Ciprian Hacman
fd08e2b047
Run hack/update-expected.sh
2021-07-08 22:12:12 +03:00
Ciprian Hacman
1e41439e36
Use etcd v3.5.0 for Kubernetes 1.22+
2021-07-08 22:09:22 +03:00
Kubernetes Prow Robot
cf834ce5fc
Merge pull request #11843 from olemarkus/reduce-policy-size-further
...
Reduce policy size further
2021-07-03 17:58:18 -07:00
Peter Rifel
c5fbcccfa6
Update pause image to 3.5
2021-07-02 06:40:27 -04:00
John Gardiner Myers
186aaf6d96
hack/update-expected.sh
2021-07-01 14:45:32 -07:00
John Gardiner Myers
7162a7473a
Remove dead code
2021-07-01 13:58:51 -07:00
Kubernetes Prow Robot
19ffc06d3d
Merge pull request #11853 from johngmyers/override-issuer
...
Allow overriding the ServiceAccountIssuer for IRSA
2021-07-01 04:43:54 -07:00
Ole Markus With
aad2912710
Add sets for the remaining addons
2021-07-01 10:37:57 +02:00
Ole Markus With
df5b58b1b3
Add sets for the typical default role perms
2021-07-01 10:28:01 +02:00
Ole Markus With
37271998e1
Use sets for aws lbc permissions
2021-07-01 10:19:40 +02:00
Ole Markus With
19833e6b73
Use sets for ebscsidriver permissions
2021-07-01 09:02:04 +02:00
Ole Markus With
d8bf4dcae1
NewPolicy function for instantiating policy struct
2021-07-01 08:39:43 +02:00
John Gardiner Myers
2faf28379a
Refactor etcd-client-cilium secrets
2021-06-25 23:57:23 -07:00
John Gardiner Myers
24d1706848
Allow overriding the ServiceAccountIssuer for IRSA
2021-06-25 18:33:07 -07:00
Ciprian Hacman
2f3bad686a
Remove version from addons
2021-06-25 19:25:01 +03:00
Kubernetes Prow Robot
89ad2bc453
Merge pull request #11810 from hakman/ipv6_disable_calico_awssrcdstcheck
...
Enable cross-subnet mode with Calico by default
2021-06-25 01:08:45 -07:00
Ciprian Hacman
a12b3145ee
Enable cross-subnet mode with Calico by default
2021-06-25 07:13:20 +03:00
Ole Markus With
14fb35d0d0
Bump EBS Driver to 1.1.0
2021-06-21 08:56:11 +02:00
Ole Markus With
b37bc7578e
Reduce master policy size for lb controller
2021-06-19 10:12:22 +02:00
Ole Markus With
33a7de60a7
Enable IRSA for EBS CSI Driver
2021-06-18 08:05:59 +02:00
Ole Markus With
7b850555eb
Don't add volume multiple times to a pod
2021-06-18 07:31:33 +02:00
Kubernetes Prow Robot
7ec956dd00
Merge pull request #11748 from olemarkus/irsa-cas
...
Enable ability to use IRSA for cluster autoscaler
2021-06-17 21:00:05 -07:00
Kubernetes Prow Robot
559b57ea4c
Merge pull request #11381 from dntosas/addons-add-npd
...
[addons] Introduce NodeProblemDetector
2021-06-17 00:58:19 -07:00
Kubernetes Prow Robot
d35bce0ff8
Merge pull request #11764 from olemarkus/cilium-etcd-fix
...
Don't try to build etcd-manager secrets for cilium twice
2021-06-17 00:14:20 -07:00
dntosas
20124d3ba9
[addons] Introduce NodeProblemDetector
...
Node Problem Detector aims to make various node problems visible to
the upstream layers in the cluster management stack. It is a daemon
that runs on each node, detects node problems and reports them to apiserver
so to avoid scheduling new pods on bad nodes and also easily identify
which are the problems on underlying nodes.
Project Home: https://github.com/kubernetes/node-problem-detector
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 21:00:22 +03:00
Ole Markus With
6e8e027aff
Enable IRSA for Cluster Autoscaler
2021-06-16 18:03:11 +02:00
Kubernetes Prow Robot
84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
...
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
dntosas
7bf65ff7ef
[cni/cilium] Add support for additional config options
...
In this commit, we enable users define their setup with following
additional fields:
- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy
Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.
Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Ole Markus With
f80b550c7a
Use internal name for cilium etcd if we do not enable api server nodes
2021-06-16 08:27:26 +02:00
Kubernetes Prow Robot
847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig
...
Set containerd config on nodeup.Config instead of clusterspec
2021-06-15 15:13:43 -07:00
Ole Markus With
e7fa3fa82c
Set containerd config on nodeup.Config instead of clusterspec
...
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)
Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
2021-06-15 11:08:22 +02:00
John Gardiner Myers
2f71fb2cf4
Default the NodeCIDRMaskSize appropriately for IPv6
2021-06-14 20:43:09 -07:00
Kubernetes Prow Robot
392b517fda
Merge pull request #11756 from johngmyers/pod-cidr
...
Set default ClusterCIDR through the PodCIDR
2021-06-14 02:37:04 -07:00
John Gardiner Myers
51d0697dc3
Set default ClusterCIDR through the PodCIDR
2021-06-13 22:46:32 -07:00
John Gardiner Myers
0b7f6e3082
Remove dead code
2021-06-13 21:37:01 -07:00
John Gardiner Myers
3cf8234d01
Cilium: disable masquerade by default when in ENI IPAM mode
2021-06-13 21:36:56 -07:00
John Gardiner Myers
fc9ec13bb7
Set BindAddress appropriately when in IPv6-only mode
2021-06-13 09:41:19 -07:00
Ole Markus With
6582235312
Make AWS EBS CSI Driver default as of k8s 1.22
2021-06-08 22:29:16 +02:00
Ciprian Hacman
47bb825061
Generate AWSEBSCSIDriver model only when using AWS
2021-06-08 08:20:21 +03:00
John Gardiner Myers
e0915887ed
Move asset copying out of apply_cluster
2021-06-05 21:17:50 -07:00
John Gardiner Myers
fc4f0888ac
hack/update-expected.sh
2021-06-02 23:02:17 -07:00
John Gardiner Myers
7c9e7e9286
Make Lifecycle field non-pointer
2021-06-02 23:02:16 -07:00
Ole Markus With
553fdd5840
Bump default cilium to 1.10
2021-06-01 08:12:20 +02:00
Ole Markus With
2d643fff11
Don't set the master address for aws ccm
...
Use the kubernetes.default service for now. Ideally we would not rely on this as this in turn relies on CNI. But fixing this means also fixing PKI, so we have to revisit this later
2021-05-23 22:24:31 +02:00
Ole Markus With
3d90769e1c
Set flags on AWS CCM mimicking KCM
2021-05-22 14:15:53 +02:00
Ole Markus With
5869d4e6d4
Bump default cilium to 1.9.7
2021-05-21 18:54:03 +02:00
Ole Markus With
46e13c0009
Bump snapshot-controller version
...
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-21 15:40:40 +02:00
Alexander Block
bb52334222
Make the events etcd cluster optional
2021-05-20 08:05:42 +02:00
Ciprian Hacman
6e6a224f9d
Update containerd to v1.4.6
2021-05-19 20:27:28 +03:00
Ole Markus With
103e3f3b7e
Add support for CAS 1.21.0
2021-05-12 08:10:36 +02:00