Commit Graph

925 Commits

Author SHA1 Message Date
Ole Markus With c162013a3c Use quay images for cilium 2021-06-08 23:01:08 +02:00
Dmytro Oboznyi feed3b26ae
Add proxy envs to calico to make possible usage of AWS source destination check
Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
2021-06-07 16:56:35 +03:00
Kubernetes Prow Robot 16dca9e844
Merge pull request #11124 from hakman/kube-router-1.2.0
Update kube-router to v1.2.3
2021-06-06 21:52:39 -07:00
Ciprian Hacman 91d681622c Update kube-router to v1.2.3 2021-06-07 05:25:00 +03:00
Kubernetes Prow Robot 673961cb0f
Merge pull request #11703 from olemarkus/lbc-use-v1-cert
Use v1 certificate for LB controller
2021-06-06 12:06:39 -07:00
Kubernetes Prow Robot 9984ba079c
Merge pull request #11701 from olemarkus/fix-ebs-csi-role-crb
Fix the CSI EBS DS CRB.
2021-06-06 11:08:38 -07:00
Ole Markus With 0e1a0538b3 Use v1 certificate 2021-06-06 19:28:19 +02:00
Ole Markus With 8f8d6deb17 Fix the CSI EBS DS CRB. 2021-06-06 19:23:22 +02:00
Kubernetes Prow Robot 7001de3486
Merge pull request #11688 from hakman/ipv6-calico
Add options for configuring IPv4 and IPv6 support with Calico
2021-06-05 16:06:38 -07:00
Ciprian Hacman 70f77a34d1 Add options for configuring IPv4 and IPv6 support with Calico 2021-06-04 17:05:40 +03:00
Peter Rifel 708a5db365
Consolidate CSI livenessprobe images for multi-arch support
This manifest includes two liveness-probe containers but they use different images.
The k8s.gcr.io image is multi-arch but the quay.io image is not.
By only using the k8s.gcr.io one we should fix arm64 clusters now that EBS CSI is enabled by default.
2021-05-31 14:19:00 -05:00
Ryan Dyer 65b750e732 add init image field 2021-05-25 17:57:49 +00:00
Kubernetes Prow Robot fcef4fc1bf
Merge pull request #11594 from hakman/calico-3.19.1
Update Calico to v3.19.1
2021-05-24 23:32:22 -07:00
Ciprian Hacman ca39686c29 Update Calico to v3.19.1 2021-05-25 07:34:50 +03:00
John Gardiner Myers 6ac345e23d Use the OnDelete updateStrategy for AWS VPC CNI DaemonSet 2021-05-24 19:55:19 -07:00
Kubernetes Prow Robot d906f83121
Merge pull request #11561 from olemarkus/actually-add-snapshot-controller
Add snapshot-controller
2021-05-22 02:03:37 -07:00
Ole Markus With 1868313497 Add snapshot-controller 2021-05-22 09:19:35 +02:00
Ciprian Hacman 93a09e5419 Update metrics-server to v0.4.4 2021-05-22 09:39:14 +03:00
Ciprian Hacman 2df8e56fc9 Allow using insecure TLS for metrics-server with Kubernetes 1.19+ 2021-05-22 09:38:31 +03:00
Ole Markus With 46e13c0009 Bump snapshot-controller version
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>

Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-21 15:40:40 +02:00
Kubernetes Prow Robot 8a6ec1416c
Merge pull request #11491 from olemarkus/cas-update-manifest
Update CAS manifest
2021-05-21 04:52:46 -07:00
Kubernetes Prow Robot 8e938ba5ee
Merge pull request #11500 from dntosas/coredns-bump-manifest
Bump CoreDNS manifests to latest stable version 1.8.3
2021-05-21 00:28:57 -07:00
Kubernetes Prow Robot c28783c581
Merge pull request #11514 from ulfox/cilium/prometheus-scrape-annotations
[addons/networking.cilium.io] enable prometheus scraping
2021-05-19 10:12:51 -07:00
Ole Markus With 2fb1861528 Update CAS manifest
Upstream examples were missing a number of improvements.
This commit also adds template functions for making controllers such as CAS more HA on HA clusters
2021-05-19 16:12:51 +02:00
Kubernetes Prow Robot 16f7208c8c
Merge pull request #11525 from olemarkus/ebs-csi-default-fs
Set default fstype for ebs volumes to ext4
2021-05-19 02:38:51 -07:00
Ole Markus With 05cac12c19 Set default fstype for ebs volumes to ext4 2021-05-19 09:54:31 +02:00
Christos Kotsis 34ac1ad8d4
[feedback/tests] 2021-05-19 09:59:16 +03:00
Kubernetes Prow Robot e8e5bf2ed3
Merge pull request #11517 from olemarkus/aws-lb-default-tags
Add default tags to LB controller and cilium eni resources
2021-05-18 21:50:50 -07:00
Ole Markus With 22f3a4aff8 Add default tags to LB controller and cilium eni resources 2021-05-18 19:02:40 +02:00
Christos Kotsis bb98caeed3
[tests/feedback] fix missing quote function with printf 2021-05-18 19:42:50 +03:00
Christos Kotsis 2ba0843c91
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.16-v1.10.yaml.template
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-18 19:14:15 +03:00
Christos Kotsis 793115242a
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.12-v1.9.yaml.template
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-18 19:14:09 +03:00
Christos Kotsis 08162bcc2e
Update upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.12-v1.8.yaml.template
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-05-18 19:13:59 +03:00
Christos Kotsis 5ac4569998
[addons/networking.cilium.io] enable prometheus scraping
When EnablePromethesMetrics is enabled the
required metrics endpoints are exposed but
no annotations is included in the agents.

This commit includes the prometheus.io/scrape
and prometheus.io/port annotations that
prometheus scrappers can use for auto-discovery

Co-authored-by: tchatzig <t.chatzigeorgiou@thebeat.co>
2021-05-18 16:59:56 +03:00
liranp 6b61445414
feat(spot/addon): bump ocean-controller to 1.0.75 2021-05-18 13:55:58 +03:00
Kubernetes Prow Robot 07f3bc0e96
Merge pull request #11502 from olemarkus/aws-lb-controller-bump
bump aws lb controller to 2.2.0
2021-05-16 16:43:59 -07:00
Ole Markus With d3581ebb84 bump aws lb controller to 2.2.0 2021-05-16 18:26:23 +02:00
dntosas da42becf08
[addons/coredns] Bump manifests to latest stable version 1.8.3
In this commit, we update manifest files of CoreDNS. We also do a small
refactoring on yaml blocks to match the upstream source and to make
updating and reviewing procedures easier on the future.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-16 11:37:12 +03:00
dntosas ceba48855b
[addons/nodeLocaCache] Bump patch version
Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-16 11:25:40 +03:00
Kubernetes Prow Robot 07a9ed9c27
Merge pull request #11459 from nettoclaudio/fix/add-rbac-endpointslices
fix(coredns/rbac): add permission to list and watch endpointslices
2021-05-16 01:07:59 -07:00
Ole Markus With fe2cbbf369 Set priorityClassName on critical addons 2021-05-15 09:12:14 +02:00
Ole Markus With d27ca73272 Update cert-manager 2021-05-14 20:32:18 +02:00
Nick Turner 0239dc1f63 Permission to create servcice account tokens
* We need the ability to create service account token
  because this is required by clientbuilder/controller-manager
  framework which we will be using in 1.21.
* This is required for the CCM to use 1 SA per controller, which
  follows principle of least privilege and makes audit logs easier
  to understand
* Restricts token creation to resource names "node-controller",
  "service-controller", and "route-controller".
2021-05-13 14:16:59 -07:00
Claudio Netto 1b7179513f
fix(coredns/rbac): add permission to list and watch endpointslices 2021-05-11 17:16:12 -03:00
Kubernetes Prow Robot 7db45cb5fa
Merge pull request #11418 from dntosas/aws-csi-ga-release
[addons/awscsidriver] Bump to GA release
2021-05-08 02:46:47 -07:00
dntosas f8ece50a96
[addons/awscsidriver] Bump to GA release
Bump version and manifests of AWS EBS CSI Driver to the first GA
release.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-08 11:47:43 +03:00
John Gardiner Myers d3469d6ec2 Remove code for no-longer-supported k8s versions 2021-05-07 23:40:03 -07:00
John Gardiner Myers 3aa8d40052 Release 1.22.0-alpha.1 2021-05-07 13:45:35 -07:00
John Gardiner Myers a159b69cec Remove the PublicJWKS feature flag 2021-05-06 11:05:24 -07:00
Kubernetes Prow Robot e3fbc2ad04
Merge pull request #11378 from olemarkus/cilium-no-hubble-no-secret
Don't try to mount hubble TLS on the agent if we don't use hubble
2021-05-04 04:05:11 -07:00