Commit Graph

3141 Commits

Author SHA1 Message Date
Kubernetes Prow Robot d97eb510dc
Merge pull request #9973 from olemarkus/cleanup-cloud
Build cloud outside of PerformAssignments
2020-09-22 23:42:08 -07:00
Ole Markus With 7bc17f4b1f Build cloud outside of PerformAssignments
We tend to build cloud, call some method, and then build cloud over
again. It would be easier to just pass the first one along.

Passing along cloud would also make it easier to mock cloud.
2020-09-23 07:54:28 +02:00
Kubernetes Prow Robot c000f678b2
Merge pull request #9972 from olemarkus/cleanup-consolidate-cluster-builder
Consolidate all buildMinimalClusters into a generic test cluster builder
2020-09-22 22:52:08 -07:00
Alexander Block 9aef3dba87 Update manifestHash for networking.cilium.io/k8s-1.12-v1.8.yaml 2020-09-22 17:09:41 +02:00
Ole Markus With 6797998ac1 Consolidate all buildMinimalClusters into a generic test cluster builder 2020-09-19 19:55:19 +02:00
Kubernetes Prow Robot b6d023d5d9
Merge pull request #9965 from olemarkus/openstack-fix-fip-description
Fix fip description
2020-09-19 02:56:28 -07:00
Kubernetes Prow Robot 255cd59b67
Merge pull request #9964 from rifelpet/sa-partition
Add AWS partition support to iam service account roles
2020-09-18 06:48:46 -07:00
Kubernetes Prow Robot f07d248a24
Merge pull request #9958 from hakman/hash-mirrors
Use all kops mirrors to determine artifacts hashes
2020-09-18 04:00:45 -07:00
Kubernetes Prow Robot e7bfedd1ac
Merge pull request #9921 from olemarkus/nth
Add addon for aws node termination handler
2020-09-18 03:10:45 -07:00
Ciprian Hacman 0c6f1c733c Use all kops mirrors to determine artifacts hashes 2020-09-18 09:44:37 +03:00
Ole Markus With c7930ac477 Fix fip description
Set description field on existing floating ips
2020-09-18 07:20:47 +02:00
Jesse Haka 5d455f655b add clustername for filters 2020-09-17 23:55:21 +03:00
Ole Markus With b9212f85ad Add addon for aws node termination handler 2020-09-17 21:09:28 +02:00
Peter Rifel d4d4545345
Add AWS partition support to iam service account roles 2020-09-17 10:01:27 -05:00
Peter Rifel f0b94c7b5c
Add instance groups to bootstrapchannelbuilder tests
Also updates some clusters to 1.19 to exercise the kops-controller node bootstrapping logic
2020-09-17 08:31:40 -05:00
Adam Smith 2fb1a4ecd2 Support ChainInsertMode config option for Calico Networking 2020-09-16 10:38:45 +01:00
Ciprian Hacman 0eb626fcdd Release 1.19.0-alpha.4 2020-09-16 11:37:38 +03:00
Ole Markus With d3ae52ce4b Remove template function test to make bazel happy
This test is sort of redundant when we have integration tests etc covering rendering of these templates
2020-09-15 20:43:21 +02:00
Ole Markus With 926a0bc7c1 Block external CCM for k8s less than 1.13 2020-09-15 15:51:23 +02:00
Jesse Haka 8b02114d2f
Update upup/pkg/fi/cloudup/openstacktasks/floatingip.go
Co-authored-by: Ole Markus With <olemarkus@gmail.com>
2020-09-15 13:22:52 +03:00
Jesse Haka 82fbc1603a use subnet also when creating floatingip 2020-09-15 09:30:44 +03:00
Kubernetes Prow Robot a93febf5a6
Merge pull request #9911 from hakman/fix-gossip
Allow the BootstrapClient task to run after Protokube
2020-09-13 21:10:57 -07:00
Kubernetes Prow Robot 7a81b3e10e
Merge pull request #9900 from olemarkus/kops-get-instances-nil-pointer
Continue if asg instance is unknown
2020-09-13 16:14:57 -07:00
Justin SB 2a44cb7f16 Update script and testdata CA keypair
If we generate with the wrong type (usages), the keypair will be
regenerated.
2020-09-12 16:21:15 -04:00
Ciprian Hacman 07ffd665a7 Allow container runtime to run before BootstrapKubeconfig 2020-09-12 08:13:40 +03:00
Ciprian Hacman fe3adb1fe3 Force BootstrapClient to run after Protokube 2020-09-12 08:06:21 +03:00
Justin SB 08ce1dacaf Add missing setResources on CA task
Otherwise it doesn't work the first time round, in the JWKS scenario.
2020-09-11 09:17:55 -04:00
John Gardiner Myers 8adb8e9868 Get launch template versions after filtering templates 2020-09-09 23:04:54 -07:00
Kubernetes Prow Robot 036ea69525
Merge pull request #9352 from justinsb/irsa_with_public
Simplified form of IAM Roles for ServiceAccounts
2020-09-09 22:23:44 -07:00
Ole Markus With f6abac3ec2 Continue if asg instance is unknown
Most likely this comes from ASG thinking the instance is inService, but it is terminating when we run describe from EC2
2020-09-10 07:09:05 +02:00
Kubernetes Prow Robot 4508406515
Merge pull request #9908 from rdrgmnzs/CacheNodeidentityInfo
Allow caching of Nodeidentity Info in kops-controller for AWS.
2020-09-09 13:01:44 -07:00
Rodrigo Menezes 4c057f138a Allow caching of Nodeidentity Info in kops-controller for AWS to reduce the number of DescribeInstances API calls. 2020-09-09 22:11:29 +03:00
Kubernetes Prow Robot 900e3c1b46
Merge pull request #9894 from hakman/calico-3.16.1
Update Calico to v3.16.1
2020-09-09 08:03:52 -07:00
Justin SB a61ecf4c58 Refactor to use interface for iam Subjects
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
Justin SB ccc814dfbc Create tests for JWKS scenarios 2020-09-09 09:57:06 -04:00
Justin SB 8498ac9dbb Create PublicJWKS feature flag
This should be much easier to start and to get under testing; it only
works with a load balancer, it sets the apiserver into anonymous-auth
allowed, it grants the anonymous auth user permission to read our jwks
tokens.  But it shouldn't need a second bucket or anything of that
nature.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:06 -04:00
John Gardiner Myers 0cb9eed851 Add missing spot support to launch template direct render 2020-09-08 23:20:29 -07:00
Ciprian Hacman 0357d33ff6 Update Calico to v3.16.1 2020-09-09 06:37:27 +03:00
Kubernetes Prow Robot 68b2302b48
Merge pull request #9885 from olemarkus/encryptionconfig-warn
Errors when encryptionConfig is enabled, but no encryptionconfig secret
2020-09-08 11:09:45 -07:00
Ole Markus With 192d6a46f9 Errors when encryptionConfig is enabled, but no encryptionconfig secret
When encryptionConfig is enabled, but the secret is missing, there is no
visible errors anywhere. kube-apiserver just goes into a crashloop
without any complains. This PR adds warnings both on the client side and
through nodeup.
2020-09-08 17:46:18 +02:00
Kubernetes Prow Robot 3527d32b26
Merge pull request #9872 from hakman/root-vol-encrypt-lc
Use root volume encryption flag for LaunchConfiguration with TF and CF
2020-09-08 04:31:42 -07:00
Ciprian Hacman 315ed2c9b5 Use new GitHub artifact names for mirrored assets 2020-09-08 10:10:23 +03:00
Ciprian Hacman c7bc3d4397 Update mock version to 1.19.0-alpha.3 2020-09-08 08:45:25 +03:00
Kubernetes Prow Robot bac4afa3e5
Merge pull request #9871 from olemarkus/cilium-upgrades-sept-2
Bump cilium to 1.8.3
2020-09-05 09:15:41 -07:00
Ciprian Hacman 5b1ac28581 Use root volume encryption flag for LaunchConfiguration with TF and CF 2020-09-05 13:17:44 +03:00
Ole Markus With 3ac61c7ea9 Bump cilium to 1.8.3 2020-09-05 10:47:48 +02:00
Kubernetes Prow Robot d8b7310c69
Merge pull request #9787 from olemarkus/cas
Implement cluster autoscaler as bootstrap addon
2020-09-04 22:37:40 -07:00
Kubernetes Prow Robot 7083a9a52b
Merge pull request #9829 from hakman/calico-3.16.0
Update Calico to v3.16.0 for k8s 1.16+
2020-09-03 01:23:40 -07:00
Ole Markus With a0e9fab104 Implement cluster autoscaler as bootstrap addon
Use provider-agnostic node definition for cas instead of aws auto-discovery

Validate clusterAutoscalerSpec

Add spec documentation

Add cas docs

Make CRDs

Apply suggestions from code review

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>

Add enabled flag to cas config

Apply suggestions from code review

Co-authored-by: Guy Templeton <guyjtempleton@googlemail.com>

Add support for custom cas image

Support more k8s versions

Use full image names
2020-09-03 09:52:13 +02:00
Ole Markus With 8cce4756d9 Add instance info to detached nodes 2020-09-02 15:33:13 +02:00