70f7d9bdb2
Use function to get cloud provider from cluster spec
2022-03-02 21:59:47 -08:00
97b7b90226
Update to etcd-manager v3.0.20220203
...
Relevant changes:
* Only emit GOMAXPROCS if non-zero [justinsb](https://github.com/justinsb ) [284](https://github.com/kubernetes-sigs/etcdadm/pull/284 )
* Set ETCD_STRICT_RECONFIG_CHECK [justinsb](https://github.com/justinsb ) [286](https://github.com/kubernetes-sigs/etcdadm/pull/286 )
* environment: ignore empty lines when converting to map [justinsb](https://github.com/justinsb ) [285](https://github.com/kubernetes-sigs/etcdadm/pull/285 )
* Fix ipv6 detection [olemarkus](https://github.com/olemarkus ) [291](https://github.com/kubernetes-sigs/etcdadm/pull/291 )
* Test for nil in to not found check [olemarkus](https://github.com/olemarkus ) [292](https://github.com/kubernetes-sigs/etcdadm/pull/292 )
2022-02-03 11:21:09 -05:00
6327cc378f
Fix etcd-manager for ipv6
2022-02-03 12:59:26 +01:00
af4d69cab3
Use etcd-manager pre-release until final release has been cut
2022-02-02 13:10:32 +01:00
994588c0fd
Bump etcd-manager to v3.0.20220128
2022-01-30 07:13:32 +01:00
45ad8b50ae
Enhance AddHostPathMapping to support a fluent style
...
This allows for the helper to be used in more places.
2021-12-31 13:26:12 -05:00
a0736b3c29
Remove support for Aliyun/Alibaba Cloud
2021-12-11 21:49:13 -08:00
ea7df00719
Run hack/update-gofmt.sh
2021-12-01 22:39:50 +02:00
d0291fe6f6
Update etcd-manager to v3.0.20211124
2021-11-25 11:30:26 +02:00
0c696d41d3
Create supporting services in kops-controller for gossip-mode
...
The intent is that we can then expose these via CoreDNS, so that
internal name resolution will work.
2021-11-19 11:02:10 -05:00
e2922a257d
Bump etcd-manager version
2021-11-18 11:49:14 -05:00
78f136705e
Update etcd-manager to 3.0.20211007
2021-10-07 13:25:37 +03:00
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
1e41439e36
Use etcd v3.5.0 for Kubernetes 1.22+
2021-07-08 22:09:22 +03:00
7162a7473a
Remove dead code
2021-07-01 13:58:51 -07:00
2faf28379a
Refactor etcd-client-cilium secrets
2021-06-25 23:57:23 -07:00
f80b550c7a
Use internal name for cilium etcd if we do not enable api server nodes
2021-06-16 08:27:26 +02:00
7c9e7e9286
Make Lifecycle field non-pointer
2021-06-02 23:02:16 -07:00
d3469d6ec2
Remove code for no-longer-supported k8s versions
2021-05-07 23:40:03 -07:00
c1dd7e7698
Use etcd-manager built from etcdadm repo
...
We can now use etcd-manager as built from the kubernetes-sigs/etcdadm
repo.
2021-05-08 07:11:21 +03:00
75047c6513
Mount /run inside etcd-manager pods for systemd mounts
2021-04-29 10:15:58 +03:00
20bd724f5e
Add support for scaling out the control plane with dedicated apiserver nodes
...
Ensure apiserver role can only be used on AWS (because of firewalling)
Apply api-server label to CP as well
Consolidate node not ready validation message
Guard apiserver nodes with a feature flag
Rename Apiserver role to APIServer
Add an integration test for apiserver nodes
Rename Apiserver role to APIServer
Enumerate all roles in rolling update docs
Apply suggestions from code review
Co-authored-by: Steven E. Harris <seh@panix.com>
2021-03-20 20:57:00 +01:00
8fa6be1b03
Add etcd-manager discoveryPollInterval option
2021-03-04 09:35:05 +02:00
09f7f6f039
Update etcd-manager to 3.0.20210228
...
Changes:
* Add user agent to etcd-manager requests [#395 ](https://github.com/kopeio/etcd-manager/pull/395 )
* Add etcd-manager metrics, add openstack API metrics [#396 ](https://github.com/kopeio/etcd-manager/pull/396 )
* Make discovery poll interval configurable [#397 ](https://github.com/kopeio/etcd-manager/pull/397 )
* Add log levels to prevent too verbose logging [#394 ](https://github.com/kopeio/etcd-manager/pull/394 )
2021-02-28 20:41:30 -05:00
28f184f68a
etcd-manager: Update to 3.0.20210122
...
Upstream changes:
* Release notes for 3.0.20201209
* Handling hanging list command from etcd client during reconciliation loop
* Update dependencies to match kOps 1.19
* Include IPs in peer certificates
* Use etcd v3.4.13 in tests
* Eager-broadcast leadership on every leader iteration
* Update Go to 1.15.7
2021-01-22 16:01:03 -05:00
a61caea8d2
Add Azure support
...
This commit contains all changes required to support Azure
(https://github.com/kubernetes/kops/issues/3957 ).
2020-12-21 08:27:54 -08:00
1945a656a0
Remove deprecated ResourceHolder
...
Cleaning up what is now dead code.
2020-12-19 23:15:37 -05:00
dc48ca6905
Update etcd-manager to 20201209
...
Highlights:
* Fix arm64 images, which were built with an incorrect base image.
* Initial (experimental) Azure support
Full change list:
* Update Kops dependency for Azure Blob Storage support [#372 ](https://github.com/kopeio/etcd-manager/pull/372 )
* Exclude gazelle from tools/deb-tools [#373 ](https://github.com/kopeio/etcd-manager/pull/373 )
* Regenerate bazel in tools/deb-tools [#374 ](https://github.com/kopeio/etcd-manager/pull/374 )
* Release notes for 3.0.20201202 [#375 ](https://github.com/kopeio/etcd-manager/pull/375 )
* Remove travis CI [#377 ](https://github.com/kopeio/etcd-manager/pull/377 )
* Fix vendor generation for tools/deb-tools subproject [#376 ](https://github.com/kopeio/etcd-manager/pull/376 )
* Add script to verify image hashes [#380 ](https://github.com/kopeio/etcd-manager/pull/380 )
* Fix some incorrect base image hashes for arm64 [#379 ](https://github.com/kopeio/etcd-manager/pull/379 )
* Support Azure [#378 ](https://github.com/kopeio/etcd-manager/pull/378 )
* Add more descriptions to wait loops [#383 ](https://github.com/kopeio/etcd-manager/pull/383 )
* Rename fields in the azure client struct [#382 ](https://github.com/kopeio/etcd-manager/pull/382 )
* Fix small typo in code comment [#381 ](https://github.com/kopeio/etcd-manager/pull/381 )
2020-12-09 09:30:44 -05:00
0ea98a1e87
Update etcd-manager to 3.0.20201202
...
The important PR we want to pick up is 369, fixing a bug when
ListenMetricsURLS is set as an env var.
Full changelist:
* Release notes for 3.0.20201117 [#364 ](https://github.com/kopeio/etcd-manager/pull/364 )
* Fix gofmt [#365 ](https://github.com/kopeio/etcd-manager/pull/365 )
* Add gofmt check to github actions [#366 ](https://github.com/kopeio/etcd-manager/pull/366 )
* Add boilerplate to tools/deb-tools/main.go [#367 ](https://github.com/kopeio/etcd-manager/pull/367 )
* Do not set ListenMetricsURLS [#369 ](https://github.com/kopeio/etcd-manager/pull/369 )
* Fix bazel formatting [#370 ](https://github.com/kopeio/etcd-manager/pull/370 )
2020-12-02 12:08:37 -05:00
d516fb7d9c
Update etcd-manager to 3.0.20201117
...
Release notes for 3.0.20201117:
* Release notes for 3.0.20200531
* Adds support for using OS application credentials
* Fixes usage of OpenStack Swift reauthentication
* Move from debian-hyperkube-base to debian-base
* Add license headers to each file
* Fix some typos picked up by verify-spelling
* Fix some problems with trailing spaces
* Add support for etcd 3.4.13
* Switch to gcr.io/cloud-marketplace-containers/google/debian10 - Fix
for #340 option 1
* Support for ARM64
* BUG: OpenStack ignore AvailabilityZone in discovery
* Added full cinder ID to candidateDeviceNodes
* feat(etcd-manager-ctl): use backupname to delete backup instead of timestamp
* Update kops to pick up AllowAuth Openstack
* Build base image by raw expansion of deb packages
* Switch the cloudbuild docker image, locking to 2.2.0
* Fix build on case-insensitive file systems (MacOS)
* Set AltNames on server certificates
* govet: Fix a log message
2020-11-17 22:03:30 -05:00
c117d8d924
feat: Make etcd-manager log verbosity configurable
2020-11-12 09:58:09 +01:00
7d9f0a06cf
Update API slice fields to not use pointers
...
This is causing problems with the Kubernetes 1.19 code-generator.
A nil entry in these slices wouldn't be valid anyways, so this should have no impact.
2020-08-24 07:46:38 -05:00
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
ac13557e03
Add missing lifecycle to etcd keypair tasks
2020-07-11 22:27:53 -07:00
627b71557e
Fix where etcd-cluster-spec is writen when etcd's BackupStore is defined - v2
2020-07-02 00:01:43 -07:00
564d3d4ddc
Update etcd-manager to 3.0.20200531
2020-06-01 13:08:59 +03:00
bb8c6b9fbe
Update etcd-manager to 3.0.20200527
...
Changes since 3.0.20200429:
* Use env vars to customize backup retention
* Use next attachment point when device already in use
* Simplify uploading backups
2020-05-27 01:44:18 -04:00
8a6d29cd40
Remove support for reading legacy-format keypairs
2020-05-20 13:28:13 -07:00
75fd939a62
kube-apiserver: healthcheck via sidecar container
...
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled. That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.
Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.
This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
3f77222cf3
Update to etcd-manager 3.0.20200429
...
Adds support for new AWS regions
Full changes
* Upgrade aws-sdk-go [#320 ](https://github.com/kopeio/etcd-manager/pull/320 )
* Release notes for 3.0.20200428 [#319 ](https://github.com/kopeio/etcd-manager/pull/319 )
2020-04-29 08:33:19 -04:00
eb3ef1a9bb
Update to etcd-manager 3.0.20200428
...
Contains the workaround for 1-year certificate expiry.
Full changes
* Release notes for 3.0.20200307 [#303 ](https://github.com/kopeio/etcd-manager/pull/303 )
* Add support for etcd 3.3.17 [#304 ](https://github.com/kopeio/etcd-manager/pull/304 )
* Adding client usage extension for server cert (#305 ) [#306 ](https://github.com/kopeio/etcd-manager/pull/306 )
* Add a check to renew certificates on startup if they expire in 60 days or less [#309 ](https://github.com/kopeio/etcd-manager/pull/309 )
* Try github actions [#310 ](https://github.com/kopeio/etcd-manager/pull/310 )
* Upgrade bazel to 2.2.0 [#311 ](https://github.com/kopeio/etcd-manager/pull/311 )
* Update to go 1.13.10 [#314 ](https://github.com/kopeio/etcd-manager/pull/314 )
* Bazel: update dependency [#316 ](https://github.com/kopeio/etcd-manager/pull/316 )
* e2e tests should wait for cluster readiness [#318 ](https://github.com/kopeio/etcd-manager/pull/318 )
* Remove old bazel versions from travis [#317 ](https://github.com/kopeio/etcd-manager/pull/317 )
* Always renew certificates [#313 ](https://github.com/kopeio/etcd-manager/pull/313 )
2020-04-28 09:15:02 -04:00
869ab75dea
Use etcd-manager for the cilium etcd cluster
2020-04-16 08:42:59 +02:00
5901ba05fc
updated to use #8455
2020-03-12 10:25:52 -07:00
301463577e
Allow users to overwrite etcd settings.
...
Fix typo
fix env vars config ordering
2020-03-12 10:25:52 -07:00
280d8d7729
Update etcd-manager to 3.0.20200307
...
Changelog:
* Allow overwriting etcd configs with env variables [#296 ](https://github.com/kopeio/etcd-manager/pull/296 )
* Update kops dependency to v1.16.0 [#302 ](https://github.com/kopeio/etcd-manager/pull/302 )
2020-03-07 18:55:15 -05:00
044196ac94
Merge pull request #8016 from bittopaz/ali-patch-6
...
Alicloud: etcd-manager support
2020-01-28 22:52:14 -08:00
751ce5d19f
Bump etcd-manager to 3.0.20200116 ( #8310 )
...
Signed-off-by: mmerrill3 <michael.merrill@vonage.com>
2020-01-23 11:09:14 -05:00
4fe3db7faa
Don't share /etc/hosts when using etcd-manager
...
With etcd-manager the DNS names should only be used by the
etcd-manager pod itself, so we don't need to share /etc/hosts with the
host.
By not sharing we avoid:
(1) the temptation to address etcd directly
(2) problems of concurrent updates to /etc/hosts being hard from within a container (because locking is difficult across bind mounts)
Introducing with kubernetes 1.17 to avoid changing behavior of existing versions.
2020-01-12 11:56:14 -05:00
d81566482b
Alicloud: etcd-manager support
2019-11-28 10:00:08 +08:00
9108b69798
Update etcd-manager to 3.0.20191025
...
Primarily for DigitalOcean support
Changes:
* fix issues in pr#253
* Update rules-docker to 0.12
* [DO-7442] Fix logic for Digital Ocean volume tag
* Update release process to use shipbot
* Move to go modules
* Update golang to 1.13.3
* travis: Test newer bazel versions
* Fix unit tests
* Test everything, not just //test
2019-10-25 09:47:22 -04:00
John Gardiner Myers
justinsb
Ole Markus With
Ciprian Hacman
Otto Sulin
Kenji Kaneda
Anthony Stanton
Peter Rifel
Rodrigo Menezes
Ciprian Hacman
Kubernetes Prow Robot
mmerrill3
Xiaoyu Zhong