Commit Graph

881 Commits

Author SHA1 Message Date
DingGGu c1042f4a3b
Bump NTH 1.16 and add excludeFromLoadBalancers option 2022-04-09 17:04:16 +09:00
Ole Markus With 1fadc39a59 Add PDB for cilium operator 2022-04-09 07:06:59 +02:00
Ole Markus With a5fc9cd6a5 Add PDB for AWS LBC 2022-04-09 07:05:13 +02:00
Ole Markus With 8c235f363d Add PDB and topology constraints for NTH 2022-04-09 07:01:25 +02:00
Kubernetes Prow Robot 107fa6dcfb
Merge pull request #13454 from olemarkus/enable-etcd-corruption-check
Enable etcd corruption check as mitigatio of 3.5 corruption issue
2022-04-07 08:50:08 -07:00
Kubernetes Prow Robot 44e7b24c89
Merge pull request #13464 from olemarkus/bump-cas-24
Bump Cert Manager to 1.8
2022-04-06 10:20:56 -07:00
Kubernetes Prow Robot f32503e413
Merge pull request #12919 from olemarkus/cilium-11-default
Use Cilium 1.11 as default
2022-04-06 04:18:56 -07:00
Ole Markus With 43bfb934e7 Bump Cert Manager to 1.8 2022-04-06 12:50:03 +02:00
Kubernetes Prow Robot 340ff24468
Merge pull request #13453 from olemarkus/no-csi-snapshotter-without-snapshot
Don't run the CSI snapshot plugin if snapshot controller is not installed
2022-04-04 05:16:13 -07:00
Ciprian Hacman 025046e481 Run hack/update-expected.sh 2022-04-04 09:02:52 +03:00
Ole Markus With 6d75f8f9f0 Enable etcd corruption check as mitigatio of 3.5 corruption issue 2022-04-03 14:11:15 +02:00
Ole Markus With 79d9fa6aa7 Don't run the CSI snapshot plugin if snapshot controller is not installed 2022-04-02 21:51:20 +02:00
Ole Markus With 3d77ab6139 Use Cilium 1.11 as default 2022-03-29 12:58:24 +02:00
Guillaume Perrin 1235b63a0d Only authorize additionalRoute for private subnets
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 15:49:03 +02:00
Guillaume Perrin 19330df09f Add integration tests
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Jesse Haka e75ccb2286 update expected 2022-03-28 09:25:35 +03:00
Anthony Hausman e8dcb67a1f
FIX: Pass update-expected for tests 2022-03-23 12:14:54 +01:00
Bronson Mirafuentes e112d81025
Release 1.24.0-alpha.3 (#13372)
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 21:09:12 -07:00
Ciprian Hacman 30404d64a2 Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-18 09:01:59 +02:00
Kubernetes Prow Robot d751d0f056
Merge pull request #13364 from olemarkus/fix-long-role-names
Fix long role names
2022-03-17 23:43:16 -07:00
Ole Markus With 9b11036bb9 Add protocol explicitly to services 2022-03-17 20:56:29 +01:00
Ole Markus With b080abcd88 Add missing permissions to aws lbc for IP targeting 2022-03-16 13:28:20 +01:00
Ole Markus With 3fcb84ed6b Truncate the standard role names 2022-03-15 21:31:04 +01:00
Ole Markus With f8525ce6f9 Add integration test for really long cluster names 2022-03-15 20:44:26 +01:00
Kubernetes Prow Robot aff109f9fc
Merge pull request #13343 from olemarkus/securitycontext
Add user to container securityContext and remove command
2022-03-14 02:48:21 -07:00
Ole Markus With 8524c3d320 Bump CCM 1.22 image. Use the 1.23 image for 1.24 due to latest being broken 2022-03-11 08:12:52 +01:00
Ole Markus With d7cb3bb1f7 Add user to container securityContext and remove command 2022-03-07 15:09:51 +01:00
Kubernetes Prow Robot 3547c18d8a
Merge pull request #13328 from olemarkus/bump-pod-identity-webhook
Use proper image and add health check
2022-03-04 13:00:52 -08:00
Kubernetes Prow Robot fabfb3f4ab
Merge pull request #13310 from zetaab/fixgce
Fix GCE service account creation
2022-03-04 11:02:52 -08:00
Ole Markus With 8aaa4187c2 Use proper image and add health check 2022-03-04 09:00:49 +01:00
Ciprian Hacman f73061b2aa Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-04 08:03:15 +02:00
Jesse Haka 2872029e12 terraform fix 2022-03-01 12:43:34 +02:00
Jesse Haka 1a6b768b15 fix terraform files 2022-03-01 12:23:30 +02:00
Ole Markus With 29376058a8 Minor cleanup of the Deployment
* Use a fixed tag instead of latest for the image
* Add system-cluster-critical priority class
* Remove ImagePullPolicy
2022-02-24 12:48:49 +01:00
AkiraFukushima c586f6c411
Add PodDisruptionBudget and topologySpreadConstraints for eks-pod-identity-webhook 2022-02-22 17:36:08 +09:00
AkiraFukushima d40caa758e
Use cert-manager and pod-identity-webhook in integration test of irsa 2022-02-20 19:02:54 +09:00
AkiraFukushima e5cf940d53
Add managed-by label to addon pods 2022-02-20 18:33:51 +09:00
Kubernetes Prow Robot a8ceb305de
Merge pull request #13280 from olemarkus/lbc-irsa
Add missing permissions to aws lbc for irsa
2022-02-18 09:18:23 -08:00
Ole Markus With cd247f0b3a Add missing permissions to aws lbc for irsa 2022-02-18 15:26:05 +01:00
Ole Markus With f1cc2de274 Do not create a cert-manager namespace 2022-02-18 15:18:42 +01:00
Kubernetes Prow Robot 156941d416
Merge pull request #13267 from olemarkus/lbc-124
Update LBC to 2.4.0
2022-02-16 22:07:36 -08:00
Ole Markus With 9431c0ab69 Update LBC to 2.4.0 2022-02-16 21:39:31 +01:00
Ciprian Hacman c4ea61b420 Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-16 08:25:49 +02:00
Kubernetes Prow Robot bffc60202c
Merge pull request #13113 from hierynomus/issue-12925
Allow PrefixList for sshAccess and kubernetesApiAccess
2022-02-15 07:20:03 -08:00
Jeroen van Erp 255a0322c9
Allow PrefixList for sshAccess and kubernetesApiAccess
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2022-02-15 14:37:28 +01:00
Kubernetes Prow Robot bf43ae5694
Merge pull request #13228 from MoShitrit/aws-cni-1.10.2
Bump AWS CNI to 1.10.2
2022-02-14 21:52:04 -08:00
Moshe Shitrit 1efe9ab5fb Update expected 2022-02-14 20:25:50 -08:00
Ciprian Hacman dbaf479ea6 Run hack/update-expected.sh
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-14 11:27:26 +02:00
Kubernetes Prow Robot 36de05d86f
Merge pull request #13240 from hakman/install_runc
Install runc from opencontainers/runc
2022-02-13 03:01:47 -08:00
Ole Markus With 8b71cedccc Do not enable graceful shutdown if k8s version < 1.21 2022-02-12 19:13:52 +01:00