Kubernetes Prow Robot
e187359069
Merge pull request #11962 from rifelpet/azure-vmss-zone
...
Azure - support VMSS availability zones
2021-07-15 05:58:48 -07:00
Peter Rifel
affbeb3c5b
Fix Azure zone number format passed to VMSS API
2021-07-14 19:06:28 -04:00
John Gardiner Myers
e185c8148d
hack/update-expected.sh
2021-07-11 11:16:11 -07:00
John Gardiner Myers
9dbf3479d6
Stop writing the certificate-only keyset.yaml
2021-07-11 11:16:11 -07:00
John Gardiner Myers
d58a19e1bd
Refactor service-account signing key
2021-07-10 17:31:59 -07:00
John Gardiner Myers
0e25ceaadd
Change "kubernetes-ca" to have that in the CN
2021-07-09 00:12:30 -07:00
Peter Rifel
9552b25050
Azure - support VMSS availability zones
...
Azure's subnets are regional so we use similar functionality to GCE where we reference the InstanceGroup's zones rather than a subnet's zone.
IG Zones are already populated on cluster creation here: b358037896/upup/pkg/fi/cloudup/new_cluster.go (L682-L684)
2021-07-08 23:10:23 -04:00
John Gardiner Myers
cdf26302b2
hack/update-expected.sh
2021-07-08 18:46:03 -07:00
John Gardiner Myers
c35d101a89
Refactor keysets for etcd-manager
2021-07-08 18:46:03 -07:00
Ciprian Hacman
fd08e2b047
Run hack/update-expected.sh
2021-07-08 22:12:12 +03:00
Ciprian Hacman
1e41439e36
Use etcd v3.5.0 for Kubernetes 1.22+
2021-07-08 22:09:22 +03:00
Ole Markus With
a98bfdb64f
Allow filefs to be used to mock s3 policies
2021-07-04 07:34:56 +02:00
Kubernetes Prow Robot
2e4a1ae143
Merge pull request #11921 from johngmyers/rename-k8s-ca
...
Rename the "ca" keyset to "kubernetes-ca"
2021-07-03 21:48:18 -07:00
Kubernetes Prow Robot
cf834ce5fc
Merge pull request #11843 from olemarkus/reduce-policy-size-further
...
Reduce policy size further
2021-07-03 17:58:18 -07:00
John Gardiner Myers
5834fc2690
hack/update-expected.sh
2021-07-03 17:33:13 -07:00
John Gardiner Myers
921d09523e
Rename the "ca" keyset to "kubernetes-ca"
2021-07-03 17:33:13 -07:00
Peter Rifel
df1f9d4986
Remove unused test files from legacy IAM
2021-07-03 12:17:59 -04:00
Ole Markus With
aefa906491
Do not set both CIDR and IPv6CIDR on sg rules
2021-07-03 07:57:35 +02:00
Peter Rifel
c5fbcccfa6
Update pause image to 3.5
2021-07-02 06:40:27 -04:00
John Gardiner Myers
5c5969d102
hack/update-expected.sh
2021-07-01 22:25:51 -07:00
John Gardiner Myers
1e0c6cb1aa
Refactor apiserver-aggregator-ca
2021-07-01 22:25:47 -07:00
John Gardiner Myers
186aaf6d96
hack/update-expected.sh
2021-07-01 14:45:32 -07:00
John Gardiner Myers
7162a7473a
Remove dead code
2021-07-01 13:58:51 -07:00
Kubernetes Prow Robot
19ffc06d3d
Merge pull request #11853 from johngmyers/override-issuer
...
Allow overriding the ServiceAccountIssuer for IRSA
2021-07-01 04:43:54 -07:00
Ole Markus With
aad2912710
Add sets for the remaining addons
2021-07-01 10:37:57 +02:00
Ole Markus With
df5b58b1b3
Add sets for the typical default role perms
2021-07-01 10:28:01 +02:00
Ole Markus With
37271998e1
Use sets for aws lbc permissions
2021-07-01 10:19:40 +02:00
Ole Markus With
c7bd1c1529
Add s3 policies to integration tests
2021-07-01 09:26:58 +02:00
Ole Markus With
9885714957
Use NewPolicy for the non-master roles
2021-07-01 09:19:35 +02:00
Ole Markus With
19833e6b73
Use sets for ebscsidriver permissions
2021-07-01 09:02:04 +02:00
Ole Markus With
d8bf4dcae1
NewPolicy function for instantiating policy struct
2021-07-01 08:39:43 +02:00
John Gardiner Myers
3de05a500e
Refactor etcd-clients-ca keyset for api-server
2021-06-30 18:55:30 -07:00
Kubernetes Prow Robot
ee048e89e7
Merge pull request #11872 from johngmyers/refactor-serviceaccount
...
Refactor nodeup APIServer builder, part one
2021-06-28 10:42:01 -07:00
Kubernetes Prow Robot
917c965c8f
Merge pull request #11873 from hakman/avoid_spurious_changes
...
Avoid spurious changes for ASG InstanceProtection and LT InstanceMonitoring
2021-06-27 19:59:24 -07:00
Kubernetes Prow Robot
dd8d2d92d8
Merge pull request #11796 from johngmyers/fullcluster-managedfile
...
Write config as ManagedFile
2021-06-27 10:57:24 -07:00
Kubernetes Prow Robot
61778b1fd9
Merge pull request #11845 from johngmyers/mark-deleted
...
Retain deleted keypairs
2021-06-27 10:11:24 -07:00
John Gardiner Myers
7dfe9d82ab
hack/update-expected.sh
2021-06-27 08:45:06 -07:00
John Gardiner Myers
e1df9f09dd
Refactor service-account public keys
2021-06-27 08:45:06 -07:00
John Gardiner Myers
fdf034058d
hack/update-expected.sh
2021-06-27 08:45:05 -07:00
Kubernetes Prow Robot
22c11c10f1
Merge pull request #11848 from johngmyers/cilium-etcd-client
...
Refactor etcd-client-cilium secrets
2021-06-27 04:01:24 -07:00
Ciprian Hacman
348eed772a
Avoid spurious changes for ASG InstanceProtection and LT InstanceMonitoring
2021-06-27 10:08:13 +03:00
Kubernetes Prow Robot
51daab932e
Merge pull request #11870 from hakman/ipv6_use_dualstack_nlb
...
Use DualStack API NLB for IPv6
2021-06-26 12:45:24 -07:00
Ciprian Hacman
7969f57d07
Address review comments
2021-06-26 21:27:00 +03:00
Ole Markus With
dc79acb1bb
Don't reconcile roles and policies if a profile is provided
2021-06-26 19:45:19 +02:00
Ciprian Hacman
7bc629b683
Use DualStack API NLB for IPv6
2021-06-26 19:16:46 +03:00
John Gardiner Myers
2faf28379a
Refactor etcd-client-cilium secrets
2021-06-25 23:57:23 -07:00
John Gardiner Myers
89209df150
hack/update-expected.sh
2021-06-25 22:25:50 -07:00
John Gardiner Myers
1752f0f4db
Move most of nodeup.Config out of userdata
2021-06-25 22:25:49 -07:00
John Gardiner Myers
24d1706848
Allow overriding the ServiceAccountIssuer for IRSA
2021-06-25 18:33:07 -07:00
Kubernetes Prow Robot
e5185b2f46
Merge pull request #11867 from hakman/remove_addon_version
...
Remove version from addons
2021-06-25 14:12:47 -07:00