Commit Graph

11992 Commits

Author SHA1 Message Date
Ciprian Hacman 7d4f2cc2be Update Go to v1.15.2 2020-09-15 17:54:05 +03:00
Kubernetes Prow Robot 44af54fa02
Merge pull request #9943 from olemarkus/openstack-disable-ccm-old-k8s
Block external CCM for k8s less than 1.13
2020-09-15 07:30:08 -07:00
Ole Markus With 926a0bc7c1 Block external CCM for k8s less than 1.13 2020-09-15 15:51:23 +02:00
Kubernetes Prow Robot f89d3ebde5
Merge pull request #9936 from zetaab/fixopenstack
use subnet also when creating floatingip
2020-09-15 06:30:07 -07:00
Kubernetes Prow Robot 530d1621f3
Merge pull request #9941 from zetaab/fixpsp
add kube-system psp to system:nodes
2020-09-15 05:46:07 -07:00
Jesse Haka b465466993 recompile bindata 2020-09-15 15:03:38 +03:00
Jesse Haka e6c61d68fd add kube-system psp to system:nodes 2020-09-15 14:57:13 +03:00
Kubernetes Prow Robot 09ba9e4d86
Merge pull request #9935 from olemarkus/openstack-appsecret-noccm
Don't write application credentials to cloud config unless external CCM is enabled
2020-09-15 03:26:07 -07:00
Jesse Haka 8b02114d2f
Update upup/pkg/fi/cloudup/openstacktasks/floatingip.go
Co-authored-by: Ole Markus With <olemarkus@gmail.com>
2020-09-15 13:22:52 +03:00
Ole Markus With 6efb91a15b Don't write application credentials to cloud config unless external CCM is enabled 2020-09-15 09:45:09 +02:00
Jesse Haka 82fbc1603a use subnet also when creating floatingip 2020-09-15 09:30:44 +03:00
Kubernetes Prow Robot 88748fe7b7
Merge pull request #9934 from justinsb/backfill
Document process to get older releases into artifacts.k8s.io
2020-09-14 09:16:59 -07:00
Justin SB 5797f372a9 Document process to get older releases into artifacts.k8s.io 2020-09-14 11:27:25 -04:00
Kubernetes Prow Robot a93febf5a6
Merge pull request #9911 from hakman/fix-gossip
Allow the BootstrapClient task to run after Protokube
2020-09-13 21:10:57 -07:00
Kubernetes Prow Robot 7a81b3e10e
Merge pull request #9900 from olemarkus/kops-get-instances-nil-pointer
Continue if asg instance is unknown
2020-09-13 16:14:57 -07:00
Kubernetes Prow Robot 04b9f41daa
Merge pull request #9883 from hs0210/work
Add unit test for pkg/apis/kops/model/features.go
2020-09-13 15:24:57 -07:00
Kubernetes Prow Robot 58092b5666
Merge pull request #9925 from olemarkus/cas-fixes
Add missing flags to cluster autoscaler template
2020-09-13 00:58:57 -07:00
Kubernetes Prow Robot 3fa13d30bd
Merge pull request #9919 from justinsb/set_resources_on_ca_task
Add missing setResources on CA task
2020-09-12 18:58:57 -07:00
Justin SB 2a44cb7f16 Update script and testdata CA keypair
If we generate with the wrong type (usages), the keypair will be
regenerated.
2020-09-12 16:21:15 -04:00
Ole Markus With 2b5950c24c Add missing flags to template 2020-09-12 08:24:29 +02:00
Ciprian Hacman 07be801a12 Only add additional policies to kops managed IAMRoles 2020-09-12 08:36:24 +03:00
Ciprian Hacman 07ffd665a7 Allow container runtime to run before BootstrapKubeconfig 2020-09-12 08:13:40 +03:00
Ciprian Hacman fe3adb1fe3 Force BootstrapClient to run after Protokube 2020-09-12 08:06:21 +03:00
Kubernetes Prow Robot 69f22a4b52
Merge pull request #9918 from olemarkus/validate-labels
Validate labels
2020-09-11 09:04:15 -07:00
Justin SB 08ce1dacaf Add missing setResources on CA task
Otherwise it doesn't work the first time round, in the JWKS scenario.
2020-09-11 09:17:55 -04:00
Kubernetes Prow Robot bafdacd85d
Merge pull request #9917 from astrikos/astrikos/RemoveForceTCPFromDot
Remove force_tcp flag for nodelocalcache dot zone
2020-09-11 03:12:14 -07:00
Kubernetes Prow Robot ccd810dad9
Merge pull request #9907 from olemarkus/openstack-no-volume-type
Remove constraint of setting volume type for OS
2020-09-11 01:14:14 -07:00
Ole Markus With 9f5ba43445 Validate labels 2020-09-11 09:59:24 +02:00
Andreas Strikos 93c44d867a Remove force_tcp flag for nodelocalcache dot zone
Forcing all DNS communication go through TCP can lead to increased
latency and slower DNS responses since a lot of upstream DNS
servers are not optimized for TCP traffic.
An example is AWS's VPC DNS server that sending all the DNS traffic
through TCP cause it to increase the latencies for this requests.
The kubernetes version has already changed this configmap to skip
force_tcp flag for the . zone, so it makes sense to follow their
example.
Reference https://github.com/kubernetes/kubernetes/blob/master/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml#L100
2020-09-11 09:58:27 +02:00
Kubernetes Prow Robot 041f774642
Merge pull request #9909 from johngmyers/template-filter
Get launch template versions after filtering templates
2020-09-10 21:16:14 -07:00
Ciprian Hacman c1e0991153 Skip the iamPolicy.DNSZone task when using gossip 2020-09-10 22:55:36 +03:00
Kubernetes Prow Robot 0a428bebf8
Merge pull request #9867 from devops-israel/v1.18.0-fix-external-policies
Only apply external policies when these are defined
2020-09-10 10:23:45 -07:00
Evgeny Zislis 608a561f8c
only apply external policy tasks on non-shared iam 2020-09-10 12:58:54 +03:00
Kubernetes Prow Robot a5fc8895dc
Merge pull request #9857 from hakman/detect-aws-region
Detect AWS region for S3 inside containers
2020-09-09 23:17:44 -07:00
John Gardiner Myers 8adb8e9868 Get launch template versions after filtering templates 2020-09-09 23:04:54 -07:00
Kubernetes Prow Robot 036ea69525
Merge pull request #9352 from justinsb/irsa_with_public
Simplified form of IAM Roles for ServiceAccounts
2020-09-09 22:23:44 -07:00
Ole Markus With f6abac3ec2 Continue if asg instance is unknown
Most likely this comes from ASG thinking the instance is inService, but it is terminating when we run describe from EC2
2020-09-10 07:09:05 +02:00
Kubernetes Prow Robot 4508406515
Merge pull request #9908 from rdrgmnzs/CacheNodeidentityInfo
Allow caching of Nodeidentity Info in kops-controller for AWS.
2020-09-09 13:01:44 -07:00
Rodrigo Menezes 4c057f138a Allow caching of Nodeidentity Info in kops-controller for AWS to reduce the number of DescribeInstances API calls. 2020-09-09 22:11:29 +03:00
Ole Markus With ecfdf5715b Remove constraint of setting volume type for OS
There is no real reason to do this. In some cases this may even prevent
clusters from starting where there is no explicit volume type defined in
cinder.
2020-09-09 20:53:17 +02:00
Kubernetes Prow Robot c7bbe9c472
Merge pull request #9904 from justinsb/relnotes_1_18_1
Release notes for 1.18.1
2020-09-09 11:15:07 -07:00
Kubernetes Prow Robot 5e871a7d5e
Merge pull request #9902 from justinsb/relnotes_1_17_2
Release notes for 1.17.2
2020-09-09 10:09:08 -07:00
Justin SB 5c423e9dfa Release notes for 1.18.1 2020-09-09 12:58:08 -04:00
Kubernetes Prow Robot 8a07275bbf
Merge pull request #9901 from commixon/nodelocalcache-configure-resources
Nodelocalcache configure resources
2020-09-09 09:19:08 -07:00
Justin SB ed83ae382d Release notes for 1.17.2 2020-09-09 11:56:24 -04:00
Chris Loukas 65610dbcee Update NodeLocalDNSConfig with Mem/CPU requests
Add NodeLocalDNS.CPURequest and NodeLocalDNS.MemoryRequest to
configure resource requests.

If not explicitly set, fall back to 25m and 5Mi
2020-09-09 18:40:14 +03:00
Kubernetes Prow Robot 900e3c1b46
Merge pull request #9894 from hakman/calico-3.16.1
Update Calico to v3.16.1
2020-09-09 08:03:52 -07:00
Justin SB 6fa8be2716 JSON formatting of IAM: Workaround for optional fields
AWS IAM is very strict and doesn't support `Resource: []` for example.
We implement a custom MarshalJSON method to work around that.
2020-09-09 09:57:07 -04:00
Justin Santa Barbara d8895c57ec Add version logic to UseServiceAccountIAM
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:07 -04:00
Justin SB a61ecf4c58 Refactor to use interface for iam Subjects
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00