With 972d7a3509 Don't make it possible to toggle ipv4/6. We only support ipv4 anyway 2020-06-03 06:58:13 +02:00
Srikanth 51f9a4a0a8 update RBAC for DO CCM 2020-06-02 19:08:58 +05:30
MoShitrit 90dfe39396 Upgrde amazon vpc cni to 1.6.2 2020-05-30 00:07:28 -04:00
Matt Long c00464f11d Update crds, apis, models. Add limited field validation 2020-05-27 15:24:01 +02:00
Timo Reimann b9c9c7a143 Update DigitalOcean cloud-controller-manager to v0.1.24
This changes bumps DigitalOcean's cloud-controller-manager to version
0.1.24 which brings a number of new features and bug fixes.
2020-05-26 11:29:16 +02:00
Matt Long 574442dd7b Enable configuration of the calico IP_AUTODETECTION_METHOD 2020-05-25 13:08:37 +02:00
MoShitrit 316a0e2b00 Adding encryption support for Cilium
Adding support for 'secret-name' flag

Adding instructions to enable encryption

Updating docs for cli

Addressing comments

Adding ciliumpassword subcommand to 'kops create secret'

Updating command to generate ciliumpassword secret
2020-05-25 01:54:24 -04:00
Justin SB 27aab12b28 Release 1.18.0-alpha.3 2020-05-06 08:19:06 -04:00
Kubernetes Prow Robot 84687b8394
Merge pull request #9022 from acaire/feature-spotinst-controller-v1.0.58
Feature spotinst controller v1.0.58
2020-05-03 06:58:26 -07:00
Ash Caire d523a3d061 feature(spotinst): upgrade controller (v1.0.58) 2020-05-03 20:56:44 +08:00
Ash Caire eff2fe74ca style(spotinst): Remove erroneous YAML separators
This was causing the following error when applying the channel:

I0429 09:05:44.828460   15185 apply.go:71] configmap/spotinst-kubernetes-cluster-controller-config unchanged
secret/spotinst-kubernetes-cluster-controller-certs unchanged
serviceaccount/spotinst-kubernetes-cluster-controller unchanged
clusterrole.rbac.authorization.k8s.io/spotinst-kubernetes-cluster-controller unchanged
clusterrolebinding.rbac.authorization.k8s.io/spotinst-kubernetes-cluster-controller unchanged
deployment.apps/spotinst-kubernetes-cluster-controller configured
error: error validating "/tmp/channel152526040/manifest.yaml": error validating data: [apiVersion not set, kind not set]; if you choose to ignore these errors, turn validation off with --validate=false
Error: error updating "spotinst-kubernetes-cluster-controller.addons.k8s.io": error applying update from "s3://REDACTED/kops/REDACTED/addons/spotinst-kubernetes-cluster-controller.addons.k8s.io/v1.9.0.yaml": error running kubectl
2020-05-03 20:56:36 +08:00
Ole Markus With 7c49f283c4 Bump cilium to 1.7.3 2020-04-30 07:29:22 +02:00
Kubernetes Prow Robot a1a6611c8f
Merge pull request #9020 from rifelpet/aws-vpc-cni-161
Upgrade amazon vpc cni to 1.6.1
2020-04-28 20:56:25 -07:00
Peter Rifel 4e9d14f51d
Upgrade amazon vpc cni to 1.6.1
https://github.com/aws/amazon-vpc-cni-k8s/releases/tag/v1.6.1
2020-04-28 21:27:00 -05:00
Kubernetes Prow Robot 0adf32f973
Merge pull request #8965 from hakman/weave-fixes
Fix missing changes in Weave manifest
2020-04-28 08:20:09 -07:00
Kubernetes Prow Robot 8d0933fe35
Merge pull request #8982 from olemarkus/cilium-bump-april
Bump cilium to 1.7.2
2020-04-27 13:04:05 -07:00
mosheshitrit 9fffc5f8e0 Make CPU Requests for Calico configurable instead of hard-coded
Update bindata.go

Apply suggestions from code review

Applying suggested changes.

Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>

Applying changes after running `make gofmt`

Applying changes after running `make crds`

Apply suggestions from code review

Applying suggested changes.

Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>

Applying changes after running `make gofmt`

Fixing broken things

Typo fixes

Apply suggestions from code review

Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>

Apply suggested changes and run necessary `make` steps
2020-04-26 12:44:14 -04:00
Ole Markus With 3e3b2019dc Bump cilium to 1.7.2 2020-04-25 19:39:40 +02:00
Ciprian Hacman 227a767ce5 Fix missing changes in Weave manifest 2020-04-23 19:58:13 +03:00
Ciprian Hacman 006c2f9025 Update Calico liveness probe for k8s 1.12-1.15 2020-04-23 10:52:50 +03:00
Ciprian Hacman ad835b478d Update Canal to v3.12.1 for k8s 1.15 2020-04-23 10:52:50 +03:00
Ciprian Hacman 916f3014b7 Update Calico and Canal to v3.13.3 for k8s 1.16+ 2020-04-23 10:52:50 +03:00
Ole Markus With 869ab75dea Use etcd-manager for the cilium etcd cluster 2020-04-16 08:42:59 +02:00
Ole Markus With d5019a6c11 Simplify the spec and templates a bit 2020-04-10 10:48:21 +02:00
Salvatore Mazzarino f754cbda7d NodeLocal DNSCache
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
2020-04-10 10:44:53 +02:00
Justin Santa Barbara b903724e0f Fix a spelling mistake; regenerate 2020-04-07 22:57:10 -04:00
Rodrigo Menezes cfeefed17f fix misspelling 2020-04-07 10:41:55 -04:00
Ciprian Hacman 49dfafc606 Remove critical-pod annotation 2020-04-07 11:38:33 +03:00
Ciprian Hacman 5ee9ba2ee6 Update Calico and Canal to v3.13.2 2020-04-07 10:50:54 +03:00
Kashif Saadat 3606865ad4 Canal v3.13.1 2020-03-25 12:09:46 +00:00
Ole Markus With 7e87eddbea Make cilium operator health check go against localhost IP
Health check will fail otherwise
2020-03-25 08:38:47 +01:00
fentas 49b18cd3f7 Add cilium option tofqdns-dns-reject-response-code 2020-03-21 16:52:08 +01:00
Ole Markus With e77a7d495c Allow configuration of enable-remote-node-identity 2020-03-19 09:48:59 +01:00
Kubernetes Prow Robot 36cf282870
Merge pull request #8752 from johngmyers/missing-priority
Add missing priorityClassName to addons
2020-03-18 17:54:43 -07:00
liranp 526fd98afa
feature(spotinst): upgrade controller (v1.0.57) 2020-03-18 18:48:37 +02:00
Ciprian Hacman eb2c9e336c Update Weave Net to version 2.6.2 2020-03-17 19:44:20 +02:00
John Gardiner Myers 09df6ac844 Remove unreferenced template 2020-03-15 13:51:14 -07:00
John Gardiner Myers 63ccaa14d6 Add missing priorityClassName to addons 2020-03-15 13:51:10 -07:00
Ciprian Hacman b3fbb494c6 Fix template for kube-router v0.4.0 2020-03-15 17:38:59 +02:00
Kubernetes Prow Robot 88600407f4
Merge pull request #8629 from olemarkus/cilium-etcd-operator
Add option to use etcd managed by cilium-etcd-operator as kvstore
2020-03-14 17:18:34 -07:00
Ole Markus With 0c27aa3ce8
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.12.yaml.template
Co-Authored-By: John Gardiner Myers <jgmyers@proofpoint.com>
2020-03-14 21:44:44 +01:00
eric-hole 450fad6e4c Fixes the prom to sd params in metadata-proxy 2020-03-14 12:18:05 -07:00
eric-hole bd6a54958f Fix addon manifest version for metadata-proxy 2020-03-14 12:18:05 -07:00
eric-hole b52e322159 Adds metadata concealment addon for GCE node 2020-03-14 12:18:05 -07:00
eric-hole 12ce5f0e9c Node metadata-concealment in GCE, first pass 2020-03-14 12:18:05 -07:00
Kubernetes Prow Robot 7d030ae459
Merge pull request #8742 from hakman/kube-router-0.4.0-2
Fix template for kube-router v0.4.0
2020-03-14 10:42:35 -07:00
Kubernetes Prow Robot ae51a5b138
Merge pull request #8582 from joshbranham/feature/better-default-storageclass
Create New Default StorageClass: kops-ssd-1-17
2020-03-14 08:46:35 -07:00
Ciprian Hacman 163c11fc6c Fix template for kube-router v0.4.0 2020-03-14 17:23:12 +02:00
Ole Markus With a98666d05a Set kube-proxy-replacement to partial
Fully relying on kube-proxy breaks network policies.
Setting kube-proxy-replacement to partial instead of disabled makes
cilium behave as in 1.6.
2020-03-14 08:38:41 +01:00
Ole Markus With e5ecce6edb Remove conditional with only comments 2020-03-13 20:17:42 +01:00
Ole Markus With 2274045924 Add option to use etcd managed by cilium-etcd-operator as kvstore 2020-03-13 20:17:42 +01:00
Ciprian Hacman 84648dce4a Update kube-router to v0.4.0 2020-03-13 17:54:32 +02:00
Kubernetes Prow Robot e902c45a08
Merge pull request #8697 from UnderMyBed/kuberouter-1.16-fix
Fix kuberouter for k8s 1.16+
2020-03-12 11:12:38 -07:00
Matt Shipman 26fb6d030b fix kuberouter for k8s 1.16
Starting in k8s 1.16 the kublet requires that cniVersion is set in the cni config
2020-03-12 10:27:08 -07:00
Peter Rifel a999b3ea61 fix OWNERS labels format
These need to be lists
2020-03-10 22:47:50 -05:00
Ole Markus With e92e70c7d0 When nodeport is enabled, use strict kube-proxy-replacement to ensure cilium fully replaces kube-proxy 2020-03-10 18:05:44 +01:00
Kubernetes Prow Robot db435ee7cd
Merge pull request #8717 from rifelpet/owners-labels
Add labels to OWNERS files
2020-03-10 08:23:51 -07:00
Peter Rifel 237a125f2c Add labels to OWNERS files
This will automatically label PRs that touch these directories.

This makes it easier to query GitHub for PRs that affect certain areas of the code.

I mostly used existing labels but created some new ones as well.
2020-03-10 08:35:58 -05:00
Ilya Dmitrichenko c304d221a6
Bump Cilium to 1.7.1 for k8s 1.12+ 2020-03-10 11:05:12 +00:00