Commit Graph

1376 Commits

Author SHA1 Message Date
Adrian Moisey 9e18928fb3
Add support for enable-cadvisor-json-endpoints with Kubelet
Kubernetes 1.18 disables this by default.
For backwards compatibility with monitoring tools, it would be nice to
be able to re-enable this.

https://github.com/kubernetes/kubernetes/issues/68522
2021-03-03 09:06:06 +02:00
Peter Rifel bfd3d8a96b
Add new CPUCredits field to instance group spec 2021-03-01 23:01:20 -06:00
Yan Grunenberger 9d8dec60d6
Allow multi-CNI setups to set usesSecondaryIP (#10828)
* validation.go: remove checks on CNI

* move CNI block check to allow option with others CNI
2021-03-01 01:26:40 -08:00
Peter Rifel 577df0addf
Add support for defining a transit gateway for a default route
I opted to just use a *string for the TGW ID in the route task rather than a full TGW task because kops will never be creating TGWs itself, they will always be defined by ID.
2021-02-28 12:38:29 -06:00
Kubernetes Prow Robot a043925cb6
Merge pull request #10910 from olemarkus/fix-cloudlabel-validation
Further improve cloudLabel validation
2021-02-27 12:48:39 -08:00
Kubernetes Prow Robot 1b42286cfe
Merge pull request #10832 from rifelpet/aws-sdk
Add Tagging to Instance Profiles and OIDC Providers
2021-02-24 05:40:50 -08:00
Ole Markus With cf8bdcea4d Further improve cloudLabel validation
We were too strict on some labels that blocked common use cases such as CAS. At the same time we allowed IG-level cloudLabels that could result in broken clusters
2021-02-23 13:33:49 +01:00
Kubernetes Prow Robot a424958e83
Merge pull request #10872 from timothyclarke/feature/NLB-EIP
Adding Elastic IP Allocations to NLB API
2021-02-22 23:48:03 -08:00
Nicholas Galantowicz 616d446658 add usage of subnet and routetable shared resources in azure 2021-02-22 15:28:55 -05:00
Kubernetes Prow Robot 4e8c655899
Merge pull request #10897 from olemarkus/remove-1-14-support
Enforce 1.14 deprecation
2021-02-22 06:01:43 -08:00
Ole Markus With 4d4bcba315 Enforce 1.14 deprecation 2021-02-21 17:59:39 +01:00
Ciprian Hacman dee13cecca Improve machine type and image validation 2021-02-19 18:28:57 +02:00
Timothy Clarke d59faa329e
Revert "Simplifying conditional per code review comments"
This reverts commit 1a3c675212
as it turned an optional feature subnets[0].allocationID into a required one
2021-02-19 11:19:36 +00:00
Timothy Clarke 1a3c675212
Simplifying conditional per code review comments 2021-02-19 10:46:39 +00:00
Bharath Vedartham e2bf86a0d3 Add unit tests 2021-02-19 01:20:23 +05:30
Bharath Vedartham 92be20f2d5 Add validation for ami arch to instance type arch 2021-02-19 01:20:06 +05:30
Timothy Clarke 1577b0a54b
Adding Elastic IP Allocations to NLB API 2021-02-18 12:27:28 +00:00
Ole Markus With 8486650c33 Add support for cluster autoscaler 1.20.x
Update upup/models/cloudup/resources/addons/cluster-autoscaler.addons.k8s.io/k8s-1.15.yaml.template

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-02-17 14:05:09 +01:00
Peter Rifel b285794f02
Update CloudLabels field description 2021-02-15 17:03:17 -06:00
Kubernetes Prow Robot cd10383fa0
Merge pull request #10741 from codablock/nlb-subnets
Allow to control which subnets and IPs get used for the API loadbalancer
2021-02-14 14:23:06 -08:00
Steven E. Harris 4a7b970011 Validate CloudConfiguration values 2021-02-11 10:49:44 -05:00
Steven E. Harris f63a5d3911 Define "ManageStorageClasses" cloud config field 2021-02-11 10:48:32 -05:00
Ole Markus With e106e5f752 Apply suggestions from code review
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-02-11 10:15:26 +01:00
Ole Markus With 56330188d0 Add AWS LoadBalancerController 2021-02-11 08:47:03 +01:00
Alexander Block cc4aca62f4 Fix unnecessary copying of list 2021-02-10 17:56:59 +01:00
Alexander Block 4ae47cc546 Use proper errors for subnet validation 2021-02-10 15:27:11 +01:00
Alexander Block 2c0f9809eb Move validation of ClusterSubnetSpec into pkg/apis/kops/validation 2021-02-10 09:36:39 +01:00
Kubernetes Prow Robot 41d7d2dbe4
Merge pull request #10707 from slu2011/master
Use the kubeApiServerConfig clientCAFile field
2021-02-09 03:58:46 -08:00
Kubernetes Prow Robot 4507be8e13
Merge pull request #10469 from justinsb/boot_nodes_from_kops_controller
Boot nodes without state store access
2021-02-08 11:28:19 -08:00
Kubernetes Prow Robot 0aa9cf1921
Merge pull request #10695 from olemarkus/cilium-1-9
Add support for cilium 1.9
2021-02-07 01:07:11 -08:00
Ole Markus With a6dce2e820 Add support for cilium 1.9
Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-02-07 08:00:54 +01:00
Alexander Block 6facd1b8ab Allow to explicitely choose subnets and private IPs for the API loadbalancer 2021-02-05 17:53:20 +01:00
Li Zhijian d39f196292 pkg/apis/kops/validation/validation: Fix ineffectual assignment to optionTaken
Signed-off-by: Li Zhijian <lizhijian@cn.fujitsu.com>
2021-02-05 16:39:28 +08:00
shil a0350a0dfa Use the kubeApiServerConfig clientCAFile field 2021-02-01 15:26:09 -08:00
Ole Markus With 1db7b72843 Use serving cert for metrics-server 2021-01-30 09:01:36 +01:00
Ciprian Hacman 7aeb8c2af3 Add back support for kubenet style networking with containerd 2021-01-24 21:16:45 +02:00
Ole Markus With 35d6ac5e21 enableRemoteNodeIdentity actually defaults to true 2021-01-22 10:52:22 +01:00
Ciprian Hacman d889d61ddb Set default IMDS v2 to "required" for instances in AWS 2021-01-21 11:35:41 +02:00
Kubernetes Prow Robot 04e61e4965
Merge pull request #10616 from ottosulin/azhints
Add network and router availability zone hints to OpenStack
2021-01-20 08:56:00 -08:00
Otto Sulin c66a079e3e Add network and router availability zone hints to OpenStack
This pull request makes it possible to add availability zone hints to routers and networks if the hints are supported.
2021-01-20 13:34:08 +02:00
Ciprian Hacman 51cc462793 Add support for container-log-max-size/files with kubelet 2021-01-20 05:49:26 +02:00
Ole Markus With 381875b96e
Apply suggestions from code review
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2021-01-17 18:43:12 +01:00
Ole Markus With ad36f99dfd Validate cluster cloud labels 2021-01-17 08:56:08 +01:00
Kubernetes Prow Robot a051af8dc0
Merge pull request #10564 from bjhaid/master
Make cluster proportional autoscaler image configurable.
2021-01-15 11:03:52 -08:00
bjhaid f299566822 Make cluster proportional autoscaler image configurable.
Similar to how we can configure coreDNS image we will like to configure
cluster Proportional autoscaler so we can use our internal docker
registry rather than gcr.io.
2021-01-12 13:30:42 -06:00
Ole Markus With f5ae5f8808 AWS CSI driver 2021-01-12 07:09:10 +01:00
Kubernetes Prow Robot 695be2666c
Merge pull request #10281 from dntosas/cluster-autoscaler-improvements
[addons/CA] Add support for specifying resources and metrics
2021-01-11 12:16:26 -08:00
dntosas 56fe4bab24
[addons/CA] Add support for specifying resources and metrics
- Resources
We enable users to set their desired capacity for cluster-autoscaler addon.
There are edge cases, especially in big clusters, where autoscaler needs
to reconcile a large number of objects thus may need increased memory or
increased cpu to avoid saturation.

- Metrics
Cluster autoscaler provides valuable insights for monitoring capacity
allocation and scheduling aspects of a cluster. In this commit, we
add proper annotation on deployment to enable Prometheus scrape metrics.

We also bump patch version of container images.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-01-11 20:53:08 +02:00
Ole Markus With 4d2eca199f Remove node-authorization 2021-01-11 18:59:45 +01:00
geojaz 803c7bcd4e pdates GCE channels to use ubuntu over COS 2021-01-10 21:20:25 -08:00
Justin SB 4ac9d5c17b Boot nodes without state store access
kops-controller can now serve the instance group & cluster config to
nodes, as part of the bootstrap process.

This enables nodes to boot without access to the state
store (i.e. without S3 / GCS / etc permissions)

Feature-flagged behind the KopsControllerStateStore feature-flag.
2021-01-09 13:08:48 -05:00
Kubernetes Prow Robot 2677254392
Merge pull request #10461 from olemarkus/allow-modify-etcd-volume
Make it possible to change the etcd volume type and iops
2021-01-06 02:47:52 -08:00
Ole Markus With 0676e38473 Make it possible to modify ebs volumes 2021-01-06 11:01:24 +01:00
Ciprian Hacman a7bb949936 Add possibility to set volume throughput for gp3 volumes 2021-01-05 13:18:32 +02:00
Kubernetes Prow Robot 6d5549e730
Merge pull request #10453 from msidwell/gp3-etcd
Add gp3 Volume Type to etcd
2021-01-04 11:29:57 -08:00
msidwell ebf05facc2 add gp3 volume default params
add io2 case and correct IOPS minimum value check

add gp3 case

add io2 and gp3 parameter ratio validation logic

add volumeThroughput parameter for disks that support it

add volumeThroughput components throughout ebs structs

add volumeThroughput to versioned api

updated api machinery and crds

apimachinery update
2021-01-04 17:08:11 +00:00
Barry Melbourne 1c96e826d9 Remove copyright YEAR from generated Go files 2021-01-03 12:48:50 +00:00
Ciprian Hacman 66039f150e Add containerd option for registry mirrors 2020-12-28 19:32:06 +02:00
Ciprian Hacman c02e5a20ea Remove support for Kubenet with containerd 2020-12-27 18:21:16 +02:00
Kubernetes Prow Robot b5afd1d6c4
Merge pull request #10473 from hakman/custom-container-runtime-package
Add config options for container runtime package URL and Hash
2020-12-23 04:48:28 -08:00
Ciprian Hacman ff6a782303 Add config options for container runtime package URL and Hash 2020-12-23 13:29:22 +02:00
Kubernetes Prow Robot 4266a3ed62
Merge pull request #10486 from DOboznyi/feature-6356/add-event-qps-flag
Added event-qps and event-burst flags to kubelet
2020-12-22 03:12:27 -08:00
Dmytro Oboznyi 334ff1d482
Added event-qps to kubelet flags
Change default value for event-qps to 0
Added event-burst parametr

Signed-off-by: Dmytro Oboznyi <dobozniy@gmail.com>
2020-12-22 10:31:15 +02:00
Kenji Kaneda a61caea8d2 Add Azure support
This commit contains all changes required to support Azure
(https://github.com/kubernetes/kops/issues/3957).
2020-12-21 08:27:54 -08:00
Ciprian Hacman 472faf82d2 Drop support for containerd 1.2 2020-12-21 10:08:24 +02:00
Justin SB 97d0e4d4c6 Avoid recursive type definitions in schema
The CRD generation produces an invalid CRD in this case.
2020-12-20 18:02:52 -05:00
Akshansh Gupta 830fef7959 addons(cluster-autoscaler): Add newPodScaleUpDelay in clusterAutoscaler spec 2020-12-19 14:30:18 +05:30
Steven E. Harris f0f45b71fd Allow use of Calico's VXLAN networking backend
Introduce a new "encapsulationMode" field in Calico's portion of the
Cluster specification to allow switching between the the IP-in-IP and
VXLAN encapsulation protocols. For now, we accept the values "ipip"
and "vxlan," and forgo a possible "none" value that would disable
encapsulation altogether (at least for the default Calico IP pool).

Augment the default-populating procedure for Calico to take this field
into account when deciding both which networking backend to use and
whether to use IP-in-IP or VXLAN encapsulation for the default IP
pool. Note that these values supplied for the "CALICO_IPV4POOL_IPIP"
and "CALICO_IPV4POOL_VXLAN" environment variables in the "calico-node"
DaemonSet pod spec only matter for creating the "default" IPPool pool
object when no such objects already exist.

Generalize the documentation for the "crossSubnet" field to cover
environments more broad than just AWS, as Calico can employ this
selective encapsulation in any environment in which it can detect
boundaries between subnets.
2020-12-18 10:55:11 -05:00
Ciprian Hacman ab9d30a015 Order by name fields in CalicoNetworkingSpec 2020-12-11 18:23:49 +02:00
Ciprian Hacman 372fde0949 Allow override of registry and tag for Calico images 2020-12-11 16:22:09 +02:00
Kubernetes Prow Robot bee16c052d
Merge pull request #10324 from bharath-123/feature/aws-imdv2
Add support for AWS IMDS v2
2020-12-07 22:55:11 -08:00
Ciprian Hacman 265bf4d106 Add option for setting the volume encryption key in AWS 2020-12-08 07:08:09 +02:00
Bharath Vedartham 7f6e125733 Add support for aws ec2 instance metadata v2
A new field is add to the InstanceGroup spec with 2 sub fields,
HTTPPutResponseHopLimit and HTTPTokens. These fields enable the user
to disable IMDv1 for instances within an instance group.

By default, both IMDv1 and IMDv2 are enabled in instances in an instance group.
2020-12-07 02:57:02 +05:30
Kubernetes Prow Robot e68a4648b9
Merge pull request #10374 from hakman/eip-egress
Add option to reuse existing Elastic IPs for NAT gateways
2020-12-06 04:55:25 -08:00
Ciprian Hacman e11d934268 Add option to reuse existing Elastic IPs for NAT gateways 2020-12-06 09:37:17 +02:00
Kubernetes Prow Robot 7140d96e92
Merge pull request #10318 from olemarkus/cert-manager-addon
Add minimal cert-manager addon
2020-12-04 22:57:25 -08:00
Ole Markus With 1ae09e86a5 Add minimal cert-manager addon 2020-12-04 21:52:07 +01:00
Rodrigo Menezes 3fb12c66ae gzip and base64 encode the heredocs in the nodeup.sh portion of user-data 2020-12-04 10:46:18 -08:00
Kubernetes Prow Robot 443567426e
Merge pull request #9704 from nckturner/aws-cloud-controller
Add aws-cloud-controller-manager config to addons
2020-12-02 12:17:00 -08:00
Kubernetes Prow Robot 3f6e6e205b
Merge pull request #10345 from olemarkus/gp3
Allow using gp3 for root volumes
2020-12-02 03:26:50 -08:00
Ole Markus With a42891db25 Alloq using gp3 for root volumes 2020-12-02 11:46:54 +01:00
AkiraFukushima 3279b95326 Add paramaeters related to Taint based Evictions in kube-apiserver 2020-12-02 18:20:27 +09:00
Nick Turner c9feb36f3f Add aws-cloud-controller-manager config to addons
- Config at aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml.template
- AWSCCMTag function for CCM image tag
2020-11-30 01:35:07 -08:00
Kubernetes Prow Robot e789c24c3a
Merge pull request #10275 from rdrgmnzs/kubeapi-mem-cpu-request-limit
Allow setting CPU limit and Mem request / limit for kube API server
2020-11-23 11:23:02 -08:00
Rodrigo Menezes da773ba35c Allow setting CPU limit and Mem request / limit for kube API 2020-11-23 10:03:34 -08:00
Kubernetes Prow Robot 085b57527f
Merge pull request #10273 from dntosas/weave-add-ability-to-specify-image
[weave] Add support for default version override
2020-11-21 23:55:34 -08:00
Ciprian Hacman ecb576ced2 Add field validation for ExternalLoadBalancers 2020-11-20 19:44:34 +02:00
dntosas b7a2d0a1b1
[weave] Add support for default version override
In this commit, we enable users to override default version
of networking/Weave specs.

Signed-off-by: dntosas <ntosas@gmail.com>
2020-11-20 14:26:50 +02:00
Frank Yang 93dcaddc48 feat(aws): add PolicyNames for ELB to change listener's security policy 2020-11-19 16:07:21 +08:00
John Gardiner Myers 1165fd381e Remove more code specific to unsupported etcd v2 2020-11-15 22:21:24 -08:00
Joel Carter 9d760243de Add generated files
For `HorizontalPodAutoscalerInitialReadinessDelay` &
`HorizontalPodAutoscalerCPUInitializationPeriod`
2020-11-15 08:16:21 -06:00
Joel Carter da6b5d1bc4 Expose flags for HorizontalPodAutoscaler
Enable setting of the
`horizontal-pod-autoscaler-initial-readiness-delay` and
`horizontal-pod-autoscaler-cpu-initialization-period` flags
2020-11-15 07:53:58 -06:00
Bharath Vedartham c294e3df58 dockerconfig: Add default runtime and runtimes fields 2020-11-15 01:21:19 +05:30
Kubernetes Prow Robot c8e6ceea17
Merge pull request #10217 from hakman/nits
Fix various nits
2020-11-12 14:54:25 -08:00
Kubernetes Prow Robot db473a11cd
Merge pull request #10194 from elblivion/etcdmanager-logverbosity
Make etcd-manager log verbosity configurable
2020-11-12 10:39:07 -08:00
Ciprian Hacman 4579a1bcdc Validate external IAM policies 2020-11-12 14:34:35 +02:00
Anthony Stanton c117d8d924 feat: Make etcd-manager log verbosity configurable 2020-11-12 09:58:09 +01:00
Jesse Haka e68cb6303f generate apispecs 2020-11-11 10:13:34 +02:00
Jesse Haka a8ed94b74f Allow to use custom csi plugin image and enable topology support 2020-11-11 09:50:08 +02:00
Peter Rifel 0072abd1a2
Update validation error permalink 2020-11-10 08:52:47 -06:00