Commit Graph

2015 Commits

Author SHA1 Message Date
Naresh Kumar Amrutham 97b258ca64 update build files 2018-08-17 13:12:03 -07:00
Naresh Kumar Amrutham 504414dd1c include tests 2018-08-17 13:04:28 -07:00
Naresh Kumar Amrutham ff2c0d4157 Revert "include dep"
This reverts commit b9c09878cd.
2018-08-17 12:59:58 -07:00
Naresh Kumar Amrutham b9c09878cd include dep 2018-08-15 11:14:19 -07:00
Naresh Kumar Amrutham 4e9d6760b8 initialize elbv2 session 2018-08-15 10:51:55 -07:00
Naresh Kumar Amrutham 76a0018d53 add delete support for NLBs, ALBs and Target groups 2018-08-14 16:15:22 -07:00
k8s-ci-robot f19fc37769
Merge pull request #5602 from mikesplain/fix_api_lb_additiona_sec_groups
Fix additional security groups changes on api lb
2018-08-14 09:35:56 -07:00
k8s-ci-robot fdc02d00aa
Merge pull request #5601 from justinsb/fix_5587
Don't assume that we only have one subnet per AZ
2018-08-14 09:35:46 -07:00
Mike Splain 613d163225 Fix additional security groups changes on api lb 2018-08-13 15:00:01 -04:00
k8s-ci-robot 7ebc9b9fbf
Merge pull request #5577 from Pharb/update-amazon-linux-docs
Add amazon.com image owner alias and Amazon Linux 2 documentation
2018-08-13 11:56:41 -07:00
Justin Santa Barbara 1c3949bdfe Don't assume that we only have one subnet per AZ
I made a mistaken assumption in
dde2100a19 that we only had one subnet
per AZ, but as demonstrated in #5587 this was not the case.

What I was trying to achieve was not to include the cluster name, so
for the case of subnets this commit just uses the subnet name from the
cluster spec, which should be unique and stable.  That is hopefully at
least as meaningful.

Thankfully we hadn't released a version with the erroneous naming.

Fix #5587
2018-08-13 13:15:03 -04:00
Rohith 42e48e5fcb Node Authorizer Promethues Metrics
- adding the prometheus metrics annotations to the deployment
2018-08-13 14:13:38 +01:00
Patrick Harböck 9e891656fa Add amazon.com image owner alias and Amazon Linux 2 documentation 2018-08-03 19:58:46 +02:00
k8s-ci-robot 8169f14124
Merge pull request #5525 from zivagolee/kuberouter_tolerations
add wider tolerations to the kube-router daemonset
2018-07-26 17:30:57 -07:00
Christophe Gasmi 11d523a222 add r5, r5d, z1d instance types 2018-07-27 00:27:58 +02:00
Zivago Lee a846b217c1 bump version 2018-07-26 07:45:42 -07:00
Zivago Lee f4002a2143 add wider tolerations to the kube-router daemonset 2018-07-26 00:35:39 -07:00
Justin Santa Barbara 2faa68426f Docker installation from tar.gz
Ubuntu 18.04 doesn't have a package for docker 17.03, but we can still
support it by using the tar.gz package.

This could be a nice fallback for other operating systems in future,
and it might prove to be more reliable than the OS packages.

But start with supporting ubuntu 18.04 with older docker versions!
2018-07-24 21:58:54 -04:00
Justin Santa Barbara 5933aed899 Add ssh user to kops toolbox dump
Where we can identify the SSH user to use, we can include it in kops
toolbox dump.  This is a precursor to trying to better understand
what's in an image (warnings about NVME or network drivers, or showing
the correct SSH username)
2018-07-24 17:18:40 -04:00
Justin Santa Barbara 9320948a8a Mark 1.10.0-beta.1 2018-07-23 11:16:03 -04:00
Justin Santa Barbara 934f6c9d4b Fix GCE instance lookup during validation
ExternalID was deprecated and replaced by ProviderID, but the value of
ProviderID on GCE seems to have switched from instance ID to instance
Name.  Adopt a fallback matching strategy.
2018-07-23 02:10:58 -04:00
Justin Santa Barbara e54c844e13 Force-load br_netfilter in nodeup
This does a best-effort modprobe of br_netfilter, to try to address
the DNS issues when the module is not loaded.

In 1.11 we'll have to look at this further, and probably we want an
error if the modprobe fails.
2018-07-22 13:15:22 -04:00
Justin Santa Barbara 7b58bb3a6b Only use SSL for ELB if certificate configured
Support for certificates was added recently, but we only want to do
decryption at the ELB if a certificate is installed (we can't decrypt
at the ELB without a certificate)
2018-07-21 16:12:19 -04:00
k8s-ci-robot 27a055d965
Merge pull request #5472 from kampka/terraform-autoscaling-group-ids
Add autoscaling group ids to terraform module output
2018-07-20 14:03:34 -07:00
k8s-ci-robot bdd6fecb6e
Merge pull request #5464 from justinsb/global_backoff_on_protokube_downloads
Introduce a global backoff to rate limit failed image downloads
2018-07-20 06:59:52 -07:00
Christian Kampka 00cd85d73e Add autoscaling group ids to terraform module output 2018-07-20 13:15:03 +02:00
Justin Santa Barbara 630ea429ae
Merge pull request #4677 from usabilla/external-load-balancers
Add the ability to specify external loadbalancers for instancegroups
2018-07-19 21:54:00 -04:00
k8s-ci-robot c342df1392
Merge pull request #5390 from kampka/add-container-proxy
Add pull-through proxy cache for asset docker images
2018-07-19 11:55:16 -07:00
Justin Santa Barbara 128417c6d4 Introduce a global backoff to rate limit failed image downloads
This should help with runaway downloads of protokube.tar.gz
2018-07-19 12:13:17 -04:00
k8s-ci-robot 54cbe492cb
Merge pull request #5414 from Raffo/master
[WIP] Initial implementation of ACM certificate for API server ELB
2018-07-19 08:34:54 -07:00
k8s-ci-robot 56ccfac26d
Merge pull request #5317 from gambol99/node_registration
Node Authorization Service
2018-07-19 05:17:41 -07:00
k8s-ci-robot 80c61fe383
Merge pull request #5443 from kampka/terraform-local
Generate locals for terraform target
2018-07-18 10:05:19 -07:00
k8s-ci-robot 423ef6e78d
Merge pull request #5441 from kampka/weave-network-encryption
Add weave network encryption secret
2018-07-18 07:32:31 -07:00
Raffaele Di Fazio b2573a1382 gofmt load_balancer.go 2018-07-16 12:44:43 +02:00
k8s-ci-robot 9264587454
Merge pull request #5419 from AliyunContainerService/rollingUpdate
support edit cluster and rolling-update cluster for AliCloud
2018-07-15 18:02:55 -07:00
k8s-ci-robot 00d7237b19
Merge pull request #5426 from aleerizw/update-kube-router-manifest
Added metrics port and health check to kube-router
2018-07-15 12:15:05 -07:00
k8s-ci-robot c3608afa06
Merge pull request #5392 from rajansandeep/scrape
Add prometheus scrape port to CoreDNS service
2018-07-15 12:14:55 -07:00
k8s-ci-robot bfafff1310
Merge pull request #5380 from shrinandj/fix-calico-mtu
Allow setting MTU for calico networking.
2018-07-15 10:54:56 -07:00
Christian Kampka 978f66266c Generate locals for terraform target 2018-07-13 22:28:27 +02:00
Raffaele Di Fazio 6da642662e Remove the loadbalancer listener if there is an update to recreate the new one 2018-07-13 18:10:52 +02:00
Christian Kampka 3bf8a8fcd2 Add weave network encryption secret 2018-07-13 16:57:48 +02:00
k8s-ci-robot 35b7d5791d
Merge pull request #5424 from rdrgmnzs/fix_aws-authenticator_read_perms
Fix the issue described in #5412 where the authenticator is no longer…
2018-07-11 15:29:26 -07:00
Ali Rizwan 7dfdc5d632 Update version 2018-07-11 12:11:42 +02:00
Ali Rizwan 100674e1bf Added metrics port and health check to kube-router 2018-07-10 16:20:19 +02:00
Rodrigo Menezes b296e6fcbf Fix the issue described in #5412 where the authenticator is no longer able to read the K8s CAs. 2018-07-09 23:57:58 -07:00
Rodrigo Menezes 414b3a780b Rename hept.io authenticator to aws authenticator 2018-07-08 10:10:19 -07:00
LilyFaFa b3aabfdebc support edit cluster and rolling-update cluster for AliCloud 2018-07-07 15:42:44 +08:00
Rohith 92115b2341 - dropping the specific flags and using a genenic --feature gate model for the authorizers, meaning i don't need to come back to the API whenever we want to make changes 2018-07-06 20:15:18 +01:00
Rohith fd6cef8180 Requested Changes
- switching to using code rather than a template for the systemd unit creation as requested in review
- as part of the review, changing the name of the ca from tls-ca to tls-client-ca
- changing the api from DisableAddressCheck to EnableAddressCheck and defaulting to true if no set
- fixing up the test for node-authorizer and shifting the parsing of the certificates as suggested in reviews to a method
2018-07-06 20:14:35 +01:00
Rohith 79cff25eb4 - fixing up on the comments raised by on the review 2018-07-06 20:14:35 +01:00