Commit Graph

2669 Commits

Author SHA1 Message Date
John Gardiner Myers d27c733332 Refactor api validation code out of legacy.go 2020-06-05 11:42:50 -07:00
John Gardiner Myers 1d7027895f Refactor and improve API validation 2020-06-05 11:12:34 -07:00
John Gardiner Myers 8b26165030 Refactor api validation code out of legacy.go 2020-06-05 11:08:08 -07:00
Kubernetes Prow Robot d18e97140e
Merge pull request #9130 from johngmyers/pki-refactor
Refactor cert issuance code
2020-06-05 01:43:43 -07:00
Kubernetes Prow Robot 7b8a9a5802
Merge pull request #9274 from justinsb/make_sure_permissions_on_all_s3_buckets
Ensure we have IAM bucket permissions to other S3 buckets
2020-06-04 22:13:44 -07:00
Kubernetes Prow Robot 9e4bf1699a
Merge pull request #9216 from hakman/prepare-multi-arch
Prepare Kops for multi-architecture support
2020-06-04 21:35:43 -07:00
Justin SB e472ed7271 gce: log bucket-policy-only message at a level that always appears
It's a pretty important message when permissions aren't set correctly;
let's re-enable it and then figure out more accurate conditions for
if it matters.
2020-06-04 23:08:20 -04:00
Justin SB 1e559618f5 Ensure we have IAM bucket permissions to other S3 buckets
If we are expected to write to other buckets, we need to have suitable
permissions to e.g. determine their location.
2020-06-04 22:37:17 -04:00
Kubernetes Prow Robot 6d6db96aef
Merge pull request #9265 from olemarkus/validate-rootvolumetype
Validate IG RootVolumeType
2020-06-04 17:47:44 -07:00
Kubernetes Prow Robot c05457e16a
Merge pull request #9221 from spotinst/feat-draining-timeout
Spotinst: Allow a user specifiable node draining timeout
2020-06-04 16:59:44 -07:00
John Gardiner Myers 2b81bad20e Remove reference to Jessie 2020-06-04 12:13:54 -07:00
John Gardiner Myers e88e0cf7ec Remove code supporting dropped k8s versions 2020-06-04 12:11:51 -07:00
John Gardiner Myers 7f050ee44a Address review comment 2020-06-04 10:34:48 -07:00
John Gardiner Myers 7ed41a6d5a Improve comments 2020-06-04 10:26:45 -07:00
John Gardiner Myers d64e760d5b Use pki.IssueCert() for nodeup client certs 2020-06-04 10:26:45 -07:00
John Gardiner Myers 08cdee1de2 Add test for pki.IssueCert() 2020-06-04 10:26:42 -07:00
John Gardiner Myers c142483cfa Move cert issuance code to pki module 2020-06-04 10:26:42 -07:00
John Gardiner Myers a96f7963a6 Pull cert issuance code up into fitasks.Keypair 2020-06-04 10:26:41 -07:00
Kubernetes Prow Robot 5762f659c1
Merge pull request #9137 from olemarkus/cni-package
Move networking in nodeup to dedicated subpackage
2020-06-04 10:19:15 -07:00
Ole Markus With b62f6aa894 Move networking in nodeup to dedicated subpackage 2020-06-04 17:32:41 +02:00
Ole Markus With 9732179d40 Tag all cilium keys with omitempty 2020-06-04 15:46:32 +02:00
Kubernetes Prow Robot c6dcaa8199
Merge pull request #9154 from MoShitrit/issue-9031
Add support for encryption in Cilium
2020-06-04 03:11:15 -07:00
Kubernetes Prow Robot c8674f23a0
Merge pull request #9253 from olemarkus/cilium-ipv4
Don't make it possible to toggle ipv4/6. We only support ipv4 anyway
2020-06-03 14:02:43 -07:00
Kubernetes Prow Robot 4fe5ad03f8
Merge pull request #9255 from olemarkus/romana-remove
Remove romana support
2020-06-03 13:24:59 -07:00
Ole Markus With 4b6b200377 Only validate root volume types if on aws 2020-06-03 22:03:44 +02:00
Ole Markus With e271ffa561 Validate ig rootvolumetype 2020-06-03 19:37:51 +02:00
Ole Markus With 1a9de4511e Remove unecessary optionTaken validation 2020-06-03 17:06:23 +02:00
Ciprian Hacman 3eda07aec0 Update tests output 2020-06-03 17:25:53 +03:00
Ciprian Hacman d049862cff Make architecture related decisions to nodeup 2020-06-03 17:24:01 +03:00
Ciprian Hacman 41defca8fe Detect supported architecture during node bootstrap 2020-06-03 17:17:32 +03:00
Ciprian Hacman 33c242c896 Use multi-arch image for pause container 2020-06-03 17:17:32 +03:00
Kubernetes Prow Robot 6a772a7a9b
Merge pull request #9258 from hakman/docker-19.03.11
Use Docker 19.03.11 for Kubernetes 1.18+
2020-06-03 07:00:27 -07:00
Kubernetes Prow Robot c78b24fa41
Merge pull request #9140 from olemarkus/docs-networking-support
Add table of networking providers and their status
2020-06-03 07:00:19 -07:00
Kubernetes Prow Robot 4ef6bbe229
Merge pull request #9175 from mtl-wgtwo/calico-ip-detection-method
Enable configuration of the calico IP_AUTODETECTION_METHOD  and IP6_AUTODETECTION_METHOD
2020-06-03 06:24:18 -07:00
Ciprian Hacman a7c9ef9ff0 Use Docker 19.03.11 for Kubernetes 1.18+ 2020-06-03 12:03:56 +03:00
Ole Markus With 991549a5f4 Remove support for Romana 2020-06-03 08:23:53 +02:00
Ole Markus With e994bb80a6 Add Romana deprecation/removal notices to godoc 2020-06-03 08:12:11 +02:00
Ole Markus With d2cf2866a1 Add Romana deprecation/removal notices to godoc 2020-06-03 08:11:43 +02:00
Ole Markus With 972d7a3509 Don't make it possible to toggle ipv4/6. We only support ipv4 anyway 2020-06-03 06:58:13 +02:00
Kubernetes Prow Robot d55e28f0ab
Merge pull request #9237 from hakman/etcd-manager-update
Update etcd-manager to 3.0.20200531
2020-06-01 08:29:56 -07:00
Kubernetes Prow Robot 7b067983df
Merge pull request #9177 from olemarkus/remove-vsphere
Remove vsphere cloud provider
2020-06-01 06:19:54 -07:00
Ciprian Hacman 564d3d4ddc Update etcd-manager to 3.0.20200531 2020-06-01 13:08:59 +03:00
Justin SB bced4c309b Validation: MixedInstancePolicy need not override instance types
The mixed instance policy is also useful for spot instances, and
generally overriding the instances doesn't seem to be required.

Also both 0 and 1 instance type overrides appear to be supported by
AWS.
2020-05-31 23:37:02 -04:00
Kubernetes Prow Robot d3d6fd66d0
Merge pull request #9220 from rifelpet/pkg-apis-cleanup
Remove extraneous markdown files in pkg/apis
2020-05-31 07:59:53 -07:00
liranp 53f3ac776a
feat(spot): add support for draining timeout 2020-05-31 17:20:18 +03:00
Peter Rifel b704376504
Remove extraneous markdown files in pkg/apis 2020-05-31 09:09:27 -05:00
Ole Markus With 7342525872 Remove vsphere from kops files 2020-05-30 13:36:55 +02:00
Ole Markus With 89fba09caa Remove vsphere vendor stuff and related build files 2020-05-30 13:34:39 +02:00
Kubernetes Prow Robot f44d0dd01d
Merge pull request #9208 from johngmyers/update-feature-doc
Update adding_a_feature.md with more modern example
2020-05-29 18:33:53 -07:00
Kubernetes Prow Robot 2a613f1331
Merge pull request #9165 from johngmyers/retry-initial
Try validating multiple times before updating instancegroup
2020-05-29 12:07:33 -07:00
John Gardiner Myers 091893fd20 Simplify rolling update internal methods 2020-05-29 10:52:03 -07:00
John Gardiner Myers dd884a6a64
fix missing space
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2020-05-29 10:35:15 -07:00
Matt Long de1d082bc5 Change error to InernalError 2020-05-29 09:55:46 +02:00
John Gardiner Myers c1562291d7 Update adding_a_feature.md with more modern example 2020-05-28 23:19:14 -07:00
Ciprian Hacman 00cbbce2b5 Allow listing versions for objects in the S3 bucket 2020-05-29 08:50:56 +03:00
Kubernetes Prow Robot 4b4dbd4285
Merge pull request #8826 from johngmyers/remove-legacy-etcd-provider
Remove support for the legacy etcd provider as of k8s 1.18
2020-05-28 10:38:04 -07:00
Matt Long b983af231e Update validation per code review comments 2020-05-28 11:13:56 +02:00
Matt Long 9385b1adf9
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-28 08:47:52 +02:00
Kubernetes Prow Robot 6830cf6d44
Merge pull request #9065 from johngmyers/remove-distro
Remove support for CoreOS and Jessie
2020-05-27 23:22:01 -07:00
Ciprian Hacman d54aadc89c Fix nits for removal of S3 file versions 2020-05-28 06:50:32 +03:00
Matt Long 2317b77ba5 Update with static check suggestions 2020-05-27 15:51:55 +02:00
Matt Long 1fea54bc3c Update regex in test 2020-05-27 15:44:57 +02:00
Matt Long 79275f9ea8 Add additional tighter validation 2020-05-27 15:43:08 +02:00
Matt Long c00464f11d Update crds, apis, models. Add limited field validation 2020-05-27 15:24:01 +02:00
Justin SB bb8c6b9fbe Update etcd-manager to 3.0.20200527
Changes since 3.0.20200429:

* Use env vars to customize backup retention
* Use next attachment point when device already in use
* Simplify uploading backups
2020-05-27 01:44:18 -04:00
Matt Long 574442dd7b Enable configuration of the calico IP_AUTODETECTION_METHOD 2020-05-25 13:08:37 +02:00
MoShitrit 316a0e2b00 Adding encryption support for Cilium
Adding support for 'secret-name' flag

Adding instructions to enable encryption

Updating docs for cli

Addressing comments

Adding ciliumpassword subcommand to 'kops create secret'

Updating command to generate ciliumpassword secret
2020-05-25 01:54:24 -04:00
Kubernetes Prow Robot bfd65ae589
Merge pull request #9157 from olemarkus/networking-cleanup
Networking cleanup
2020-05-24 07:03:10 -07:00
liranp 04d83c6c04
fix(spotinst): rename the label to match the feature flag 2020-05-23 21:39:07 +03:00
liranp 23c0cdab36
feat(spotinst): new hybrid mode 2020-05-23 21:39:04 +03:00
Kubernetes Prow Robot a31abc8873
Merge pull request #9156 from Hellcatlk/UnitTestCase2
Add unit test case for pkg/apis/kops/util/versions_test.go
2020-05-23 07:45:11 -07:00
Ole Markus With 1698069ae2 Update pkg/apis/kops/networking.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-23 08:04:34 +02:00
John Gardiner Myers 2d98e5609c Remove/fix more CoreOS references 2020-05-22 20:54:41 -07:00
John Gardiner Myers 7756be7fbc Try validating multiple times before updating instancegroup 2020-05-22 20:26:02 -07:00
John Gardiner Myers af90ecdddf Reduce test flakiness 2020-05-22 19:33:01 -07:00
Kubernetes Prow Robot e6d73b5ba0
Merge pull request #9135 from justinsb/gce_no_hostname_no_worries
GCE: don't rely on hostname being correct
2020-05-22 17:43:10 -07:00
Kubernetes Prow Robot 212ac0a5fa
Merge pull request #9112 from Hellcatlk/UnitTestCase
Add unit test case for pkg/k8sversion/version_test.go
2020-05-22 01:36:50 -07:00
Kubernetes Prow Robot ee504ac781
Merge pull request #9116 from srikiz/DO-LB-HandleUpdates
[Digital Ocean] Handle logic for kops edit/update cluster
2020-05-22 01:02:37 -07:00
Ole Markus With b3505030c3 Fix containerd test 2020-05-22 09:56:19 +02:00
ZouYu 956f07188f Add unit test case for pkg/apis/kops/util/versions_test.go
Signed-off-by: ZouYu <zouy.fnst@cn.fujitsu.com>
2020-05-22 15:23:25 +08:00
Ole Markus With fc0f7f237c Fix UsesKubenet call in containerd.go 2020-05-22 09:14:36 +02:00
Ole Markus With 6e04586361 Docs fixes 2020-05-22 08:08:58 +02:00
Ole Markus With 82c4670f04 Small comment adjustments 2020-05-22 08:08:58 +02:00
Ole Markus With 77aab657cc Copy comments 2020-05-22 08:08:58 +02:00
Ole Markus With 30a2ec7d4d Update pkg/apis/kops/v1alpha2/networking.go
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2020-05-22 08:08:58 +02:00
Ole Markus With eebb605c9c Remove as much of the classic networking logic as we can 2020-05-22 08:08:58 +02:00
Ole Markus With d1ff25bb4e Remove some rather long networking nil checks 2020-05-22 08:08:58 +02:00
Ole Markus With 95d2170fa6 Update networking in kops create
* Remove classic from cli docs. Add missing providers
* Use cilium instead of weave in example since we don't consider weave stable
2020-05-22 08:08:58 +02:00
Kubernetes Prow Robot 2c899d859a
Merge pull request #9104 from hakman/containerd-kubenet
Add support for Kubenet with containerd
2020-05-21 22:20:38 -07:00
John Gardiner Myers 8a6d29cd40 Remove support for reading legacy-format keypairs 2020-05-20 13:28:13 -07:00
Kubernetes Prow Robot 83c2a0885e
Merge pull request #8989 from hs0210/work
Add unit test for func matchesElbTags
2020-05-19 22:08:30 -07:00
Kubernetes Prow Robot 96819c2e48
Merge pull request #8950 from justinsb/apiserver-test1
Create golden image test for nodeup kube-apiserver
2020-05-19 22:08:18 -07:00
Kubernetes Prow Robot 204cf58c96
Merge pull request #9124 from johngmyers/bastion-private
Don't put bastions in the utility subnets
2020-05-19 21:26:18 -07:00
Kubernetes Prow Robot 26421c3081
Merge pull request #9133 from justinsb/service_account_jwks_uri_flag
Map kube-apiserver service-account-jwks-uri flag
2020-05-19 20:54:18 -07:00
Ciprian Hacman 9d666c73bc Use components.UsesKubenet to check if Kubenet is required 2020-05-19 20:43:33 +03:00
Justin Santa Barbara 35c6056fb2 Create golden image test for nodeup kube-apiserver
The building of the manifests for nodeup tasks can be a little opaque;
create a test to verify and expose what is happening.
2020-05-18 06:42:16 -04:00
Kubernetes Prow Robot 2e5d4761d0
Merge pull request #8464 from justinsb/google_clouddns_delete_records
DNS: Don't try to apply empty changesets
2020-05-17 16:17:36 -07:00
Kubernetes Prow Robot bda2a15ee6
Merge pull request #9024 from tomesm/support_launch_template
Added Launch Template support for instance interruption behavior
2020-05-17 15:35:36 -07:00
Justin Santa Barbara 3306549749 Add general contract test for IsEmpty
This was the root bug that was causing the over-logging on GCE.
2020-05-17 17:11:01 -04:00
Justin Santa Barbara 7e710e85d9 DNS: Apply should be a no-op when empty
Document the contract a bit more, change the signature by adding a
context arg and following through to make sure we honor the contract
everywhere.
2020-05-17 16:45:08 -04:00