Commit Graph

14547 Commits

Author SHA1 Message Date
John Gardiner Myers 07474c6d30 Fix CA keys for all integration tests 2021-06-19 10:50:53 -07:00
John Gardiner Myers e0d9259be1 Remove dead code 2021-06-19 10:50:52 -07:00
Ole Markus With cc24bbb3c1 Remove some bashism 2021-06-19 13:46:42 +02:00
Kubernetes Prow Robot 640bcc9d03
Merge pull request #11814 from olemarkus/reduce-policy-size
Reduce policy size
2021-06-19 01:56:50 -07:00
Ole Markus With b37bc7578e Reduce master policy size for lb controller 2021-06-19 10:12:22 +02:00
Ole Markus With 507402e315 Fail early if policy size is too large
This will then also be caught by integration tests
2021-06-19 10:04:11 +02:00
Kubernetes Prow Robot 41a1c0d953
Merge pull request #11252 from johngmyers/rotate-4
Allow "kops create keypair" to stage next CA cert
2021-06-18 23:56:50 -07:00
Kubernetes Prow Robot 23ab07e7b8
Merge pull request #11788 from cardoe/fix-swift
bump the version of gophercloud
2021-06-18 22:42:50 -07:00
Kubernetes Prow Robot 5582e27adb
Merge pull request #11805 from MoShitrit/aws-cni-1.8.0
Upgrade AWS CNI to latest release 1.8.0
2021-06-18 11:04:06 -07:00
John Gardiner Myers 42dc659aaa Allow "create keypair ca" to omit certificate 2021-06-18 10:41:54 -07:00
John Gardiner Myers ae6950711f Allow omitting private key for secondary certs 2021-06-18 10:41:40 -07:00
John Gardiner Myers af74e75382 Allow adding secondary keyset items 2021-06-18 10:41:37 -07:00
John Gardiner Myers 9861009759 Extract receiver for keyset item addition 2021-06-18 10:36:35 -07:00
John Gardiner Myers 3793c92b94 Remove "secret" from "kops create secret keypair ca" 2021-06-18 10:36:19 -07:00
John Gardiner Myers 04df5afb2e Validate Keyset upon storage
Also treat the map key id as authoratative
2021-06-18 10:20:42 -07:00
Moshe Shitrit da35c2a6d6 update-expected after aws-cni version bump 2021-06-18 18:48:09 +03:00
Kubernetes Prow Robot 135cdf3461
Merge pull request #11789 from johngmyers/seed-rng
Seed the random number generator on AWS
2021-06-18 08:48:06 -07:00
Moshe Shitrit 9e6771118f Update version to 1.8.0 2021-06-18 18:42:03 +03:00
John Gardiner Myers 758b7474d2
Fix function comment
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2021-06-18 08:06:16 -07:00
Kubernetes Prow Robot 673117a71f
Merge pull request #11803 from MoShitrit/k8s-versions-june-2021
Update alpha channel k8s versions and ec2 ami base image
2021-06-18 08:06:06 -07:00
Kubernetes Prow Robot 522c14f883
Merge pull request #11804 from justinsb/relnotes_1.20.2
Release notes for 1.20.2
2021-06-18 07:28:07 -07:00
Justin SB 2bd7cf1bd7 Release notes for 1.20.2 2021-06-18 13:51:44 +00:00
Moshe Shitrit b3957da896 Update k8s versions and ec2 ami base image 2021-06-18 16:47:29 +03:00
Kubernetes Prow Robot 451f47fd4d
Merge pull request #11791 from olemarkus/discovery-is-wellknown
Delete all files in the provided discoveryStore on cluster deletion
2021-06-18 01:14:04 -07:00
Kubernetes Prow Robot 94bf1f3dee
Merge pull request #11747 from olemarkus/irsa-ebscsidriver
Allow using IRSA for EBS CSI Driver
2021-06-18 00:22:05 -07:00
Ole Markus With 7180156c12 Delete known files in the provided discoveryStore on cluster deletion 2021-06-18 08:57:57 +02:00
Ole Markus With 33a7de60a7 Enable IRSA for EBS CSI Driver 2021-06-18 08:05:59 +02:00
John Gardiner Myers b1e77af664 hack/update-expected.sh 2021-06-17 23:03:52 -07:00
John Gardiner Myers 42bf3ee85b Seed the random number generator on AWS 2021-06-17 22:59:43 -07:00
Ole Markus With 7b850555eb Don't add volume multiple times to a pod 2021-06-18 07:31:33 +02:00
Kubernetes Prow Robot 7ec956dd00
Merge pull request #11748 from olemarkus/irsa-cas
Enable ability to use IRSA for cluster autoscaler
2021-06-17 21:00:05 -07:00
Ole Markus With 0bed2b1f7b Fix validating presence of AWS EBS CSI 2021-06-17 20:47:40 +02:00
Kubernetes Prow Robot 559b57ea4c
Merge pull request #11381 from dntosas/addons-add-npd
[addons] Introduce NodeProblemDetector
2021-06-17 00:58:19 -07:00
Kubernetes Prow Robot d35bce0ff8
Merge pull request #11764 from olemarkus/cilium-etcd-fix
Don't try to build etcd-manager secrets for cilium twice
2021-06-17 00:14:20 -07:00
Kubernetes Prow Robot 190531f65a
Merge pull request #11778 from codablock/fix-kops-export
Also set haveUserInfo=true in case --user was provided in "kops export kubecfg"
2021-06-16 23:06:20 -07:00
John Gardiner Myers 53695fc183 Put versioned API of cluster into state store 2021-06-16 19:33:46 -07:00
dntosas 20124d3ba9
[addons] Introduce NodeProblemDetector
Node Problem Detector aims to make various node problems visible to
the upstream layers in the cluster management stack. It is a daemon
that runs on each node, detects node problems and reports them to apiserver
so to avoid scheduling new pods on bad nodes and also easily identify
which are the problems on underlying nodes.

Project Home: https://github.com/kubernetes/node-problem-detector

Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 21:00:22 +03:00
Doug Goldstein 80da992275
bump the version of gophercloud
Since the v1.19.0 release of kOps the OpenStack integration has been
broken because gophercloud made a change to start escaping all path
names for files stored in swift. kOps used a file with a slash in it
which was getting escaped and then not handled correctly. This has been
fixed in upstream gophercloud with gophercloud/gophercloud#2160 which
was included in gophercloud v0.18.0. Bump is for issue #9933.
2021-06-16 11:50:13 -05:00
Ole Markus With 6e8e027aff Enable IRSA for Cluster Autoscaler 2021-06-16 18:03:11 +02:00
Ole Markus With b2588b637b fix missing lifecycle when deleting iam roles 2021-06-16 13:59:19 +02:00
Kubernetes Prow Robot 8d91f868b1
Merge pull request #11780 from olemarkus/bump-cas-addon-version
Bump the cas addon version.
2021-06-16 04:13:58 -07:00
Ole Markus With 03ee36832d Bump the cas addon version.
Between kOps 1.19 and 1.20, the version went from 1.19.1 to 1.19.0, which prevents any further changes from being applied to the cluster. Bumping to 1.19.2 so that channels can apply again
2021-06-16 12:32:39 +02:00
Kubernetes Prow Robot 84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
Alexander Block 6ae8d8cc9e Also set haveUserInfo=true in case --user was provided in "kops export kubecfg"
Without setting it to true, --user is completely ignored.
2021-06-16 09:36:47 +02:00
Kubernetes Prow Robot 9753bd5b65
Merge pull request #11777 from hakman/viper_v1.8.0
Update github.com/spf13/viper to v1.8.0
2021-06-16 00:02:00 -07:00
dntosas 7bf65ff7ef
[cni/cilium] Add support for additional config options
In this commit, we enable users define their setup with following
additional fields:

- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy

Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.

Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Ole Markus With f80b550c7a Use internal name for cilium etcd if we do not enable api server nodes 2021-06-16 08:27:26 +02:00
Ciprian Hacman 8c5484945d Update github.com/spf13/viper to v1.8.0 2021-06-16 08:12:42 +02:00
Kubernetes Prow Robot caf41e899f
Merge pull request #11772 from johngmyers/smaller-podcidr
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 22:29:59 -07:00
Kubernetes Prow Robot d565d11266
Merge pull request #11775 from johngmyers/trim-worker-iam
Trim unnecessary paths from worker node IAM
2021-06-15 21:45:59 -07:00