Commit Graph

702 Commits

Author SHA1 Message Date
Ciprian Hacman 68b4611066 Clean up kubelet networking flags for dockershim
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 17:36:18 +02:00
Ciprian Hacman bf82a8f260 Update pause image to v3.6
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 13:00:36 +02:00
Ole Markus With 3f265a43bb Remove networking flags as of k8s 1.24 2022-01-18 22:15:16 +01:00
Ciprian Hacman 678366b916 Update containerd to v1.6.0-rc.0
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-13 07:39:37 +02:00
Ciprian Hacman 3f6db14e89 Update containerd to v1.6.0-beta.5
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-07 10:18:10 +02:00
John Gardiner Myers d5ac8862d5 Release 1.24.0-alpha.2 2022-01-01 10:35:11 -08:00
John Gardiner Myers 4d4a4a9e01 Use latest GCP CCM for k8s 1.24 2021-12-31 17:31:12 -08:00
justinsb 45ad8b50ae Enhance AddHostPathMapping to support a fluent style
This allows for the helper to be used in more places.
2021-12-31 13:26:12 -05:00
Ole Markus With dd06cd337f Bump Cluster Autoscaler and update manifest 2021-12-29 18:06:27 +01:00
John Gardiner Myers dae281d30e Migrate to GCE CCM in k8s 1.24 2021-12-28 19:33:07 -08:00
Jiahui Feng f3ca669141 generated: ./hack/update-bazel.sh 2021-12-20 17:19:34 -08:00
Jiahui Feng 733f4d524f external CCM for GCE 2021-12-20 17:15:17 -08:00
Kubernetes Prow Robot 2f31054e19
Merge pull request #13007 from hakman/skip_non-masquerade-cidr
Use kubelet --non-masquerade-cidr only for Docker with kubenet
2021-12-21 18:49:36 -08:00
Ole Markus With 00f8808ab1 Log the specific yaml segment that fails. Also remove redundant full manifest logging 2021-12-20 15:04:52 +01:00
Ciprian Hacman cb6d424675 Use kubelet --non-masquerade-cidr only for Docker with kubenet 2021-12-20 08:47:02 +02:00
Ciprian Hacman 991eb70c71 Update containerd to v1.6.0-beta.4 2021-12-15 08:33:30 +02:00
Ole Markus With 0cfea49250 Do not expose the policy actions sets out of package 2021-12-13 09:14:20 +01:00
Ole Markus With 794cb72112 Karpenter addon
Constrain the instance types to what is supported by the AMI

Add taints and label to karpenter provisioner

Add instance types to karpenter provisioner
2021-12-12 19:33:41 +01:00
John Gardiner Myers a0736b3c29 Remove support for Aliyun/Alibaba Cloud 2021-12-11 21:49:13 -08:00
John Gardiner Myers c5e1dea184 Remove code for no-longer-supported k8s version 2021-12-11 16:30:51 -08:00
Ole Markus With 2088849768 Do not set insecure port on k8s 1.20+ 2021-12-11 12:44:56 +01:00
Ciprian Hacman f5f35ab755
Release 1.24.0-alpha.1 (#12928) 2021-12-11 00:01:57 -08:00
Ciprian Hacman 473018f64f
Release 1.23.0-beta.1 (#12924) 2021-12-10 22:31:58 -08:00
John Gardiner Myers fe324c84b5 Upgrade node-cache to 1.21.3 2021-12-06 21:10:04 -08:00
justinsb 4cf52d0e51 GCE: Support kops-controller, including in gossip mode
We discover the kops-controller in gossip mode using seeding code that
calls into the GCE API, just like gossip itself does.

We refactor the gossip code into a shared gcediscovery library with
minimal dependencies.
2021-12-04 11:51:41 -05:00
John Gardiner Myers 5ae9d24c22 Remove more unused fields from v1alpha3 2021-12-02 20:41:07 -08:00
Kubernetes Prow Robot 0be79b25b7
Merge pull request #12867 from hakman/gofumpt_script
Add gofumpt scripts
2021-12-01 22:13:32 -08:00
Ciprian Hacman ea7df00719 Run hack/update-gofmt.sh 2021-12-01 22:39:50 +02:00
Peter Rifel f22545e885
Enable GCP PD CSI driver by default in k8s 1.23 2021-11-30 22:15:47 -06:00
Ole Markus With f2f9b9dcbb Determine hostnameOverride entirely in nodeup instead of passing in cloud placeholders from cloudup 2021-11-30 13:29:54 +01:00
John Gardiner Myers ef754ce71f Make requests and limits be *resource.Quantity 2021-11-29 22:50:31 -08:00
John Gardiner Myers a502a37990 Support NodeLocalDNS on IPv6 clusters 2021-11-28 15:55:16 -08:00
John Gardiner Myers daca9fb2b8 Reissue client keypairs on issuer change 2021-11-27 15:24:36 -08:00
Kubernetes Prow Robot 3245c6d817
Merge pull request #12835 from johngmyers/disable-2
Invert sense of negative-option settings in v1alpha3
2021-11-27 00:38:41 -08:00
John Gardiner Myers 80a03c6aad Fix enabling of AWS CCM 2021-11-25 19:31:29 -08:00
John Gardiner Myers 837176340d Change sense of Cilium DisableMasquerade in v1alpha3 2021-11-25 18:45:13 -08:00
Kubernetes Prow Robot ddf40ddca2
Merge pull request #12826 from hakman/etcd-3.5.1
Add support for etcd v3.5.1
2021-11-25 04:26:33 -08:00
Ciprian Hacman 5f8af27efa Add support for etcd v3.5.1 2021-11-25 11:32:18 +02:00
Ciprian Hacman f740f0d493 Run hack/update-expected.sh 2021-11-25 11:32:12 +02:00
Ciprian Hacman d0291fe6f6 Update etcd-manager to v3.0.20211124 2021-11-25 11:30:26 +02:00
Kubernetes Prow Robot 0e56286aa3
Merge pull request #12816 from johngmyers/rename-fields-2
Rename fields to fit acronym conventions
2021-11-24 23:14:33 -08:00
John Gardiner Myers 9d8cade672 Migrate to AWS CCM in k8s 1.24 2021-11-24 17:46:00 -08:00
Ole Markus With b420f3c58d Bump EBS CSI driver to 1.5.0 2021-11-23 19:46:08 +01:00
John Gardiner Myers b9ac79ec6e Rename fields in v1alpha3 networking API to fit acronym convention 2021-11-22 08:07:55 -08:00
Ole Markus With 739350a4b5 Bump cilium to 1.10.5 2021-11-22 11:52:08 +01:00
Kubernetes Prow Robot b7c2777ffc
Merge pull request #12743 from olemarkus/ipv6-s3
Use dualstack endpoint for s3
2021-11-20 20:40:59 -08:00
Kubernetes Prow Robot 034af62889
Merge pull request #12792 from justinsb/gossip_coredns_hosts_via_services
gossip: support resolution of k8s.local names from pods (via services)
2021-11-20 15:00:59 -08:00
Ole Markus With 2fa53989c4 Configure dualstack endpoint for s3
Use dualstack https endpoints on ipv6only cluster. Always use
dualstack endpoints through the SDK
2021-11-20 08:00:00 +01:00
Ciprian Hacman 2421188a60 Update containerd to v1.6.0-beta.3 2021-11-19 20:52:16 +02:00
justinsb 6133250046 gossip: support resolution of k8s.local names from pods
We add the hosts plugin to CoreDNS, and we populate a ConfigMap from
kops-controller (when in gossip mode).

This enables resolution of the internal apiserver DNS name from Pods,
even when gossip mode (k8s.local) is in use.  This should fix the
failing e2e tests which are assuming that the name in the JWT token is
resolvable from inside the cluster.

This is also a possible step towards a simpler gossip mode, now that
we have a central controller.
2021-11-19 11:02:15 -05:00
justinsb 0c696d41d3 Create supporting services in kops-controller for gossip-mode
The intent is that we can then expose these via CoreDNS, so that
internal name resolution will work.
2021-11-19 11:02:10 -05:00
Kubernetes Prow Robot ec9c277259
Merge pull request #12783 from olemarkus/bump-nodelocaldns-23
Bump node local dns cache
2021-11-18 16:58:51 -08:00
Ole Markus With 3983017ac6 Bump node local dns cache 2021-11-18 20:51:37 +01:00
justinsb 7995e8cc28 Update test data for etcd-manager bump 2021-11-18 11:49:14 -05:00
justinsb e2922a257d Bump etcd-manager version 2021-11-18 11:49:14 -05:00
Ciprian Hacman 6a60823b34 Update containerd to v1.4.12 2021-11-18 07:56:26 +02:00
Ciprian Hacman 1620e6a8e1 Update containerd to v1.6.0-beta.2 2021-11-14 09:39:36 +02:00
John Gardiner Myers 46e226d1ee Revert "Migrate to AWS CCM in k8s 1.24"
This reverts commit 56c054cda7.
2021-11-12 22:07:18 -08:00
John Gardiner Myers 56c054cda7 Migrate to AWS CCM in k8s 1.24 2021-11-02 23:08:03 -07:00
Ciprian Hacman 6ca361355d Set cloud provider for external CCM 2021-11-01 16:31:20 +02:00
John Gardiner Myers 3a97dbaa8d Release 1.23.0-alpha.2 2021-10-31 13:46:07 -07:00
Ciprian Hacman 76898881cb Use prefixes for IPv6 with Calico 2021-10-30 20:57:40 +03:00
Peter Rifel c734f5c08d
Update IAMBuilder to include the current partition in ARNs 2021-10-29 23:07:31 -05:00
John Gardiner Myers 7cb4fbe91e Never masquerade IPv6 with Cilium 2021-10-27 23:40:02 -07:00
John Gardiner Myers fdc128fda4 Remove vestigial Cilium ContainerRuntimeLabels code 2021-10-26 16:10:21 -07:00
Kubernetes Prow Robot f8ba8b11f7
Merge pull request #12437 from olemarkus/cas-delay
Make it possible to set CAS max-node-provision-time
2021-10-22 09:34:38 -07:00
Ole Markus With 11e68308d1 Disable CNP status updates by default 2021-10-20 14:01:48 +02:00
Ole Markus With 258fd4f9d9 Make it possible to set CAS max-node-provision-time 2021-10-20 13:53:37 +02:00
Peter Rifel 99c0778106
Upgrade EBS CSI driver to v1.4.0 2021-10-12 14:44:02 -07:00
Ciprian Hacman efe21a8d1b Run hack/update-expected.sh 2021-10-07 13:25:37 +03:00
Ciprian Hacman 78f136705e Update etcd-manager to 3.0.20211007 2021-10-07 13:25:37 +03:00
Ciprian Hacman 4c8f887547 Update Docker to v20.10.9 2021-10-04 22:25:15 +03:00
Ciprian Hacman af861a8e61 Update containerd to v1.4.11 2021-10-04 20:20:29 +03:00
John Gardiner Myers 3a346cdc37 Remove unnecessary code 2021-10-02 21:46:17 -07:00
John Gardiner Myers 0fd4dca30e Remove dead code 2021-10-02 20:58:55 -07:00
Ole Markus With 8eef72d8e8 Bump CAS images 2021-10-02 09:13:22 +02:00
Ciprian Hacman 1ddc11f0a6 Update containerd to v1.4.10 2021-10-02 07:03:59 +03:00
Peter Rifel 88ddff3baf
Use separate cloud.config files for in-tree vs out-of-tree components 2021-09-30 09:20:33 -05:00
Kubernetes Prow Robot ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Reilly Brogan 9c6bf83c93 Update Cilium to 1.10.4
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4)
2021-09-23 13:08:57 -05:00
Peter Rifel ca044455a3
Remove critical-pod scheduler annotation.
This is no longer recognized in all supported k8s versions (1.16+)

ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
justinsb 345f3d85f1 Fix controller defaults for both bootstrap tokens and ipv6
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Ole Markus With dc4c559d41 Set some needed defaults for cloud ipam 2021-09-16 21:11:09 +02:00
Ole Markus With 384b9796f7 Don't set cluster ip if we use cloud ipam 2021-09-16 19:26:48 +02:00
Kubernetes Prow Robot 3fd7b446c0
Merge pull request #12305 from hakman/node_ip_families
Make AWS CCM NodeIPFamilies configurable
2021-09-12 06:26:14 -07:00
Kubernetes Prow Robot 2e3ca721a5
Merge pull request #12291 from hakman/aws-ccm-1.22.0-alpha.0
Default to latest staging image for AWS CCM
2021-09-12 06:26:07 -07:00
Kubernetes Prow Robot 1b431b4c9c
Merge pull request #11628 from olemarkus/gpu-runtime
Pre-install nvidia container runtime + drivers on GPU instances
2021-09-11 13:00:07 -07:00
Ciprian Hacman cf8b11b0d4 Default to latest staging image for AWS CCM 2021-09-11 18:38:24 +03:00
Ole Markus With bba3c3abfe Bump aws ebs csi driver to 1.2.1 2021-09-11 14:15:31 +02:00
Ciprian Hacman dde08e839d Make AWS CCM NodeIPFamilies configurable 2021-09-11 13:09:08 +03:00
Peter Rifel 0d13da839a
Use MasterInternalName for gossip cluster SA issuer
This reverts a change introduced earlier in 1.22 that resulted in existing service account tokens becoming invalid after a kops upgrade.
2021-09-10 14:40:07 -04:00
Kubernetes Prow Robot 5a917b5186
Merge pull request #12104 from rifelpet/ccm-tag
Update AWS CCM tags
2021-09-09 02:54:11 -07:00
Peter Rifel 6a53285ffe
Move AWS CCM image logic into pkg/model and add 1.21 and 1.22 images 2021-09-08 20:56:39 -05:00
Simone Sciarrati 6773fdf495 option to omit --cluster-cidr from kubeproxy config 2021-09-08 14:46:06 +02:00
Ole Markus With f5fed2a08d Move nvidia config under containerd 2021-09-05 20:28:07 +02:00
Ole Markus With 2d013e460c Install nvidia container runtime 2021-09-05 20:09:04 +02:00
Ole Markus With c390d45f76 Set ipv6 nameservers on aws
AWS now provides ipv6 DNS server endpoint at a fixed address (rather than ipv4, which depends on the VPC CIDR block). This isn't provided in dhcp, and anyways we want to ensure we use this endpoint in ipv6 mode and not have ipv4 in the mix.
2021-09-03 09:47:37 +02:00
Kubernetes Prow Robot c7eb08c76f
Merge pull request #12193 from olemarkus/protect-kernel-defaults
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-09-02 04:42:09 -07:00
dntosas f558f2441a
[addons/nodelocaldns] Bump image to latest stable v1.20.0
As per
 3b17e06879,
 node-local-dns addon is now builded with latest coreDNS base v1.8 and
 that brings great consistency between cache and upstream servers in a
 manner of configuration, metrics name convention, etc.

 So in this commit, we bump node-local-dns image to latest v1.20.0 which
 is build upon latest coreDNS and also add support for overriding this
 field.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-31 14:07:19 +03:00
John Gardiner Myers be8933b577 Remove code for unsupported features 2021-08-28 13:49:55 -07:00