Justin SB
eb7d3c958c
gce: When using network native pod IPs, open firewall to apiserver
...
If we're not masquerading the pod IPs, we need an explicit firewall
rule for the pods to reach the kube-apiserver. Normally this is
permitted anyway, but if the apiserver has a locked-down CIDR range
(as the e2e tests do) then we need our own rule.
2023-03-02 13:15:58 -05:00
Justin SB
ca47771cff
Set the nonMasqueradeCIDR for GCE networking
...
We do need a non-masquerade CIDR, and we can use the range we draw the
pod CIDRs from (10.0.0.0/8).
2023-03-02 07:45:11 -05:00
Kubernetes Prow Robot
4b61ae77c1
Merge pull request #15183 from anthonyhaussman/feat/kops/nodeLocalDNS_ExternalCoreFile
...
feat(NodeLocalDNS): Add possibility to set an ExternalCoreFile
2023-02-28 23:17:17 -08:00
Anthony Hausman
cc47bd278c
feat(nodelocaldns): Add possibility to set an ExternalCoreFile
...
Allow users to provide entirely custom CoreFile for NodeLocalDNS to provide improved flexibility.
2023-02-28 08:19:20 +01:00
Kubernetes Prow Robot
e79454ac10
Merge pull request #15180 from zetaab/incrupdatefreq
...
set node status update freq to 60min in OpenStack
2023-02-27 11:27:46 -08:00
Jesse Haka
3f9a1b6462
set node status update freq to 60min in OpenStack
2023-02-27 20:38:30 +02:00
Kubernetes Prow Robot
d50995ece3
Merge pull request #15179 from justinsb/cleanup_validate_cidr
...
validation cleanup: simplify signature of validateCIDR
2023-02-24 11:13:30 -08:00
Justin SB
94c35804c9
validation cleanup: simplify signature of validateCIDR
...
We split out the "add to a slice" logic, as this is then easier to
reason about.
Should be a no-op in terms of valid inputs, might avoid some crashes
with invalid inputs.
2023-02-24 11:09:49 -05:00
Kubernetes Prow Robot
b5dc9f6371
Merge pull request #15122 from Mia-Cross/scw_profiles
...
scaleway: get credentials from Scaleway profile
2023-02-24 07:43:34 -08:00
Kubernetes Prow Robot
e8f704a855
Merge pull request #15036 from johngmyers/addlcidr-subnet
...
Improve support for AdditionalNetworkCIDRs
2023-02-24 06:33:34 -08:00
ederst
9f828259ba
Remove unused wait for status active func
2023-02-24 01:28:39 +01:00
ederst
3eb39a42ad
Allow getting a server in OpenStack mock cloud
2023-02-24 01:28:05 +01:00
ederst
8434481557
Retry creating failed OpenStack servers
...
This aims to improve the experience when creating openstack servers and
they run into issues during scheduling, which is not covered by the
create API request.
So after creating the instance kops waits for it to become ACTIVE and if
not, tries to reprovision the instance by deleting the failed instance
and creating a new one.
If the last attempt was still not successful, erroneous instances will
persist to allow further investigation, and the task will fail, which
will ultimately fail the update call.
2023-02-24 01:26:06 +01:00
Kubernetes Prow Robot
43cc54b2b1
Merge pull request #15177 from philnielsen/philnielsen/docs/fix-external-policy-docs
...
[docs] Fix External IAM Policy Docs
2023-02-22 18:43:06 -08:00
phillip.nielsen
d978c309f2
[docs] Fix External IAM Policy Docs
...
This feature was renamed during its [development](https://github.com/kubernetes/kops/pull/7837 )
and a remnant of that original name was in the docs.
2023-02-22 16:09:38 -06:00
Kubernetes Prow Robot
ae7c8a5e19
Merge pull request #15169 from zetaab/bumpbos
...
update openstack csi & ccm versions
2023-02-20 08:53:50 -08:00
Jesse Haka
bcc700909e
update openstack csi & ccm versions
2023-02-20 18:02:06 +02:00
Kubernetes Prow Robot
511f32a20c
Merge pull request #15138 from zetaab/exitgracefully
...
exit nodeup gracefully if server already exists in k8s
2023-02-20 03:49:49 -08:00
Jesse Haka
a765191898
use http.StatusConflict
2023-02-20 13:01:43 +02:00
Kubernetes Prow Robot
5f772238d0
Merge pull request #15159 from hakman/containerd-v1.6.18
...
Update containerd to v1.6.18
2023-02-18 22:47:37 -08:00
Ciprian Hacman
6b73f91b32
hack/update-expected.sh
2023-02-18 04:38:08 +02:00
Ciprian Hacman
8d6a809d10
Update containerd to v1.6.18
2023-02-18 04:38:08 +02:00
Kubernetes Prow Robot
c56a983355
Merge pull request #15166 from justinsb/run_scenario
...
tests: create smoketest scenario
2023-02-16 08:05:38 -08:00
Justin SB
cb1dea554e
tests: create smoketest scenario
...
This is a simple minimal scenario designed to make it easy to run with
a particular version of kOps.
The initial use-case is for testing artifacts-sandbox.k8s.io.
2023-02-16 10:13:31 -05:00
Kubernetes Prow Robot
3fff4a12e3
Merge pull request #15160 from hakman/go-v1.9.6
...
Update Go to v1.19.6
2023-02-15 21:07:38 -08:00
Ciprian Hacman
c905df5960
Update Go to v1.19.6
2023-02-16 05:59:44 +02:00
Kubernetes Prow Robot
864b70f408
Merge pull request #15156 from infonova/os-document-clustername-flag
...
Document setting cluster name flag for OCCM and Cinder CSI plugin
2023-02-15 08:48:24 -08:00
ederst
b83f76d709
Document setting cluster name flag for OCCM and Cinder CSI plugin
2023-02-15 14:27:22 +01:00
Kubernetes Prow Robot
de1451247d
Merge pull request #15153 from rsafonseca/warmpool_tf
...
Add terraform target support for configuring Warm Pool
2023-02-14 20:58:23 -08:00
Rafael da Fonseca
e9fce322ad
fix goimports
2023-02-14 15:10:38 +00:00
Rafael da Fonseca
bc37c7408c
Add terraform target support for configuring Warm Pool
2023-02-14 14:27:46 +00:00
Kubernetes Prow Robot
ca3b53c00a
Merge pull request #15095 from infonova/use-clustername-in-cinder-csi-plugin
...
Pass actual cluster name to cinder-csi-plugin
2023-02-13 09:33:29 -08:00
ederst
30495063a3
Update expected
2023-02-13 17:45:51 +01:00
ederst
b4557d4729
Run make apimachinery and crds
2023-02-13 17:34:31 +01:00
ederst
cd50ee00ac
Pass actual cluster name to cinder-csi-plugin
...
This passes the acutal cluster name to the cinder-csi-plugin, so that
the plugin will add the name as metadata to the backing volume in
OpenStack.
Effectively, the change will help to better identify which volume in
OpenStack belongs to which cluster, which is especially helpful when
running multiple clusters in one OpenStack tenant/project.
Setting the cluster name in both - the controller and the nodeserver -
will ensure that dynamic and ephemeral volumes will receive the correct
metadata.
2023-02-13 17:31:32 +01:00
Kubernetes Prow Robot
a2d20ca97c
Merge pull request #15141 from justinsb/hetzner_deletion_dependencies
...
hetzner: add dependency logic to deletion
2023-02-13 06:49:30 -08:00
justinsb
1ad3f6012c
hetzner: add dependency logic to deletion
...
This avoids warnings about deleting e.g. the volume while it is still
attached to a server.
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2023-02-13 08:55:12 -05:00
Kubernetes Prow Robot
9ec9d42910
Merge pull request #15131 from hakman/containerd-v1.6.17
...
Update containerd to v1.6.17
2023-02-13 02:27:29 -08:00
Kubernetes Prow Robot
235206a6c7
Merge pull request #15147 from zetaab/remfirewallrules
...
OpenStack: remove cadvisor and etcd client fw rule
2023-02-13 00:23:29 -08:00
Jesse Haka
ff557a9cf1
remove cadvisor and etcd client fw rule
2023-02-13 09:31:37 +02:00
Kubernetes Prow Robot
bd0a779287
Merge pull request #15145 from zetaab/rems3access
...
remove AWS S3 access from nodes if using none dns
2023-02-12 13:29:31 -08:00
Jesse Haka
e7c4506e36
hack/update-expected.sh
2023-02-12 21:57:45 +02:00
Jesse Haka
382855d7d1
remove s3 access from nodes if using none dns
2023-02-12 21:51:16 +02:00
Kubernetes Prow Robot
c06874127a
Merge pull request #15143 from justinsb/fix_kubetest2_test
...
kubetest2-kops: update tests for new zones
2023-02-12 09:45:38 -08:00
Kubernetes Prow Robot
2a3bf8dd8a
Merge pull request #15127 from justinsb/do_ssh
...
DigitalOcean: Support SSH key provisioning
2023-02-12 09:45:30 -08:00
Kubernetes Prow Robot
9e49b37d9e
Merge pull request #15139 from zetaab/clusternameoccm
...
Add cluster name to OCCM opts
2023-02-12 08:15:31 -08:00
justinsb
12d32c3273
kubetest2-kops: update tests for new zones
...
We previously tested that we could not generate 4 zones in a region,
but now us-east-1 has 6 zones, so we need to update the tests to fail
only when even more zones are requested.
2023-02-12 11:05:44 -05:00
justinsb
150a98e258
DigitalOcean: Support SSH key provisioning
...
This means we don't need to pre-upload our SSH keys.
2023-02-12 10:34:40 -05:00
Jesse Haka
dca3b8c832
./hack/update-expected.sh
2023-02-12 17:24:00 +02:00
Jesse Haka
43dd96ead0
add clustername to ccm opts
2023-02-12 17:22:13 +02:00