John Gardiner Myers
e2b992d8f8
update-expected.sh
2020-10-24 17:13:54 -07:00
Jesse Haka
33e2de60e5
do not create egress rules when using vipacl octavia
2020-10-16 14:11:22 +03:00
Ole Markus With
7c8ff94631
Make setupmockopenstack standalone
2020-10-01 19:15:39 +02:00
Ole Markus With
54ccc92829
Remove unused functions
2020-09-05 20:22:21 +02:00
Ole Markus With
0bd29dd4c7
Remove old servergroup test
2020-09-05 20:22:21 +02:00
Ole Markus With
4a21a532da
Add golden tests for openstack servergroup
2020-09-05 20:22:21 +02:00
Kubernetes Prow Robot
e5e8908cce
Merge pull request #9821 from olemarkus/openstack-newer-nova-3
...
Reconcile ports and floating ips
2020-08-27 07:15:53 -07:00
Kubernetes Prow Robot
6a33402702
Merge pull request #9820 from olemarkus/managed-sgs
...
Remove unknown rules from managed security groups on openstack
2020-08-27 03:43:03 -07:00
Ole Markus With
8e4f3b1458
Tags are never used
2020-08-26 14:17:24 +02:00
Ole Markus With
5cb63fb788
Fail if we find multiple sgs with same name
2020-08-26 13:41:15 +02:00
Ole Markus With
14a6f92f53
Delete SG rules that kops don't explicitly add to managed SGs
2020-08-26 11:09:22 +02:00
Ole Markus With
6cc7153bbe
Don't fatal on non-fatal things in servergroup tests
2020-08-26 10:52:34 +02:00
Ole Markus With
d6615e523d
Remove some duplicate code
2020-08-26 10:52:34 +02:00
Justin SB
b158ffab04
Refactor: KopsModelContext embeds IAMModelContext
...
go syntax makes this an annoying change, unfortunately.
2020-08-25 11:22:34 -04:00
Michael Wagner
df5cc6a71b
feat(openstack): propagate cloud labels to machines
2020-08-19 09:05:51 +02:00
Peter Rifel
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
Ole Markus With
fbcdeb2ed6
Respect Topology when assigning floating ips or not
2020-08-08 12:23:09 +02:00
Ole Markus With
84d2dcb624
Use SG to SG rule for cni tcp/udp rules
2020-08-07 09:39:44 +02:00
Ole Markus With
c5ddd3885c
Add support for cilium on openstack
2020-08-07 09:39:44 +02:00
Ole Markus With
6b81916a5d
Fix potential npr
2020-08-04 08:22:00 +02:00
Ole Markus With
7e2366ac64
Determine fixedip for api cert directly in nodeup
2020-08-04 08:22:00 +02:00
Ole Markus With
460c0f3801
If there is no external network specified, no router is needed
2020-08-04 08:22:00 +02:00
Ole Markus With
ecca2fda82
When using bastion and expecting no floating IPs, topology should be private
2020-07-12 22:08:30 +02:00
Ole Markus With
fd7490e3e2
Only add floating IPs to nodes if we have a public topology for nodes
2020-07-12 21:08:13 +02:00
Ole Markus With
b508696cf2
Make Instance task depend on floating ip
...
Originally, floating ips depended on instances, but this causes a dependency cycle now that bootstrap scripts require all IPs for the API cert.
This also requires using networking API for creating floating ips instead of compute so that we can name (and later tag) the floating IPs, which is necessary to know which floating IP belongs to which instance prior to association
2020-07-12 21:08:13 +02:00
Ole Markus With
4a16223361
Create master API security group unconditionally
...
Needed somewhere anyway. Failing to create this one errors with missing task
2020-07-12 21:08:13 +02:00
John Gardiner Myers
f4f4763dc2
Refactor more certs to be issued by nodeup
2020-06-28 23:12:13 -07:00
Kubernetes Prow Robot
f9262b91e7
Merge pull request #9450 from johngmyers/refactor-apiserver-lb
...
Refactor how api-server addresses are exported from tasks
2020-06-28 22:08:15 -07:00
John Gardiner Myers
86f157fa27
Refactor how api-server addresses are exported from tasks
2020-06-26 21:38:39 -07:00
John Gardiner Myers
013f9bf914
Create bootstrap script in a Task
2020-06-26 19:11:40 -07:00
John Gardiner Myers
cef5b175c7
Rename BootstrapScript to BootstrapScriptBuilder
2020-06-26 10:57:36 -07:00
John Gardiner Myers
87446f8894
Make all users of userdata declare it as a dependency
2020-06-26 10:31:52 -07:00
John Gardiner Myers
304476cebf
Refactor BootstrapScript
2020-06-18 22:17:39 -07:00
Ciprian Hacman
95aca3def5
ARM64 support - Update bazel files
2020-06-19 04:42:11 +03:00
Ciprian Hacman
602cb825e7
ARM64 support - Update bootstrap script for multi-arch
2020-06-19 04:42:11 +03:00
Ole Markus With
991549a5f4
Remove support for Romana
2020-06-03 08:23:53 +02:00
John Gardiner Myers
ec4fe1e7e8
Don't put bastions in the utility subnets
2020-05-12 22:06:34 -07:00
Jesse Haka
facd12dd32
Revert "feat(openstack): propagate cloud labels to machines"
2020-05-07 12:06:58 +03:00
Michael Wagner
fc5807d374
feat(openstack): propagate cloud labels to machines
2020-04-27 15:58:02 +02:00
Jesse Haka
d694a6f66d
add support for AllowedCIDRs
2020-03-17 17:33:11 +02:00
Peter Rifel
a999b3ea61
fix OWNERS labels format
...
These need to be lists
2020-03-10 22:47:50 -05:00
tanjunchen
977f987d65
fix-pkg-staticcheck and remove the repeat code
2019-12-03 10:32:37 +08:00
Jesse Haka
b77a58a896
add protocol4 as allowed to master
2019-10-28 11:57:51 +02:00
Jesse Haka
a09a920e92
fix firewalls for openstack
2019-10-27 21:58:40 +02:00
Jesse Haka
f65b0f3bda
return fatal if no network found
2019-10-27 08:22:52 +02:00
Jesse Haka
5e3b94ae17
use existing network and subnet
2019-10-27 08:21:25 +02:00
Justin SB
b6862103bb
Change default port for memberlist from 3997
...
We had a port collision on 3997; change the default memberlist ports
to avoid the collision (we haven't shipped a release with this in it).
Also create a go file so that we can use constants to keep track of
our port numbers, rather than magic values.
2019-10-14 07:26:27 -04:00
tanjunchen
8fe36dc72c
fix-up some staticcheck error
2019-10-06 10:40:13 +08:00
Kubernetes Prow Robot
f671873629
Merge pull request #7652 from OpenSource-THG/master
...
Openstack block device mapping support
2019-10-03 14:27:56 -07:00
Michael Wagner
044e05cbe7
chore(openstack): use InstanceGroup zones as AV
2019-09-27 09:45:34 +02:00