Ciprian Hacman
ca408f7e8f
Set default volume type to "gp3" for etcd-manager volumes in AWS
2021-01-27 06:23:27 +02:00
Ciprian Hacman
d889d61ddb
Set default IMDS v2 to "required" for instances in AWS
2021-01-21 11:35:41 +02:00
Ciprian Hacman
c8a9b2fb3e
Set default volume encryption to "true" for instances in AWS
2021-01-21 11:27:02 +02:00
Ciprian Hacman
18bb14ffed
Set default volume type to "gp3" for instances in AWS
2021-01-21 11:27:02 +02:00
Ole Markus With
afbd057286
Use consistent naming for the remaining SGRs
2021-01-14 12:57:33 +01:00
Ole Markus With
2b3a8f133e
Add control-plane node role annotation to cp nodes
...
Update docs/releases/1.20-NOTES.md
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-01-08 12:39:42 +01:00
Peter Rifel
5406744c55
Update integration test output
2020-12-23 15:13:45 -06:00
Bharath Vedartham
cebe171805
Explicitly specify http_endpoint in launch_template terraform
...
http_endpoint has to be explicitly specified in the metadata_options block
of the launch template terraform according to issue
https://github.com/hashicorp/terraform-provider-aws/issues/12564
2020-12-10 01:37:15 +05:30
Kubernetes Prow Robot
bee16c052d
Merge pull request #10324 from bharath-123/feature/aws-imdv2
...
Add support for AWS IMDS v2
2020-12-07 22:55:11 -08:00
Ciprian Hacman
174f405e39
Update expected outputs of integration tests
2020-12-08 07:08:32 +02:00
Bharath Vedartham
ee5d8a3435
update integration tests
2020-12-07 02:57:32 +05:30
Ciprian Hacman
0c3e3784c8
Use LaunchTemplate name instead of name_prefix for Terraform
2020-11-09 21:40:36 +02:00
Ole Markus With
fab694d290
Add ability to consistently name sgrs
...
In order to let kops fully control the rules for each security group we need to be able to generate names from the info in AWS. This is similar to the approach we used for openstack
Update pkg/model/firewall.go
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-11-07 10:27:19 +01:00
Barry Melbourne
84417c330b
Set minimum Terraform version to 0.12.26/0.13.0
2020-10-28 20:24:41 +00:00
Kubernetes Prow Robot
fbb172c08c
Merge pull request #9575 from johngmyers/node-labels
...
Take node labels from cloud tags on AWS
2020-10-23 04:01:45 -07:00
Justin SB
2a44cb7f16
Update script and testdata CA keypair
...
If we generate with the wrong type (usages), the keypair will be
regenerated.
2020-09-12 16:21:15 -04:00
John Gardiner Myers
54c280eed5
update-expected.sh
2020-09-10 20:59:28 -07:00
Justin SB
a61ecf4c58
Refactor to use interface for iam Subjects
...
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
Justin SB
ccc814dfbc
Create tests for JWKS scenarios
2020-09-09 09:57:06 -04:00
Justin SB
786423f617
Expose JWKS via a feature-flag
...
When the PublicJWKS feature-flag is set, we expose the apiserver JWKS
document publicly (including enabling anonymous access). This is a
stepping stone to a more hardened configuration where we copy the JWKS
document to S3/GCS/etc.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 10:15:11 -04:00