Commit Graph

109 Commits

Author SHA1 Message Date
Kubernetes Submit Queue 967ed4acf5
Merge pull request #3928 from justinsb/kopeio_auth
Automatic merge from submit-queue.

Update kopeio auth
2017-11-27 15:02:12 -08:00
Kubernetes Submit Queue 0ade1dd2c4
Merge pull request #3822 from gambol99/dns_controller_optional
Automatic merge from submit-queue.

DNS Controller Optional

The current implementation enforces a dns-controller is running; given the user can switch the make the kube-apiserver server Internal and then reuse the dns for the masterInternalName; this effectlively removes the need to run the service (assuming your not using it for pods, node and service dns)

- adding a disableDnsController to the ExternalDNS spec provides a toggle on the addon (name is definitely up for debate)
- the default behaviour remains, the dns-controller is always pushed as an addon
2017-11-26 15:03:47 -08:00
Justin Santa Barbara d0944714f4 Update kopeio auth 2017-11-26 15:32:14 -05:00
Kubernetes Submit Queue 8eac358795
Merge pull request #3869 from chrislovecnm/calico-2.6-update
Automatic merge from submit-queue.

Updating Calico manifests to Calico release 2.6.2

Renamed the k8s-1.8 manifest to a k8s-1.7. This is required because of config
change that occurs between k8s 1.6 and k8s 1.7. This refactor will also
be re-used when Calico Kubernetes data source support is added to kops.
Updated bootstrapchannelbuilder with the new Calico version numbers.

The diffs for the k8s-1.6 version is pretty rough, tried to make it cleaner, but nada.

FIXES: https://github.com/kubernetes/kops/issues/3866
FIXES: https://github.com/kubernetes/kops/issues/3867

Line: https://github.com/kubernetes/kops/compare/master...chrislovecnm:calico-2.6-update?expand=1#diff-891cbc61587adb202b66b7c9bc6896daR209  is why Calico would not start on k8s 1.6 - thanks @caseydavenport 

 **TODO**
Testing K8s versions

- [x] test 1.5
- [x] test 1.6
- [x] test 1.7
- [x] test 1.8

/cc @blakebarnett @itajaja
2017-11-22 10:20:04 -08:00
chrislovecnm 3067a21341 Updating Calico manifests to Calico release 2.6.2.
Renamed the k8s-1.8 manifest to a k8s-1.7. This is required because of config
change that occurs between k8s 1.6 and k8s 1.7. This refactor will also
be re-used when Calico Kubernetes data source support is added to kops.
Updated bootstrapchannelbuilder with the new Calico version numbers.
2017-11-22 09:45:21 -07:00
Rohith 4816ed5e36 DNS Controller Optional
The current implementation requires enforces a dns-controller is running; given the user can switch the make the kube-apiserver server Internal and then reuse the dns for the masterInternalName; this effectlively removes the need to run the service (assuming your not using it for pods, node and service dns)

- adding a disableDnsController to the ExternalDNS spec provides a toggle on the addon (name is definitely up for debate)
- the default behaviour remains, the dns-controller is always pushed as an addon
2017-11-20 22:06:50 +00:00
Caleb Gilmour 04ef7ee0a3 Version and validation updates for romana networking. 2017-11-16 23:37:04 +00:00
Justin Santa Barbara dedf88c52b Apply gossip dns changes to 1.8 calico version also 2017-11-14 03:14:15 -05:00
Giacomo Tagliabue b7a16a28cc add version map 2017-11-13 17:52:35 -05:00
Giacomo Tagliabue 3719d15c6b update templates and bootstrapper 2017-11-13 17:11:10 -05:00
Giacomo Tagliabue af64c2894c update calico template 2017-11-13 17:11:10 -05:00
Justin Santa Barbara 148a65e1ad Fix CNI CPU allocations
* Limit each CNI provider to 100m

* Remove CPU limits - they cause serious problems
(https://github.com/kubernetes/kubernetes/issues/51135), but this also
makes the CPU allocation less problematic.

* Bump versions and start introducing the `-kops.1` suffix preemptively.

* Upgrade flannel to 0.9.0 as it fixes a lot.
2017-11-13 01:28:40 -05:00
Kashif Saadat 657a91729e Update Canal to use Calico v2.6.2. 2017-11-07 09:26:18 +00:00
Justin Santa Barbara 9b71713d68 Tag 1.8.0-beta.1 2017-11-06 23:24:51 -05:00
Manatsawin Hanmongkolchai a708919bf4 Generate scheduler policy by dynamic cluster addons 2017-10-27 08:56:07 +07:00
Mike Splain e000d21673 Add a v1.7.0 storage addon resource.
Fixes #3298
2017-10-23 22:11:28 -04:00
Kubernetes Submit Queue 760da7eeba Merge pull request #3637 from justinsb/bump_kopeio_networking
Automatic merge from submit-queue.

Bump kopeio networking to 20171015
2017-10-23 12:09:56 -07:00
Justin Santa Barbara 4bd997496d Grant kubelets system:node role in 1.8
This is an interim measure until we fully support the NodeAuthorizer and
dynamic kubelet bootstrapping.

Issue #3551
2017-10-23 00:34:24 -04:00
Justin Santa Barbara dfa89c096e Bump kopeio networking to 20171015 2017-10-20 23:12:15 -04:00
Kubernetes Submit Queue 3315d29bdb Merge pull request #3630 from wlan0/api
Automatic merge from submit-queue.

Add Cloud Controller Manager addon

This adds the CCM addon for the Kubernetes cluster. 

This is a follow-up PR to https://github.com/kubernetes/kops/pull/3408. 

cc @chrislovecnm @andrewsykim
2017-10-20 19:07:50 -07:00
wlan0 d3143ec3cc add Cloud Controller Manager addon 2017-10-19 12:33:44 -07:00
Kashif Saadat 6d624c7ad5 Add Calico v2.5 support for Kubernetes v1.8+ 2017-10-16 12:23:53 +01:00
Justin Santa Barbara a6ab7c3c61 GCE: Install correct storage class
We only want to install the AWS storage class on AWS, and on GCE we want
to install the GCE storage class.
2017-10-14 11:36:58 -04:00
Bryan Boreham 88e001f88e Update to Weave Net 2.0.5
including a Weave Net template for Kubernetes 1.7 and above which adds
a volume-mount for the iptables lock file, which avoids collisions
between Weave components and kube-proxy that would result in a
half-configured Weave network.

This is only for version 1.7 and above because it requires the change
in https://github.com/kubernetes/kubernetes/issues/47212
2017-10-12 11:08:44 +00:00
Mike Splain db995fc416 Update kube-dns to 1.14.5 for CVE-2017-14491 2017-10-02 12:14:54 -04:00
Kubernetes Submit Queue 3ddbf3e695 Merge pull request #3383 from haad/addon-external-dns
Automatic merge from submit-queue. .

Add external-dns as addon.

This superseeds route53mapper as it has multicloud support documentation and YAML taken from https://github.com/kubernetes-incubator/external-dns
2017-09-24 23:51:08 -07:00
Kubernetes Submit Queue b3f26f8cd0 Merge pull request #3206 from felipejfc/calico-portmap
Automatic merge from submit-queue. .

Support for using hostPort when using calico

For enabling hostPort we need to turn on portmap cni plugin.
In this PR I updated calico and calico-cni images to latest version which already includes the portmap binary, and then I only needed to modify the cni config file to enable it and change its extension from .conf to .conflist.

This is related to:
https://github.com/kubernetes/kops/issues/3132

I think we should do the same for kube-router, flannel and weave (are there any other cni plugin supported by kops?)
2017-09-22 13:08:41 -07:00
Adam Hamsik 2f89143e4f Bump feature flag version for external-dns addon. 2017-09-16 13:05:55 +02:00
Felipe Cavalcanti c443bb2c1d bump calico version in bootstrap channel, so that kops will apply calico portmap compatibility to existing clusters 2017-09-15 13:17:50 -03:00
Caleb Gilmour 79d331e590 Add support for Romana as a networking option 2017-09-13 22:48:18 +00:00
chrislovecnm 2afdb5ab2e mapping-and-uploading-kube-assets 2017-08-21 15:16:56 -06:00
Kubernetes Submit Queue 429004fdf1 Merge pull request #3162 from tmjd/update-calico-2-4-0
Automatic merge from submit-queue

Update to Calico 2.4.1

- Switch Calico images to be pulled from quay.io

Addresses #3161
2017-08-17 15:09:36 -07:00
Erik Stidham ec68c0c00b Update Canal to the latest
- Calico to v2.4.1
- Flannel to v0.8.0
- Update Calico RBAC
2017-08-11 17:00:49 -05:00
Erik Stidham 226e26f072 Update to Calico 2.4.1
- Switch Calico images to be pulled from quay.io
2017-08-11 08:56:03 -05:00
Prachetas Prabhu 76378da0d0 Bumps version of Canal manifest addon to upgrade Canal on existing clusters 2017-08-06 00:57:20 -05:00
Kubernetes Submit Queue 62d702a22b Merge pull request #2763 from justinsb/lifecycle
Automatic merge from submit-queue

Support for lifecycles
2017-07-21 09:59:00 -07:00
Justin Santa Barbara 8055fe506a Mark kops 1.7.0-beta.1 2017-07-19 22:53:31 -04:00
Justin Santa Barbara 3dfe48e5ae Wiring up lifecycle 2017-07-15 22:03:54 -04:00
Justin Santa Barbara 0044a323af Merge pull request #2829 from marccarre/weave-net-2.0.1
Update weave to 2.0.1
2017-07-15 12:23:55 -04:00
Justin Santa Barbara 1965a4be49 Updates to fix unit tests 2017-07-08 18:46:01 -04:00
Justin Santa Barbara 973492b678 Start collecting assets 2017-07-08 18:33:00 -04:00
Justin Santa Barbara 9a8fcd64e4 Simplify how we build addon manifests, support image redirection 2017-07-08 18:33:00 -04:00
Justin Santa Barbara 8bde5317c1 Bump dns-controller & kops for 1.7.0-alpha.1 2017-07-07 00:57:10 -04:00
Chris Love 24c0bc19ed Merge pull request #2768 from ottoyiu/calico_cidr
Update calico to use the correct CIDR for pods
2017-07-06 14:29:18 -06:00
Chris Love 20535248b4 Merge pull request #2773 from justinsb/authn_integration
Initial support for authentication (kopeio)
2017-07-06 14:11:22 -06:00
Marc CARRE 77d7ad9f42 Update weave to 2.0.1 2017-07-04 15:16:17 +01:00
Chris Love 4d9a06f34f Merge pull request #2839 from justinsb/update_kube_dns
Upgrade kube-dns for 1.7
2017-07-03 11:30:19 -06:00
Justin Santa Barbara ea838efde6 Upgrade kube-dns for 1.7
A version bump from 1.14.1 -> 1.14.4; we don't update kube-dns for k8s <= 1.5
2017-06-30 10:14:24 -04:00
Travis Thompson 5b1deb7cb3 Bump canal addon version
In PR [#2635](https://github.com/kubernetes/kops/pull/2635) the version
of calico was updated as part of canal.  What this PR missed was bumping
the version of the addon.  This meant that if you upgraded a kops
cluster from v1.6.0 to v1.6.1 the new version of calico was not picked
up because `channels apply` does not think the daemonset needs to be
updated.
2017-06-27 14:38:01 -07:00
Otto Yiu 8674309565 Update calico to use the correct CIDR for pods
Currently, we are using .NonMasqueradeCIDR in the wrong fashion. We
should be using .KubeControllerManager.ClusterCIDR to prevent IP
collision with Service IPs.
2017-06-26 13:47:31 -07:00