John Gardiner Myers
852e70f54d
Don't require nodeup tasks to have SetName()
2020-06-08 08:42:42 -07:00
Ciprian Hacman
c4d10a1bb0
Update Weave for CVE-2020-13597
2020-06-06 13:19:49 +03:00
Kubernetes Prow Robot
c05457e16a
Merge pull request #9221 from spotinst/feat-draining-timeout
...
Spotinst: Allow a user specifiable node draining timeout
2020-06-04 16:59:44 -07:00
John Gardiner Myers
f9b0415093
Update generated files
2020-06-04 12:13:49 -07:00
John Gardiner Myers
e88e0cf7ec
Remove code supporting dropped k8s versions
2020-06-04 12:11:51 -07:00
John Gardiner Myers
07f5e58cac
Bump supported and recommended k8s versions for kops 1.19
2020-06-04 12:11:51 -07:00
Kubernetes Prow Robot
5cc1b5ad8e
Merge pull request #9268 from hakman/calico-CVE-2020-13597
...
Update Calico and Canal for CVE-2020-13597
2020-06-04 04:03:14 -07:00
Kubernetes Prow Robot
c6dcaa8199
Merge pull request #9154 from MoShitrit/issue-9031
...
Add support for encryption in Cilium
2020-06-04 03:11:15 -07:00
Ciprian Hacman
b1ee578e5c
Update Calico and Canal for CVE-2020-13597
2020-06-04 11:40:34 +03:00
Kubernetes Prow Robot
4fe5ad03f8
Merge pull request #9255 from olemarkus/romana-remove
...
Remove romana support
2020-06-03 13:24:59 -07:00
Kubernetes Prow Robot
dbcf6f7b73
Merge pull request #9256 from hakman/cni-0.8.6
...
Use CNI 0.8.6 for Kubernetes 1.15+
2020-06-03 06:24:27 -07:00
Kubernetes Prow Robot
4ef6bbe229
Merge pull request #9175 from mtl-wgtwo/calico-ip-detection-method
...
Enable configuration of the calico IP_AUTODETECTION_METHOD and IP6_AUTODETECTION_METHOD
2020-06-03 06:24:18 -07:00
Ciprian Hacman
92a818b717
Use CNI 0.8.6 for Kubernetes 1.15+
2020-06-03 11:37:22 +03:00
Ciprian Hacman
c0b62a74ca
Remove all traces of utils.tar.gz
2020-06-03 09:55:45 +03:00
Ole Markus With
991549a5f4
Remove support for Romana
2020-06-03 08:23:53 +02:00
Kubernetes Prow Robot
1f93f9e645
Merge pull request #9214 from MoShitrit/update-aws-cni-1.6.2
...
Upgrde amazon vpc cni to 1.6.2
2020-06-01 14:44:15 -07:00
liranp
53f3ac776a
feat(spot): add support for draining timeout
2020-05-31 17:20:18 +03:00
Ole Markus With
7342525872
Remove vsphere from kops files
2020-05-30 13:36:55 +02:00
Ole Markus With
89fba09caa
Remove vsphere vendor stuff and related build files
2020-05-30 13:34:39 +02:00
MoShitrit
90dfe39396
Upgrde amazon vpc cni to 1.6.2
2020-05-30 00:07:28 -04:00
Kubernetes Prow Robot
6830cf6d44
Merge pull request #9065 from johngmyers/remove-distro
...
Remove support for CoreOS and Jessie
2020-05-27 23:22:01 -07:00
Matt Long
c00464f11d
Update crds, apis, models. Add limited field validation
2020-05-27 15:24:01 +02:00
Srikanth
55e07860db
Use debian as default image for DO images
2020-05-27 00:43:26 +05:30
MoShitrit
316a0e2b00
Adding encryption support for Cilium
...
Adding support for 'secret-name' flag
Adding instructions to enable encryption
Updating docs for cli
Addressing comments
Adding ciliumpassword subcommand to 'kops create secret'
Updating command to generate ciliumpassword secret
2020-05-25 01:54:24 -04:00
Kubernetes Prow Robot
bfd65ae589
Merge pull request #9157 from olemarkus/networking-cleanup
...
Networking cleanup
2020-05-24 07:03:10 -07:00
liranp
23c0cdab36
feat(spotinst): new hybrid mode
2020-05-23 21:39:04 +03:00
John Gardiner Myers
2d98e5609c
Remove/fix more CoreOS references
2020-05-22 20:54:41 -07:00
Kubernetes Prow Robot
ee504ac781
Merge pull request #9116 from srikiz/DO-LB-HandleUpdates
...
[Digital Ocean] Handle logic for kops edit/update cluster
2020-05-22 01:02:37 -07:00
Ole Markus With
eebb605c9c
Remove as much of the classic networking logic as we can
2020-05-22 08:08:58 +02:00
Ole Markus With
d1ff25bb4e
Remove some rather long networking nil checks
2020-05-22 08:08:58 +02:00
John Gardiner Myers
8a6d29cd40
Remove support for reading legacy-format keypairs
2020-05-20 13:28:13 -07:00
Kubernetes Prow Robot
204cf58c96
Merge pull request #9124 from johngmyers/bastion-private
...
Don't put bastions in the utility subnets
2020-05-19 21:26:18 -07:00
Kubernetes Prow Robot
2e5d4761d0
Merge pull request #8464 from justinsb/google_clouddns_delete_records
...
DNS: Don't try to apply empty changesets
2020-05-17 16:17:36 -07:00
Kubernetes Prow Robot
bda2a15ee6
Merge pull request #9024 from tomesm/support_launch_template
...
Added Launch Template support for instance interruption behavior
2020-05-17 15:35:36 -07:00
Justin Santa Barbara
7e710e85d9
DNS: Apply should be a no-op when empty
...
Document the contract a bit more, change the signature by adding a
context arg and following through to make sure we honor the contract
everywhere.
2020-05-17 16:45:08 -04:00
John Gardiner Myers
154833e652
Fail cluster validation if too few nodes for ig's target size
2020-05-12 22:28:26 -07:00
John Gardiner Myers
ec4fe1e7e8
Don't put bastions in the utility subnets
2020-05-12 22:06:34 -07:00
Kubernetes Prow Robot
d7d61c683d
Merge pull request #9091 from spotinst/feat-addon-featureflag
...
Spotinst: Allow users to disable the controller add-on
2020-05-12 09:34:22 -07:00
Srikanth
4783a547b4
Fix govet
2020-05-12 14:09:29 +05:30
Srikanth
203449d7ac
Minor changes for code cleanup
2020-05-12 00:29:02 +05:30
Srikanth
b6a197e02e
Update minor changes
2020-05-11 15:10:52 +05:30
Srikanth
5d3f2447e4
Changes for handling kops update
2020-05-11 15:10:52 +05:30
Jesse Haka
bdaeb6df36
upgrade to cinder v3 to use api
2020-05-11 08:06:13 +03:00
Kubernetes Prow Robot
8768178082
Merge pull request #9084 from rifelpet/gce-tf-metadata
...
Dont use terraform's file() for singleline strings in GCE metadata
2020-05-08 16:21:51 -07:00
Martin Tomes
60dab58486
Update upup/pkg/fi/cloudup/awstasks/launchtemplate_target_api.go
...
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2020-05-08 22:50:51 +02:00
Martin Tomes
a43aa2d74e
Update upup/pkg/fi/cloudup/awstasks/launchtemplate.go
...
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-08 22:49:49 +02:00
Martin Tomes
3e725092e9
Launch template target updated
...
Added InstanceInterruptionBehavior to RenderAWS and Find. Fixed typo in instancegroups
2020-05-07 17:35:57 +02:00
liranp
4f207e4ac3
feat(spotinst): allow users to disable the controller addon
2020-05-07 18:11:17 +03:00
Justin SB
75fd939a62
kube-apiserver: healthcheck via sidecar container
...
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled. That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.
Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.
This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Peter Rifel
ef6abbcd5c
Don't use file references for single line strings in gce's metadata fields
2020-05-06 23:06:24 -05:00