Commit Graph

4078 Commits

Author SHA1 Message Date
Kubernetes Prow Robot f8f34f4499
Merge pull request #11156 from olemarkus/apiserver-sideload-api-healthcheck
Side load images also on apiserver
2021-03-30 21:58:58 -07:00
Ole Markus With 06cf3512bc Only update kops-controller pods on deletion
This will in most cases mean kops-controller is only updated when the CP node is rolled and should increase the chances of compatible controller<->CP updates
2021-03-29 09:06:39 +02:00
Ole Markus With ff10bc3fc5 Side load images also on apiserver 2021-03-27 12:35:17 +01:00
Peter Rifel 80ceb4200d
Update test outputs 2021-03-26 11:24:11 -07:00
Peter Rifel 093536c425
Add tags to instance profile and OIDC provider terraform resources
This requires bumping the provider version to the most recent, which added this support
2021-03-26 11:23:19 -07:00
Kubernetes Prow Robot a01ee1d0fe
Merge pull request #11140 from jurriaanpro/cluster-autoscaler-add-scale-down-delay-after-add
Add scaleDownDelayAfterAdd to clusterAutoscaler spec
2021-03-25 05:57:29 -07:00
jurriaanpro 25955ceb6b Add scaleDownDelayAfterAdd to clusterAutoscaler spec 2021-03-25 11:23:48 +01:00
Barry Melbourne 05123faf5a Update containerd to v1.3.10/v1.4.4 2021-03-23 17:02:01 +00:00
Peter Rifel 51cec7e556
Use "tag on create" for EIPs, NLBs, and TargetGroups
These are the remaining resources that support "tag on create" of which we werent taking advantage.

This allows more fine-grained IAM permissions for the kops cli.
2021-03-22 07:21:51 -05:00
Kubernetes Prow Robot d523ba2ab4
Merge pull request #11109 from hakman/release-1.21.0-alpha.2
Release 1.21.0 alpha.2
2021-03-22 01:21:43 -07:00
Kubernetes Prow Robot 46b6abf47f
Merge pull request #11091 from olemarkus/lbc-cp
Put awslbcontroller on the control-plane
2021-03-22 00:37:50 -07:00
Ciprian Hacman fa72535f95 Release 1.21.0-alpha.2 2021-03-22 08:38:47 +02:00
Peter Rifel 763d1e2bd0
Have nodeup retry kops-controller bootstrapping sooner if DNS isn't setup 2021-03-21 19:49:56 -05:00
Ole Markus With fa62d29128 Put awslbcontroller on the control-plane 2021-03-21 09:29:51 +01:00
Kubernetes Prow Robot 86492a81a5
Merge pull request #11089 from rifelpet/goembed
Replace go-bindata with go:embed
2021-03-21 01:15:42 -07:00
Justin SB c75e084158 Re-add integration tests for jwks
We removed them from #10756, but they can be re-added.
2021-03-20 22:55:11 -04:00
Peter Rifel e108cd732e
Update rules_go and gazelle 2021-03-20 16:02:51 -05:00
Peter Rifel f36e9a449a
Remove go-bindata 2021-03-20 16:02:09 -05:00
Peter Rifel ff2c520d22
Replace go-bindata with go:embed 2021-03-20 16:02:08 -05:00
Ole Markus With 20bd724f5e Add support for scaling out the control plane with dedicated apiserver nodes
Ensure apiserver role can only be used on AWS (because of firewalling)

Apply api-server label to CP as well

Consolidate node not ready validation message

Guard apiserver nodes with a feature flag

Rename Apiserver role to APIServer

Add an integration test for apiserver nodes

Rename Apiserver role to APIServer

Enumerate all roles in rolling update docs

Apply suggestions from code review

Co-authored-by: Steven E. Harris <seh@panix.com>
2021-03-20 20:57:00 +01:00
MoShitrit d72006aaf0 Update expected 2021-03-19 23:12:08 -04:00
MoShitrit ec278e162e Update aws-cni image to 1.7.10 2021-03-19 22:56:59 -04:00
Ole Markus With 1900548213 Upload JWKS files as world readable 2021-03-19 20:07:38 +01:00
Ole Markus With 2c1f88f40e Do not need thumbprints to be resources 2021-03-19 20:05:37 +01:00
Peter Rifel 7c900b7fae Generate and upload keys.json + discovery.json to public store
Generate and upload keys.json + discovery.json to public store

Don't enable anonymous auth on publicjwks

Remove tests that won't work using FS VFS anymore
2021-03-19 20:03:26 +01:00
Ciprian Hacman 55f8c70779 Add channels entries for image architecture 2021-03-15 20:36:37 +02:00
Bharath Vedartham 059c7ef33a Create an environment file for kops-configuration systemd process 2021-03-13 22:20:49 +05:30
Kubernetes Prow Robot ad7c793050
Merge pull request #10913 from seh/scope-os-update-policy-to-instance-group-too
Honor OS update policy at InstanceGroup level too
2021-03-12 22:03:03 -08:00
Kubernetes Prow Robot 6d3c7d4117
Merge pull request #11015 from t1cg/caw/fixNullPointerOnUpdate
azure: fix null pointer when updating in place cluster
2021-03-12 10:08:18 -08:00
Collin Woodruff 46700685e5 azure: fix null pointer when updating in place cluster 2021-03-12 12:10:17 -05:00
Kubernetes Prow Robot bafbdaef6d
Merge pull request #11026 from olemarkus/cilium-1.10
Allow cilium 1.10
2021-03-12 07:06:18 -08:00
Kubernetes Prow Robot 928b8cc442
Merge pull request #11009 from spotinst/feat-launchspec-bdm
Spotinst: Add support for block device mappings in Ocean Launch Spec
2021-03-12 06:16:18 -08:00
Ole Markus With 8e2e60ae44 Allow cilium 1.10 2021-03-12 14:17:28 +01:00
Ciprian Hacman 909f206484 Update Calico to v3.18.1 2021-03-12 05:47:55 +02:00
liranp dc1ee9402a
feat(spot/ocean): support for block device mappings in launchspec 2021-03-10 15:30:39 +02:00
Bharath Vedartham 0c0767c0c9 Remove support for launch configurations 2021-03-09 09:04:15 +02:00
Kubernetes Prow Robot fea7589d97
Merge pull request #10574 from bharath-123/feat/protokube-systemd
Run protokube as a systemd service
2021-03-07 22:03:44 -08:00
Ciprian Hacman 77b72efe1d Fix various nits when changing Protokube to run as service 2021-03-08 07:19:48 +02:00
Ole Markus With 8a205724f2 Deduplicate adding mastervolumebuilder 2021-03-07 22:09:02 +01:00
Ole Markus With c817ae662c Merge the two apply_cluster switches 2021-03-07 22:08:15 +01:00
Ole Markus With c6a741a148 Move dns and external_access to awsmodel 2021-03-07 22:07:17 +01:00
Ole Markus With d415fdf1a1 Move bastion model to awsmodel 2021-03-07 22:06:20 +01:00
Ole Markus With 896f1740c6 Rename spotinst symbols and merge spotinstmodel with awsmodel 2021-03-07 22:06:12 +01:00
Ole Markus With 782052f472 Set ssh key on the model context in one location 2021-03-07 21:44:12 +01:00
Ole Markus With 27fd76bf9a Fix kops-controller rbac due to leader election change 2021-03-06 11:42:21 +01:00
Ciprian Hacman b44065c692 Remove manually added labels from addons 2021-03-06 09:31:22 +02:00
Bharath Vedartham 1d4c8e4afa Add protokube and channels to assets 2021-03-06 00:32:05 +05:30
Bharath Vedartham e5aa8177b6 Add protokube and channels urls 2021-03-06 00:31:18 +05:30
Steven E. Harris 2fc68564be Note new field's impact on OS package installation 2021-03-05 09:41:09 -05:00
Steven E. Harris e39c985ee7 Honor OS update policy at InstanceGroup level too
As with the Cluster-level "spec.updatePolicy" field, add a similar
field at the InstanceGroup level, allowing overriding of the
cluster-level choice in each InstanceGroup.

Introduce a new value for the field ("automatic") as equivalent to the
default value applied when the field is absent. Honoring this new
value allows disabling automatic updates at the cluster level, but
then enabling them again for particular InstanceGroups. Without such a
positive affirmation, it's not possible to override a cluster-level
"external" policy at the InstanceGroup level, as there's no way to
specify positively that you want to recover the default
value. Instead, expressing the explicit "automatic" value is clear and
unambiguous.
2021-03-05 08:53:07 -05:00