John Gardiner Myers
07474c6d30
Fix CA keys for all integration tests
2021-06-19 10:50:53 -07:00
John Gardiner Myers
e0d9259be1
Remove dead code
2021-06-19 10:50:52 -07:00
Ole Markus With
cc24bbb3c1
Remove some bashism
2021-06-19 13:46:42 +02:00
Kubernetes Prow Robot
640bcc9d03
Merge pull request #11814 from olemarkus/reduce-policy-size
...
Reduce policy size
2021-06-19 01:56:50 -07:00
Ole Markus With
b37bc7578e
Reduce master policy size for lb controller
2021-06-19 10:12:22 +02:00
Ole Markus With
507402e315
Fail early if policy size is too large
...
This will then also be caught by integration tests
2021-06-19 10:04:11 +02:00
Kubernetes Prow Robot
41a1c0d953
Merge pull request #11252 from johngmyers/rotate-4
...
Allow "kops create keypair" to stage next CA cert
2021-06-18 23:56:50 -07:00
Kubernetes Prow Robot
23ab07e7b8
Merge pull request #11788 from cardoe/fix-swift
...
bump the version of gophercloud
2021-06-18 22:42:50 -07:00
Kubernetes Prow Robot
5582e27adb
Merge pull request #11805 from MoShitrit/aws-cni-1.8.0
...
Upgrade AWS CNI to latest release 1.8.0
2021-06-18 11:04:06 -07:00
John Gardiner Myers
42dc659aaa
Allow "create keypair ca" to omit certificate
2021-06-18 10:41:54 -07:00
John Gardiner Myers
ae6950711f
Allow omitting private key for secondary certs
2021-06-18 10:41:40 -07:00
John Gardiner Myers
af74e75382
Allow adding secondary keyset items
2021-06-18 10:41:37 -07:00
John Gardiner Myers
9861009759
Extract receiver for keyset item addition
2021-06-18 10:36:35 -07:00
John Gardiner Myers
3793c92b94
Remove "secret" from "kops create secret keypair ca"
2021-06-18 10:36:19 -07:00
John Gardiner Myers
04df5afb2e
Validate Keyset upon storage
...
Also treat the map key id as authoratative
2021-06-18 10:20:42 -07:00
Moshe Shitrit
da35c2a6d6
update-expected after aws-cni version bump
2021-06-18 18:48:09 +03:00
Kubernetes Prow Robot
135cdf3461
Merge pull request #11789 from johngmyers/seed-rng
...
Seed the random number generator on AWS
2021-06-18 08:48:06 -07:00
Moshe Shitrit
9e6771118f
Update version to 1.8.0
2021-06-18 18:42:03 +03:00
John Gardiner Myers
758b7474d2
Fix function comment
...
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2021-06-18 08:06:16 -07:00
Kubernetes Prow Robot
673117a71f
Merge pull request #11803 from MoShitrit/k8s-versions-june-2021
...
Update alpha channel k8s versions and ec2 ami base image
2021-06-18 08:06:06 -07:00
Kubernetes Prow Robot
522c14f883
Merge pull request #11804 from justinsb/relnotes_1.20.2
...
Release notes for 1.20.2
2021-06-18 07:28:07 -07:00
Justin SB
2bd7cf1bd7
Release notes for 1.20.2
2021-06-18 13:51:44 +00:00
Moshe Shitrit
b3957da896
Update k8s versions and ec2 ami base image
2021-06-18 16:47:29 +03:00
Kubernetes Prow Robot
451f47fd4d
Merge pull request #11791 from olemarkus/discovery-is-wellknown
...
Delete all files in the provided discoveryStore on cluster deletion
2021-06-18 01:14:04 -07:00
Kubernetes Prow Robot
94bf1f3dee
Merge pull request #11747 from olemarkus/irsa-ebscsidriver
...
Allow using IRSA for EBS CSI Driver
2021-06-18 00:22:05 -07:00
Ole Markus With
7180156c12
Delete known files in the provided discoveryStore on cluster deletion
2021-06-18 08:57:57 +02:00
Ole Markus With
33a7de60a7
Enable IRSA for EBS CSI Driver
2021-06-18 08:05:59 +02:00
John Gardiner Myers
b1e77af664
hack/update-expected.sh
2021-06-17 23:03:52 -07:00
John Gardiner Myers
42bf3ee85b
Seed the random number generator on AWS
2021-06-17 22:59:43 -07:00
Ole Markus With
7b850555eb
Don't add volume multiple times to a pod
2021-06-18 07:31:33 +02:00
Kubernetes Prow Robot
7ec956dd00
Merge pull request #11748 from olemarkus/irsa-cas
...
Enable ability to use IRSA for cluster autoscaler
2021-06-17 21:00:05 -07:00
Ole Markus With
0bed2b1f7b
Fix validating presence of AWS EBS CSI
2021-06-17 20:47:40 +02:00
Kubernetes Prow Robot
559b57ea4c
Merge pull request #11381 from dntosas/addons-add-npd
...
[addons] Introduce NodeProblemDetector
2021-06-17 00:58:19 -07:00
Kubernetes Prow Robot
d35bce0ff8
Merge pull request #11764 from olemarkus/cilium-etcd-fix
...
Don't try to build etcd-manager secrets for cilium twice
2021-06-17 00:14:20 -07:00
Kubernetes Prow Robot
190531f65a
Merge pull request #11778 from codablock/fix-kops-export
...
Also set haveUserInfo=true in case --user was provided in "kops export kubecfg"
2021-06-16 23:06:20 -07:00
John Gardiner Myers
53695fc183
Put versioned API of cluster into state store
2021-06-16 19:33:46 -07:00
dntosas
20124d3ba9
[addons] Introduce NodeProblemDetector
...
Node Problem Detector aims to make various node problems visible to
the upstream layers in the cluster management stack. It is a daemon
that runs on each node, detects node problems and reports them to apiserver
so to avoid scheduling new pods on bad nodes and also easily identify
which are the problems on underlying nodes.
Project Home: https://github.com/kubernetes/node-problem-detector
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 21:00:22 +03:00
Doug Goldstein
80da992275
bump the version of gophercloud
...
Since the v1.19.0 release of kOps the OpenStack integration has been
broken because gophercloud made a change to start escaping all path
names for files stored in swift. kOps used a file with a slash in it
which was getting escaped and then not handled correctly. This has been
fixed in upstream gophercloud with gophercloud/gophercloud#2160 which
was included in gophercloud v0.18.0. Bump is for issue #9933 .
2021-06-16 11:50:13 -05:00
Ole Markus With
6e8e027aff
Enable IRSA for Cluster Autoscaler
2021-06-16 18:03:11 +02:00
Ole Markus With
b2588b637b
fix missing lifecycle when deleting iam roles
2021-06-16 13:59:19 +02:00
Kubernetes Prow Robot
8d91f868b1
Merge pull request #11780 from olemarkus/bump-cas-addon-version
...
Bump the cas addon version.
2021-06-16 04:13:58 -07:00
Ole Markus With
03ee36832d
Bump the cas addon version.
...
Between kOps 1.19 and 1.20, the version went from 1.19.1 to 1.19.0, which prevents any further changes from being applied to the cluster. Bumping to 1.19.2 so that channels can apply again
2021-06-16 12:32:39 +02:00
Kubernetes Prow Robot
84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
...
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
Alexander Block
6ae8d8cc9e
Also set haveUserInfo=true in case --user was provided in "kops export kubecfg"
...
Without setting it to true, --user is completely ignored.
2021-06-16 09:36:47 +02:00
Kubernetes Prow Robot
9753bd5b65
Merge pull request #11777 from hakman/viper_v1.8.0
...
Update github.com/spf13/viper to v1.8.0
2021-06-16 00:02:00 -07:00
dntosas
7bf65ff7ef
[cni/cilium] Add support for additional config options
...
In this commit, we enable users define their setup with following
additional fields:
- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy
Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.
Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Ole Markus With
f80b550c7a
Use internal name for cilium etcd if we do not enable api server nodes
2021-06-16 08:27:26 +02:00
Ciprian Hacman
8c5484945d
Update github.com/spf13/viper to v1.8.0
2021-06-16 08:12:42 +02:00
Kubernetes Prow Robot
caf41e899f
Merge pull request #11772 from johngmyers/smaller-podcidr
...
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 22:29:59 -07:00
Kubernetes Prow Robot
d565d11266
Merge pull request #11775 from johngmyers/trim-worker-iam
...
Trim unnecessary paths from worker node IAM
2021-06-15 21:45:59 -07:00