Commit Graph

478 Commits

Author SHA1 Message Date
voriol 722fb08eff add webhookURL 2023-10-11 08:58:55 +02:00
Ciprian Hacman 271f3e4d4b Add support for installing additional packages at cluster level 2023-10-06 08:41:41 +03:00
Dan Ports 32b0416547 Configure Karpenter resources. 2023-09-23 11:16:28 -04:00
Kubernetes Prow Robot 0a0f938d91
Merge pull request #15901 from zadjadr/feature/cilium-nodeencryption
Cilium: Implement node encryption
2023-09-22 10:16:50 -07:00
Colin Hoglund 2167dd8d82 Update kubelet API with SeccompDefault option. 2023-09-15 21:11:50 -07:00
zadjadr bc76c3f8ad Implement node encryption 2023-09-11 13:15:15 +02:00
zadjadr 61d036933e hardcode ingress secrets namespace & lb mode 2023-09-10 08:57:04 +02:00
zadjadr 4807f2c0c6 Implement Cilium Ingress 2023-09-10 08:57:03 +02:00
Kubernetes Prow Robot 09bc180686
Merge pull request #15871 from hakman/remove-docker
Remove Docker config option
2023-09-05 15:00:51 -07:00
Ciprian Hacman 4a00078845 Allow setting additional flags for apiserver, kcm and scheduler 2023-09-05 14:33:42 +03:00
Ciprian Hacman 6e6a2a4e7b Address review comments 2023-09-05 12:34:20 +03:00
Ciprian Hacman 120c0b65aa hack/update-expected.sh 2023-09-05 12:34:20 +03:00
John Gardiner Myers 47b1c37069 Remove code for disabling AWS EBS CSI driver 2023-09-04 15:43:23 -07:00
Ciprian Hacman dfe74b8da2 make crds 2023-09-04 21:32:49 +03:00
Ciprian Hacman c291190674 Add support for --experimental-allocatable-ignore-eviction kubelet flag 2023-08-26 06:01:27 +03:00
Kubernetes Prow Robot e1dc807a0c
Merge pull request #15798 from hakman/endpoint-updates-batch-period
kcm: Add support for `--endpoint/slice-updates-batch-period`
2023-08-18 05:40:29 -07:00
Ciprian Hacman 30ddb9efa4 kcm: Add support for --endpoint/slice-updates-batch-period 2023-08-18 14:52:41 +03:00
Jack Andersen af6269f82a
Add a new field for using a custom registry for Cilium
Signed-off-by: Jack Andersen <jandersen@plaid.com>
2023-08-17 10:54:00 -04:00
zadjadr d2358df1d7 feature: Add cluster-id for Cilium
hack/update-expected.sh
2023-08-06 18:08:39 +02:00
John Gardiner Myers 6836673cca Stop using redundant configStore setting 2023-07-20 19:10:21 -07:00
John Gardiner Myers 9b64707159 Ignore no-longer-used topology fields in ClusterSpec 2023-07-19 08:48:38 -07:00
Anthony Hausman 4a01fc30c4
feat(karpenter): Variabilize Image, logFormat and logLevel 2023-07-17 13:13:37 +02:00
Ciprian Hacman 80afaaead2 Add support for using swap memory 2023-07-14 07:50:48 +03:00
John Gardiner Myers d926989600 v1alpha3: Rename GCE networking to GCP 2023-07-09 16:48:26 -07:00
Ciprian Hacman e8980bc21a Add option for specifying the list of etcd metrics urls 2023-06-27 19:50:05 +03:00
Jan Safranek 134727a2e7 Generate API 2023-06-19 15:20:08 +02:00
Jesse Haka d7d7a55c41 add additional config for node local dns 2023-06-10 10:22:32 +03:00
Aurelio Forese efd50d000a OpenStack Octavia LoadBalancer supports for FlavorID
When using Octavia as OpenStack Load Balancer, it is now possible to
specify the Octavia flavor ID to use.
2023-05-13 10:17:44 +02:00
Moshe Vayner 881bd4e55f make apimachinery && make crds 2023-05-09 21:56:42 -04:00
Jesse Haka c09b401b38 add csi cinder metrics 2023-04-20 14:40:44 +03:00
Steven E. Harris 9595c833ee
Allow Cluster Autoscaler to ignore daemon pods
By default the cluster autoscaler takes DaemonSet-managed pods'
resource requests into consideration when computing a node's resource
utilization. Allow toggling its "--ignore-daemonsets-utilization"
command-line flag via a new field in the Cluster
spec—"clusterAutoscaler.ignoreDaemonSetsUtilization." Setting that
field to true causes the autoscaler to ignore such daemon pods'
requests, such that it will more likely judge a node running only
daemon pods as being underutilized and shut down its hosting machine.
2023-04-05 10:03:24 -04:00
ederst a0c8bb600a Run make apimachinery and crds 2023-03-24 11:34:34 +01:00
Kubernetes Prow Robot 4b61ae77c1
Merge pull request #15183 from anthonyhaussman/feat/kops/nodeLocalDNS_ExternalCoreFile
feat(NodeLocalDNS): Add possibility to set an ExternalCoreFile
2023-02-28 23:17:17 -08:00
Anthony Hausman cc47bd278c
feat(nodelocaldns): Add possibility to set an ExternalCoreFile
Allow users to provide entirely custom CoreFile for NodeLocalDNS to provide improved flexibility.
2023-02-28 08:19:20 +01:00
Jesse Haka 3f9a1b6462 set node status update freq to 60min in OpenStack 2023-02-27 20:38:30 +02:00
ederst b4557d4729 Run make apimachinery and crds 2023-02-13 17:34:31 +01:00
ederst f4fdf7df79 Allow setting 'ignore-volume-microversion' for OCCP
This will allow setting the option `ignore-volume-microversion` for the
cinder-csi-plugin.

Setting this is necessary for older OpenStack APIs so that OCCP can
create PVs.

Note: This will work with cinder-csi-plugin >= 1.25.

For reference:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1986/
2023-01-31 11:48:25 +01:00
Anthony Hausman 484bde5b9b
cilium: Add unreachable route for pod IP on deletion option
When a pod is deleted, the route to its IP is replaced with an unreachable route.
When a pod is created, the route is replaced with a route to the pod veth (so if an unreachable existed, it's replaced).

Ref:
 - https://github.com/cilium/cilium/pull/18505
2023-01-24 14:08:24 +01:00
Ciprian Hacman b1ef66f136 etcd-manager: Add option to set backup retention 2023-01-23 09:43:09 +02:00
Grégory SANCHEZ 6fdf54ff34 feat(cluster-autoscaler): autogenerate priority-expander configMap 2023-01-11 08:26:33 +01:00
John Gardiner Myers b3dfcea95f v1alpha3: Move AWS-specific CloudConfig settings to AWSSpec 2022-12-25 16:12:02 -08:00
John Gardiner Myers 1834fded6a NTH: add API validation against unsupported option configurations 2022-12-16 17:12:54 -08:00
John Gardiner Myers 7c5b983490 Enable NTH Scheduled Event Draining by default 2022-12-08 19:02:44 -08:00
John Gardiner Myers 345aa61422 make crds 2022-12-04 15:56:20 -08:00
John Gardiner Myers 0424c474a3 Don't disable AWS src/dst checks in Calico IPv6 2022-11-25 20:57:48 -08:00
Bronson Mirafuentes 4929ef3e65 update CapacityRebalance comments 2022-11-21 08:47:42 -08:00
Bronson Mirafuentes 85898cba0b add capacityRebalance flag for ASGs 2022-11-21 08:47:40 -08:00
John Gardiner Myers f428f06165 make crds 2022-11-20 15:36:54 -08:00
John Gardiner Myers 8473e8b2e7 Stop making MasterInternalName configurable 2022-11-16 22:06:02 -08:00
John Gardiner Myers 25b7dc21fa Create NLB instead of CLB for bastion 2022-10-29 17:00:00 -07:00
Thomas Colomb e5ddd5b0c3 cluster-autoscaler : Add scaleDownUnneededTime and scaleDownUnreadyTime 2022-10-04 18:57:21 +02:00
Ole Markus With 8ff240fb09 Add docs to kubelet and masterkubelet making it explicit control plane does not use spec.kubelet 2022-09-29 10:49:24 +02:00
Eric Bailey 44d610e38d Add more details to the NTH documentation
When trying to enable Prometheus metrics for NTH, I naively set
nodeTerminationHandler.enablePrometheusMetrics=true.

Add prometheusEnable to the docs to try to prevent such mistakes in the
future. Also add enableRebalanceMonitoring for good measure, and a couple
missing defaults to the struct field docstrings.
2022-09-23 12:16:17 -05:00
Ciprian Hacman 01522dc8a9 Run `make crds` 2022-09-21 08:36:07 +03:00
Daniel Franca cdd0013b1f
Add support to --cordon-node-before-terminating on the cluster autoscaler addon (CordonNodeBeforeTerminating) 2022-09-06 17:03:24 +02:00
Ole Markus With 3518182e44 Add support for cert-manager dns-01 challenges 2022-09-04 08:19:22 +02:00
Ole Markus With 98cd242673 Add support for installing dcgm exporter 2022-08-30 14:54:13 +02:00
Kubernetes Prow Robot fa377131b2
Merge pull request #14177 from olemarkus/bump-nth-125
Bump node termination handler to 1.17.0
2022-08-24 19:12:05 -07:00
Ole Markus With 0cd110d723 Bump node termination handler to 1.17.1 2022-08-24 21:52:52 +02:00
torredil 230ff7eb57 Allow self-managed aws-ebs-csi-driver
Signed-off-by: torredil <torredil@amazon.com>
2022-08-24 18:40:27 +00:00
Ciprian Hacman 11a0f64cd8 Add option to configure runc version for containerd 2022-08-04 09:48:46 +03:00
ederst 8b9521b225 Allow configuring OpenStack CCM networking options 2022-07-21 22:44:37 +02:00
Kubernetes Prow Robot 02433a6785
Merge pull request #13946 from jonasasx/feature/gce_spot
Adding GCE SPOT support
2022-07-16 14:06:53 -07:00
Ciprian Hacman a76fef1b2d Add option to set number of replicas for pod-identity-webhook 2022-07-16 07:23:54 +03:00
Ivan Volynkin 329c60cc62 Adding GCE SPOT support 2022-07-14 20:19:50 +03:00
Ciprian Hacman 19ca0861a1 Add option to set etcd-manager backup interval 2022-07-14 09:58:19 +03:00
Nicolas Sterchele 73b6ed4150
aws: introduce maximum instance lifetime in cluster
The maximum instance lifetime is an AWS only feature and specifies the
maximum amount of time (in seconds) that an instance can be in service
before it is terminated and replaced.
A common use case might be a requirement to replace your instances on a
schedule because of internal security policies or external compliance
controls.
2022-07-04 20:38:33 +02:00
Ole Markus With afd7c60d77 Make it possible to enable the shield addon for LBC 2022-06-30 16:23:08 +02:00
Ivan Volynkin 4264d78839 Adding GuestAccelerators to InstanceTemplate 2022-06-23 10:00:02 +03:00
Eric Bailey 34caed893b Add support for setting mode field on file assets 2022-06-09 10:37:29 -05:00
Ole Markus With 77ebba84b8 Add support for configuring which metrics cilium will export 2022-05-26 09:33:19 +02:00
Kubernetes Prow Robot 7a90131d54
Merge pull request #13567 from HealthEngineAU/cert-manager-nameservers
Add a nameservers parameter for cert-manager.
2022-05-18 00:28:53 -07:00
Jim Barber 0fa178106a Add a nameservers parameter for cert-manager
Provide a way to override the pod's list of DNS nameservers to use so
that split-view DNS zones still work for things like DNS01 challenges.
Without this the DNS TXT records are searched for in the private DNS
zone instead of the public one and the challenge will never succeed.
2022-05-18 13:23:26 +08:00
Steven E. Harris a1495ac4c8
Allow the AWS LB Controller to use WAFs
By introducing a few new fields within the Cluster spec's
"awsLoadBalancerController" field, allow users to enable the AWS Load
Balancer Controller to associate WAFs with EC2 Application Load
Balancers (ALBs). It's possible to enable separately use of two kinds
of WAF: WAF Classic and the never version 2-era WAF, the latter of
which bears no distinguishing name.

Retain our default configuration of the AWS Load Balancer Controller
in which this capability remains disabled via command-line flags,
overriding the controller program's enabling of this capability by
default.

Signed-off-by: Steven E. Harris <seh@panix.com>
2022-05-16 12:20:28 -04:00
avish42 638ab6c8c7 add annotation support to aws-ebs-csi pods 2022-05-12 22:23:55 +05:30
Ciprian Hacman 0b095068f3 Add support for installing additional packages 2022-05-03 06:47:44 +03:00
Guillaume Le Biller 467424d6a5
Add NodeTerminationHandler cpu resources settings 2022-04-29 10:50:16 +02:00
Ole Markus With c9d6186a67 Bump to golang1.18 and k8s deps to 1.24.0-rc.0 2022-04-22 14:11:47 +02:00
Bronson Mirafuentes 7c4f1646e3 add cluster autoscaler pod annotations 2022-04-18 10:32:52 -07:00
DingGGu 1b9cf91684
Bump NTH to 1.16.1, use WithDefaultBool in gotemplate, set ExcludeLoadBalancers default true 2022-04-09 17:04:23 +09:00
DingGGu c1042f4a3b
Bump NTH 1.16 and add excludeFromLoadBalancers option 2022-04-09 17:04:16 +09:00
Kubernetes Prow Robot feb66910b1
Merge pull request #13318 from guillomep/allow_to_add_additional_routes
Possibility to add additional routes in route tables of subnets
2022-04-03 13:46:09 -07:00
Kubernetes Prow Robot 7684da6eca
Merge pull request #13396 from anthonyhaussman/feat/tone/PodAnnotations_NodeLocalDNS
Add possibility to set PodAnnotations into NodeLocalDNS
2022-04-01 10:56:47 -07:00
Guillaume Perrin e501ac62a4 Possibility to add additional routes in route tables of subnets
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Anthony Hausman 308a886557
AWS-NODE-TERMINATION: Add possibility to set a tune image version
Add the possibility into the AWS `node-termination-handler` addon to set a different image tag version.
It can help to have last fixes if it's needed.
2022-03-23 10:59:51 +01:00
Anthony Hausman 7752cfc932
Add possibility to set PodAnnotations into NodeLocalDNS
Annotations is pretty useful when you need third-party tool to add additional behavior for a k8s resource.
Lots of auto-discovery tools are based on this annotations.

This PR add the possibility to set tune pod annotations in the node-local-dns daemonsets.app.
2022-03-21 16:15:10 +01:00
Jesse Haka 28caf02878 Support GPU in OpenStack 2022-03-11 09:19:09 +02:00
AkiraFukushima c8710203ba
Add support to install EKS Pod Identity Webhook 2022-02-20 18:33:50 +09:00
Jiahui Feng 84dc7ca908 generated: make apimachinery && make crds 2022-02-14 10:49:45 -08:00
Ole Markus With 2625264fe5 Add support for graceful node shutdown
Update docs/cluster_spec.md

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2022-02-11 20:51:02 +01:00
Dan Ports 7a52896fdc Warn that the price expander is only supported on GCE in the docs. 2022-01-05 22:47:34 -05:00
Dan Ports 8672d9b219 Fix CRDs, clarify docs, and add cloud provider check for price expander. 2022-01-05 22:39:21 -05:00
Dan Ports 1d9996b4ad Support price and priority cluster-autoscaler expanders. 2022-01-05 14:10:06 -05:00
Ole Markus With b09241122f Support specifying instance requirements per IG
Update docs/instance_groups.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-12-24 21:19:58 +01:00
justinsb 71e5a21786 componentconfig: expose advertise-address flag for kube-apiserver
This flag determines which IPs are advertised inside the cluster, in
the "kubernetes" service in the "default" namespace.
2021-12-18 21:30:58 -05:00
Ole Markus With b785965c50 Rename InstanceManager to Manager 2021-12-13 09:14:24 +01:00
Ole Markus With 794cb72112 Karpenter addon
Constrain the instance types to what is supported by the AMI

Add taints and label to karpenter provisioner

Add instance types to karpenter provisioner
2021-12-12 19:33:41 +01:00
Ole Markus With 57fd343e1d Make service topology for cilium configurable 2021-12-12 07:54:21 +01:00
Kubernetes Prow Robot e4aae9bca8
Merge pull request #12320 from ZipRecruiter/anthonyr.dockerd-concurrency
pkg/apis/kops: Allow configuring dockerd --max-* upload and download concurrency and retry options.
2021-12-06 07:08:33 -08:00
John Gardiner Myers 5ae9d24c22 Remove more unused fields from v1alpha3 2021-12-02 20:41:07 -08:00