Commit Graph

335 Commits

Author SHA1 Message Date
John Gardiner Myers 69f0afad4d hack/update-expected.sh 2023-01-15 23:12:00 -08:00
John Gardiner Myers 2eb24107fd hack/update-expected.sh 2023-01-15 17:20:32 -08:00
John Gardiner Myers aa268ef173 hack/update-expected.sh 2023-01-11 20:06:46 -08:00
Kubernetes Prow Robot b9c2bbea5d
Merge pull request #14974 from hakman/containerd-v1.6.15
Update containerd to v1.6.15
2023-01-10 23:19:45 -08:00
Kubernetes Prow Robot f2883115a4
Merge pull request #14913 from johngmyers/hostnetwork-no-irsa
Run pods needing control-plane instance credentials on hostNetwork
2023-01-10 22:25:27 -08:00
Kubernetes Prow Robot d247c0b37d
Merge pull request #14879 from hakman/aws_imds_all_clusters
aws: Set IMDS defaults for existing clusters
2023-01-10 22:25:19 -08:00
John Gardiner Myers 70a3973c7c hack/update-expected.sh 2023-01-10 20:48:05 -08:00
Ciprian Hacman 8257251c45 Run hack/update-expected.sh 2023-01-11 06:35:01 +02:00
Kubernetes Prow Robot 0b8ccf2c9e
Merge pull request #14951 from johngmyers/kube-dns
Upgrade k8s-dns-node-cache to 1.22.16
2023-01-09 08:21:29 -08:00
Ole Markus With 07c77b1e5f Bump EBS CSI driver to 1.14.1 2023-01-09 13:01:23 +01:00
John Gardiner Myers c55cc836db Upgrade k8s-dns-node-cache to 1.22.16 2023-01-04 17:49:50 -08:00
John Gardiner Myers fea27074aa hack/update-expected.sh 2023-01-03 22:16:20 -08:00
John Gardiner Myers 7419620b80 hack/update-expected.sh 2023-01-03 12:29:07 -08:00
Ciprian Hacman a2b811f68c Run hack/update-expected.sh 2023-01-03 11:03:44 +02:00
John Gardiner Myers e44ce84f78 hack/update-expected.sh 2023-01-02 13:58:23 -08:00
John Gardiner Myers 3fe4ee9b84 hack/update-expected.sh 2023-01-02 13:42:11 -08:00
John Gardiner Myers 768299134c hack/update-expected.sh 2023-01-02 12:50:24 -08:00
Ciprian Hacman 84b557d203 Run hack/update-expected.sh 2022-12-26 13:21:43 +02:00
John Gardiner Myers b820f4ac59 hack/update-expected.sh 2022-12-24 21:44:50 -08:00
John Gardiner Myers c0dff11230 Update min versions for 1.27 2022-12-24 21:44:49 -08:00
John Gardiner Myers 70389e6398
Release 1.27.0-alpha.1 (#14866) 2022-12-24 21:43:27 -08:00
Ciprian Hacman f5b72742b4
Release 1.26.0-beta.1 (#14858) 2022-12-23 01:13:27 -08:00
Ole Markus With 171b2d0a5d Bump cilium to 1.12.5 2022-12-21 11:40:39 +01:00
Ole Markus With 08a9657cfb Bump EBS CSI driver to 1.14.0 2022-12-20 20:37:53 +01:00
Kubernetes Prow Robot 424af287cf
Merge pull request #14823 from johngmyers/coredns
Upgrade coredns to v1.10.0
2022-12-20 00:11:44 -08:00
John Gardiner Myers 472a7f38b6 Upgrade coredns to v1.10.0 2022-12-19 23:26:39 -08:00
John Gardiner Myers 936790e953 Upgrade k8s-dns-node-cache to 1.22.15 2022-12-19 19:26:21 -08:00
John Gardiner Myers 4c036cb261 hack/update-expected.sh 2022-12-19 00:10:16 -08:00
Ole Markus With 00631f0c2e Bump EBS CSI driver to 1.13.0 2022-12-11 18:19:16 +01:00
Kubernetes Prow Robot 572b0655dc
Merge pull request #14732 from olemarkus/cilium-12
Bump cilium version to 1.12.4
2022-12-11 04:25:14 -08:00
Ciprian Hacman 09dc2c8455 Run hack/update-expected.sh 2022-12-09 08:01:54 +02:00
Ole Markus With 5737b86ce6 Update expected 2022-12-07 18:33:03 +01:00
Ciprian Hacman 20805fe110 Run hack/update-expected.sh 2022-12-06 19:00:23 +02:00
Ole Markus With ea1d919d0c Fix disabling masquerade for cilium 1.11+ 2022-11-30 14:27:04 +01:00
John Gardiner Myers c6349285d4
Release 1.26.0-alpha.2 (#14665) 2022-11-25 09:06:04 -08:00
Denis Moiseev e7c3dee038 Add `ec2:DescribeAvailabilityZones` to the AWS CCM permissions list
To workaround the issue with subnets auto-discovery [1]
AWS ccm needs to have permission to retrieve information about
availability zones (specifically to detect outpost, wavelength, and local zones [2]).

[1] https://github.com/kubernetes/cloud-provider-aws/issues/442
[2] https://github.com/kubernetes/cloud-provider-aws/pull/499
2022-11-25 11:04:27 +01:00
John Gardiner Myers 6dd63c8e1f hack/update-expected.sh 2022-11-23 15:55:01 -08:00
John Gardiner Myers b105aa6a86 hack/update-expected.sh 2022-11-22 17:15:51 -08:00
Kubernetes Prow Robot d405d4c5a2
Merge pull request #14507 from johngmyers/internalname
Stop making MasterInternalName configurable
2022-11-18 13:38:29 -08:00
Ole Markus With 58195904ee Bump cilium to 1.11.11 2022-11-18 08:44:55 +01:00
John Gardiner Myers 294c0a3a04 hack/update-expected.sh 2022-11-16 22:06:02 -08:00
John Gardiner Myers 8473e8b2e7 Stop making MasterInternalName configurable 2022-11-16 22:06:02 -08:00
Ciprian Hacman 309b37eadf Run hack/update-expected.sh 2022-11-15 14:51:54 +02:00
John Gardiner Myers c53c3bf8f8 Update images in tests 2022-11-01 17:04:43 -07:00
Ole Markus With cd378bff72 Move setting role taints to cloudup 2022-10-18 13:42:00 +02:00
Ole Markus With 18808486da Remove fsGroupPolicy as it is immutable 2022-10-05 18:23:10 +02:00
Ole Markus With 8e040a4082 Bump EBS CSI driver to 1.12.0 2022-10-05 08:56:48 +02:00
Thomas Colomb 9b28c14213 cluster-autoscaler : Add iam permission autoscaling:DescribeScalingActivities needed since 1.24 version 2022-09-23 13:20:21 +02:00
Ciprian Hacman 1eb35d9686
Release 1.26.0-alpha.1 (#14311) 2022-09-21 01:28:54 -07:00
Ole Markus With f226b03abf Add back missing permissions for legacy CCM. Again. 2022-09-10 19:54:49 +02:00
Ciprian Hacman 8b83dedf24
Release 1.25.0-beta.1 (#14210) 2022-08-31 03:43:00 -07:00
Ciprian Hacman cf5e48c912 Run hack/update-expected.sh 2022-08-31 09:21:40 +03:00
Ole Markus With 1a8236290d Bump node local dns cache to 1.22.8 2022-08-25 19:03:14 +02:00
Ole Markus With 7a48391172 Delete disabled lifecycle hooks and implement disable logic for warmpools 2022-08-18 19:50:48 +02:00
Ole Markus With 65aaa8dfe7 Bump cilium to 1.11.8 2022-08-17 08:49:26 +02:00
Ciprian Hacman b9394fed18 Run hack/update-expected.sh 2022-08-12 19:40:25 +03:00
justinsb 8693164f76 Update expected output 2022-08-03 09:51:16 -04:00
Nicolas Sterchele a23ca78c58
fixup! aws-ebs-csi-driver: remove preStop hook 2022-08-03 07:55:26 +02:00
Ole Markus With 8bcc640452 Make Karpenter respect IG's spec.Subnets
This will add tag all subnets with the IGs using that subnet

Update docs/operations/karpenter.md

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2022-08-01 21:06:24 +02:00
Ciprian Hacman 4dee7dd9a2
Release 1.25.0-alpha.2 (#14070) 2022-07-29 11:31:11 -07:00
Ciprian Hacman 45012d83bf Run hack/update-expected.sh 2022-07-27 21:55:34 +03:00
Ciprian Hacman 7b99594f39 Run hack/update-expected.sh 2022-07-18 06:36:23 +03:00
Peter Rifel 7ffedef3a4
./hack/update-expected.sh 2022-07-11 20:54:30 -06:00
Nicolas Sterchele 73b6ed4150
aws: introduce maximum instance lifetime in cluster
The maximum instance lifetime is an AWS only feature and specifies the
maximum amount of time (in seconds) that an instance can be in service
before it is terminated and replaced.
A common use case might be a requirement to replace your instances on a
schedule because of internal security policies or external compliance
controls.
2022-07-04 20:38:33 +02:00
Ciprian Hacman 50db0701b5 Run hack/update-expected.sh 2022-07-02 11:38:24 +03:00
Reilly Brogan f3a421d600 Update Cilium to 1.11.6 2022-06-29 13:18:21 -05:00
Ciprian Hacman 4b637db62b
Release 1.25.0-alpha.1 (#13912)
* Release 1.25.0-alpha.1

* Squash release commit for more clarity
2022-06-29 05:32:06 -07:00
Ciprian Hacman 59c5801c94 Run hack/update-expected.sh 2022-06-28 12:38:32 +03:00
Ciprian Hacman 11870286e0 Run hack/update-expected.sh 2022-06-18 09:01:23 +03:00
Ciprian Hacman 911f4a133c Run hack/update-expected.sh 2022-06-10 14:03:16 +03:00
Kubernetes Prow Robot d56cce25d0
Merge pull request #13750 from julienperignon/master
Fix API group name for ingresses in DNS Controller
2022-06-10 02:59:46 -07:00
Ciprian Hacman 88122d67c3 Run hack/update-expected.sh 2022-06-10 09:55:15 +03:00
Julien Perignon bf825b72f1 Update after running hack/update-expected.sh 2022-06-09 01:03:57 +10:00
Ciprian Hacman 9a591b2aa7 Run hack/update-expected.sh 2022-06-07 09:16:54 +03:00
Ciprian Hacman f95ef569a1
Release 1.24.0-beta.1 (#13730) 2022-06-04 07:10:20 -07:00
Peter Rifel 5c8e34f669
Migrate EBS CSI images back to registry.k8s.io 2022-06-02 11:34:30 -05:00
Ole Markus With 7981f6fa25 Bump coredns to 1.8.6 2022-05-22 09:30:02 +02:00
Ciprian Hacman 97b5795edb
Release 1.24.0-alpha.5 (#13675) 2022-05-21 09:10:00 -07:00
Ole Markus With 6471f2ce0b Bump EBS CSI driver to 1.6.2 2022-05-20 21:46:47 +02:00
Kubernetes Prow Robot 39f566edbf
Merge pull request #13666 from olemarkus/cilium-bump-124
Bump Cilium to 1.11.5
2022-05-18 16:24:14 -07:00
Ole Markus With 2d50b9ff2c Bump Cilium to 1.11.5
Since this introduced some backwards breaking RBAC changes, the manifest got forked
2022-05-18 21:44:19 +02:00
Ole Markus With f849ea01c9 Bump EBS CSI driver to 1.6.1 2022-05-18 20:46:47 +02:00
Jesse Haka a5c9dddc48 fix test data 2022-05-15 23:30:41 +03:00
Ciprian Hacman 68469601cd
Release 1.24.0-alpha.4 (#13631) 2022-05-11 02:36:52 -07:00
Ciprian Hacman 007b50cc89 Run hack/update-expected.sh 2022-05-03 20:05:38 +03:00
Ole Markus With 6df6857ad5 Bump cilium to 1.11.4 2022-05-02 13:26:00 +02:00
Ciprian Hacman 75fac81273 Run hack/update-expected.sh 2022-05-02 10:33:26 +03:00
Peter Rifel 66817eee4b
./hack/update-expected.sh 2022-04-27 22:17:29 -05:00
Ole Markus With 227dde3ce7 Update expected 2022-04-18 13:56:13 +02:00
justinsb 74397b2a4f Update to etcd-manager 3.0.20220417
In particular we want to pick up changes addressing the potential
corruption found in 3.5.0 - 3.5.2:

* Use etcd 3.5.3
* Pass the ETCD_EXPERIMENTAL_INITIAL_CORRUPT_CHECK for all 3.5 series
2022-04-17 10:29:01 -04:00
Ciprian Hacman 18d45a2994 Run hack/update-expected.sh 2022-04-13 16:49:09 +03:00
Ole Markus With 1fadc39a59 Add PDB for cilium operator 2022-04-09 07:06:59 +02:00
Kubernetes Prow Robot f32503e413
Merge pull request #12919 from olemarkus/cilium-11-default
Use Cilium 1.11 as default
2022-04-06 04:18:56 -07:00
Ole Markus With 79d9fa6aa7 Don't run the CSI snapshot plugin if snapshot controller is not installed 2022-04-02 21:51:20 +02:00
Ole Markus With 3d77ab6139 Use Cilium 1.11 as default 2022-03-29 12:58:24 +02:00
Bronson Mirafuentes e112d81025
Release 1.24.0-alpha.3 (#13372)
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 21:09:12 -07:00
Ciprian Hacman 30404d64a2 Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 09:01:59 +02:00
Ole Markus With d7cb3bb1f7 Add user to container securityContext and remove command 2022-03-07 15:09:51 +01:00
AkiraFukushima e5cf940d53
Add managed-by label to addon pods 2022-02-20 18:33:51 +09:00
Ole Markus With 7132486ebf hack update-expected 2022-02-11 20:51:42 +01:00
Ole Markus With 66e3202f34 Fix CSI migration feature gates
We had a bug for KCM feature gate, and the scheuler and apiserver gate was missing entirely.
2022-02-04 15:29:28 +01:00
justinsb 4f89c2e689 Update expected test output for etcd-manager bump 2022-02-03 11:21:54 -05:00
Ole Markus With 6327cc378f Fix etcd-manager for ipv6 2022-02-03 12:59:26 +01:00
Ole Markus With af4d69cab3 Use etcd-manager pre-release until final release has been cut 2022-02-02 13:10:32 +01:00
Ole Markus With 994588c0fd Bump etcd-manager to v3.0.20220128 2022-01-30 07:13:32 +01:00
Ole Markus With 9d476c0e9c Add CreateSecurityGroup permission for vpcs 2022-01-20 17:49:36 +01:00
Ole Markus With 666cf710a2 Push partition into the policy struct 2022-01-20 17:49:36 +01:00
Ole Markus With 0a082fed12 Require tag on create for external AWS CCM 2022-01-20 15:32:46 +01:00
Ciprian Hacman df29b6e406 Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 13:00:36 +02:00
Kubernetes Prow Robot 4eb54f2260
Merge pull request #13114 from olemarkus/nodeup-describe-regions
Add DescribeRegions to nodeup privs
2022-01-18 22:14:05 -08:00
Ole Markus With b80488906f Add DescribeRegions to nodeup privs 2022-01-17 09:34:29 +01:00
Ole Markus With f4e538508f Create helper function for ec2 create/tag-on-create IAM permissions 2022-01-14 18:41:28 +01:00
Kubernetes Prow Robot 4ffc83d811
Merge pull request #13028 from rifelpet/ipv6-tf
Extend terraform support for IPv6
2022-01-06 17:08:30 -08:00
John Gardiner Myers d5ac8862d5 Release 1.24.0-alpha.2 2022-01-01 10:35:11 -08:00
Peter Rifel 23686f0ead
./hack/update-expected.sh 2021-12-25 08:38:22 -06:00
Kubernetes Prow Robot 2f31054e19
Merge pull request #13007 from hakman/skip_non-masquerade-cidr
Use kubelet --non-masquerade-cidr only for Docker with kubenet
2021-12-21 18:49:36 -08:00
justinsb e8ddfa4328 Update test data for bash return change 2021-12-20 10:12:07 -05:00
Ole Markus With 1ee6f347c5 Use spread constraints rather than affinity to spread pods (golden outputs) 2021-12-20 09:37:45 +01:00
Ciprian Hacman b20dfe162a Run hack/update-expected.sh 2021-12-20 08:47:25 +02:00
Ole Markus With 57fd343e1d Make service topology for cilium configurable 2021-12-12 07:54:21 +01:00
Ciprian Hacman f5f35ab755
Release 1.24.0-alpha.1 (#12928) 2021-12-11 00:01:57 -08:00
Ciprian Hacman 473018f64f
Release 1.23.0-beta.1 (#12924) 2021-12-10 22:31:58 -08:00
Kubernetes Prow Robot cfa4629ce0
Merge pull request #12915 from heybronson/dns-pdb
Set DNS PDB to a maxUnavailable percentage
2021-12-09 12:51:04 -08:00
Bronson Mirafuentes ed7d287052 set dns pdb to 50% maxUnavailable 2021-12-09 08:57:33 -08:00
John Gardiner Myers 0775a4ee20 hack/update-expected.sh 2021-12-06 21:11:49 -08:00
John Gardiner Myers c23f40aea1 hack/update-expected.sh 2021-12-02 21:04:13 -08:00
Ole Markus With f2f9b9dcbb Determine hostnameOverride entirely in nodeup instead of passing in cloud placeholders from cloudup 2021-11-30 13:29:54 +01:00
Ciprian Hacman f740f0d493 Run hack/update-expected.sh 2021-11-25 11:32:12 +02:00
Ole Markus With b420f3c58d Bump EBS CSI driver to 1.5.0 2021-11-23 19:46:08 +01:00
Gabriel Martinez 881bc5ca44
Add missing namespace for aws-ebs-csi-driver pdb template
Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt>
2021-11-23 10:16:58 +00:00
Ole Markus With 739350a4b5 Bump cilium to 1.10.5 2021-11-22 11:52:08 +01:00
justinsb e0b786a254 Update golden test output 2021-11-19 11:02:19 -05:00
Kubernetes Prow Robot ec9c277259
Merge pull request #12783 from olemarkus/bump-nodelocaldns-23
Bump node local dns cache
2021-11-18 16:58:51 -08:00
Ole Markus With 3983017ac6 Bump node local dns cache 2021-11-18 20:51:37 +01:00
justinsb 7995e8cc28 Update test data for etcd-manager bump 2021-11-18 11:49:14 -05:00
Ciprian Hacman 7d34232b4c Run hack/update-expected.sh 2021-11-18 07:58:44 +02:00
Kubernetes Prow Robot b47e023b1e
Merge pull request #12680 from rifelpet/fix-iam-conditions
Fix ELB IAM conditions (part 2)
2021-11-03 23:34:03 -07:00
Peter Rifel af426a272b
./hack/update-expected.sh 2021-11-03 22:17:41 -05:00
Peter Rifel c3e8420731
Revert "Move some AWS IAM policy actions from tagged conditions to wildcard"
This reverts commit 91e4767851.
2021-11-03 21:59:43 -05:00
Kubernetes Prow Robot 1e97b0cf76
Merge pull request #12674 from rifelpet/fix-iam-conditions
Remove tag conditions on certain AWS IAM actions
2021-11-03 02:24:59 -07:00
Peter Rifel a8f7fee499
./hack/update-expected.sh 2021-11-02 20:21:37 -05:00
Peter Rifel 91e4767851
Move some AWS IAM policy actions from tagged conditions to wildcard
I checked these against the IAM docs for each API and moved the actions that dont support tag conditions:
https://docs.aws.amazon.com/service-authorization/latest/reference/list_elasticloadbalancing.html#elasticloadbalancing-actions-as-permissions
https://docs.aws.amazon.com/service-authorization/latest/reference/list_elasticloadbalancingv2.html#elasticloadbalancingv2-actions-as-permissions
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html#amazonec2-actions-as-permissions
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2autoscaling.html#amazonec2autoscaling-actions-as-permissions
2021-11-02 20:06:35 -05:00
Peter Rifel dede42efd2
Fix cluster name used in IAM policies 2021-11-02 17:39:57 -05:00
Peter Rifel df902cca65
Enable lifecycle hook in integration test 2021-11-02 17:38:23 -05:00
John Gardiner Myers 3a97dbaa8d Release 1.23.0-alpha.2 2021-10-31 13:46:07 -07:00
John Gardiner Myers 1ec56c509e hack/update-expected.sh 2021-10-30 13:28:39 -07:00
Peter Rifel 8dc11bdba9
./hack/update-expected.sh 2021-10-29 23:08:28 -05:00
John Gardiner Myers 7b5fdc7c43 Update automatically generated files 2021-10-27 23:40:02 -07:00
John Gardiner Myers ad6235e428 Update automatically generated files 2021-10-26 16:12:50 -07:00
Ole Markus With 795ac25363 Add permissions needed for KCM to provision NLBs 2021-10-26 08:51:28 +02:00