Commit Graph

11992 Commits

Author SHA1 Message Date
John Gardiner Myers 77d5f12315 Improve description of detaching instances 2020-09-01 21:47:05 -07:00
Ciprian Hacman 32e6da7576 Detect AWS region for S3 inside containers 2020-09-02 06:41:12 +03:00
Ciprian Hacman 1006f9082d Update Calico to v3.16.0 for k8s 1.16+ 2020-09-02 05:48:49 +03:00
Kubernetes Prow Robot 86cbd29632
Merge pull request #9853 from justinsb/refactor_route53
Refactor IAM route53 construction
2020-09-01 14:25:51 -07:00
Justin SB 5d1e7bcf82 Refactor IAM route53 construction
This helps for the JWKS / ServiceAccount role support.
2020-09-01 11:34:42 -04:00
Kubernetes Prow Robot e6b684cc48
Merge pull request #9850 from olemarkus/openstack-get-instances
Populate cloudinstances data on openstack
2020-09-01 03:49:50 -07:00
Ma Xinjian 1bda78be78 fix "unbound variable" issue
IGNORE is an empty array, it throws error when make verify-staticcheck
$ make verify-staticcheck
hack/verify-staticcheck.sh
hack/verify-staticcheck.sh: line 50: IGNORE[*]: unbound variable
make: *** [verify-staticcheck] Error 1

Signed-off-by: Ma Xinjian <maxj.fnst@cn.fujitsu.com>
2020-09-01 16:33:50 +08:00
Ole Markus With e9cc96baab Fully support kops get instances on openstack 2020-09-01 09:43:26 +02:00
Ole Markus With a483945711 Refactor based on changes to cloud instances 2020-09-01 08:41:53 +02:00
Ole Markus With c01455cf91 Keep the good part from last attempt 2020-09-01 08:30:03 +02:00
Kubernetes Prow Robot e11146c0df
Merge pull request #9799 from olemarkus/cloudinstances-refactor
Cloudinstances refactor
2020-08-31 23:23:50 -07:00
Kubernetes Prow Robot e0da9c0b36
Merge pull request #9849 from MaXinjian/shellcheck
Keep SHELLCHECK_IMAGE vesion sync with SHELLCHECK_VERSION defined before
2020-08-31 20:45:50 -07:00
Ma Xinjian dc852fbb73 Keep SHELLCHECK_IMAGE vesion sync with SHELLCHECK_VERSION defined before
Signed-off-by: Ma Xinjian <maxj.fnst@cn.fujitsu.com>
2020-09-01 09:55:13 +08:00
Kubernetes Prow Robot 4fa353725f
Merge pull request #9841 from johngmyers/remove-deferral
Remove more machinery for file-based cloudup models
2020-08-31 14:25:50 -07:00
Kubernetes Prow Robot a8441fbf31
Merge pull request #9847 from zetaab/storageversion
Update OpenStack CSIDriver to v1 and update few csi deps
2020-08-31 13:03:50 -07:00
Jesse Haka 92bc5689f3 regen bindata 2020-08-31 22:21:52 +03:00
Jesse Haka d9e6638d9c update csi versions 2020-08-31 22:20:59 +03:00
Jesse Haka 4741dce354 update apiversion to v1 stable 2020-08-31 22:16:21 +03:00
Kubernetes Prow Robot 26859b45fc
Merge pull request #9846 from spotinst/feat-spot-controller-1.0.64
Spotinst: Upgrade the Spot Cluster Controller to version 1.0.64
2020-08-31 12:08:44 -07:00
liranp b10f07fefc
feat(spot): upgrade the controller (v1.0.64) 2020-08-31 19:59:15 +03:00
Kubernetes Prow Robot 277038d419
Merge pull request #9839 from rifelpet/tf-cert-id
Dont generate the ssl_certificate_id field on TCP listeners in Terraform
2020-08-31 06:14:21 -07:00
Kubernetes Prow Robot 2dbb2e5f7c
Merge pull request #9843 from olemarkus/cilium-upgrades-aug
Upgrade cilium versions
2020-08-31 05:28:21 -07:00
Ole Markus With 715e46d58e Upgrade cilium versions 2020-08-31 12:01:03 +02:00
Kubernetes Prow Robot fc66e0161e
Merge pull request #9836 from justinsb/openstack_reauth
Always use OpenStack Swift reauthentication
2020-08-31 00:40:20 -07:00
John Gardiner Myers 3e75884661 Remove unused functionality 2020-08-30 22:55:21 -07:00
John Gardiner Myers d95bf95c50 Remove dead code 2020-08-30 22:44:40 -07:00
Kubernetes Prow Robot 5d09a9a95b
Merge pull request #9667 from justinsb/kubectl_auth_helper
Support authentication helper for kubectl
2020-08-30 21:46:21 -07:00
Kubernetes Prow Robot 56bab9fa4f
Merge pull request #9813 from justinsb/expose_jwks
Expose JWKS via a feature-flag
2020-08-30 21:06:20 -07:00
Ole Markus With 0ec71686b9 Refactor cloudinstancegroupmember in a more independent cloud instance representation
Apply suggestions from code review

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 21:37:03 +02:00
Justin SB 8757a2ce2a kubeconfig generation: add tests for kops plugin
Also slightly simplify the tests and Kubecfg Builder signature by
passing in the ConfigAccess only when needed.
2020-08-30 15:17:36 -04:00
Justin SB 0cda0f5068 Support authentication helper for kubectl
We create a simple exec plugin command which can create and renew
short-lived admin credentials on the fly, essentially leveraging the
security of the underlying cloud credentials.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 15:16:20 -04:00
Kubernetes Prow Robot 4d7632aa26
Merge pull request #8896 from justinsb/reflect_set
Implement setter by reflection
2020-08-30 12:00:20 -07:00
Peter Rifel 0326ce4ad7
Dont generate the ssl_certificate_id field on TCP listeners in Terraform 2020-08-30 09:44:16 -05:00
Justin SB 786423f617 Expose JWKS via a feature-flag
When the PublicJWKS feature-flag is set, we expose the apiserver JWKS
document publicly (including enabling anonymous access).  This is a
stepping stone to a more hardened configuration where we copy the JWKS
document to S3/GCS/etc.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 10:15:11 -04:00
Justin SB c63ce4b5ab Implement setter by reflection
This means we no longer have to individually hard-code the `kops set`
fields, however we use the "language" we're now demonstrated.

We add tests to ensure we have parity with our existing (hard-coded)
setter logic.
2020-08-30 09:59:52 -04:00
Kubernetes Prow Robot e6b8c82d88
Merge pull request #9838 from etwillbefine/api-server-cors
add support for cors-allowed-origins
2020-08-29 16:54:21 -07:00
Kubernetes Prow Robot 328f637880
Merge pull request #8119 from justinsb/addons_are_objects
Addons: Support arbitrary additional objects
2020-08-29 15:20:21 -07:00
Kubernetes Prow Robot 3941bd507d
Merge pull request #9837 from justinsb/is_ready
TaskDependentResource: support preview when the task isn't ready
2020-08-29 14:22:20 -07:00
etwillbefine 2b0970376e use list of strings for CORS 2020-08-29 22:11:24 +02:00
etwillbefine 1b6ee2c7e8 add support for cors-allowed-origins
closes https://github.com/kubernetes/kops/issues/2045

correct typo in flag attribute

run code-gen, correct field description
2020-08-29 19:14:39 +02:00
Justin SB a1553bdf0b TaskDependentResource: support preview when the task isn't ready
This is needed because otherwise if we try to diff a computed field,
we can't read the value.
2020-08-29 08:39:14 -04:00
Justin SB d4480e4721 Always use OpenStack Swift reauthentication
If we were using credentials from env vars, we would not do
reauthentication with Swift.
2020-08-29 08:25:59 -04:00
Kubernetes Prow Robot 3f079cd1d9
Merge pull request #9831 from justinsb/cloudbuild_configurable_ci_build
cloudbuild: allow CI env var to be specified
2020-08-28 07:07:49 -07:00
Kubernetes Prow Robot 3be4aa0131
Merge pull request #9830 from justinsb/dont_repush
Use the get_workspace_status script to get the versions
2020-08-28 06:18:54 -07:00
Justin Santa Barbara f32fcc35fa Addons: Support arbitrary additional objects
We will be managing cluster addons using CRDs, and so we want to be
able to apply arbitrary objects as part of cluster bringup.

Start by allowing (behind a feature-flag) for arbitrary objects to be
specified.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-28 09:03:41 -04:00
Justin SB 6bfcbdde2c cloudbuild: allow CI env var to be specified
This should allow us to build our tagged builds as _non_ CI builds.
2020-08-28 08:36:58 -04:00
Justin SB eb2943671f Use the get_workspace_status script to get the versions
This avoids duplication of logic / different logic - and the logic in
the Makefile was indeed different, which was causing us to overwrite
the staging alpha images.
2020-08-28 08:34:42 -04:00
Kubernetes Prow Robot 5e0c55bfb3
Merge pull request #9826 from ozdanborne/remove-typha-affinity
remove nodeAffinity from typha
2020-08-28 01:16:52 -07:00
Kubernetes Prow Robot e537846b41
Merge pull request #9784 from olemarkus/kops-delete-instance
Add kops delete instance command
2020-08-28 00:36:53 -07:00
Kubernetes Prow Robot 7356e719f2
Merge pull request #9828 from rdrgmnzs/remove-debian-hyperkube
Move from debian-hyperkube-base to debian-base for node-authorizer
2020-08-27 23:54:53 -07:00