Commit Graph

5106 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 511f32a20c
Merge pull request #15138 from zetaab/exitgracefully
exit nodeup gracefully if server already exists in k8s
2023-02-20 03:49:49 -08:00
Jesse Haka a765191898 use http.StatusConflict 2023-02-20 13:01:43 +02:00
Ciprian Hacman 8d6a809d10 Update containerd to v1.6.18 2023-02-18 04:38:08 +02:00
Rafael da Fonseca bc37c7408c Add terraform target support for configuring Warm Pool 2023-02-14 14:27:46 +00:00
Kubernetes Prow Robot ca3b53c00a
Merge pull request #15095 from infonova/use-clustername-in-cinder-csi-plugin
Pass actual cluster name to cinder-csi-plugin
2023-02-13 09:33:29 -08:00
ederst b4557d4729 Run make apimachinery and crds 2023-02-13 17:34:31 +01:00
ederst cd50ee00ac Pass actual cluster name to cinder-csi-plugin
This passes the acutal cluster name to the cinder-csi-plugin, so that
the plugin will add the name as metadata to the backing volume in
OpenStack.

Effectively, the change will help to better identify which volume in
OpenStack belongs to which cluster, which is especially helpful when
running multiple clusters in one OpenStack tenant/project.

Setting the cluster name in both - the controller and the nodeserver -
will ensure that dynamic and ephemeral volumes will receive the correct
metadata.
2023-02-13 17:31:32 +01:00
justinsb 1ad3f6012c hetzner: add dependency logic to deletion
This avoids warnings about deleting e.g. the volume while it is still
attached to a server.

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2023-02-13 08:55:12 -05:00
Kubernetes Prow Robot 9ec9d42910
Merge pull request #15131 from hakman/containerd-v1.6.17
Update containerd to v1.6.17
2023-02-13 02:27:29 -08:00
Jesse Haka ff557a9cf1 remove cadvisor and etcd client fw rule 2023-02-13 09:31:37 +02:00
Jesse Haka 382855d7d1 remove s3 access from nodes if using none dns 2023-02-12 21:51:16 +02:00
justinsb 150a98e258 DigitalOcean: Support SSH key provisioning
This means we don't need to pre-upload our SSH keys.
2023-02-12 10:34:40 -05:00
Jesse Haka 8e6199fa39 exit gracefully if server already exists in k8s 2023-02-12 16:52:13 +02:00
Ciprian Hacman e6e4324b85 Remove compatibility with k8s.gcr.io 2023-02-12 13:46:48 +02:00
Ciprian Hacman 0d39e0920e Update containerd to v1.6.17 2023-02-12 12:27:24 +02:00
Kubernetes Prow Robot 24a83acb66
Merge pull request #15128 from justinsb/do_no_empty_ips
digitalocean: don't print empty IP addresses
2023-02-11 17:49:31 -08:00
Kubernetes Prow Robot fce388e3a2
Merge pull request #15124 from justinsb/integration_hetzner
hetzner: support toolbox dump of instances
2023-02-11 11:07:29 -08:00
justinsb c7ed41ca70 digitalocean: don't print empty IP addresses
Now we have some IPv6 support, we were printing an empty address when
machines did not have an IPv6 address.
2023-02-11 13:25:43 -05:00
Justin SB 0b699832ec Use cloud-discovery on GCE in gossip mode
It's a little simpler and should speed up our boot.
2023-02-11 11:03:12 -05:00
justinsb 312ee7fefc hetzner: support toolbox dump of instances
Makes for easier debugging.
2023-02-11 10:55:54 -05:00
Leïla MARABESE 9f950f4a3a scaleway profiles feature 2023-02-10 17:02:45 +01:00
Jesse Haka 9df5534a13 add k8s node labels 2023-02-01 21:11:11 +02:00
Ciprian Hacman 884fded69e hack/update-expected.sh 2023-02-01 09:37:37 +02:00
Ciprian Hacman bdd7ff49da Update etcd-manager to v3.0.20230201 2023-02-01 09:35:32 +02:00
Kubernetes Prow Robot 2c619f3f23
Merge pull request #15083 from infonova/os-allow-setting-ignore-volume-microversion
Allow setting 'ignore-volume-microversion' for OCCP
2023-01-31 04:32:49 -08:00
ederst f4fdf7df79 Allow setting 'ignore-volume-microversion' for OCCP
This will allow setting the option `ignore-volume-microversion` for the
cinder-csi-plugin.

Setting this is necessary for older OpenStack APIs so that OCCP can
create PVs.

Note: This will work with cinder-csi-plugin >= 1.25.

For reference:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1986/
2023-01-31 11:48:25 +01:00
Kubernetes Prow Robot ebebbe8b76
Merge pull request #15068 from hakman/etcd-v3.5.7
Update etcd to v3.5.7
2023-01-31 01:54:49 -08:00
Kubernetes Prow Robot 94affad3a4
Merge pull request #15050 from anthonyhaussman/feat/tone/cilium_unreachable_routes_pod_deletion
Cilium: Add unreachable route for pod IP on deletion option
2023-01-30 05:26:51 -08:00
Kubernetes Prow Robot 254fd0ca39
Merge pull request #14933 from Mia-Cross/scaleway_load_balancer
scaleway: load-balancer support
2023-01-30 00:12:51 -08:00
Ciprian Hacman ae042e7499 Update containerd to v1.6.16 2023-01-29 08:01:37 +02:00
Ciprian Hacman 4ebc882a70 hack/update-expected.sh 2023-01-28 16:29:53 +02:00
Ciprian Hacman 1d8114dd8c Update etcd to v3.5.7 2023-01-28 16:28:07 +02:00
Leïla MARABESE e2a6207ea1 added dependencies between LB, LBbackend and LBfrontend tasks 2023-01-26 17:12:47 +01:00
Leïla MARABESE 43f8f8b29b separated back/front-end tasks from LB task 2023-01-26 17:12:46 +01:00
Leïla MARABESE 3dece51a3a migrated LB regionalized API to zoned API 2023-01-26 17:12:46 +01:00
Leïla MARABESE ea2f7123e1 use of cloud tags + improved error checking and messages 2023-01-26 17:12:46 +01:00
Leïla MARABESE 0fca23addd list and delete load-balancers 2023-01-26 17:12:46 +01:00
Leïla MARABESE e9f2694061 load-balancer model + tasks 2023-01-26 17:12:46 +01:00
John Gardiner Myers b47babf808 Upgrade AWS CCM to 1.25.3 2023-01-24 12:35:24 -08:00
Anthony Hausman 484bde5b9b
cilium: Add unreachable route for pod IP on deletion option
When a pod is deleted, the route to its IP is replaced with an unreachable route.
When a pod is created, the route is replaced with a route to the pod veth (so if an unreachable existed, it's replaced).

Ref:
 - https://github.com/cilium/cilium/pull/18505
2023-01-24 14:08:24 +01:00
Kubernetes Prow Robot 0172d03051
Merge pull request #14988 from hakman/etcd_backup_retention
etcd-manager: Add option to set backup retention
2023-01-23 00:28:10 -08:00
Ciprian Hacman b1ef66f136 etcd-manager: Add option to set backup retention 2023-01-23 09:43:09 +02:00
Kubernetes Prow Robot b2bdd43dc4
Merge pull request #15024 from zetaab/fixauth
make openstack kops-controller boostrap auth better
2023-01-22 23:20:10 -08:00
Kubernetes Prow Robot b64cded2a9
Merge pull request #14785 from hakman/etcd-manager_init-containers
Load etcd binaries dynamically from container images
2023-01-22 11:56:02 -08:00
Justin SB 309a2c0b3c tests: Capture iptables chains
This is helpful debugging information when we see network issues.
2023-01-22 11:30:29 -05:00
John Gardiner Myers 7d3c20d036 Validate additionalRoutes against additionalNetworkCIDRs 2023-01-21 18:42:58 -08:00
Kubernetes Prow Robot 987eefb48a
Merge pull request #14997 from johngmyers/validate-addlcidrs
Validate nonMasqueradeCIDR doesn't overlap additionalNetworkCIDRs
2023-01-21 12:10:02 -08:00
Ciprian Hacman fef8eb4a9b Run hack/update-expected.sh 2023-01-21 09:24:33 +02:00
Ciprian Hacman 61acbe72fa Update etcd-manager to v3.0.20230119 2023-01-21 09:24:33 +02:00
Ciprian Hacman 971c655ecb Run hack/update-expected.sh 2023-01-21 09:24:33 +02:00
Ciprian Hacman 40bf0b9f52 Load etcd binaries dynamically from container images 2023-01-21 09:24:33 +02:00
Jesse Haka b3c134be06 make openstack kops-controller boostrap auth better 2023-01-19 10:07:11 +02:00
Kubernetes Prow Robot ddd1583244
Merge pull request #15022 from Mia-Cross/scw_refacto_instance_and_tags
scaleway: refactoring: instance and tags
2023-01-18 21:50:34 -08:00
Kubernetes Prow Robot 6b04c3e9f5
Merge pull request #15020 from johngmyers/nth
Upgrade Node Termination Handler to 1.18.3
2023-01-18 10:12:34 -08:00
John Gardiner Myers 56092cd2b7 Upgrade Node Termination Handler to 1.18.3 2023-01-18 08:12:59 -08:00
Leïla MARABESE e52af91e34 scaleway: refactoring: instance and tags 2023-01-18 15:50:37 +01:00
Kubernetes Prow Robot e88fbf5d7d
Merge pull request #15016 from johngmyers/nodeup-network2
Move more networking settings into nodeup.Config
2023-01-18 02:04:35 -08:00
Kubernetes Prow Robot 98b8c01dc6
Merge pull request #15000 from zetaab/feature/multiconfigserver
support multiple ConfigServers
2023-01-17 04:48:33 -08:00
Jesse Haka 39ab519269 support multiple ConfigServers 2023-01-16 10:51:50 +02:00
Kubernetes Prow Robot 08f308232f
Merge pull request #15006 from zetaab/osnodeidentifier
update OpenStack node identifier to use Identifier
2023-01-15 23:20:51 -08:00
John Gardiner Myers 0c323445fb Move UsesKubenet to nodeup.Config 2023-01-15 23:12:00 -08:00
John Gardiner Myers 68c4ef1a93 Move networking-related tests to nodeup.Config 2023-01-15 23:12:00 -08:00
John Gardiner Myers cc49461849 Move several CNI tests to nodeup.Config 2023-01-15 23:11:58 -08:00
John Gardiner Myers aec9075087 Upgrade AWS CCM to 1.25.2 2023-01-15 21:46:24 -08:00
John Gardiner Myers 2eb24107fd hack/update-expected.sh 2023-01-15 17:20:32 -08:00
John Gardiner Myers f6debfd658 Move ServiceClusterIPRange to nodeup.Config 2023-01-15 17:19:18 -08:00
John Gardiner Myers 2e6e022eca Move EgressProxy to nodeup.Config 2023-01-15 17:19:18 -08:00
John Gardiner Myers da881fb320 Move NonMasqueradeCIDR to nodeup.Config 2023-01-15 17:19:18 -08:00
Kubernetes Prow Robot 1c8f9c8a35
Merge pull request #14894 from johngmyers/v1alpha3-oidc
v1alpha3: Move most OIDC settings to authentication.oidc
2023-01-15 08:40:31 -08:00
Jesse Haka eaa1a6836e update OpenStack node identifier to use Identifier instead of LegacyIdentifier 2023-01-15 10:14:51 +02:00
Jesse Haka 3dab0eb807 Use kops-controller to boostrap nodes in OpenStack 2023-01-14 13:54:14 +02:00
John Gardiner Myers e52480ecc6 Validate nonMasqueradeCIDR doesn't overlap additionalNetworkCIDRs 2023-01-13 19:36:57 -08:00
John Gardiner Myers a6bd29b2ae Move more networking validations out of legacy.go 2023-01-13 19:36:55 -08:00
Ciprian Hacman d884e5f4d9 Remove the SpecOverrideFlag feature flag 2023-01-13 20:40:17 +02:00
John Gardiner Myers 2365980281 openstack: use subnet type instead of topology 2023-01-12 19:33:10 -08:00
John Gardiner Myers 5f41e04088 Use consistent topology in Openstack TestServerGroupBuilder 2023-01-12 19:27:51 -08:00
Kubernetes Prow Robot a1a0ce3f33
Merge pull request #14930 from zetaab/feature/openstacknodns
OpenStack: Add support for clusters without DNS
2023-01-12 07:52:54 -08:00
Ciprian Hacman 0f7bd5dc5e Infer the dns suffix from the cluster name for etcd-manager 2023-01-12 12:45:33 +02:00
Kubernetes Prow Robot 8b8b4eeab1
Merge pull request #14884 from johngmyers/cp-hop-1
AWS: set IMDS hop limit 1 on all new clusters
2023-01-11 23:48:55 -08:00
John Gardiner Myers 0a419953d3 Expand TestPolicyGeneration to cover gossip/no-gossip cases 2023-01-11 22:06:01 -08:00
John Gardiner Myers c1c75ca340 hack/update-expected.sh 2023-01-11 21:19:24 -08:00
John Gardiner Myers 1de02c56f1 Use state store for nodeup.Config in Gossip clusters 2023-01-11 21:19:24 -08:00
John Gardiner Myers 6caaff50cd AWS: set IMDS hop limit 1 on all new clusters 2023-01-11 20:04:53 -08:00
John Gardiner Myers d009928883 v1alpha3: Move most OIDC settings to authentication.oidc 2023-01-11 19:26:18 -08:00
Jesse Haka cc8871eede no dns for OpenStack 2023-01-11 20:02:02 +02:00
Grégory SANCHEZ 6fdf54ff34 feat(cluster-autoscaler): autogenerate priority-expander configMap 2023-01-11 08:26:33 +01:00
Kubernetes Prow Robot b9c2bbea5d
Merge pull request #14974 from hakman/containerd-v1.6.15
Update containerd to v1.6.15
2023-01-10 23:19:45 -08:00
Kubernetes Prow Robot f2883115a4
Merge pull request #14913 from johngmyers/hostnetwork-no-irsa
Run pods needing control-plane instance credentials on hostNetwork
2023-01-10 22:25:27 -08:00
Kubernetes Prow Robot d247c0b37d
Merge pull request #14879 from hakman/aws_imds_all_clusters
aws: Set IMDS defaults for existing clusters
2023-01-10 22:25:19 -08:00
John Gardiner Myers ad92d2760c Run pods needing control-plane instance credentials on hostNetwork 2023-01-10 20:48:05 -08:00
Ciprian Hacman 086d74605f Update containerd to v1.6.15 2023-01-11 06:32:22 +02:00
Leïla MARABESE 543d59758a removed SCW_DEFAULT_REGION and SCW_DEFAULT_ZONE env vars 2023-01-10 16:11:23 +01:00
Kubernetes Prow Robot f6a36bfc42
Merge pull request #14194 from jandersen-plaid/jandersen-plaid-exit-first-error
Exit rolling updates when encountering specific errors
2023-01-09 23:59:25 -08:00
Kubernetes Prow Robot 0b8ccf2c9e
Merge pull request #14951 from johngmyers/kube-dns
Upgrade k8s-dns-node-cache to 1.22.16
2023-01-09 08:21:29 -08:00
Ole Markus With 07c77b1e5f Bump EBS CSI driver to 1.14.1 2023-01-09 13:01:23 +01:00
justinsb cca919dcde gce: KCM should not allocate IPs when CCM is in use.
When the GCE cloud-controller-controlller is in use, it allocates node
IPs, and so the kube-controller-manager should not allocate node IPs.
2023-01-07 17:24:24 -05:00
justinsb 132a805972 Allow built-in manifests to be replaced by external addons
We identify the external manifests by checking for our labels.
Currently that label is kOps specific, and we'll likely have to evolve
that to something ecosystem-netural.

We only support the GCE CCM addon and the kopeio-networking addon at
first.

For the GCE CCM addon, we need to replace the arguments, in particular
we likely need the Pod CIDR.  Here we need to work with the GCE CCM to
find a mechanism that can allow some of these flags to be communicated
via a more extensible mechanism (env vars or config maps, likely,
though possibly CRDs).

This is all behind the ClusterAddons feature flag at the moment, so we
can figure this out with other projects safely.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2023-01-05 20:29:56 -05:00
Ole Markus With 517da72ff5 Bump cluster autoscaler to 1.26.1 2023-01-05 13:40:26 +01:00
Kubernetes Prow Robot 7b4430ff61
Merge pull request #14885 from johngmyers/root-volume
v1alpha3: Move IG root volume settings to sub-struct
2023-01-04 18:11:58 -08:00
John Gardiner Myers c55cc836db Upgrade k8s-dns-node-cache to 1.22.16 2023-01-04 17:49:50 -08:00
John Gardiner Myers 8fc4bdb669 Add missing line break
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2023-01-04 17:25:44 -08:00
justinsb b7d9319fff EnsureTask should panic on error
This means that we automatically check the error code.  A linter could
detect errors here (maybe), but in practice we can't recover from
errors here anyway.
2023-01-04 08:29:20 -05:00
Kubernetes Prow Robot 5096ea5182
Merge pull request #14947 from johngmyers/k8s-version
Miscellaneous NodeupConfig refactoring
2023-01-03 23:13:59 -08:00
John Gardiner Myers 447220ef4e Use NodeupConfig for NTP-managed setting 2023-01-03 22:16:20 -08:00
John Gardiner Myers fea27074aa hack/update-expected.sh 2023-01-03 22:16:20 -08:00
John Gardiner Myers 4179fcce58 Use NodeupConfig for KubernetesVersion 2023-01-03 22:16:20 -08:00
Kubernetes Prow Robot 2a29412931
Merge pull request #14943 from johngmyers/kube-proxy
Use NodeupConfig for kube-proxy config
2023-01-03 19:35:58 -08:00
Kubernetes Prow Robot 3562661b46
Merge pull request #14912 from justinsb/localmutex
gce: try to avoid concurrent IAM project operations
2023-01-03 18:31:58 -08:00
John Gardiner Myers 7419620b80 hack/update-expected.sh 2023-01-03 12:29:07 -08:00
John Gardiner Myers b5eef1c129 Use NodeupConfig for kube-proxy config 2023-01-03 12:29:07 -08:00
John Gardiner Myers 2439193a8a Don't tag public subnets for internal LBs in IPv6 clusters 2023-01-03 11:04:52 -08:00
Ciprian Hacman 62f1d20c96 aws: Set IMDS defaults for existing clusters 2023-01-03 11:03:44 +02:00
Kubernetes Prow Robot 60a423bd40
Merge pull request #14936 from johngmyers/nodeup-runtime
Use NodeupConfig for container-runtime configuration
2023-01-03 00:15:42 -08:00
John Gardiner Myers e44ce84f78 hack/update-expected.sh 2023-01-02 13:58:23 -08:00
John Gardiner Myers fe448ef906 Use NodeupConfig for DockerConfig 2023-01-02 13:58:21 -08:00
John Gardiner Myers 3fe4ee9b84 hack/update-expected.sh 2023-01-02 13:42:11 -08:00
John Gardiner Myers 125866792d Use NodeupConfig for ContainerdConfig 2023-01-02 13:42:11 -08:00
John Gardiner Myers 768299134c hack/update-expected.sh 2023-01-02 12:50:24 -08:00
John Gardiner Myers 25a897b691 Use NodeupConfig for ContainerRuntime 2023-01-02 12:50:23 -08:00
John Gardiner Myers c051198f85 Pull pki.Keystore out of fi.KeystoreReader 2023-01-02 10:39:24 -08:00
justinsb f016c396ec gce: try to avoid concurrent IAM project operations
We set up a process-wide table of mutexes, to avoid concurrent IAM
operations on GCE projects.  Best-effort is reasonable here, we will
retry, but avoiding concurrent operations just avoids logspam and a
needless retry from self-conflicts.
2023-01-01 18:15:20 -05:00
John Gardiner Myers c08326e8c0 Separate out a VFSSecretStoreReader 2023-01-01 13:47:05 -08:00
John Gardiner Myers c68be498c6 Refactor NewAssetBuilder to not take a Cluster 2023-01-01 13:37:52 -08:00
justinsb 6c2edaee7e Add Context arg to vfs ReadFile
This is an "action" method, so should take a context.
2023-01-01 09:51:44 -05:00
Kubernetes Prow Robot 2fa8894960
Merge pull request #14915 from johngmyers/topology-subnet
Reduce use of cluster topology field
2022-12-31 00:11:28 -08:00
John Gardiner Myers 1be8be233f Reduce use of cluster topology field 2022-12-30 14:28:47 -08:00
John Gardiner Myers 74becb764e Don't require subnets on DO and Hetzner 2022-12-30 12:00:02 -08:00
Kubernetes Prow Robot fc527b6e9f
Merge pull request #14909 from johngmyers/valid-values
Make IsValidValue more useful for enum types
2022-12-30 01:25:36 -08:00
Kubernetes Prow Robot ee990f8057
Merge pull request #14881 from johngmyers/addl-cidr
Move networking validations inside validateNetworking()
2022-12-30 01:25:29 -08:00
John Gardiner Myers 43f56de38b Make IsValidValue more useful for enum types 2022-12-29 23:30:53 -08:00
Kubernetes Prow Robot 50fe61338c
Merge pull request #14883 from johngmyers/sg-override
Improve validation of API loadbalancer specs
2022-12-29 23:27:29 -08:00
Kubernetes Prow Robot cf44ec0766
Merge pull request #14882 from johngmyers/apiserver-cloud-config
APIServer nodes need cloudconfig
2022-12-29 00:09:29 -08:00
John Gardiner Myers 92958f9966 v1alpha3: Move IG root volume settings to sub-struct 2022-12-26 20:35:26 -08:00
John Gardiner Myers d9b7d41bd4 Improve validation of API loadbalancer specs 2022-12-26 13:08:50 -08:00
John Gardiner Myers 355f9e4bd2 Kubelet needs cloudconfig for in-tree cloudprovider 2022-12-26 11:25:24 -08:00
John Gardiner Myers d32a0fb3cc APIServer nodes need cloudconfig 2022-12-26 10:56:30 -08:00
John Gardiner Myers 8e96aa1acd Move networking validations inside validateNetworking() 2022-12-26 10:09:41 -08:00
Ciprian Hacman b3a07ee83e Use short service name with discovery labels 2022-12-26 13:21:43 +02:00
John Gardiner Myers 5c69274317 Simplify pointers to maps in API 2022-12-25 20:29:51 -08:00
Kubernetes Prow Robot 7e7ad105fe
Merge pull request #14876 from johngmyers/kops-controller-dump
Include kops-controller logs in toolbox dump
2022-12-25 19:49:27 -08:00
John Gardiner Myers 2947c75836 Include kops-controller logs in toolbox dump 2022-12-25 17:58:44 -08:00
John Gardiner Myers b3dfcea95f v1alpha3: Move AWS-specific CloudConfig settings to AWSSpec 2022-12-25 16:12:02 -08:00
Kubernetes Prow Robot e13c51968b
Merge pull request #14869 from johngmyers/upd-min-version
Update min versions for 1.27
2022-12-24 23:59:27 -08:00
Kubernetes Prow Robot b97662c6a3
Merge pull request #14837 from johngmyers/gce-cloudconfig
v1alpha3: Move GCE-specific CloudConfig settings to GCESpec
2022-12-24 22:31:26 -08:00
John Gardiner Myers 3823c13633 hack/update-expected.sh 2022-12-24 21:44:50 -08:00
John Gardiner Myers 005ec38972 Remove code for no-longer-supported k8s 1.21 2022-12-24 21:44:50 -08:00
John Gardiner Myers 70389e6398
Release 1.27.0-alpha.1 (#14866) 2022-12-24 21:43:27 -08:00
justinsb 817c1e63b3 FindKeyset can return nil
We had missed a case in nodeup; add a Context argument to force us to
revisit the codepaths.
2022-12-24 16:12:21 -05:00
Kubernetes Prow Robot d8af435f8f
Merge pull request #14861 from hakman/mount_audit_config_dirs
Mount the audit config dir for kube-apiserver
2022-12-24 08:57:26 -08:00
Ciprian Hacman bb6d4d6c17 Mount the audit config dir for kube-apiserver 2022-12-24 07:23:10 +02:00