Commit Graph

2302 Commits

Author SHA1 Message Date
Ciprian Hacman 20805fe110 Run hack/update-expected.sh 2022-12-06 19:00:23 +02:00
Kubernetes Prow Robot 7ce93c03ae
Merge pull request #14593 from johngmyers/cas-allow-spot
Allow cluster-autoscaler to run on spot if nothing else is available
2022-12-06 04:24:37 -08:00
Kubernetes Prow Robot f827ec7f54
Merge pull request #14721 from johngmyers/nth-default-queue
Change default for NTH Queue Processor mode to enabled
2022-12-06 03:18:36 -08:00
John Gardiner Myers ebaa9d46c4 hack/update-expected.sh 2022-12-05 21:57:08 -08:00
Kubernetes Prow Robot e5a835d287
Merge pull request #14706 from johngmyers/v1alpha3-networking
v1alpha3: move networking fields under networking
2022-12-05 21:34:38 -08:00
John Gardiner Myers 093ff4654c Update addon-resource-tracking test for new default 2022-12-05 19:48:38 -08:00
Kubernetes Prow Robot 66921ca27f
Merge pull request #14700 from hakman/gcp_cluster_autoscaler
gce: Update cluster-autoscaler config
2022-12-05 07:45:03 -08:00
John Gardiner Myers 665b3616cf hack/update-expected.sh 2022-12-04 15:56:20 -08:00
John Gardiner Myers 04d00927da Adjust integration tests for NTH default change 2022-12-04 15:56:20 -08:00
Ciprian Hacman eded9c1c4b Run hack/update-expected.sh 2022-12-05 00:20:17 +02:00
Kubernetes Prow Robot 28147edf47
Merge pull request #14701 from hakman/gce_default_instance_types
gce: Update default instance types
2022-12-04 14:05:07 -08:00
Kubernetes Prow Robot 2fc25219be
Merge pull request #14715 from johngmyers/upgrade-nth
Upgrade Node Termination Handler to 1.18.1 and fix some issues
2022-12-04 13:13:54 -08:00
Min Ni 8f5892fcb6 upgrade authentication.aws to v0.5.12 2022-12-04 11:34:03 -08:00
Ciprian Hacman 01124c30db Run hack/update-expected.sh 2022-12-04 21:17:43 +02:00
John Gardiner Myers dfd71c0c41 Address review comments 2022-12-04 11:11:05 -08:00
Ciprian Hacman ba769d6037 Run hack/update-expected.sh 2022-12-04 18:27:47 +02:00
Ole Markus With d41ae73318 Use AWS CCM 1.26.0-alpha.1 for k8s 1.26 clusters 2022-12-04 12:15:41 +01:00
John Gardiner Myers 91e636aff2 hack/update-expected.sh 2022-12-03 21:42:56 -08:00
Ciprian Hacman f36b979140 Run hack/update-expected.sh 2022-12-03 22:43:17 +02:00
Ciprian Hacman 2b176aee01 Run hack/update-expected.sh 2022-12-03 22:38:10 +02:00
Ciprian Hacman bbf638334a Add metrics-server addon to integration tests with many addons 2022-12-03 09:51:39 +02:00
Ciprian Hacman 170df2fa5b gce: Add integration test for updating a cluster with many addons 2022-12-03 09:00:49 +02:00
Ciprian Hacman cad72f9c38 gce: Add integration test for creating a minimal cluster 2022-12-03 08:46:50 +02:00
John Gardiner Myers f4260f3087 Fix missed field rename 2022-12-02 19:19:59 -08:00
John Gardiner Myers 235aa61594 v1alpha3: move networking fields under networking 2022-12-02 19:19:59 -08:00
github-actions 346ba0cf25 Update dependencies 2022-12-02 06:08:36 +00:00
Kubernetes Prow Robot 670de031ee
Merge pull request #14694 from olemarkus/cilium-eni-fix
Fix Cilium ENI ipam
2022-12-01 17:49:54 -08:00
Ciprian Hacman dbef6209c2 Remove support for using Vault as state store
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2022-11-30 18:38:21 +02:00
Ole Markus With f0b0c76821 Fix Cilium ENI IPAM
The simplest working configuratin right now seems to be to enable BPF
masquerade and masquerade ipv4 traffic. The old setup with disabling
masquerade entirely no longer works.
2022-11-30 14:31:05 +01:00
Ole Markus With ea1d919d0c Fix disabling masquerade for cilium 1.11+ 2022-11-30 14:27:04 +01:00
John Gardiner Myers 76f71512cc v1alpha3: fix miscellaneous capitalization 2022-11-28 21:37:21 -08:00
Kubernetes Prow Robot 0b24fc108a
Merge pull request #14669 from johngmyers/cp-kubelet
v1alpha3: use new terminology for kubelet config
2022-11-28 21:35:22 -08:00
John Gardiner Myers 61e52d1a1d Refactor LiteralFunctionExpression to take Literal args 2022-11-27 18:39:49 -08:00
John Gardiner Myers 7ad81f9965 Refactor Literal sorting 2022-11-26 19:23:37 -08:00
John Gardiner Myers 0424c474a3 Don't disable AWS src/dst checks in Calico IPv6 2022-11-25 20:57:48 -08:00
John Gardiner Myers 6536c0b301 v1alpha3: use new terminology for kubelet config 2022-11-25 16:53:23 -08:00
John Gardiner Myers c6349285d4
Release 1.26.0-alpha.2 (#14665) 2022-11-25 09:06:04 -08:00
Denis Moiseev e7c3dee038 Add `ec2:DescribeAvailabilityZones` to the AWS CCM permissions list
To workaround the issue with subnets auto-discovery [1]
AWS ccm needs to have permission to retrieve information about
availability zones (specifically to detect outpost, wavelength, and local zones [2]).

[1] https://github.com/kubernetes/cloud-provider-aws/issues/442
[2] https://github.com/kubernetes/cloud-provider-aws/pull/499
2022-11-25 11:04:27 +01:00
github-actions 2cb0b82847 Update dependencies 2022-11-25 06:08:50 +00:00
Kubernetes Prow Robot ae37c4596c
Merge pull request #14640 from justinsb/e2e_upload_versioned
e2e: always upload to a versioned directory
2022-11-24 14:12:04 -08:00
Kubernetes Prow Robot 03c3c4131f
Merge pull request #14621 from johngmyers/terraform-subnet
Implement subnet "/64#N" notation in Terraform
2022-11-24 09:02:04 -08:00
Ciprian Hacman a4ea992bbf hetzner: Set default image to `ubuntu-20.04` 2022-11-24 10:29:52 +02:00
John Gardiner Myers f862447560 Fix dumping of control-plane nodes 2022-11-23 21:32:10 -08:00
John Gardiner Myers 55b5e99855 hack/update-expected.sh 2022-11-23 15:55:01 -08:00
John Gardiner Myers 0358d4fdbd Add shared_vpc_ipv6 integration test 2022-11-23 15:55:01 -08:00
John Gardiner Myers 6dd63c8e1f hack/update-expected.sh 2022-11-23 15:55:01 -08:00
John Gardiner Myers 14e2864f4a Implement subnet "/64#N" notation in Terraform 2022-11-23 15:55:01 -08:00
Kubernetes Prow Robot b6a2a352f1
Merge pull request #14631 from johngmyers/tf-shared
Write Terraform vpc_cidr_block output for shared VPCs
2022-11-23 15:50:04 -08:00
justinsb b631e91645 e2e: always upload to a versioned directory
Otherwise on our first upload we were truncating one level of the
upload path.

Issue #14639
2022-11-23 17:17:32 -05:00
Kubernetes Prow Robot 0acd57eb01
Merge pull request #14635 from johngmyers/ipv6-subnet-assign
Set AssignIPv6AddressOnCreation on subnets
2022-11-23 08:46:19 -08:00
Ole Markus With 35b3d066e0 Make the OS test flavours different to avoid flapping tests due to unstable sorting 2022-11-23 10:42:40 +01:00
Ole Markus With 01590c03b0 Add a create cluster integration test for openstack
Fix various openstack nprs. Also add create cluster integration test
2022-11-23 10:25:29 +01:00
Ole Markus With f75bc66732 Make --networking=cilium-eni configure cilium to use eni ipam 2022-11-23 09:10:20 +01:00
Ole Markus With 7a1f0f4bda Add bare networking flag option for cilium in eni mode 2022-11-23 09:10:16 +01:00
Kubernetes Prow Robot ee0ae0c337
Merge pull request #14633 from johngmyers/new-cp-ig
Create new clusters with updated control plane IG names
2022-11-22 23:58:25 -08:00
John Gardiner Myers f89f5f3bee hack/update-expected.sh 2022-11-22 22:52:49 -08:00
John Gardiner Myers 939fc1184a hack/update-expected.sh 2022-11-22 22:11:24 -08:00
John Gardiner Myers 6c0603991b Create new clusters with updated control plane IG names 2022-11-22 22:09:08 -08:00
John Gardiner Myers 7a2eaa2830 hack/update-expected.sh 2022-11-22 21:04:55 -08:00
Ciprian Hacman 0e40ddc6b2 Run hack/update-expected.sh 2022-11-23 06:22:58 +02:00
John Gardiner Myers b105aa6a86 hack/update-expected.sh 2022-11-22 17:15:51 -08:00
John Gardiner Myers d39ba74bd7 Change the control-plane IG role to "ControlPlane" in v1alpha3 API 2022-11-22 17:05:29 -08:00
Kubernetes Prow Robot e4606e8ed0
Merge pull request #14608 from hakman/kops-controller_apiserver_role
Don't serve config from kops-controller for APIServer nodes
2022-11-22 16:00:14 -08:00
Ciprian Hacman daa0298dde hack/update-expected.sh 2022-11-22 22:17:39 +02:00
Kubernetes Prow Robot eb0c5a591c
Merge pull request #14620 from johngmyers/integration-ipv6-private
Switch IPv6 integration tests to private topology
2022-11-22 07:22:13 -08:00
justinsb f887d51996 kubetest: dump poddisruptionbudgets and fieldManagers
Should help diagnose what's going on in some of our complex upgrade
tests when we detect conflicts.

Issue #14520
2022-11-22 07:50:26 -05:00
John Gardiner Myers 402f06521f hack/update-expected.sh 2022-11-21 21:35:44 -08:00
John Gardiner Myers cd88c293e1 Switch IPv6 integration tests to private topology 2022-11-21 21:35:44 -08:00
John Gardiner Myers 14c2cf1288 Update AMI used in many-addons scenarios 2022-11-20 16:26:24 -08:00
Kubernetes Prow Robot a9c6c4e5fa
Merge pull request #14504 from johngmyers/v1alpha3-aws
v1alpha3: Move API-related settings under API
2022-11-20 06:34:31 -08:00
Kubernetes Prow Robot 0da903d9ba
Merge pull request #14577 from hakman/k8s_feature-gates
Add option for setting Kubernetes feature gates
2022-11-19 22:32:30 -08:00
Ciprian Hacman 0207d94201 Add integration test 2022-11-20 07:09:45 +02:00
Kubernetes Prow Robot feffc79181
Merge pull request #14604 from johngmyers/fix-keypair-test
Fix the keypair-rotation scenario test
2022-11-19 12:46:29 -08:00
John Gardiner Myers 5fca16aa30 v1alpha3: Move API-related settings under API 2022-11-19 10:27:12 -08:00
John Gardiner Myers bfa4c124cc hack/update-expected.sh 2022-11-19 10:25:23 -08:00
John Gardiner Myers e0ee3eda2a Remove CloudFormation tests 2022-11-19 10:25:20 -08:00
Kubernetes Prow Robot 6132c8d9e2
Merge pull request #14592 from hakman/generics
Use generics to refactor fi.Bool/Float*/Int*/String*()
2022-11-19 10:08:31 -08:00
John Gardiner Myers 9bcda459a8 Fix the keypair-rotation scenario test 2022-11-19 10:00:31 -08:00
John Gardiner Myers 0af0ff27f9 hack/update-expected.sh 2022-11-18 22:47:28 -08:00
Ciprian Hacman d29812fc6e Replace fi.Bool/Float*/Int*/StringValue() with fi.ValueOf 2022-11-19 03:45:23 +02:00
Kubernetes Prow Robot d405d4c5a2
Merge pull request #14507 from johngmyers/internalname
Stop making MasterInternalName configurable
2022-11-18 13:38:29 -08:00
Antonio Ojea d242e2386c
skip Loadbalancer UDP tests
// All the loadbalancer tests in the suite fail on IPv6, however,
	// they were skipped because they were tagged as [Slow]
	// skip these tests temporary since they fail always on IPv6
	// TODO: aojea
2022-11-18 16:54:46 +00:00
John Gardiner Myers 9d90c7fc7b Allow cluster-autoscaler to run on spot if nothing else is available 2022-11-18 08:31:47 -08:00
Kubernetes Prow Robot 4366748573
Merge pull request #14586 from olemarkus/cilium-11111
Bump cilium to 1.11.11
2022-11-18 00:32:31 -08:00
Ole Markus With 58195904ee Bump cilium to 1.11.11 2022-11-18 08:44:55 +01:00
github-actions a9613f81ef Update dependencies 2022-11-18 06:09:02 +00:00
Ole Markus With 035fa79077 Set IMDS max hop limit to 1 for control plane nodes
Update docs/releases/1.26-NOTES.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2022-11-17 19:26:48 +01:00
Ole Markus With 2f59911458 Add create cluster test with irsa 2022-11-17 19:25:19 +01:00
John Gardiner Myers 294c0a3a04 hack/update-expected.sh 2022-11-16 22:06:02 -08:00
John Gardiner Myers 8473e8b2e7 Stop making MasterInternalName configurable 2022-11-16 22:06:02 -08:00
Kubernetes Prow Robot 6f2ded7fb2
Merge pull request #14501 from hakman/kops-controller_for_config
Boot nodes without state store access
2022-11-16 08:32:50 -08:00
John Gardiner Myers 184a44b178 Run some scenarios on ARM 2022-11-15 15:29:20 -08:00
Kubernetes Prow Robot ca093709fa
Merge pull request #14540 from olemarkus/bump-lbc-245
Bump AWS Load Balancer Controller to 2.4.5
2022-11-15 09:48:41 -08:00
Ciprian Hacman 309b37eadf Run hack/update-expected.sh 2022-11-15 14:51:54 +02:00
Ole Markus With 981e45bb41 Bump AWS Load Balancer Controller to 2.4.5
Also force LBC to run on regular nodes when IRSA is enabled.
2022-11-15 11:27:30 +01:00
Kubernetes Prow Robot 58d8cbf942
Merge pull request #14550 from hakman/containerd-1.6.10
Update containerd to v1.6.10
2022-11-14 22:34:44 -08:00
Ciprian Hacman 6dec5a4afd Run hack/update-expected.sh 2022-11-15 05:27:14 +02:00
Ciprian Hacman ece129b36a Run hack/update-expected.sh 2022-11-15 05:17:40 +02:00
John Gardiner Myers 7af3162897 c7g.large doesn't exist in all regions yet 2022-11-13 07:47:06 -08:00
John Gardiner Myers 40b23eb911 Use ARM instancetype for ARM images in tests 2022-11-12 23:03:59 -08:00
Ciprian Hacman 44c36763af Run hack/update-expected.sh 2022-11-12 10:45:01 +02:00
John Gardiner Myers bcb48c60de Skip the SSH-to-nodes test in private topology 2022-11-11 12:59:49 -08:00
github-actions d5007b95f1 Update dependencies 2022-11-11 06:09:54 +00:00
Moshe Shitrit 42e7c48c9a hack/update-expected 2022-11-10 12:55:17 -05:00
Moshe Shitrit 0284232011 hack/update-expected 2022-11-08 11:32:35 -05:00
John Gardiner Myers 64be690211 Update TopologySpec for v1alpha3 API 2022-11-06 09:10:38 -08:00
Kubernetes Prow Robot 96acfc4ceb
Merge pull request #14452 from hakman/aws_none-dns_nlb
aws: Create cluster without DNS or Gossip
2022-11-05 22:30:15 -07:00
Kubernetes Prow Robot cdd6fe3113
Merge pull request #14468 from johngmyers/bastion-nlb
Create NLB instead of CLB for bastion
2022-11-04 21:22:29 -07:00
github-actions 534f6dce61 Update dependencies 2022-11-04 06:09:39 +00:00
Kubernetes Prow Robot 04362d4922
Merge pull request #14492 from hakman/hetzner_bootstrap_kops-controller
hetzner: Add listener for kops-controller when using it for node bootstrap
2022-11-03 11:19:39 -07:00
Kubernetes Prow Robot 8ba0ecbf5e
Merge pull request #14489 from hakman/aws_e2e_template_apiserver_dns-none
Add e2e template for dedicated APIserver nodes without DNS
2022-11-03 08:43:37 -07:00
Ciprian Hacman 6b075d6f6f Run hack/update-expected.sh 2022-11-03 17:27:40 +02:00
Ciprian Hacman 6d9c8e7360 Add e2e template for dedicated APIserver nodes without DNS 2022-11-03 11:42:48 +02:00
Ciprian Hacman 72d3669b07 aws: Switch integration test from Public DNS to None DNS 2022-11-02 12:54:27 +02:00
Ciprian Hacman c8f32621b7 Run hack/update-expected.sh 2022-11-02 12:47:03 +02:00
Ciprian Hacman 231ce799bd aws: Add integration test placeholder for None DNS 2022-11-02 11:25:05 +02:00
Kubernetes Prow Robot 2c4808c5bd
Merge pull request #14440 from hakman/hetzner_no-dns_master
hetzner: Create cluster without DNS or Gossip
2022-11-02 02:02:47 -07:00
Kubernetes Prow Robot 79b0396335
Merge pull request #14484 from johngmyers/image-doc
Remove well known account aliases for unsupported distros
2022-11-01 22:32:46 -07:00
Moshe Shitrit 0c6fddbbd7 hack/update-expected 2022-11-01 21:19:59 -04:00
John Gardiner Myers 81ce39006f hack/update-expected.sh 2022-11-01 17:04:43 -07:00
John Gardiner Myers c53c3bf8f8 Update images in tests 2022-11-01 17:04:43 -07:00
Kubernetes Prow Robot 3e7386f06e
Merge pull request #14443 from johngmyers/gce-config
Move GCE project under CloudProvider in v1alpha3 API
2022-11-01 03:46:45 -07:00
John Gardiner Myers 25b7dc21fa Create NLB instead of CLB for bastion 2022-10-29 17:00:00 -07:00
Ciprian Hacman 53e99a4ac7 Run hack/update-expected.sh 2022-10-29 10:30:59 +03:00
Kubernetes Prow Robot 20b0595189
Merge pull request #14463 from HealthEngineAU/pod-identity-webhook-metrics-fix
Fix Prometheus scraping for pod-identity-webhook
2022-10-28 11:50:53 -07:00
Kubernetes Prow Robot 0aebcbc6d9
Merge pull request #14459 from pacoxu/master
Stop applying the beta.kubernetes.io/os
2022-10-28 10:46:31 -07:00
Kubernetes Prow Robot a3e521da92
Merge pull request #14466 from hakman/calico-3.24.3
Update Calico and Canal to v3.24.3
2022-10-28 09:50:32 -07:00
github-actions 2474b07f65 Update dependencies 2022-10-28 06:10:20 +00:00
Ciprian Hacman 6f45ad2c0f Run hack/update-expected.sh 2022-10-28 07:45:13 +03:00
Jim Barber 1253d15103 Fix Prometheus scraping for pod-identity-webhook
The Service annotation for the pod-identity-webhook is asking Prometheus
to scrape its metrics from `https://` but this results in a HTTP 404 Not
Found response.
The pod-identity-webhook pods expose their metrics via HTTP on TCP port
9999 (the same port where the healthz checks go).
Therefore update the annotations to use `http://:9999` instead.
2022-10-28 11:25:14 +08:00
Ciprian Hacman 810151fc31 hetzner: Update integration tests 2022-10-27 11:32:25 +03:00
Paco Xu d632e39eae Stop applying the beta.kubernetes.io/os 2022-10-27 12:15:38 +08:00
Ciprian Hacman b21e895464 Run hack/update-expected.sh 2022-10-27 05:17:04 +03:00
John Gardiner Myers 4b95aec920 Move GCE project under CloudProvider in v1alpha3 API 2022-10-21 15:59:20 -07:00
Kubernetes Prow Robot 4cf5418eb8
Merge pull request #14442 from olemarkus/webhook-pdb
Fix pdb for identity webhook
2022-10-21 11:27:52 -07:00
Ole Markus With c9c568f20b Add pod identity webhook to the many addons e2e template 2022-10-21 19:08:26 +02:00
Ole Markus With 96a7c96c29 Fix pdb for identity webhook
Also removing namespace from non-namespaced resource
2022-10-21 19:03:41 +02:00
github-actions dc1d327866 Update dependencies 2022-10-21 06:17:40 +00:00
Kubernetes Prow Robot 4546cafdcb
Merge pull request #14420 from olemarkus/roletaints-cloudup
Move setting role taints to cloudup
2022-10-18 05:29:19 -07:00
Ole Markus With cd378bff72 Move setting role taints to cloudup 2022-10-18 13:42:00 +02:00
Kubernetes Prow Robot fe823261ff
Merge pull request #14424 from olemarkus/ccm-v1251
Bump AWS CCM to 1.25.1
2022-10-17 08:55:07 -07:00
Ole Markus With b5e3e956a9 Bump AWS CCM to 1.25.1 2022-10-17 15:26:19 +02:00
Niklas Walter 2ab10f0451
Update test expected 2022-10-17 09:35:28 +02:00
github-actions d25b16e436 Update dependencies 2022-10-14 06:28:49 +00:00
Ciprian Hacman c725b6480d Run hack/update-expected.sh 2022-10-12 11:18:30 +03:00
Thomas Colomb e40239b241 fix typo kubeReserved not systemReserved and remove ec2:DescribeImages iam right not needed we use launch templates 2022-10-11 15:43:17 +02:00
Thomas Colomb a34939b5c0 karpenter: upgrade to version 0.16.3 and support kubeReserved configuration 2022-10-11 15:05:08 +02:00
github-actions 7c711fb86b Update dependencies 2022-10-07 06:11:06 +00:00
Ole Markus With 18808486da Remove fsGroupPolicy as it is immutable 2022-10-05 18:23:10 +02:00
Kubernetes Prow Robot b37ae0744f
Merge pull request #14388 from olemarkus/ebs-csi-bump-124-2
Bump EBS CSI driver to 1.12.0
2022-10-05 02:42:03 -07:00