Commit Graph

1532 Commits

Author SHA1 Message Date
Matt Morrison 9f15dd71f0
Update expected test output 2023-10-11 21:07:31 +13:00
Ciprian Hacman e1caa8aa2b hack/update-expected.sh 2023-10-08 09:17:51 +03:00
Kubernetes Prow Robot d2b789da07
Merge pull request #15993 from johngmyers/nlb-sg
aws: Attach security groups to NLBs
2023-10-07 10:57:01 +02:00
John Gardiner Myers 3f1ee1e820 hack/update-expected.sh 2023-10-06 22:33:31 -07:00
Kubernetes Prow Robot 24f23543b4
Merge pull request #15972 from borg-land/bump-gcp-ccm
Bump GCP CCM again
2023-10-07 03:41:20 +02:00
upodroid e08472ddc5 bump cloud-provider-gcp to latest build 2023-10-06 17:52:23 +01:00
Mia-Cross e12f3dc07b
scaleway: terraform support (#15892)
* tasks dependencies

* FindAddresses should proceed even if LBID is empty

* refacto instance: handle several instances in IG + volumeSize in model

* refacto lb_backend: set servers' IPs in backend task rather than instance

* dns changes for tf support

* render Scaleway s3 objects + add zone to outputs

* add terraform support to documentation

* new instance unique name should be given according to actual instances names

* avoid untimely changes in tf + tag instance IPs to avoid orphaned IPs at cluster deletion

* update integration tests

* review comments

* add IPs to the resources to be deleted with the cluster

* add task + model for DNS record
2023-09-29 04:22:42 -07:00
upodroid d630f9c520 add missing rbac roles and don't run gkenetparamset controller 2023-09-28 12:06:52 +01:00
upodroid cb8fd9180b update ccm path 2023-09-27 17:23:28 +01:00
upodroid de0c99b192 bump gcp ccm image and dump more resources 2023-09-27 15:04:51 +01:00
Ciprian Hacman 626213c2c1 hack/update-expected.sh 2023-09-25 18:21:49 +02:00
Kubernetes Prow Robot 97c89f49b0
Merge pull request #15903 from hakman/aws_list_eni_by_vpc
aws: Filter ENI list by VPC
2023-09-24 16:22:56 -07:00
Ciprian Hacman 4945a8ea0c hack/update-expected.sh 2023-09-24 01:56:48 +02:00
Dan Ports 32b0416547 Configure Karpenter resources. 2023-09-23 11:16:28 -04:00
Ciprian Hacman 1aecb5304d aws: Filter ENI list by VPC 2023-09-23 05:25:56 +03:00
Jun Mukai bbfd71aa8f update expected test data. 2023-09-20 15:42:10 -07:00
Jun Mukai 0573e6d39e Fix minor typos for karpenter setup.
`on-demand` is the right string to indicate OnDemand in Karpenter.
See: https://github.com/aws/karpenter-core/blob/main/pkg/apis/v1alpha5/labels.go#L30
As the result it does not fall back to ondemand instances.

Also add `ec2:DescribeImages` to karpenter IAM policies -- it's
noted in https://karpenter.sh/docs/getting-started/migrating-from-cas/#create-iam-roles
(the list also has DeleteLaunchTemplates but I don't think this
is necessary for kOps).
2023-09-20 09:57:46 -07:00
Dan Ports ae1584c6f0 Add Cognito permissions for AWS LBC. 2023-09-14 12:15:30 -04:00
zadjadr 47919e5727 hack/update-expected.sh 2023-09-10 09:05:51 +02:00
zadjadr 61d036933e hardcode ingress secrets namespace & lb mode 2023-09-10 08:57:04 +02:00
zadjadr 4807f2c0c6 Implement Cilium Ingress 2023-09-10 08:57:03 +02:00
John Gardiner Myers 9ae4e967d1
Release 1.29.0-alpha.1 (#15889) 2023-09-07 22:00:13 -07:00
Ciprian Hacman 693a72a228 hack/update-expected.sh 2023-09-06 06:32:57 +03:00
Ciprian Hacman 120c0b65aa hack/update-expected.sh 2023-09-05 12:34:20 +03:00
John Gardiner Myers edd3d0bf42 hack/update-expected.sh 2023-09-04 16:12:00 -07:00
John Gardiner Myers 965712d22b hack/update-expected.sh 2023-09-04 15:43:23 -07:00
Kubernetes Prow Robot bb03f4160e
Merge pull request #15866 from hakman/fix_aws-vpc-cni
Default to 100.64.0.0/13 as IPv4 service cluster IP range
2023-09-04 12:13:48 -07:00
justinsb 9daf0908c2 Update expected test output 2023-09-04 08:36:22 -04:00
Ciprian Hacman d41f7164d1 hack/update-expected.sh 2023-09-04 10:42:09 +03:00
John Gardiner Myers b3908e592c Remove support for Kubernetes 1.23 2023-09-03 16:22:18 -07:00
Ciprian Hacman 9caf0b2662
Release 1.29.0-alpha.0 (#15858) 2023-09-02 23:19:12 -07:00
Ciprian Hacman db8b0f32f9
Release 1.28.0-beta.1 (#15855) 2023-09-02 21:29:12 -07:00
justinsb f7bed48d3e Update expected output for additional mirrors 2023-08-24 08:47:09 -04:00
Kubernetes Prow Robot a913d3c0db
Merge pull request #15810 from moshevayner/cert-manager-1-12-3
Bump Cert Manager to 1.12.3
2023-08-22 06:06:54 -07:00
Moshe Vayner 3974754d8d hack/update-expected 2023-08-22 00:32:37 -04:00
Moshe Vayner 0b2de28f70 hack/update-expected 2023-08-22 00:14:53 -04:00
Kubernetes Prow Robot 73159cd6f5
Merge pull request #15670 from johngmyers/aws-ccm
Fix AWS CCM defaults for IPAM to match KCM
2023-08-16 07:22:27 -07:00
Kubernetes Prow Robot d67528e5e6
Merge pull request #15756 from zadjadr/fix/cilium-hubble-cert
Fix hubble certificate dnsname
2023-08-10 20:47:26 -07:00
John Gardiner Myers edac43faed
Release 1.28.0-alpha.2 (#15758) 2023-08-09 21:13:26 -07:00
John Gardiner Myers 37be4741e1 hack/update-expected.sh 2023-08-09 18:12:37 -07:00
John Gardiner Myers 0f36b1344e hack/update-expected.sh 2023-08-09 18:12:37 -07:00
zadjadr 43469e40e0 Fix hubble certificate dnsname 2023-08-09 15:34:01 +02:00
zadjadr d2358df1d7 feature: Add cluster-id for Cilium
hack/update-expected.sh
2023-08-06 18:08:39 +02:00
Ciprian Hacman dbde17c9a5 hack/update-expected.sh 2023-08-05 08:11:39 +03:00
Ole Markus With a0d67fc475 Bump cilium to 1.13.5
Bump to Cilium 1.14.0

hack/update-expected.sh
2023-08-03 21:03:56 +02:00
John Gardiner Myers 866dc517ed hack/update-expected.sh 2023-07-29 04:57:08 -07:00
Kubernetes Prow Robot a8fa8952ba
Merge pull request #15647 from johngmyers/nodeup-protokube
Remove more references to ClusterSpec fields from nodeup
2023-07-29 00:01:59 -07:00
Kubernetes Prow Robot b29714a98c
Merge pull request #15708 from justinsb/gce_multi_lbs
gce load balancers: set LoadBalancingScheme to EXTERNAL explicitly
2023-07-28 23:13:59 -07:00
Kubernetes Prow Robot fd131bc730
Merge pull request #15706 from johngmyers/upgrade-ccm
Upgrade AWS CCM
2023-07-28 22:22:00 -07:00
justinsb 7bc5a71773 gce load balancers: set LoadBalancingScheme to EXTERNAL explicitly
This avoids a spurious change being printed, and is more correct - we
actually want this to be external (vs nil, which implicitly means
"don't care").
2023-07-29 08:15:29 +03:00
justinsb 7814744a7a autogen: Update test data for gce label changes 2023-07-28 23:48:41 -04:00
John Gardiner Myers dbc6b6747c hack/update-expected.sh 2023-07-28 13:53:34 -07:00
Kubernetes Prow Robot 223b66c3f7
Merge pull request #15666 from johngmyers/nth
Enable NTH by default on AWS
2023-07-28 11:55:42 -07:00
John Gardiner Myers 3d100d1921 hack/update-expected.sh 2023-07-28 08:27:31 -07:00
John Gardiner Myers b63bbf843e hack/update-expected.sh 2023-07-28 06:45:47 -07:00
John Gardiner Myers 4654aa3d75 hack/update-expected.sh 2023-07-28 02:59:30 -07:00
John Gardiner Myers 5cb9756f37 hack/update-expected.sh 2023-07-27 17:04:57 -07:00
John Gardiner Myers b010b7faae Use release version of k8s 1.27 in integration test 2023-07-27 16:52:15 -07:00
Kubernetes Prow Robot dbba2ae410
Merge pull request #15678 from johngmyers/no-configstore
v1alpha3: remove redundant ConfigStore
2023-07-22 00:32:07 -07:00
Kubernetes Prow Robot b7f017b016
Merge pull request #15565 from justinsb/symlink_approach_2
etcd-manager: support symlinking versions
2023-07-20 23:40:07 -07:00
John Gardiner Myers a959435079 hack/update-expected.sh 2023-07-20 19:10:21 -07:00
John Gardiner Myers 9b64707159 Ignore no-longer-used topology fields in ClusterSpec 2023-07-19 08:48:38 -07:00
John Gardiner Myers 3e2ab2b677 hack/update-expected.sh 2023-07-18 16:13:22 -07:00
Kubernetes Prow Robot 9d2aa4c1d8
Merge pull request #15655 from hakman/fix_backup-retention-days
Fix modifying backupRetentionDays
2023-07-17 10:05:14 -07:00
Ciprian Hacman b6a8141ea8 hack/update-expected.sh 2023-07-17 17:28:02 +03:00
Anthony Hausman 4a01fc30c4
feat(karpenter): Variabilize Image, logFormat and logLevel 2023-07-17 13:13:37 +02:00
John Gardiner Myers 252f0758ff hack/update-expected.sh 2023-07-15 21:36:10 -07:00
John Gardiner Myers 56a8f46952 hack/update-expected.sh 2023-07-15 21:27:02 -07:00
John Gardiner Myers 62f7faa4da Remove references to ClusterSpec.API from nodeup 2023-07-15 14:55:38 -07:00
Kubernetes Prow Robot 141a040aec
Merge pull request #15607 from hakman/gce_cloud-init
gce: Use `user-data` instead of `startup-script` metadata key
2023-07-15 11:47:05 -07:00
Kubernetes Prow Robot 4ad116ec78
Merge pull request #15611 from justinsb/gce_lb_firewall
gce: Set firewall rules for Internal LBs also
2023-07-10 09:31:05 -07:00
justinsb 79c6d954d4 Update expected output for symlinks 2023-07-10 11:21:01 -04:00
justinsb 8b813b3051 Update expected test output 2023-07-10 11:11:59 -04:00
John Gardiner Myers f5fc710d6c Remove references to ClusterSpec from nodeup sysctls.go 2023-07-09 21:11:54 -07:00
justinsb 3613f586c8 GCE: Set firewall rules for Internal LBs also
It seems we can use the exact same rules.
2023-07-09 19:25:42 -04:00
Kubernetes Prow Robot 114ac311c1
Merge pull request #15332 from hakman/gce_internal_lb
gce: Update logic for internal LB
2023-07-09 14:11:04 -07:00
Ciprian Hacman 41c82ee6b4 hack/update-expected.sh 2023-07-09 13:50:00 +03:00
John Gardiner Myers 2d4cbebf49 Fix Karpenter failure to start on IPv6 clusters 2023-07-08 00:26:53 -07:00
Ciprian Hacman 739c3168e2 hack/update-expected.sh 2023-07-08 04:34:43 +03:00
justinsb 007d6434f8 Update expected test output 2023-07-05 12:35:01 -04:00
Ciprian Hacman 32432b7e2f hack/update-expected.sh 2023-07-04 10:18:32 +03:00
Kubernetes Prow Robot 7c1a8eda87
Merge pull request #15577 from hakman/hetzner_ccm
hetzner: Update CCM to v1.16.0
2023-07-02 13:04:50 -07:00
Ciprian Hacman e4ab685988 hack/update-expected.sh 2023-07-02 19:53:15 +03:00
Ciprian Hacman 21cdb36d68 hack/update-expected.sh 2023-07-02 08:33:23 +03:00
Ciprian Hacman 4085da870f hack/update-expected.sh 2023-07-01 09:51:22 +03:00
Ciprian Hacman 67f0abb541 hack/update-expected.sh 2023-06-30 21:24:44 +03:00
Tone c2ed4b6f64
Upgrade Karpenter to v0.27.5 (#15144)
* feat(karpenter): Upgrade to version 0.27.0

Upgrade Karpenter to current last stable version `0.27.0`.
Template have been updated to use the same templates than the Helm chart.

* feat(karpenter): Use AWSNodeTemplate for launchTemplate

To set Launch Templates is deprecated into the provisioner, it is recommends using the `AWSNodeTemplate` to set it.
Ref:
 - https://karpenter.sh/v0.27.0/concepts/node-templates/

* feat(karpenter): Enable pruning addon

* Use extra flags in upgrade-ab scenario test

* feat(karpenter): Drop `karpenter` feature flag

* feat(karpenter): Add release note for `1.27`

* feat(karpenter): Upgrade to version 0.27.3

* feat(karpenter):  fix template

* feat(karpenter): Upgrade to version 0.27.5

* Update Karpenter documentation with depending kops version

* Delete KOPS_FEATURE_FLAGS from e2e test `run-test`

* Run hack/update-expected.sh
2023-06-29 22:57:45 -07:00
John Gardiner Myers cad5b69446
Release 1.28.0-alpha.1 (#15548) 2023-06-24 20:45:09 -07:00
justinsb 5abb7af3d9 Update expected test-output 2023-06-22 17:14:58 +03:00
Kubernetes Prow Robot 6b0b655d40
Merge pull request #15536 from moshevayner/cert-manager-1.12.2
Bump cert-manager to version 1.12.2
2023-06-20 07:58:22 -07:00
Kubernetes Prow Robot 5dd042edbf
Merge pull request #15534 from moshevayner/aws-cni-1.13.2
Bump AWS CNI to version 1.13.2
2023-06-20 05:38:23 -07:00
Moshe Vayner 5c908242b2 hack/update-expected 2023-06-20 14:56:56 +03:00
Moshe Vayner 95632e57e1 hack/update-expected 2023-06-20 12:32:56 +03:00
Ciprian Hacman 3a4e0717a7 hack/update-expected.sh 2023-06-20 08:11:21 +03:00
Ciprian Hacman 26198a22b2 Update tests for kOps v1.28 2023-06-20 08:11:21 +03:00
Kubernetes Prow Robot b5adab4d53
Merge pull request #15520 from hakman/fix-kops-utils-cp
Fix promotion of `kops-utils-cp`
2023-06-19 10:54:22 -07:00
Kubernetes Prow Robot b4c5a75829
Merge pull request #15487 from jsafrane/add-selinux
Add optional SELinux support to RHEL clusters
2023-06-19 08:54:22 -07:00
Kubernetes Prow Robot 0546addf29
Merge pull request #15515 from justinsb/strict_node_label_checking
node labeling: don't ignore unknown roles
2023-06-19 07:48:21 -07:00
Ciprian Hacman 60b14823bd hack/update-expected.sh 2023-06-19 16:52:28 +03:00
Jan Safranek 0d03095fda Add SELinux support to containerd
Add cluster.Spec.Containerd.SELinuxEnabled field that enables SELinux in
containerd.

With SELinux enabled, all pods that use HostPath volumes must run with
SELinux label `spc_t`, otherwise SELinux denies the pods to touch the host
filesystem.
2023-06-19 15:20:08 +02:00