Commit Graph

649 Commits

Author SHA1 Message Date
John Gardiner Myers 91e1f4c79d Remove code for unsupported Kubernetes version 2020-05-16 22:04:12 -07:00
John Gardiner Myers 649062a4c1 Remove deprecated CertificatePool method 2020-05-09 22:47:45 -07:00
Ciprian Hacman 7114c475ff Fix containerd image side-loading 2020-05-08 23:47:09 +03:00
Kubernetes Prow Robot de7cc70c3d
Merge pull request #9008 from jacksontj/issue_9006
Include secondary protocol flag always
2020-05-07 18:33:43 -07:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Kubernetes Prow Robot dc91edafce
Merge pull request #9074 from hakman/flannel-vxlan-disable-checksum-offload
Disable TX checksum offload for Flannel VXLAN
2020-05-06 09:43:08 -07:00
Ciprian Hacman 3f8632322f Disable TX checksum offload for Flannel VXLAN 2020-05-06 15:48:38 +03:00
Kubernetes Prow Robot e54559b39c
Merge pull request #8978 from hakman/flatcar-remove-static-utils
Don't install static utils for Flatcar
2020-05-04 10:10:26 -07:00
Justin SB 06c20ea223 Ubuntu focal: Use generic docker & container packages
download.docker.com doesn't have packages for ubuntu 20.04 (focal),
use the generic tar.gz versions instead.
2020-05-02 11:23:38 -04:00
Justin SB 2e11828cd3 Use raw tarfile for AmazonLinux2 + Containerd 1.2.10
The rpm containerd 1.2.10 package depends on container-selinux, which
isn't available on amazonlinux2.  We can't just skip it, because we
can't install the package without its dependencies.

Instead, install from a binary package (tar.gz).

We do the same for dockker 18.09.9 and 19.03.4, as these would
otherwise depend on containerd 1.2.10.

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-04-30 22:59:57 -04:00
Kubernetes Prow Robot 936d656b4c
Merge pull request #8988 from johngmyers/private-key-size
Use KOPS_RSA_PRIVATE_KEY_SIZE for more keys
2020-04-29 20:00:18 -07:00
Thomas Jackson 328f261f34 Include secondary protocol flag always
This way if you have the value set in config (even as "") it'll get
passed down to allow you to override the default config

Related to #9006
2020-04-27 17:03:54 -07:00
John Gardiner Myers 935d757a7c Use KOPS_RSA_PRIVATE_KEY_SIZE for more keys 2020-04-26 20:17:02 -07:00
Ciprian Hacman 95ab317c8a Don't install static utils for Flatcar 2020-04-25 14:59:55 +03:00
Michal Schott 8a17c722c5
Test update. 2020-04-24 10:40:36 +02:00
Justin Santa Barbara bb071bfb3a Turn on flannel sysctl fixes on rhel7 as well
It looks like the same problems are occuring on rhel7, so turn on the
fixes there also.
2020-04-22 20:20:50 -04:00
Kubernetes Prow Robot 9621254b5d
Merge pull request #8381 from bittopaz/fix-flannel-centos
Fix net.bridge setting for Flannel on CentOS 7
2020-04-22 10:07:53 -07:00
Ciprian Hacman 3de48dad8b Add support for containerd v1.3.4 2020-04-20 06:11:37 +03:00
Ole Markus With a7f631e7c9 Apply suggestions from code review
Co-Authored-By: Peter Rifel <rifelpet@users.noreply.github.com>
2020-04-16 08:42:59 +02:00
Ole Markus With 869ab75dea Use etcd-manager for the cilium etcd cluster 2020-04-16 08:42:59 +02:00
Ciprian Hacman 5cf71cc746 Use kubescheduler.config.k8s.io/v1alpha2 for Kubernetes 1.18 2020-04-09 09:12:24 +03:00
Kubernetes Prow Robot 324a34cfa0
Merge pull request #8846 from hakman/remove-old-docker
Cleanup after #8855
2020-04-06 21:25:43 -07:00
Ciprian Hacman 3851a41123 Update tests for removed Docker versions 2020-04-06 18:40:36 +03:00
Ciprian Hacman cb2f667a13 Remove no longer available Docker versions 2020-04-06 17:53:58 +03:00
Ciprian Hacman 7e021c6f8f Remove the default Docker version 2020-04-06 17:52:12 +03:00
Ciprian Hacman 73903bcb3d Remove support for unreleased Docker 19.03.7 2020-04-06 17:34:59 +03:00
Ciprian Hacman fa516ed5f8
Simplify condition
Co-Authored-By: John Gardiner Myers <jgmyers@proofpoint.com>
2020-04-05 20:57:09 +03:00
Ciprian Hacman ad8e1ceff7 Remove basic authentication support for k8s 1.19+ 2020-04-05 17:47:26 +03:00
Kashif Saadat d09717dca8 Update default user for CoreOS, Flatcar for kubecfg 2020-03-26 10:04:46 +00:00
Ciprian Hacman 53c07fff3f Update default users for kubeconfig with supported distros 2020-03-25 19:04:17 +02:00
Ciprian Hacman 9ae94664bf Use systemd-timesyncd for Ubuntu 2020-03-18 07:32:39 +02:00
Ciprian Hacman 5003bd2f16 Fix NTP failures after #8312 2020-03-17 17:31:41 +02:00
Kubernetes Prow Robot dde4e267b5
Merge pull request #8748 from hakman/docker-19.03.8
Update Docker to 19.03.8 for 1.18
2020-03-15 07:06:35 -07:00
Ciprian Hacman 3310885064 Update Docker to 19.03.8 for 1.18 2020-03-15 12:31:26 +02:00
Ciprian Hacman 6a28d4f032 Update test results after rebase 2020-03-15 10:10:37 +02:00
Ciprian Hacman 4d7aa9b0f3 Always run Docker "health-check" for older versions of Kubernetes 2020-03-15 09:51:03 +02:00
Ciprian Hacman 2852c4c657 Update the Docker license 2020-03-15 09:51:03 +02:00
Ciprian Hacman 360a117e02 Add config option for Docker "health-check" 2020-03-15 09:51:03 +02:00
Ciprian Hacman 507230fe75 Move Docker "health-check" to DockerBuilder 2020-03-15 09:47:47 +02:00
Kubernetes Prow Robot 0a6dcce580
Merge pull request #8525 from hakman/docker-tgz
Update support for docker tgz package
2020-03-14 16:40:35 -07:00
Kubernetes Prow Robot e6803d078d
Merge pull request #8312 from simonmacklin/add_cloud_ntp_addresses
Add cloud ntp addresses
2020-03-14 14:12:34 -07:00
Kubernetes Prow Robot 1400528fed
Merge pull request #8727 from hakman/ubuntu-focal
Add support for Ubuntu 20.04 (Focal)
2020-03-11 09:29:37 -07:00
Ciprian Hacman 17bb98b7d7 Add support for Ubuntu 20.04 (Focal) 2020-03-11 06:49:02 +02:00
Peter Rifel a999b3ea61 fix OWNERS labels format
These need to be lists
2020-03-10 22:47:50 -05:00
Kubernetes Prow Robot db435ee7cd
Merge pull request #8717 from rifelpet/owners-labels
Add labels to OWNERS files
2020-03-10 08:23:51 -07:00
Peter Rifel 237a125f2c Add labels to OWNERS files
This will automatically label PRs that touch these directories.

This makes it easier to query GitHub for PRs that affect certain areas of the code.

I mostly used existing labels but created some new ones as well.
2020-03-10 08:35:58 -05:00
Odin Ugedal 56e5aa8416
Fix overflow error when comparing with BPF_FS_MAGIC
0xCAFE4A11 is bigger than the max of int32, so doing int32(uint32(0xCAFE4A11))
(will not compile directly unless done over two lines) will result in 0x-3501b5ef.

For linux/amd64 "fsdata.Type" is an int64, while on darwin/amd64 it is
an uint32. This code is however not supposed to be compiled for darwin,
since it is linux spesific.

Due to some strange errors[0] in the types in "unix.Statfs_t" for 32 bits
systems on linux, we have to explicitly convert to uint to support those (eg.
armv7). If we only need support for 64 bit systems, we can remove the
uint conversion.

[0]: For 32bits systems "fsdata.Type" should be uint32 instead of the
current int32, as it is in the linux kernel. This is due to the types in
glibc that the go types are generated from. For 64 bit systems the type
is correctly set to int64.
2020-03-07 10:28:04 +01:00
Ciprian Hacman a57aba01bf Update support for docker tgz package 2020-03-07 08:20:39 +02:00
Kubernetes Prow Robot 116ec23d47
Merge pull request #8599 from olemarkus/cilium-fix-bpffs-check
Cilium fix bpffs check
2020-02-22 11:14:47 -08:00
Ole Markus With bcafdca7da Various nits 2020-02-22 19:39:34 +01:00