Ciprian Hacman
68b4611066
Clean up kubelet networking flags for dockershim
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 17:36:18 +02:00
Ciprian Hacman
bf82a8f260
Update pause image to v3.6
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 13:00:36 +02:00
Ole Markus With
3f265a43bb
Remove networking flags as of k8s 1.24
2022-01-18 22:15:16 +01:00
Ciprian Hacman
678366b916
Update containerd to v1.6.0-rc.0
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-13 07:39:37 +02:00
Ciprian Hacman
3f6db14e89
Update containerd to v1.6.0-beta.5
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-07 10:18:10 +02:00
John Gardiner Myers
d5ac8862d5
Release 1.24.0-alpha.2
2022-01-01 10:35:11 -08:00
John Gardiner Myers
4d4a4a9e01
Use latest GCP CCM for k8s 1.24
2021-12-31 17:31:12 -08:00
justinsb
45ad8b50ae
Enhance AddHostPathMapping to support a fluent style
...
This allows for the helper to be used in more places.
2021-12-31 13:26:12 -05:00
Ole Markus With
dd06cd337f
Bump Cluster Autoscaler and update manifest
2021-12-29 18:06:27 +01:00
John Gardiner Myers
dae281d30e
Migrate to GCE CCM in k8s 1.24
2021-12-28 19:33:07 -08:00
Jiahui Feng
f3ca669141
generated: ./hack/update-bazel.sh
2021-12-20 17:19:34 -08:00
Jiahui Feng
733f4d524f
external CCM for GCE
2021-12-20 17:15:17 -08:00
Kubernetes Prow Robot
2f31054e19
Merge pull request #13007 from hakman/skip_non-masquerade-cidr
...
Use kubelet --non-masquerade-cidr only for Docker with kubenet
2021-12-21 18:49:36 -08:00
Ole Markus With
00f8808ab1
Log the specific yaml segment that fails. Also remove redundant full manifest logging
2021-12-20 15:04:52 +01:00
Ciprian Hacman
cb6d424675
Use kubelet --non-masquerade-cidr only for Docker with kubenet
2021-12-20 08:47:02 +02:00
Ciprian Hacman
991eb70c71
Update containerd to v1.6.0-beta.4
2021-12-15 08:33:30 +02:00
Ole Markus With
0cfea49250
Do not expose the policy actions sets out of package
2021-12-13 09:14:20 +01:00
Ole Markus With
794cb72112
Karpenter addon
...
Constrain the instance types to what is supported by the AMI
Add taints and label to karpenter provisioner
Add instance types to karpenter provisioner
2021-12-12 19:33:41 +01:00
John Gardiner Myers
a0736b3c29
Remove support for Aliyun/Alibaba Cloud
2021-12-11 21:49:13 -08:00
John Gardiner Myers
c5e1dea184
Remove code for no-longer-supported k8s version
2021-12-11 16:30:51 -08:00
Ole Markus With
2088849768
Do not set insecure port on k8s 1.20+
2021-12-11 12:44:56 +01:00
Ciprian Hacman
f5f35ab755
Release 1.24.0-alpha.1 ( #12928 )
2021-12-11 00:01:57 -08:00
Ciprian Hacman
473018f64f
Release 1.23.0-beta.1 ( #12924 )
2021-12-10 22:31:58 -08:00
John Gardiner Myers
fe324c84b5
Upgrade node-cache to 1.21.3
2021-12-06 21:10:04 -08:00
justinsb
4cf52d0e51
GCE: Support kops-controller, including in gossip mode
...
We discover the kops-controller in gossip mode using seeding code that
calls into the GCE API, just like gossip itself does.
We refactor the gossip code into a shared gcediscovery library with
minimal dependencies.
2021-12-04 11:51:41 -05:00
John Gardiner Myers
5ae9d24c22
Remove more unused fields from v1alpha3
2021-12-02 20:41:07 -08:00
Kubernetes Prow Robot
0be79b25b7
Merge pull request #12867 from hakman/gofumpt_script
...
Add gofumpt scripts
2021-12-01 22:13:32 -08:00
Ciprian Hacman
ea7df00719
Run hack/update-gofmt.sh
2021-12-01 22:39:50 +02:00
Peter Rifel
f22545e885
Enable GCP PD CSI driver by default in k8s 1.23
2021-11-30 22:15:47 -06:00
Ole Markus With
f2f9b9dcbb
Determine hostnameOverride entirely in nodeup instead of passing in cloud placeholders from cloudup
2021-11-30 13:29:54 +01:00
John Gardiner Myers
ef754ce71f
Make requests and limits be *resource.Quantity
2021-11-29 22:50:31 -08:00
John Gardiner Myers
a502a37990
Support NodeLocalDNS on IPv6 clusters
2021-11-28 15:55:16 -08:00
John Gardiner Myers
daca9fb2b8
Reissue client keypairs on issuer change
2021-11-27 15:24:36 -08:00
Kubernetes Prow Robot
3245c6d817
Merge pull request #12835 from johngmyers/disable-2
...
Invert sense of negative-option settings in v1alpha3
2021-11-27 00:38:41 -08:00
John Gardiner Myers
80a03c6aad
Fix enabling of AWS CCM
2021-11-25 19:31:29 -08:00
John Gardiner Myers
837176340d
Change sense of Cilium DisableMasquerade in v1alpha3
2021-11-25 18:45:13 -08:00
Kubernetes Prow Robot
ddf40ddca2
Merge pull request #12826 from hakman/etcd-3.5.1
...
Add support for etcd v3.5.1
2021-11-25 04:26:33 -08:00
Ciprian Hacman
5f8af27efa
Add support for etcd v3.5.1
2021-11-25 11:32:18 +02:00
Ciprian Hacman
f740f0d493
Run hack/update-expected.sh
2021-11-25 11:32:12 +02:00
Ciprian Hacman
d0291fe6f6
Update etcd-manager to v3.0.20211124
2021-11-25 11:30:26 +02:00
Kubernetes Prow Robot
0e56286aa3
Merge pull request #12816 from johngmyers/rename-fields-2
...
Rename fields to fit acronym conventions
2021-11-24 23:14:33 -08:00
John Gardiner Myers
9d8cade672
Migrate to AWS CCM in k8s 1.24
2021-11-24 17:46:00 -08:00
Ole Markus With
b420f3c58d
Bump EBS CSI driver to 1.5.0
2021-11-23 19:46:08 +01:00
John Gardiner Myers
b9ac79ec6e
Rename fields in v1alpha3 networking API to fit acronym convention
2021-11-22 08:07:55 -08:00
Ole Markus With
739350a4b5
Bump cilium to 1.10.5
2021-11-22 11:52:08 +01:00
Kubernetes Prow Robot
b7c2777ffc
Merge pull request #12743 from olemarkus/ipv6-s3
...
Use dualstack endpoint for s3
2021-11-20 20:40:59 -08:00
Kubernetes Prow Robot
034af62889
Merge pull request #12792 from justinsb/gossip_coredns_hosts_via_services
...
gossip: support resolution of k8s.local names from pods (via services)
2021-11-20 15:00:59 -08:00
Ole Markus With
2fa53989c4
Configure dualstack endpoint for s3
...
Use dualstack https endpoints on ipv6only cluster. Always use
dualstack endpoints through the SDK
2021-11-20 08:00:00 +01:00
Ciprian Hacman
2421188a60
Update containerd to v1.6.0-beta.3
2021-11-19 20:52:16 +02:00
justinsb
6133250046
gossip: support resolution of k8s.local names from pods
...
We add the hosts plugin to CoreDNS, and we populate a ConfigMap from
kops-controller (when in gossip mode).
This enables resolution of the internal apiserver DNS name from Pods,
even when gossip mode (k8s.local) is in use. This should fix the
failing e2e tests which are assuming that the name in the JWT token is
resolvable from inside the cluster.
This is also a possible step towards a simpler gossip mode, now that
we have a central controller.
2021-11-19 11:02:15 -05:00
justinsb
0c696d41d3
Create supporting services in kops-controller for gossip-mode
...
The intent is that we can then expose these via CoreDNS, so that
internal name resolution will work.
2021-11-19 11:02:10 -05:00
Kubernetes Prow Robot
ec9c277259
Merge pull request #12783 from olemarkus/bump-nodelocaldns-23
...
Bump node local dns cache
2021-11-18 16:58:51 -08:00
Ole Markus With
3983017ac6
Bump node local dns cache
2021-11-18 20:51:37 +01:00
justinsb
7995e8cc28
Update test data for etcd-manager bump
2021-11-18 11:49:14 -05:00
justinsb
e2922a257d
Bump etcd-manager version
2021-11-18 11:49:14 -05:00
Ciprian Hacman
6a60823b34
Update containerd to v1.4.12
2021-11-18 07:56:26 +02:00
Ciprian Hacman
1620e6a8e1
Update containerd to v1.6.0-beta.2
2021-11-14 09:39:36 +02:00
John Gardiner Myers
46e226d1ee
Revert "Migrate to AWS CCM in k8s 1.24"
...
This reverts commit 56c054cda7 .
2021-11-12 22:07:18 -08:00
John Gardiner Myers
56c054cda7
Migrate to AWS CCM in k8s 1.24
2021-11-02 23:08:03 -07:00
Ciprian Hacman
6ca361355d
Set cloud provider for external CCM
2021-11-01 16:31:20 +02:00
John Gardiner Myers
3a97dbaa8d
Release 1.23.0-alpha.2
2021-10-31 13:46:07 -07:00
Ciprian Hacman
76898881cb
Use prefixes for IPv6 with Calico
2021-10-30 20:57:40 +03:00
Peter Rifel
c734f5c08d
Update IAMBuilder to include the current partition in ARNs
2021-10-29 23:07:31 -05:00
John Gardiner Myers
7cb4fbe91e
Never masquerade IPv6 with Cilium
2021-10-27 23:40:02 -07:00
John Gardiner Myers
fdc128fda4
Remove vestigial Cilium ContainerRuntimeLabels code
2021-10-26 16:10:21 -07:00
Kubernetes Prow Robot
f8ba8b11f7
Merge pull request #12437 from olemarkus/cas-delay
...
Make it possible to set CAS max-node-provision-time
2021-10-22 09:34:38 -07:00
Ole Markus With
11e68308d1
Disable CNP status updates by default
2021-10-20 14:01:48 +02:00
Ole Markus With
258fd4f9d9
Make it possible to set CAS max-node-provision-time
2021-10-20 13:53:37 +02:00
Peter Rifel
99c0778106
Upgrade EBS CSI driver to v1.4.0
2021-10-12 14:44:02 -07:00
Ciprian Hacman
efe21a8d1b
Run hack/update-expected.sh
2021-10-07 13:25:37 +03:00
Ciprian Hacman
78f136705e
Update etcd-manager to 3.0.20211007
2021-10-07 13:25:37 +03:00
Ciprian Hacman
4c8f887547
Update Docker to v20.10.9
2021-10-04 22:25:15 +03:00
Ciprian Hacman
af861a8e61
Update containerd to v1.4.11
2021-10-04 20:20:29 +03:00
John Gardiner Myers
3a346cdc37
Remove unnecessary code
2021-10-02 21:46:17 -07:00
John Gardiner Myers
0fd4dca30e
Remove dead code
2021-10-02 20:58:55 -07:00
Ole Markus With
8eef72d8e8
Bump CAS images
2021-10-02 09:13:22 +02:00
Ciprian Hacman
1ddc11f0a6
Update containerd to v1.4.10
2021-10-02 07:03:59 +03:00
Peter Rifel
88ddff3baf
Use separate cloud.config files for in-tree vs out-of-tree components
2021-09-30 09:20:33 -05:00
Kubernetes Prow Robot
ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
...
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Reilly Brogan
9c6bf83c93
Update Cilium to 1.10.4
...
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4 )
2021-09-23 13:08:57 -05:00
Peter Rifel
ca044455a3
Remove critical-pod scheduler annotation.
...
This is no longer recognized in all supported k8s versions (1.16+)
ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
justinsb
345f3d85f1
Fix controller defaults for both bootstrap tokens and ipv6
...
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Ole Markus With
dc4c559d41
Set some needed defaults for cloud ipam
2021-09-16 21:11:09 +02:00
Ole Markus With
384b9796f7
Don't set cluster ip if we use cloud ipam
2021-09-16 19:26:48 +02:00
Kubernetes Prow Robot
3fd7b446c0
Merge pull request #12305 from hakman/node_ip_families
...
Make AWS CCM NodeIPFamilies configurable
2021-09-12 06:26:14 -07:00
Kubernetes Prow Robot
2e3ca721a5
Merge pull request #12291 from hakman/aws-ccm-1.22.0-alpha.0
...
Default to latest staging image for AWS CCM
2021-09-12 06:26:07 -07:00
Kubernetes Prow Robot
1b431b4c9c
Merge pull request #11628 from olemarkus/gpu-runtime
...
Pre-install nvidia container runtime + drivers on GPU instances
2021-09-11 13:00:07 -07:00
Ciprian Hacman
cf8b11b0d4
Default to latest staging image for AWS CCM
2021-09-11 18:38:24 +03:00
Ole Markus With
bba3c3abfe
Bump aws ebs csi driver to 1.2.1
2021-09-11 14:15:31 +02:00
Ciprian Hacman
dde08e839d
Make AWS CCM NodeIPFamilies configurable
2021-09-11 13:09:08 +03:00
Peter Rifel
0d13da839a
Use MasterInternalName for gossip cluster SA issuer
...
This reverts a change introduced earlier in 1.22 that resulted in existing service account tokens becoming invalid after a kops upgrade.
2021-09-10 14:40:07 -04:00
Kubernetes Prow Robot
5a917b5186
Merge pull request #12104 from rifelpet/ccm-tag
...
Update AWS CCM tags
2021-09-09 02:54:11 -07:00
Peter Rifel
6a53285ffe
Move AWS CCM image logic into pkg/model and add 1.21 and 1.22 images
2021-09-08 20:56:39 -05:00
Simone Sciarrati
6773fdf495
option to omit --cluster-cidr from kubeproxy config
2021-09-08 14:46:06 +02:00
Ole Markus With
f5fed2a08d
Move nvidia config under containerd
2021-09-05 20:28:07 +02:00
Ole Markus With
2d013e460c
Install nvidia container runtime
2021-09-05 20:09:04 +02:00
Ole Markus With
c390d45f76
Set ipv6 nameservers on aws
...
AWS now provides ipv6 DNS server endpoint at a fixed address (rather than ipv4, which depends on the VPC CIDR block). This isn't provided in dhcp, and anyways we want to ensure we use this endpoint in ipv6 mode and not have ipv4 in the mix.
2021-09-03 09:47:37 +02:00
Kubernetes Prow Robot
c7eb08c76f
Merge pull request #12193 from olemarkus/protect-kernel-defaults
...
Enable protect-kernel-defaults by default and set the correct sysctls in nodeup
2021-09-02 04:42:09 -07:00
dntosas
f558f2441a
[addons/nodelocaldns] Bump image to latest stable v1.20.0
...
As per
3b17e06879 ,
node-local-dns addon is now builded with latest coreDNS base v1.8 and
that brings great consistency between cache and upstream servers in a
manner of configuration, metrics name convention, etc.
So in this commit, we bump node-local-dns image to latest v1.20.0 which
is build upon latest coreDNS and also add support for overriding this
field.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-31 14:07:19 +03:00
John Gardiner Myers
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00