Commit Graph

2128 Commits

Author SHA1 Message Date
John Gardiner Myers 852e70f54d Don't require nodeup tasks to have SetName() 2020-06-08 08:42:42 -07:00
Ciprian Hacman c4d10a1bb0 Update Weave for CVE-2020-13597 2020-06-06 13:19:49 +03:00
Kubernetes Prow Robot c05457e16a
Merge pull request #9221 from spotinst/feat-draining-timeout
Spotinst: Allow a user specifiable node draining timeout
2020-06-04 16:59:44 -07:00
John Gardiner Myers f9b0415093 Update generated files 2020-06-04 12:13:49 -07:00
John Gardiner Myers e88e0cf7ec Remove code supporting dropped k8s versions 2020-06-04 12:11:51 -07:00
John Gardiner Myers 07f5e58cac Bump supported and recommended k8s versions for kops 1.19 2020-06-04 12:11:51 -07:00
Kubernetes Prow Robot 5cc1b5ad8e
Merge pull request #9268 from hakman/calico-CVE-2020-13597
Update Calico and Canal for CVE-2020-13597
2020-06-04 04:03:14 -07:00
Kubernetes Prow Robot c6dcaa8199
Merge pull request #9154 from MoShitrit/issue-9031
Add support for encryption in Cilium
2020-06-04 03:11:15 -07:00
Ciprian Hacman b1ee578e5c Update Calico and Canal for CVE-2020-13597 2020-06-04 11:40:34 +03:00
Kubernetes Prow Robot 4fe5ad03f8
Merge pull request #9255 from olemarkus/romana-remove
Remove romana support
2020-06-03 13:24:59 -07:00
Kubernetes Prow Robot dbcf6f7b73
Merge pull request #9256 from hakman/cni-0.8.6
Use CNI 0.8.6 for Kubernetes 1.15+
2020-06-03 06:24:27 -07:00
Kubernetes Prow Robot 4ef6bbe229
Merge pull request #9175 from mtl-wgtwo/calico-ip-detection-method
Enable configuration of the calico IP_AUTODETECTION_METHOD  and IP6_AUTODETECTION_METHOD
2020-06-03 06:24:18 -07:00
Ciprian Hacman 92a818b717 Use CNI 0.8.6 for Kubernetes 1.15+ 2020-06-03 11:37:22 +03:00
Ciprian Hacman c0b62a74ca Remove all traces of utils.tar.gz 2020-06-03 09:55:45 +03:00
Ole Markus With 991549a5f4 Remove support for Romana 2020-06-03 08:23:53 +02:00
Kubernetes Prow Robot 1f93f9e645
Merge pull request #9214 from MoShitrit/update-aws-cni-1.6.2
Upgrde amazon vpc cni to 1.6.2
2020-06-01 14:44:15 -07:00
liranp 53f3ac776a
feat(spot): add support for draining timeout 2020-05-31 17:20:18 +03:00
Ole Markus With 7342525872 Remove vsphere from kops files 2020-05-30 13:36:55 +02:00
Ole Markus With 89fba09caa Remove vsphere vendor stuff and related build files 2020-05-30 13:34:39 +02:00
MoShitrit 90dfe39396 Upgrde amazon vpc cni to 1.6.2 2020-05-30 00:07:28 -04:00
Kubernetes Prow Robot 6830cf6d44
Merge pull request #9065 from johngmyers/remove-distro
Remove support for CoreOS and Jessie
2020-05-27 23:22:01 -07:00
Matt Long c00464f11d Update crds, apis, models. Add limited field validation 2020-05-27 15:24:01 +02:00
Srikanth 55e07860db Use debian as default image for DO images 2020-05-27 00:43:26 +05:30
MoShitrit 316a0e2b00 Adding encryption support for Cilium
Adding support for 'secret-name' flag

Adding instructions to enable encryption

Updating docs for cli

Addressing comments

Adding ciliumpassword subcommand to 'kops create secret'

Updating command to generate ciliumpassword secret
2020-05-25 01:54:24 -04:00
Kubernetes Prow Robot bfd65ae589
Merge pull request #9157 from olemarkus/networking-cleanup
Networking cleanup
2020-05-24 07:03:10 -07:00
liranp 23c0cdab36
feat(spotinst): new hybrid mode 2020-05-23 21:39:04 +03:00
John Gardiner Myers 2d98e5609c Remove/fix more CoreOS references 2020-05-22 20:54:41 -07:00
Kubernetes Prow Robot ee504ac781
Merge pull request #9116 from srikiz/DO-LB-HandleUpdates
[Digital Ocean] Handle logic for kops edit/update cluster
2020-05-22 01:02:37 -07:00
Ole Markus With eebb605c9c Remove as much of the classic networking logic as we can 2020-05-22 08:08:58 +02:00
Ole Markus With d1ff25bb4e Remove some rather long networking nil checks 2020-05-22 08:08:58 +02:00
John Gardiner Myers 8a6d29cd40 Remove support for reading legacy-format keypairs 2020-05-20 13:28:13 -07:00
Kubernetes Prow Robot 204cf58c96
Merge pull request #9124 from johngmyers/bastion-private
Don't put bastions in the utility subnets
2020-05-19 21:26:18 -07:00
Kubernetes Prow Robot 2e5d4761d0
Merge pull request #8464 from justinsb/google_clouddns_delete_records
DNS: Don't try to apply empty changesets
2020-05-17 16:17:36 -07:00
Kubernetes Prow Robot bda2a15ee6
Merge pull request #9024 from tomesm/support_launch_template
Added Launch Template support for instance interruption behavior
2020-05-17 15:35:36 -07:00
Justin Santa Barbara 7e710e85d9 DNS: Apply should be a no-op when empty
Document the contract a bit more, change the signature by adding a
context arg and following through to make sure we honor the contract
everywhere.
2020-05-17 16:45:08 -04:00
John Gardiner Myers 154833e652 Fail cluster validation if too few nodes for ig's target size 2020-05-12 22:28:26 -07:00
John Gardiner Myers ec4fe1e7e8 Don't put bastions in the utility subnets 2020-05-12 22:06:34 -07:00
Kubernetes Prow Robot d7d61c683d
Merge pull request #9091 from spotinst/feat-addon-featureflag
Spotinst: Allow users to disable the controller add-on
2020-05-12 09:34:22 -07:00
Srikanth 4783a547b4 Fix govet 2020-05-12 14:09:29 +05:30
Srikanth 203449d7ac Minor changes for code cleanup 2020-05-12 00:29:02 +05:30
Srikanth b6a197e02e Update minor changes 2020-05-11 15:10:52 +05:30
Srikanth 5d3f2447e4 Changes for handling kops update 2020-05-11 15:10:52 +05:30
Jesse Haka bdaeb6df36 upgrade to cinder v3 to use api 2020-05-11 08:06:13 +03:00
Kubernetes Prow Robot 8768178082
Merge pull request #9084 from rifelpet/gce-tf-metadata
Dont use terraform's file() for singleline strings in GCE metadata
2020-05-08 16:21:51 -07:00
Martin Tomes 60dab58486
Update upup/pkg/fi/cloudup/awstasks/launchtemplate_target_api.go
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2020-05-08 22:50:51 +02:00
Martin Tomes a43aa2d74e
Update upup/pkg/fi/cloudup/awstasks/launchtemplate.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:49 +02:00
Martin Tomes 3e725092e9 Launch template target updated
Added InstanceInterruptionBehavior to RenderAWS and Find. Fixed typo in instancegroups
2020-05-07 17:35:57 +02:00
liranp 4f207e4ac3
feat(spotinst): allow users to disable the controller addon 2020-05-07 18:11:17 +03:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Peter Rifel ef6abbcd5c
Don't use file references for single line strings in gce's metadata fields 2020-05-06 23:06:24 -05:00