Commit Graph

11992 Commits

Author SHA1 Message Date
Ole Markus With ff6c04938d Add kops delete instance command
Add support for deleting instance by k8s node name

Add yes flag
2020-08-28 08:43:30 +02:00
Kubernetes Prow Robot 93f7a5d9cf
Merge pull request #9827 from rifelpet/gce-bastion
GCE - Set Bastion InstanceGroup zone
2020-08-27 13:26:11 -07:00
Rodrigo Menezes 157df7052c Move from debian-hyperkube-base to debian-base for node-authorizer 2020-08-27 23:18:25 +03:00
Peter Rifel 55f33c68b3
Cleanup old v1alpha1 test outputs 2020-08-27 14:30:10 -05:00
Peter Rifel 64f6f5e2cb
Add integration test for GCE private topology with bastion 2020-08-27 14:28:26 -05:00
Peter Rifel 8bf1dfd43e
GCE - Set Bastion InstanceGroup zone
GCE uses Spec.Zones rather than Spec.Subnets because subnets are regional rather than zonal.
This sets the Zones field for bastion IGs in GCE, avoiding an index out of range panic during cluster creation.
2020-08-27 14:17:02 -05:00
ozdanborne 6ae4337249 remove nodeAffinity from typha 2020-08-27 12:59:08 -04:00
Kubernetes Prow Robot e5e8908cce
Merge pull request #9821 from olemarkus/openstack-newer-nova-3
Reconcile ports and floating ips
2020-08-27 07:15:53 -07:00
Kubernetes Prow Robot 3a75ecc864
Merge pull request #9732 from rifelpet/export-kubecfg-internal
Add --internal flag for export kubecfg that targets the internal dns name
2020-08-27 06:01:53 -07:00
Kubernetes Prow Robot 6a33402702
Merge pull request #9820 from olemarkus/managed-sgs
Remove unknown rules from managed security groups on openstack
2020-08-27 03:43:03 -07:00
Kubernetes Prow Robot 7f0eaaf28e
Merge pull request #9824 from hakman/upd-deps-1.19.0
Update k8s dependencies to v1.19.0
2020-08-26 22:31:02 -07:00
Ciprian Hacman 5c7334fb88 Update k8s dependencies to v1.19.0 2020-08-27 07:16:31 +03:00
Peter Rifel d0b8c654bd
Add --internal flag for export kubecfg that targets the internal dns name
Kops creates an "api.internal.$clustername" dns A record that points to the master IP(s)

This adds a flag that will use that name and force the CA cert to be included.
This is a workaround for client certificate authentication not working on API ELBs with ACM certificates.
The ELB has a TLS listener rather than TCP, so the client certificate is not passed through to the apiserver.
Using --internal will bypass the API ELB so that the client certificate will be passed directly to the apiserver.
This also requires that the masters' security groups allow 443 access from the client which this does not handle automatically.
2020-08-26 21:15:18 -05:00
Kubernetes Prow Robot ffaf75f943
Merge pull request #9822 from MoShitrit/aws-cni-1.7.1
Upgrade AWS VPC CNI to 1.7.1
2020-08-26 12:56:19 -07:00
MoShitrit db0111acfe Upgrade AWS VPC CNI to 1.7.1 2020-08-26 13:54:01 -04:00
Kubernetes Prow Robot b00f8049b6
Merge pull request #9808 from hakman/kope-to-k8s.gcr.io
Pull images from k8s.gcr.io/kops instead of docker.io/kope
2020-08-26 07:18:05 -07:00
Ole Markus With d2127d8981 Reconsile floating ips to instances 2020-08-26 14:17:24 +02:00
Ole Markus With 0ae88cde8a Support reconsiling server ports 2020-08-26 14:17:24 +02:00
Ole Markus With 8e4f3b1458 Tags are never used 2020-08-26 14:17:24 +02:00
Ole Markus With 5cb63fb788 Fail if we find multiple sgs with same name 2020-08-26 13:41:15 +02:00
Kubernetes Prow Robot 165933852d
Merge pull request #9790 from olemarkus/openstack-newer-nova
Remove compute floating ip extension
2020-08-26 04:26:03 -07:00
Ole Markus With 14a6f92f53 Delete SG rules that kops don't explicitly add to managed SGs 2020-08-26 11:09:22 +02:00
Ole Markus With 6cc7153bbe Don't fatal on non-fatal things in servergroup tests 2020-08-26 10:52:34 +02:00
Ole Markus With d6615e523d Remove some duplicate code 2020-08-26 10:52:34 +02:00
Kubernetes Prow Robot 154335e758
Merge pull request #9818 from hakman/kube-router-1.0.1
Update kube-router to v1.0.1
2020-08-26 01:46:03 -07:00
Ciprian Hacman fd62ca9e42 Update kube-router to v1.0.1 2020-08-26 10:53:22 +03:00
Kubernetes Prow Robot f33d6bd2b9
Merge pull request #9816 from hakman/calico-3.15.2
Update Calico to v3.15.2 for k8s 1.16+
2020-08-26 00:42:03 -07:00
Ciprian Hacman eb218cdc1a Update Calico to v3.15.2 for k8s 1.16+ 2020-08-26 10:01:22 +03:00
Kubernetes Prow Robot f8a89b54db
Merge pull request #9812 from justinsb/write_full_certificate_chain
Support writing a full certificate chain
2020-08-25 22:32:02 -07:00
Kubernetes Prow Robot 5b80bb8147
Merge pull request #9815 from rifelpet/fix-gce-private
Fix GCE cluster creation with private topology
2020-08-25 21:06:03 -07:00
Peter Rifel 4d8f07c4f8
Fix GCE cluster creation with private topology
This was later failing api validation with:

`spec.subnets[1].region: Required value: region must be specified for GCE subnets`

So now we copy the region value from the equivalent non-utility subnet when creating utility subnets.
2020-08-25 20:03:06 -05:00
Kubernetes Prow Robot 5179c2758c
Merge pull request #9807 from victorfrancax1/perm-boundaries-docs
Adding docs on AWS Permissions Boundaries support
2020-08-25 16:40:02 -07:00
Kubernetes Prow Robot e1d5ae8896
Merge pull request #9814 from justinsb/refactor_context
Refactor: KopsModelContext embeds IAMModelContext
2020-08-25 09:44:16 -07:00
Justin SB b158ffab04 Refactor: KopsModelContext embeds IAMModelContext
go syntax makes this an annoying change, unfortunately.
2020-08-25 11:22:34 -04:00
Justin SB 2be21562a9 Support writing a full certificate chain
This means that our https endpoint will serve the ca.crt as well.
2020-08-25 11:09:04 -04:00
Victor Ferreira 486eca13cf docs(iam_roles): adding docs on Permissions Boundaries 2020-08-25 11:31:54 -03:00
Kubernetes Prow Robot dfe40f85d9
Merge pull request #9811 from hakman/shipbot-images
Add all images to GH release
2020-08-25 05:46:16 -07:00
Ciprian Hacman 4dbc3ca43e Add all images to GH release 2020-08-25 14:33:14 +03:00
Kubernetes Prow Robot 3b865ceaa1
Merge pull request #9809 from hakman/protokube-pull
Stop trying to pull the Protokube image
2020-08-25 01:02:16 -07:00
Ciprian Hacman f267c54b9a Stop trying to pull the Protokube image 2020-08-25 09:04:45 +03:00
Ciprian Hacman a4ff90205a Pull images from k8s.gcr.io/kops instead of docker.io/kope 2020-08-25 08:04:36 +03:00
Kubernetes Prow Robot 724ec2fcf7
Merge pull request #9805 from hakman/relnotes_1.19.0-alpha.3
Release notes for 1.19.0-alpha.3
2020-08-24 10:50:19 -07:00
Ciprian Hacman 56994de81c Release notes for 1.19.0-alpha.3 2020-08-24 20:05:56 +03:00
Kubernetes Prow Robot b3721f9dd4
Merge pull request #9565 from rifelpet/k-119
Upgrade kubernetes dependencies to 1.19.0-rc.4
2020-08-24 09:43:41 -07:00
Peter Rifel dd75c1ed91
make apimachinery crds gomod, update-expected.sh 2020-08-24 10:58:09 -05:00
Peter Rifel 315c5b3ad2
Upgrade controller-runtime to latest 2020-08-24 10:54:18 -05:00
Peter Rifel b3709b8806
Upgrade kubernetes dependencies to 1.19.0-rc.4 2020-08-24 10:54:15 -05:00
Kubernetes Prow Robot 9cb6797f67
Merge pull request #9801 from hakman/release-1.19.0-alpha.3
Release 1.19.0-alpha.3
2020-08-24 08:53:41 -07:00
Kubernetes Prow Robot 92c0bfc72f
Merge pull request #9804 from MoShitrit/bump-stable-versions
Bump stable versions from alpha
2020-08-24 08:09:40 -07:00
MoShitrit 50d7c6c6e2 Bump stable versions from alpha 2020-08-24 10:26:50 -04:00