Peter Rifel
b1fa018c36
Don't hard-code the SQS Queue ARN partition
2021-10-15 09:49:57 -07:00
Peter Rifel
99c0778106
Upgrade EBS CSI driver to v1.4.0
2021-10-12 14:44:02 -07:00
liranp
30f09f9f07
feat(spot): new metadata label: utilize-commitments
2021-10-12 01:32:09 +03:00
Ciprian Hacman
efe21a8d1b
Run hack/update-expected.sh
2021-10-07 13:25:37 +03:00
Ciprian Hacman
78f136705e
Update etcd-manager to 3.0.20211007
2021-10-07 13:25:37 +03:00
Kubernetes Prow Robot
cd4c475851
Merge pull request #12485 from srikiz/DO-implement-vpc-support
...
[DigitalOcean] Incorporate existing vpc support for kops
2021-10-05 03:23:09 -07:00
srikiz
63d6a29021
Minor changes to remove additional logging
2021-10-05 12:17:39 +05:30
Ciprian Hacman
4c8f887547
Update Docker to v20.10.9
2021-10-04 22:25:15 +03:00
Ciprian Hacman
af861a8e61
Update containerd to v1.4.11
2021-10-04 20:20:29 +03:00
srikiz
153081f84c
Minor changes for fixing vpc association with droplets
2021-10-04 22:21:38 +05:30
John Gardiner Myers
3a346cdc37
Remove unnecessary code
2021-10-02 21:46:17 -07:00
John Gardiner Myers
0fd4dca30e
Remove dead code
2021-10-02 20:58:55 -07:00
John Gardiner Myers
8e6214c046
Stop requiring the cluster IAM substruct be present
2021-10-02 20:18:46 -07:00
Kubernetes Prow Robot
a61075634c
Merge pull request #12406 from johngmyers/v1alpha3
...
Create v1alpha3 apiVersion
2021-10-02 10:13:06 -07:00
Ole Markus With
8eef72d8e8
Bump CAS images
2021-10-02 09:13:22 +02:00
Ciprian Hacman
1ddc11f0a6
Update containerd to v1.4.10
2021-10-02 07:03:59 +03:00
Peter Rifel
88ddff3baf
Use separate cloud.config files for in-tree vs out-of-tree components
2021-09-30 09:20:33 -05:00
Kubernetes Prow Robot
3dc1d25454
Merge pull request #12439 from rifelpet/nth-truncate
...
Truncate cluster name in NTH EventBridgeRules
2021-09-30 00:58:07 -07:00
Peter Rifel
3311e45767
Truncate cluster name prefix used in event bridge rules
2021-09-29 19:12:49 -05:00
Charles-Edouard Brétéché
7c8c9b9a23
feat: add support for custom audience in aws oidc provider
...
fix: missing json tags
fix: code gen
fix: switch to additional audiences
fix: oidc task
fix: add integration test
2021-09-28 22:39:56 +02:00
Kubernetes Prow Robot
ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
...
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Kubernetes Prow Robot
92ea7d58cb
Merge pull request #12398 from rifelpet/scheduler-critical
...
Remove critical-pod scheduler annotation.
2021-09-24 08:07:23 -07:00
Kubernetes Prow Robot
1774e6cae3
Merge pull request #12321 from dezmodue/private_bastion
...
Add option to create an internal load balancer for the bastion
2021-09-24 07:23:24 -07:00
John Gardiner Myers
63009934e7
update-bazel.sh
2021-09-23 23:40:08 -07:00
John Gardiner Myers
29efbe5881
Create v1alpha3 API
2021-09-23 22:27:56 -07:00
Reilly Brogan
9c6bf83c93
Update Cilium to 1.10.4
...
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4 )
2021-09-23 13:08:57 -05:00
Peter Rifel
ca044455a3
Remove critical-pod scheduler annotation.
...
This is no longer recognized in all supported k8s versions (1.16+)
ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
Kubernetes Prow Robot
74f9a8e2fb
Merge pull request #12342 from eddycharly/irsa-wildcard
...
feat: add support for wildcard in roles generated for IRSA
2021-09-22 16:09:10 -07:00
Charles-Edouard Brétéché
5f523366d6
feat: add support for wildcard in roles generated for IRSA
2021-09-23 00:24:45 +02:00
justinsb
e2f7895700
GCE: When using calico, need to open up ipip protocol
...
We need to open up the ipip protocol, which wasn't previously enabled.
Future work could construct the firewall rules in a common library,
and then adapt them to the various clouds.
2021-09-21 21:20:24 -04:00
justinsb
3e83b771d6
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
...
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
justinsb
76f816f483
GCE: Always have IPv6 rules in "ipv6 mode"
...
If we don't specify some SourceRanges, it defaults to 0.0.0.0/0, which
is IPv4 and confusing.
2021-09-20 09:26:28 -04:00
justinsb
99764fb168
AWS: Move some subnet functions into AWS model
...
We want to move all these eventually, and this is preparing for better
GCE subnet support.
2021-09-19 12:08:09 -04:00
Kubernetes Prow Robot
66edcba37b
Merge pull request #12354 from justinsb/kcm_conditions_fix
...
Fix controller defaults for both bootstrap tokens and ipv6
2021-09-19 06:48:08 -07:00
Simone Sciarrati
61763d488a
Add option to create an internal load balancer for the bastion
2021-09-18 20:47:55 +02:00
justinsb
db1ba01e94
Only add IPv6 IAM permissions if using IPv6
...
This avoids users wondering what these permissions are for until we
need them.
2021-09-18 13:49:40 -04:00
justinsb
345f3d85f1
Fix controller defaults for both bootstrap tokens and ipv6
...
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Ole Markus With
dc4c559d41
Set some needed defaults for cloud ipam
2021-09-16 21:11:09 +02:00
Ole Markus With
a3a2a9c3bf
Have nodeup assign an ipv6 prefix
2021-09-16 19:28:07 +02:00
Ole Markus With
384b9796f7
Don't set cluster ip if we use cloud ipam
2021-09-16 19:26:48 +02:00
Kubernetes Prow Robot
7a67dce053
Merge pull request #12314 from olemarkus/sgr-ids
...
Use sg rule ids and tags where possible
2021-09-12 07:10:07 -07:00
Kubernetes Prow Robot
3fd7b446c0
Merge pull request #12305 from hakman/node_ip_families
...
Make AWS CCM NodeIPFamilies configurable
2021-09-12 06:26:14 -07:00
Kubernetes Prow Robot
2e3ca721a5
Merge pull request #12291 from hakman/aws-ccm-1.22.0-alpha.0
...
Default to latest staging image for AWS CCM
2021-09-12 06:26:07 -07:00
Ole Markus With
d98994686a
Use sg rule ids and tags where possible
2021-09-12 14:32:58 +02:00
Kubernetes Prow Robot
1b431b4c9c
Merge pull request #11628 from olemarkus/gpu-runtime
...
Pre-install nvidia container runtime + drivers on GPU instances
2021-09-11 13:00:07 -07:00
Ciprian Hacman
cf8b11b0d4
Default to latest staging image for AWS CCM
2021-09-11 18:38:24 +03:00
Ole Markus With
bba3c3abfe
Bump aws ebs csi driver to 1.2.1
2021-09-11 14:15:31 +02:00
Ciprian Hacman
dde08e839d
Make AWS CCM NodeIPFamilies configurable
2021-09-11 13:09:08 +03:00
Peter Rifel
0d13da839a
Use MasterInternalName for gossip cluster SA issuer
...
This reverts a change introduced earlier in 1.22 that resulted in existing service account tokens becoming invalid after a kops upgrade.
2021-09-10 14:40:07 -04:00
Kubernetes Prow Robot
39eb930646
Merge pull request #12290 from rifelpet/imds-ipv6
...
Enable IMDS IPv6 endpoint
2021-09-09 06:04:11 -07:00