Commit Graph

2080 Commits

Author SHA1 Message Date
John Gardiner Myers 254910336f Simplify use of hack/set-version 2021-05-07 23:30:54 -07:00
Peter Rifel 271af46d2f
Allow SSH user to be overridden for `toolbox dump` 2021-01-28 22:01:25 -06:00
Kubernetes Prow Robot d1c1ae46e1
Merge pull request #10532 from hakman/automated-cherry-pick-of-#10530-upstream-release-1.19
Automated cherry pick of #10530: Add possibility to set volume throughput for gp3 volumes
2021-01-05 05:14:05 -08:00
Ciprian Hacman 654bb77b2d Add possibility to set volume throughput for gp3 volumes 2021-01-05 13:40:50 +02:00
Ciprian Hacman e9a747224f Add containerd option for registry mirrors
(cherry picked from commit 66039f150e)
2020-12-30 07:38:43 +02:00
Kubernetes Prow Robot e43f1cc6e3
Merge pull request #10494 from hakman/release--1.19.0-beta.3
Release 1.19.0-beta.3
2020-12-23 05:46:26 -08:00
Ciprian Hacman e736da09a5 Add config options for container runtime package URL and Hash 2020-12-23 13:50:48 +02:00
Ciprian Hacman aec7f2a653 Release 1.19.0-beta.3 2020-12-23 12:12:38 +02:00
Dmytro Oboznyi 9e03b8558e Added event-qps to kubelet flags Change default value for event-qps to 0 Added event-burst parametr
Signed-off-by: Dmytro Oboznyi <dobozniy@gmail.com>
2020-12-22 13:27:53 +02:00
Steven E. Harris b29d6c9490 Allow use of Calico's VXLAN networking backend
Introduce a new "encapsulationMode" field in Calico's portion of the
Cluster specification to allow switching between the the IP-in-IP and
VXLAN encapsulation protocols. For now, we accept the values "ipip"
and "vxlan," and forgo a possible "none" value that would disable
encapsulation altogether (at least for the default Calico IP pool).

Augment the default-populating procedure for Calico to take this field
into account when deciding both which networking backend to use and
whether to use IP-in-IP or VXLAN encapsulation for the default IP
pool. Note that these values supplied for the "CALICO_IPV4POOL_IPIP"
and "CALICO_IPV4POOL_VXLAN" environment variables in the "calico-node"
DaemonSet pod spec only matter for creating the "default" IPPool pool
object when no such objects already exist.

Generalize the documentation for the "crossSubnet" field to cover
environments more broad than just AWS, as Calico can employ this
selective encapsulation in any environment in which it can detect
boundaries between subnets.
2020-12-18 18:11:52 +02:00
Srikanth Rao 9d339a883f
Automated cherry pick of #10312: Move DO to beta (#10415)
* Move DO to beta

* Update vendor files

* Update documentation

* Update vendor modules

* Remove AlphaAllowDO flag

* Fix vendor modules

* Revert vendor modules txt file

* Revert modules.txt changes to keep it in sync with release-1.19
2020-12-11 23:41:26 -08:00
Bharath Vedartham 2eb9175f4b Explicitly specify http_endpoint in launch_template terraform
http_endpoint has to be explicitly specified in the metadata_options block
of the launch template terraform according to issue
https://github.com/hashicorp/terraform-provider-aws/issues/12564
2020-12-09 22:36:51 +02:00
Ciprian Hacman 5f019a83a1 Add option for setting the volume encryption key in AWS 2020-12-08 08:00:50 +02:00
Ciprian Hacman 40ac40439b Add option to reuse existing Elastic IPs for NAT gateways 2020-12-06 16:09:36 +02:00
Rodrigo Menezes e2fad53b0d gzip and base64 encode the heredocs in the nodeup.sh portion of user-data 2020-12-04 10:56:10 -08:00
AkiraFukushima 7ff4aef783 Add description about toleration seconds parameter for kube-apiserver in docs 2020-12-02 12:39:56 +02:00
Ciprian Hacman 432466d664 Document minimum supported version 2020-11-23 06:08:14 +02:00
dntosas c55f5099ac Add support for default version override
In this commit, we enable users to override default version
of networking/Weave specs.

Signed-off-by: dntosas <ntosas@gmail.com>
2020-11-23 06:08:14 +02:00
Frank Yang 3f17070bf1 feat(aws): add PolicyNames for ELB to change listener's security policy 2020-11-21 22:43:37 +02:00
Joel Carter 97c71c274b Expose flags for HorizontalPodAutoscaler
Enable setting of the
`horizontal-pod-autoscaler-initial-readiness-delay` and
`horizontal-pod-autoscaler-cpu-initialization-period` flags
2020-11-16 07:26:38 +02:00
John Gardiner Myers f52abe1483 Update validate cluster cli docs 2020-11-11 11:43:34 -08:00
Peter Rifel 2f328116ef
Automated cherry pick of #10140 and #9011: Implement API load balancer class with NLB and ELB support on AWS (#10154)
* Create cloudmock implementations for elbv2 API calls used by future NLB support

* Add missing cloudmock functionality for enabling lifecycle integration test on complex cluster

* Add lifecycle integration tests for complex and externallb clusters

* refactor TargetLoadBalancer to use DNSTarget interface instead of LoadBalancer

* add LoadBalancerClass fields into api

* make api machinery

* WIP: Implemented API loadbalancer class, allowing NLB and ELB support on AWS for new clusters.

* perform vendoring related tasks and apply fixes identified from hack/

dissallow spotinst + nlb
remove reflection in status_discovery.go
Add precreated additional security groups to the Master nodes in case of NLB
Remove support for attaching individual instances to NLB; only rely on ASG attachments
Don't specify Classic loadbalancer in GCE integration test

* add utility function to the kops model context to make LoadBalancer comparisons simpler

* use DNSTarget interface when locating DNSName of API ELB

* wip: create target group task

* Consolidate TargetGroup tasks

* Use context helper for determining api load balancer type to avoid nil pointers

* Update NLB creation to use target group ARN from separate task rather than creating a TG in-line

* Address staticcheck and bazel failures

* Removing NLB Attachment tasks because they're not used since we switched to defining them as a part of the ASGs

* Address PR review feedback

* Only set LB Class field for AWS clusters, fix nil pointer

* Move target group attributes from NLB task to TG task, removing unused attributes

* Add terraform and cloudformation support for NLBs, listeners, and target groups

* Update integration test for NLB support

* Fix NLB name format to pass terraform validation

* Preserve security group rule names when switching ELB to NLB to reduce destructive terraform changes

* Use elbv2 enums and address some TODOs

* Set healthcheck values in target group

* Find TG tags, fix NLB name detection

* Fix more spurious changes reported by lifecycle integration test

* Fix spotinst validation, more code cleanup

* Address more PR feedback

* ReconcileTargetGroups unit test + more code simplification

* Addressing PR feedback Renaming task 1. awstasks.LoadBalancer -> awstasks.ClassicLoadBalancer

* Addressing PR feedback Renaming task: ELBName() -> CLBName() / LinkToELB() -> LinkToCLB()

* Addressing PR feedback: Various text changes

* fix export of kubecfg

* address TargetGroup should have the same name as the NLB

* should address error when fetching tags due to missing ARN

* Update expected and crds

* Add feature table to NLB docs

* Address more feedback and remove some TODOs that arent applicable anymore

* Update spotinst validation error message

Co-authored-by: Christian Joun <cjoun@proofpoint.com>
2020-11-02 09:10:54 -08:00
Kubernetes Prow Robot 72bfb1d1db
Merge pull request #10134 from rdrgmnzs/cherrypick_9794_release-1.19
Automated cherry pick of #9794 and #10138 onto release-1.19
2020-10-29 12:54:06 -07:00
Ciprian Hacman 513fba04af Update shell style for CLI docs for better compatibility 2020-10-29 06:42:07 +02:00
Ciprian Hacman b9c23fcb69 Update cluster and state store names in CLI docs 2020-10-29 06:42:07 +02:00
Rodrigo Menezes 29f5cdeb9a cleanup code 2020-10-28 21:24:49 -07:00
Rodrigo Menezes ca82a05695 Add instruction for no downtime 2020-10-28 21:24:49 -07:00
Rodrigo Menezes b55aaa1de6 Add note to required actions 2020-10-28 21:24:49 -07:00
Justin SB 90133b5cfe Default to exporting a kubecfg, even without credentials
We do log a hint for the user when we have exported an empty kubecfg,
but this now supports the "current cluster" UX.

Issue #9990
2020-10-25 21:15:29 -07:00
Ciprian Hacman a04cea6371 Add eBPF dataplane support for Calico CNI 2020-10-19 20:04:27 +03:00
Ole Markus With 0be8d4e325
Add some missing notes to the release notes (#10056)
* Add some missing notes to the release notes

* Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>

* Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-10-18 09:12:13 -07:00
Ole Markus With c7a2183a1d Add some quick notes on how to get GPU opertor working 2020-10-18 15:39:49 +02:00
Kubernetes Prow Robot d105c9299e
Merge pull request #10044 from h3poteto/iss-9751
Rewrite ssh user to ubuntu in bastions docs
2020-10-15 06:48:24 -07:00
AkiraFukushima aff8c0af00 Change image type to t3.micro from t2.micro in bastion docs 2020-10-15 22:09:44 +09:00
AkiraFukushima c7f4bf3e05 Rewrite ssh user to ubuntu in bastions docs
Document is already out of date because now Ubuntu is used as bastion OS
2020-10-15 22:08:38 +09:00
Ciprian Hacman 2027fb04f2 Release notes for 1.19.0-alpha.5 2020-10-15 09:39:16 +03:00
Ciprian Hacman e6e3fc1309 Fix docs feature table not being rendered 2020-10-12 07:37:39 +03:00
Kubernetes Prow Robot 6f85cd98c0
Merge pull request #10037 from h3poteto/iss-9753
Add WireGuard support for Calico CNI
2020-10-11 06:10:47 -07:00
Kubernetes Prow Robot 5266619970
Merge pull request #10038 from dntosas/apiserver-include-reqTimeout-conf
Add support for KubeAPIServer --request-timeout flag
2020-10-11 04:54:47 -07:00
dntosas 66f42d8a9b
Add support for KubeAPIServer --request-timeout flag
In this commit, we initialize the support of --request-timeout flag on
the configuration of KubeAPIServer so as to enable users for setting
timeout duration value for all kinds of handlers.

Signed-off-by: dntosas <ntosas@gmail.com>
2020-10-11 14:17:44 +03:00
AkiraFukushima b8524205f7 Add wireguard description in calico docs 2020-10-11 19:10:55 +09:00
Kubernetes Prow Robot cc41bba0cf
Merge pull request #10022 from olemarkus/metrics-server
Kubelet serving certificate and metrics server addon
2020-10-09 03:09:07 -07:00
Ole Markus With 259d15cc6a Add release notes 2020-10-09 10:18:02 +02:00
monicagangwar a63ccd5163 [calico] awsSrcDstCheck to disable src/dest checks in AWS
* replacing k8s-ec2-srcdst with calico's config awsSrcDstCheck and
  flag FELIX_AWSSRCDSTCHECK
* documentation and iam changes for calico awsSrcDstCheck
2020-10-08 17:17:23 +05:30
Ole Markus With e8134b706c Sort wellknown ports and add missing ports to table 2020-10-08 08:27:51 +02:00
Kubernetes Prow Robot a310282f07
Merge pull request #10024 from olemarkus/kops-controller-port
Move kops-controller serving port out of conflict
2020-10-07 23:06:15 -07:00
Ole Markus With 1f739b0418 Move kops-controller serving port out of conflict 2020-10-08 07:25:43 +02:00
nareshku dca69323b7 enable kubelet --housekeeping-interval flag 2020-10-07 08:00:41 -07:00
Matt Bacchi 8d76d31b08
Add missing closing inline code character 2020-09-30 10:15:00 -06:00
Kubernetes Prow Robot 3c7e1c80f8
Merge pull request #9997 from erismaster/openstack-doc-typos
Fix pair of typos in openstack docs
2020-09-27 21:44:48 -07:00