Commit Graph

19489 Commits

Author SHA1 Message Date
Justin SB eb7d3c958c gce: When using network native pod IPs, open firewall to apiserver
If we're not masquerading the pod IPs, we need an explicit firewall
rule for the pods to reach the kube-apiserver.  Normally this is
permitted anyway, but if the apiserver has a locked-down CIDR range
(as the e2e tests do) then we need our own rule.
2023-03-02 13:15:58 -05:00
Justin SB ca47771cff Set the nonMasqueradeCIDR for GCE networking
We do need a non-masquerade CIDR, and we can use the range we draw the
pod CIDRs from (10.0.0.0/8).
2023-03-02 07:45:11 -05:00
Kubernetes Prow Robot 4b61ae77c1
Merge pull request #15183 from anthonyhaussman/feat/kops/nodeLocalDNS_ExternalCoreFile
feat(NodeLocalDNS): Add possibility to set an ExternalCoreFile
2023-02-28 23:17:17 -08:00
Anthony Hausman cc47bd278c
feat(nodelocaldns): Add possibility to set an ExternalCoreFile
Allow users to provide entirely custom CoreFile for NodeLocalDNS to provide improved flexibility.
2023-02-28 08:19:20 +01:00
Kubernetes Prow Robot e79454ac10
Merge pull request #15180 from zetaab/incrupdatefreq
set node status update freq to 60min in OpenStack
2023-02-27 11:27:46 -08:00
Jesse Haka 3f9a1b6462 set node status update freq to 60min in OpenStack 2023-02-27 20:38:30 +02:00
Kubernetes Prow Robot d50995ece3
Merge pull request #15179 from justinsb/cleanup_validate_cidr
validation cleanup: simplify signature of validateCIDR
2023-02-24 11:13:30 -08:00
Justin SB 94c35804c9 validation cleanup: simplify signature of validateCIDR
We split out the "add to a slice" logic, as this is then easier to
reason about.

Should be a no-op in terms of valid inputs, might avoid some crashes
with invalid inputs.
2023-02-24 11:09:49 -05:00
Kubernetes Prow Robot b5dc9f6371
Merge pull request #15122 from Mia-Cross/scw_profiles
scaleway: get credentials from Scaleway profile
2023-02-24 07:43:34 -08:00
Kubernetes Prow Robot e8f704a855
Merge pull request #15036 from johngmyers/addlcidr-subnet
Improve support for AdditionalNetworkCIDRs
2023-02-24 06:33:34 -08:00
ederst 9f828259ba Remove unused wait for status active func 2023-02-24 01:28:39 +01:00
ederst 3eb39a42ad Allow getting a server in OpenStack mock cloud 2023-02-24 01:28:05 +01:00
ederst 8434481557 Retry creating failed OpenStack servers
This aims to improve the experience when creating openstack servers and
they run into issues during scheduling, which is not covered by the
create API request.

So after creating the instance kops waits for it to become ACTIVE and if
not, tries to reprovision the instance by deleting the failed instance
and creating a new one.

If the last attempt was still not successful, erroneous instances will
persist to allow further investigation, and the task will fail, which
will ultimately fail the update call.
2023-02-24 01:26:06 +01:00
Kubernetes Prow Robot 43cc54b2b1
Merge pull request #15177 from philnielsen/philnielsen/docs/fix-external-policy-docs
[docs] Fix External IAM Policy Docs
2023-02-22 18:43:06 -08:00
phillip.nielsen d978c309f2
[docs] Fix External IAM Policy Docs
This feature was renamed during its [development](https://github.com/kubernetes/kops/pull/7837)
and a remnant of that original name was in the docs.
2023-02-22 16:09:38 -06:00
Kubernetes Prow Robot ae7c8a5e19
Merge pull request #15169 from zetaab/bumpbos
update openstack csi & ccm versions
2023-02-20 08:53:50 -08:00
Jesse Haka bcc700909e update openstack csi & ccm versions 2023-02-20 18:02:06 +02:00
Kubernetes Prow Robot 511f32a20c
Merge pull request #15138 from zetaab/exitgracefully
exit nodeup gracefully if server already exists in k8s
2023-02-20 03:49:49 -08:00
Jesse Haka a765191898 use http.StatusConflict 2023-02-20 13:01:43 +02:00
Kubernetes Prow Robot 5f772238d0
Merge pull request #15159 from hakman/containerd-v1.6.18
Update containerd to v1.6.18
2023-02-18 22:47:37 -08:00
Ciprian Hacman 6b73f91b32 hack/update-expected.sh 2023-02-18 04:38:08 +02:00
Ciprian Hacman 8d6a809d10 Update containerd to v1.6.18 2023-02-18 04:38:08 +02:00
Kubernetes Prow Robot c56a983355
Merge pull request #15166 from justinsb/run_scenario
tests: create smoketest scenario
2023-02-16 08:05:38 -08:00
Justin SB cb1dea554e tests: create smoketest scenario
This is a simple minimal scenario designed to make it easy to run with
a particular version of kOps.

The initial use-case is for testing artifacts-sandbox.k8s.io.
2023-02-16 10:13:31 -05:00
Kubernetes Prow Robot 3fff4a12e3
Merge pull request #15160 from hakman/go-v1.9.6
Update Go to v1.19.6
2023-02-15 21:07:38 -08:00
Ciprian Hacman c905df5960 Update Go to v1.19.6 2023-02-16 05:59:44 +02:00
Kubernetes Prow Robot 864b70f408
Merge pull request #15156 from infonova/os-document-clustername-flag
Document setting cluster name flag for OCCM and Cinder CSI plugin
2023-02-15 08:48:24 -08:00
ederst b83f76d709 Document setting cluster name flag for OCCM and Cinder CSI plugin 2023-02-15 14:27:22 +01:00
Kubernetes Prow Robot de1451247d
Merge pull request #15153 from rsafonseca/warmpool_tf
Add terraform target support for configuring Warm Pool
2023-02-14 20:58:23 -08:00
Rafael da Fonseca e9fce322ad fix goimports 2023-02-14 15:10:38 +00:00
Rafael da Fonseca bc37c7408c Add terraform target support for configuring Warm Pool 2023-02-14 14:27:46 +00:00
Kubernetes Prow Robot ca3b53c00a
Merge pull request #15095 from infonova/use-clustername-in-cinder-csi-plugin
Pass actual cluster name to cinder-csi-plugin
2023-02-13 09:33:29 -08:00
ederst 30495063a3 Update expected 2023-02-13 17:45:51 +01:00
ederst b4557d4729 Run make apimachinery and crds 2023-02-13 17:34:31 +01:00
ederst cd50ee00ac Pass actual cluster name to cinder-csi-plugin
This passes the acutal cluster name to the cinder-csi-plugin, so that
the plugin will add the name as metadata to the backing volume in
OpenStack.

Effectively, the change will help to better identify which volume in
OpenStack belongs to which cluster, which is especially helpful when
running multiple clusters in one OpenStack tenant/project.

Setting the cluster name in both - the controller and the nodeserver -
will ensure that dynamic and ephemeral volumes will receive the correct
metadata.
2023-02-13 17:31:32 +01:00
Kubernetes Prow Robot a2d20ca97c
Merge pull request #15141 from justinsb/hetzner_deletion_dependencies
hetzner: add dependency logic to deletion
2023-02-13 06:49:30 -08:00
justinsb 1ad3f6012c hetzner: add dependency logic to deletion
This avoids warnings about deleting e.g. the volume while it is still
attached to a server.

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2023-02-13 08:55:12 -05:00
Kubernetes Prow Robot 9ec9d42910
Merge pull request #15131 from hakman/containerd-v1.6.17
Update containerd to v1.6.17
2023-02-13 02:27:29 -08:00
Kubernetes Prow Robot 235206a6c7
Merge pull request #15147 from zetaab/remfirewallrules
OpenStack: remove cadvisor and etcd client fw rule
2023-02-13 00:23:29 -08:00
Jesse Haka ff557a9cf1 remove cadvisor and etcd client fw rule 2023-02-13 09:31:37 +02:00
Kubernetes Prow Robot bd0a779287
Merge pull request #15145 from zetaab/rems3access
remove AWS S3 access from nodes if using none dns
2023-02-12 13:29:31 -08:00
Jesse Haka e7c4506e36 hack/update-expected.sh 2023-02-12 21:57:45 +02:00
Jesse Haka 382855d7d1 remove s3 access from nodes if using none dns 2023-02-12 21:51:16 +02:00
Kubernetes Prow Robot c06874127a
Merge pull request #15143 from justinsb/fix_kubetest2_test
kubetest2-kops: update tests for new zones
2023-02-12 09:45:38 -08:00
Kubernetes Prow Robot 2a3bf8dd8a
Merge pull request #15127 from justinsb/do_ssh
DigitalOcean: Support SSH key provisioning
2023-02-12 09:45:30 -08:00
Kubernetes Prow Robot 9e49b37d9e
Merge pull request #15139 from zetaab/clusternameoccm
Add cluster name to OCCM opts
2023-02-12 08:15:31 -08:00
justinsb 12d32c3273 kubetest2-kops: update tests for new zones
We previously tested that we could not generate 4 zones in a region,
but now us-east-1 has 6 zones, so we need to update the tests to fail
only when even more zones are requested.
2023-02-12 11:05:44 -05:00
justinsb 150a98e258 DigitalOcean: Support SSH key provisioning
This means we don't need to pre-upload our SSH keys.
2023-02-12 10:34:40 -05:00
Jesse Haka dca3b8c832 ./hack/update-expected.sh 2023-02-12 17:24:00 +02:00
Jesse Haka 43dd96ead0 add clustername to ccm opts 2023-02-12 17:22:13 +02:00