Commit Graph

2870 Commits

Author SHA1 Message Date
runitmisra ca9d983591 feat: Added cni-exclusive setting for cilium 2025-04-18 15:27:21 +05:30
Arnaud Meukam 8a218c2da7
Enable more admission controllers
Enable admission controllers for:
 - ValidatingAdmissionPolicy
 - RuntimeClass

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2025-04-14 15:09:04 +02:00
Peter Rifel d1e94fd0a9
Pin GCP CCM image to v32.2.4 2025-04-08 18:56:59 -05:00
justinsb 7dc29d29fd Do not include WarmPool in json for AutoscalingGroup task
This avoids a circular dependency.

I previously considered making the field private,
but this is roughly equivalent and less disruptive.

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2025-03-27 08:03:37 -04:00
Ciprian Hacman 940813ab55 Update Cilium to v1.16.7 2025-03-09 06:53:37 +02:00
Jim Barber bdc25ad0cc
Remove some default CPU limits
Remove the default CPU limits defined for the aws-iam-authentication and
node-problem-detector DaemonSets.

This makes them behave the same as the other `cpuLimit` parameters for
the cluster that also do not have defaults.

As it was previously set up, if an administrator does not want CPU
limits defined for these DaemonSets, there was no way to define that via
the cluster spec.
2025-02-28 08:09:06 +08:00
Peter Rifel 1f6ea4fc75
Remove cloud-config and cloud-provider from 1.33 apiserver 2025-02-19 19:12:23 -06:00
Justin Santa Barbara 0789af746b
Release 1.32.0-beta.1 (#17241) 2025-01-30 06:25:58 +02:00
Antonio Ojea f84bf6101c Revert "toolbox dump: include full instance details on GCE"
This reverts commit ecadd7a5b4.

gce.UsesIPAliases(o) is assumed to be called after validating that cloud
provider is GCP, with this commit the if statement applies to all cloud providers.
2025-01-16 09:58:33 +00:00
justinsb c9d4e2888d kindnet: Support IP aliases with kindnet on gce 2025-01-15 06:21:43 -05:00
Kubernetes Prow Robot 90edbe4b69
Merge pull request #17210 from aojea/kindnet1.8.1
bump kindnet default version to 1.8.2
2025-01-15 03:00:33 -08:00
Antonio Ojea 76c8000c55 bump kindnet default version to 1.8.1
Change-Id: I216c463db29ae73d15ca6bfa00cc96a3c07a53fa
2025-01-15 09:55:35 +00:00
justinsb ecadd7a5b4 toolbox dump: include full instance details on GCE 2025-01-14 08:15:17 -05:00
Ciprian Hacman d112c6ec87 Update containerd to v1.7.25 2025-01-10 22:10:28 +02:00
Ciprian Hacman eac132daae Add IPv6 support for kindnet 2025-01-09 17:50:06 +02:00
Ciprian Hacman 9e5b759989 aws: Update EBS CSI driver to v1.38.1 2025-01-09 08:53:23 +02:00
Antonio Ojea f2c239dd81 add kindnet network plugin
add kindnet as an experimental network addon

containerd adds the requirement to use the loopback cni plugin,
kindnet provides that capability and containerd does not require it
since containerd/containerd/pull/10238

Change-Id: I1397a90186885b02e98b5ffa444fe629c1046757
2025-01-08 01:09:37 +00:00
Ciprian Hacman 3816c6651d Update containerd to v1.7.24 2025-01-07 10:51:21 +02:00
Peter Rifel 13d53aa45d
Add hetzner server labels for IG node labels 2025-01-06 14:11:14 -06:00
Kubernetes Prow Robot dee0e95924
Merge pull request #17171 from ajgupta42/azurevoltype
Adding VolumeType for Azure for etcdMembers
2025-01-06 17:32:08 +01:00
Anuj Gupta 650fb5fec7 Adding VolumeType for Azure for etcdMembers 2025-01-06 20:12:46 +05:30
Ciprian Hacman 7ac3c06624 Update Cilium to v1.16.5 2025-01-06 09:55:48 +02:00
Ciprian Hacman eaf796c3c0 Remove support for K8s 1.26 in kOps 1.32 2025-01-04 15:01:41 +02:00
Kubernetes Prow Robot 6b0d029366
Merge pull request #17162 from hakman/cni-updates
Install CNI network plugins only for specific CNIs
2025-01-03 21:40:15 +01:00
Ciprian Hacman 579fb6b2b0 hack/update-expected.sh 2025-01-03 21:43:20 +02:00
Ciprian Hacman c3a748f65a hack/update-expected.sh 2025-01-02 11:49:17 +02:00
Ciprian Hacman f8fa17329c Update etcd to v3.5.17 2025-01-02 11:46:21 +02:00
Peter Rifel 12b9fac068
Only set NTH ManagedASGTag label if it doesn't already exist 2024-12-16 21:50:19 -06:00
justinsb 4ec6c5b73b Release 1.31.0-beta.1 2024-12-14 14:15:16 -05:00
cuiyourong 0cfcb4ef5e chore: fix some function names in comment
Signed-off-by: cuiyourong <cuiyourong@gmail.com>
2024-12-07 00:40:04 +08:00
Kubernetes Prow Robot 3a8a13f3ad
Merge pull request #16975 from justinsb/version_skew_more
Fixup kubelet and controlPlaneKubelet config building
2024-12-04 23:19:06 +00:00
justinsb 4a63a118b2 Remove unusued kubernetesVersion from AssetBuilder
This field is no longer used, and can be removed.
2024-12-04 08:57:17 -05:00
justinsb 0f13759bdf Fixup kubelet and controlPlaneKubelet config building
We need to differentiate between the version of the control plane
and the version of the nodes.
2024-12-04 08:53:02 -05:00
justinsb 3f38846ca5 refactor: create abstraction over cluster/instancegroup for building assets
This abstraction should let us change the version on an instance group level.
2024-11-27 07:38:34 -05:00
Kubernetes Prow Robot 417cb3fcbc
Merge pull request #16931 from spotinst/spotinst/feature/add_aggressiveScaleDown
Spotinst: add aggressive scale down feature
2024-11-10 16:54:44 +00:00
justinsb b4306a390c tests: set AllInstanceGroups alongside InstanceGroups 2024-11-09 14:57:24 -05:00
Ciprian Hacman 1683894999 Allow updating the cluster one instance group at a time
Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>
2024-11-09 11:34:28 -05:00
yehielnetapp e9f0fc0aad actual change to add feature aggressiveScaleDown 2024-11-04 10:18:58 +02:00
ana.aguilar 7b2f02fc60 feat(cilium): adding EnableLocalRedirectPolicy parameter 2024-10-29 16:59:59 -03:00
Kubernetes Prow Robot d3554048b8
Merge pull request #16911 from shiftstack/g2
openstack: Upgrade to Gophercloud v2
2024-10-28 10:06:54 +00:00
Peter Rifel fb3e5ea1f8
Upgrade Cilium to v1.16.3 2024-10-23 21:27:45 -05:00
Pierre Prinetti 1005dda58e
Upgrade to Gophercloud v2
Essentially:

* Add a context argument to Gophercloud functions
* Refactor scheduler hints for server creation
2024-10-23 12:33:34 +02:00
Peter Rifel 5833a83c51
Release 1.31.0-alpha.1 2024-10-13 20:03:59 -05:00
Ciprian Hacman 55911f34b7 hack/update-expected.sh 2024-10-13 22:17:35 +03:00
Ciprian Hacman 049ed0c56b Update etcd-manager to v3.0.20241012 2024-10-13 22:15:15 +03:00
Ciprian Hacman 459a4880c2 Update containerd to v1.7.22 2024-10-07 07:53:47 +03:00
Peter Rifel 7a65c10b13
Upgrade cilium to 1.16.2 2024-10-06 07:01:13 -05:00
Ciprian Hacman 7e5cba4845 Update AWS CCM to v1.31.0 2024-09-27 08:15:56 +03:00
Guilherme Souza a4ac273f63
fix(cluster-autoscaler): add missing permission 2024-09-23 09:45:55 +02:00
justinsb 0963d73cc5 metal: initial support for adding hosts
The bulk of this work is implementing a clientset for use in kops-controller.
2024-09-18 09:03:43 -04:00
justinsb 28c4cff7d4 refactor: remove unused keystore parameter
This keystore field was not used.  Refactor for clarity/simplicity.
2024-09-17 07:52:07 -04:00
justinsb 623ae0672c metal: copy static manifests to the control plane
Used by the kube-apiserver healthcheck.
2024-09-14 13:09:45 -04:00
Kubernetes Prow Robot 6a5f4e741c
Merge pull request #16800 from rifelpet/cilium1161
Update Cilium to v1.16.1
2024-09-13 04:41:13 +01:00
justinsb 28bd115577 metal: assume etcd discovery is external
localhost won't work for multiple nodes and turns out not to even work for one node.

Assume that there is a discovery mechanism that sets up /etc/hosts (it might be static configuration).

Add to metal test to get to kube-apiserver responding.
2024-09-11 23:38:23 -04:00
Peter Rifel a415765cee
Update cilium to v1.16.1 2024-09-11 20:54:52 -05:00
Kubernetes Prow Robot 693874aab2
Merge pull request #16808 from rifelpet/gcp-alias-name
Limit GCP subnet secondary alias names to 63 chars
2024-09-05 04:14:05 +01:00
Peter Rifel d47c0d0e66
Limit GCP subnet secondary alias names to 63 chars 2024-09-04 21:14:12 -05:00
justinsb ab0f6847d4 bare-metal: configure etcd with static configuration
Likely restricted to a single node for now (because of the need for well-known IP addresses)
2024-09-03 14:09:09 -04:00
justinsb a65bb16a38 metal: support `kops toolbox enroll` on a control-plane machine
In particular, we want to build the full cluster and instance group.

The control plane does not yet start, because etcd is not configured correctly.
2024-08-31 07:14:47 -04:00
justinsb 6e036b39c2 refactor: move more nodeup script logic to NodeUpScript
This enables simpler reuse.
2024-08-30 09:14:49 -04:00
justinsb 7f58570a04 metal: stub out functions to enable cluster creation
Start adding the minimal implementation such that we can `kops create cluster`
2024-08-29 22:39:48 -04:00
justinsb 3646a610b1 refactor: Move GetCloudProvider to cluster
This lets us use labels (or annotations), meaning we can experiment
with different clouds without changing the API.

We also add initial (experimental/undocumented) support for exposing a "Metal" provider.
2024-08-26 08:20:37 -04:00
justinsb 29d6fd897e refactor: OptionsBuilder works on kops.Cluster
Previously it worked on ClusterSpec, but that means we can't read the
labels or annotations.  We want to use those labels/annotations to
experiment with new cloud providers (e.g. bare metal) before adding
this to the API.

Introduce generics so we also get type-safety.
2024-08-25 12:58:34 -04:00
yehiel etah 5d4d867086
spotinst: Bump k8s cluster controller to v2 (#16717)
* update controller v2, inform user on conflict with aws nodeTerminationHandler and Ocean

* add BuildPrune to addon,tested

* add note to release 1.31
2024-08-09 15:25:15 -07:00
Kubernetes Prow Robot 2a1f1f287d
Merge pull request #16705 from hakman/gce-startup-script
gce: Add option to use startup script instead of user-data
2024-08-09 13:18:03 -07:00
Ciprian Hacman 323d8d700f Rename `StartupScript` to `UseStartupScript` 2024-08-09 19:38:24 +03:00
Kubernetes Prow Robot 26963ddd17
Merge pull request #16693 from alexandresavicki/master
feat(cluster-autoscaler) Implement emitPerNodegroupMetrics parameter
2024-08-06 12:18:51 -07:00
Alexandre Savicki 44413d1d7f feat(cluster-autoscaler) Implement emitPerNodegroupMetrics parameter 2024-08-05 10:33:52 -03:00
Peter Rifel a57e013249
./hack/update-expected.sh 2024-08-03 06:09:49 -05:00
Peter Rifel 6f628ad5b2
Use new staging etcd-manager image for testing 2024-08-03 06:07:18 -05:00
Kubernetes Prow Robot 09b39323fe
Merge pull request #16712 from rifelpet/ebs-csi-1330
Update AWS EBS CSI Driver to 1.33.0
2024-07-30 20:47:20 -07:00
Peter Rifel 1dd713092a
Update test outputs 2024-07-30 20:29:06 -05:00
Ciprian Hacman c65216be6f Add option for enabling GCE startup script 2024-07-30 06:42:33 +03:00
Peter Rifel 36a32537a1
Fix InTreePluginAWSUnregister feature gate removal in 1.31 2024-07-29 22:07:21 -05:00
Davanum Srinivas 535af3f10f
Drop InTreePluginAWSUnregister feature gate for k8s 1.31 and above
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-07-25 12:31:19 -04:00
Kubernetes Prow Robot f0113be9f7
Merge pull request #16651 from justinsb/types_serviceaccount_map
refactor: use types.NamespacedName for map of serviceAccounts
2024-07-04 14:03:47 -07:00
justinsb 0d24809831 refactor: use types.NamespacedName for map of serviceAccounts
A little more type-safe.
2024-07-04 12:00:40 -04:00
justinsb e3db4694ec refactor: simplify signature of AddS3Permissions function
We were returning a value but really we were modifying the passed-in
value in-place.
2024-07-04 11:44:20 -04:00
Justin Santa Barbara b9c632d3eb
Release 1.30.0-beta.1 (#16629) 2024-06-22 13:38:55 -07:00
Peter Rifel b46b08a87c
Upgrade cilium to v1.15.6 2024-06-21 16:00:01 -07:00
Jim Barber f48add0c94
Upgrade node-termination-handler to 1.22.0
Also allow to specify the following extra parameters for it.
- deleteSqsMsgIfNodeNotFound
- memoryLimit
- podTerminationGracePeriod
- taintNode
- webhookTemplate

Signed-off-by: Jim Barber <jim.barber@healthengine.com.au>
2024-05-16 12:43:00 +08:00
Ciprian Hacman 9469fb42bc azure: Limit VMSS scope to specific storage account 2024-05-13 09:29:55 +03:00
Ciprian Hacman 86f5d455e5
Release 1.30.0-alpha.1 (#16563)
* Release 1.30.0-alpha.1

* Update tests for K8s v1.30

* Remove mentions of K8s v1.24
2024-05-11 23:40:27 -07:00
Ciprian Hacman 57c3a10383 chore: Replace gopkg.in/square/go-jose.v2 with github.com/go-jose/go-jose/v4 2024-05-10 08:12:34 +03:00
Kubernetes Prow Robot dd390bf976
Merge pull request #16537 from hakman/npd-0.8.18
Update node-problem-detector to v0.8.18
2024-05-07 19:59:51 -07:00
Ciprian Hacman b78c22f9d3 Update node-problem-detector to v0.8.18 2024-05-07 17:50:07 +03:00
Kubernetes Prow Robot c67030384b
Merge pull request #16531 from hakman/containerd_up
Update containerd to v1.7.16
2024-05-06 23:52:12 -07:00
Ciprian Hacman 888edf7d7e Update containerd to v1.7.16 2024-05-06 14:32:51 +03:00
Ciprian Hacman a2f0740b8e Update cluster-autoscaler to v1.30.0 2024-05-06 13:32:26 +03:00
Ciprian Hacman 38a789ba9d hack/update-expected.sh 2024-05-06 12:25:19 +03:00
Ciprian Hacman a72ca2f22b Update etcd to v3.5.13 2024-05-06 12:25:19 +03:00
Ciprian Hacman 93703d62fe dns: Update dns-node-cache to v1.23.0 2024-05-06 08:51:43 +03:00
Ciprian Hacman f6cf738531 hetzner: Update CCM to v1.19.0 2024-05-05 11:35:22 +03:00
Ciprian Hacman 9bfaf4228d Update Cilium to v1.15.4 2024-05-04 17:32:37 +03:00
Ciprian Hacman 5930254de0 aws: Update CSI to v1.30.0 2024-05-04 11:55:06 +03:00
Ciprian Hacman 7573fac2eb aws: Update CCM to v1.30.0 2024-05-04 11:54:53 +03:00
knowmost fb469a256d all: fix function names
Signed-off-by: knowmost <knowmost@outlook.com>
2024-04-28 15:09:34 +08:00
Peter Rifel dc1aa0d3b4
Migrate IAM EC2 Service generation to aws-sdk-go-v2 2024-04-18 20:37:11 -04:00
Peter Rifel dd3d64943f
Migrate remaining EC2 resource types to aws-sdk-go-v2 2024-04-13 16:01:39 -04:00
Peter Rifel f0c0c29121
Migrate EC2 Networking resource types to aws-sdk-go-v2 2024-04-13 16:01:39 -04:00