Commit Graph

2669 Commits

Author SHA1 Message Date
Peter Rifel a837a7ee6c
Handle NoSuchEntity errors when deleting OIDC Provider 2020-06-16 14:36:57 -05:00
Peter Rifel a7d2161c0e
Add OIDC Provider awstask, mock, and resource lister and deleter 2020-06-16 14:36:56 -05:00
Kubernetes Prow Robot fe361ba5b7
Merge pull request #9372 from johngmyers/remove-bundler
Remove bundler as baremetal support was removed
2020-06-16 09:48:04 -07:00
Kubernetes Prow Robot eb39ab7349
Merge pull request #9355 from johngmyers/move-port
Move host-network services off of port 8080
2020-06-16 09:10:04 -07:00
John Gardiner Myers e96c61edf9 Remove bundler as baremetal support was removed 2020-06-16 08:26:19 -07:00
John Gardiner Myers 747aa6e8c4 Revert "Fix kube-apiserver-healthcheck image"
This reverts commit 7e52f223
2020-06-16 07:39:53 -07:00
Kubernetes Prow Robot f3e69e85c9
Merge pull request #9356 from johngmyers/refactor-kubelet-api
Issue kubelet-api cert in nodeup
2020-06-16 00:04:03 -07:00
Kubernetes Prow Robot 2a73c9dd73
Merge pull request #9334 from hakman/docker-selinux
Add "--selinux-enabled" flag for Docker
2020-06-15 22:52:04 -07:00
Kubernetes Prow Robot dc0c219727
Merge pull request #9360 from johngmyers/remove-baremetal
Remove the baremetal cloud provider
2020-06-15 21:11:57 -07:00
Kubernetes Prow Robot 06840579c2
Merge pull request #9359 from coreypobrien/fixkubeapihealthimage
Fix kube-apiserver-healthcheck image
2020-06-15 11:59:57 -07:00
Kubernetes Prow Robot 39db604e0c
Merge pull request #9295 from olemarkus/cilium-component
Validate cilium version
2020-06-15 10:21:56 -07:00
John Gardiner Myers a760080f01 Prefer the GA label for node zone 2020-06-14 16:35:57 -07:00
John Gardiner Myers 0d74344a43 Remove the baremetal cloud provider 2020-06-14 10:38:29 -07:00
Corey O'Brien 7e52f223eb Fix kube-apiserver-healthcheck image 2020-06-14 12:55:22 -04:00
John Gardiner Myers 9d7a93e124 Issue kubelet-api cert in nodeup 2020-06-13 16:35:44 -07:00
John Gardiner Myers 5babf00646 Move node-local-dns healthcheck to port 3989 2020-06-12 22:00:15 -07:00
John Gardiner Myers 4bf8302f14 Move kube-apiserver-healthcheck to port 3990 2020-06-12 22:00:14 -07:00
Kubernetes Prow Robot 868fcfb0e9
Merge pull request #9347 from johngmyers/refactor-certs
Issue kubecfg and kops certs in nodeup
2020-06-12 06:53:56 -07:00
John Gardiner Myers 0f77055f63 Issue kops cert in nodeup 2020-06-11 23:54:59 -07:00
Ciprian Hacman 0b1f01be25 Set the default log level for Docker to "info" 2020-06-12 06:19:09 +03:00
Ciprian Hacman 1bd7f633ca Update override flag for Docker SELinux 2020-06-12 06:19:09 +03:00
Ciprian Hacman 51ebd187f0 Add "--selinux-enabled" flag for Docker 2020-06-12 06:19:09 +03:00
Justin SB 854a4548e3 Refactor kubemanifest to be clearer
Primarily renaming manifests to objects, which is a more accurate
term.
2020-06-11 21:40:51 -04:00
Kubernetes Prow Robot 54d4a81ea8
Merge pull request #9289 from johngmyers/launch-template
Use launch templates by default
2020-06-11 13:40:57 -07:00
Ole Markus With e9d4e3f02d nit 2020-06-11 07:39:52 +02:00
Ole Markus With ed2bfcf7d9 Ignore pre/build part of cilium version. 2020-06-11 07:38:14 +02:00
Ole Markus With e09365b6c2 Validate cilium version 2020-06-11 07:38:14 +02:00
Ole Markus With 39751cfe63 Set cilium defaults in code 2020-06-11 07:38:13 +02:00
Justin SB 0351590512 IAM: Refactor vfs-access logic so we can see the required readable paths
This will enable us to apply similar restricted permissions on GCE and
other clouds.
2020-06-11 00:41:57 -04:00
Kubernetes Prow Robot 98d1f7b05b
Merge pull request #9313 from johngmyers/refactor-scheduler-cert
Issue kube-scheduler and kube-controller-manager certs in nodeup
2020-06-10 21:00:57 -07:00
Kubernetes Prow Robot 1076eec7c6
Merge pull request #9324 from bertinatto/selinux
Allow docker options to be specified by create cluster overrides
2020-06-10 12:56:19 -07:00
John Gardiner Myers 3ce8dd165b Use launch templates by default 2020-06-10 09:34:48 -07:00
Fabio Bertinatto 0d5a565920 Allow docker options to be specified by create cluster overrides
This will allow our end-to-end testing to enable SELinux.
2020-06-10 15:55:58 +02:00
John Gardiner Myers d8970b93e1 Issue kube-controller-manager cert in nodeup 2020-06-09 22:45:19 -07:00
Kubernetes Prow Robot cc45d02dbe
Merge pull request #9317 from hakman/docker-19.03.11-k8s-1.17
Use Docker 19.03.11 for Kubernetes 1.17+
2020-06-09 22:10:05 -07:00
John Gardiner Myers b0694300df Issue kube-scheduler cert in nodeup 2020-06-09 20:23:33 -07:00
Kubernetes Prow Robot 10bb3cf334
Merge pull request #9217 from johngmyers/refactor-validation
Refactor and improve API validation
2020-06-09 20:04:07 -07:00
Peter Rifel d923354d4f
Address review comments 2020-06-09 17:07:44 -05:00
Peter Rifel 95b6a3f837
Address feedback 2020-06-09 10:58:24 -05:00
Ciprian Hacman dc79e31a2c Use Docker 19.03.11 for Kubernetes 1.17+ 2020-06-09 18:16:06 +03:00
Peter Rifel 807cbcb1a0
fix new validation unit test 2020-06-09 10:13:01 -05:00
Peter Rifel bc074e857c
Use ec2.DescribeInstanceTypes in awsup.GetMachineTypeInfo
This requires passing a cloud object in additional places throughout the validation package and originating mostly from cmd/kops

This means that some kops commands now require valid cloud provider credentials, but I don't think this is an issue because the vast majority of use-cases already require the same cloud provider credentials in order to interact with the state store.
2020-06-09 10:13:01 -05:00
Peter Rifel cebb708fdb
Move MixedInstancesPolicy validation to aws.go 2020-06-09 10:13:01 -05:00
ZouYu 2fc52ec6be fix some go-lint warning
Signed-off-by: ZouYu <zouy.fnst@cn.fujitsu.com>
2020-06-09 08:52:50 +08:00
Kubernetes Prow Robot 7650a988ce
Merge pull request #9284 from johngmyers/remove-export-password
Don't export basic auth credentials if basic auth is disabled
2020-06-08 08:39:47 -07:00
Ciprian Hacman 87ad779c76 Disable disk based evictions for Kubernetes 1.19 2020-06-08 11:13:23 +03:00
Ciprian Hacman f34a13a8f0 Disable disk based evictions for Kubernetes 1.19 2020-06-08 11:11:44 +03:00
John Gardiner Myers 49ea71dec9 Don't export basic auth credentials if basic auth is disabled 2020-06-05 21:12:37 -07:00
John Gardiner Myers 898f9fa198 Refactor and improve API validation 2020-06-05 11:43:42 -07:00
John Gardiner Myers 9466893436 Refactor api validation code out of legacy.go 2020-06-05 11:43:09 -07:00