John Gardiner Myers
be8933b577
Remove code for unsupported features
2021-08-28 13:49:55 -07:00
Peter Rifel
9c824e80f8
Pass AZURE_ENVIRONMENT to nodeup
...
This allows nodeup to use the same azure environment as the kops cli, working towards support for azure government.
2021-08-08 15:34:44 -04:00
John Gardiner Myers
e9fc12b4f3
Fix certificate bootstrap for non-kops-controller-bootstrap cloud providers
2021-07-18 13:37:19 -07:00
John Gardiner Myers
c35d101a89
Refactor keysets for etcd-manager
2021-07-08 18:46:03 -07:00
John Gardiner Myers
921d09523e
Rename the "ca" keyset to "kubernetes-ca"
2021-07-03 17:33:13 -07:00
John Gardiner Myers
1e0c6cb1aa
Refactor apiserver-aggregator-ca
2021-07-01 22:25:47 -07:00
John Gardiner Myers
7162a7473a
Remove dead code
2021-07-01 13:58:51 -07:00
John Gardiner Myers
3de05a500e
Refactor etcd-clients-ca keyset for api-server
2021-06-30 18:55:30 -07:00
John Gardiner Myers
e1df9f09dd
Refactor service-account public keys
2021-06-27 08:45:06 -07:00
John Gardiner Myers
2faf28379a
Refactor etcd-client-cilium secrets
2021-06-25 23:57:23 -07:00
John Gardiner Myers
1752f0f4db
Move most of nodeup.Config out of userdata
2021-06-25 22:25:49 -07:00
Ciprian Hacman
d7f405f65a
Decrease default values for net.ipv4.tcp_rmem and net.ipv4.tcp_wmem
2021-06-25 21:27:56 +03:00
John Gardiner Myers
a83bf7b20f
Mark nodes NeedsUpdate when keys they use change
2021-06-21 19:37:23 -07:00
John Gardiner Myers
0dee785ebf
Pass multiple CA certs to kops-controller client
2021-06-19 10:50:53 -07:00
John Gardiner Myers
820b0ea115
Pass lifecycle down to BootstrapScript
2021-06-19 10:50:53 -07:00
Kubernetes Prow Robot
b71ba1d566
Merge pull request #11219 from johngmyers/refactor-keypair
...
Refactor keypair code in preparation for secret rotation
2021-06-12 14:25:00 -07:00
John Gardiner Myers
3127dacc0c
Expose all service-account keys through OIDC
2021-06-05 16:38:25 -07:00
John Gardiner Myers
b45c0b4489
Remove InstanceGroup from NodeupModelContext
2021-06-03 21:27:01 -07:00
John Gardiner Myers
59c8826b17
Move FileAssets into the NodeupAuxConfig
2021-06-03 21:20:55 -07:00
John Gardiner Myers
06658c9d13
Move Hooks into the NodeupAuxConfig
2021-06-03 21:09:45 -07:00
John Gardiner Myers
eb09d31a3c
Pass AuxConfig to nodeup
2021-06-03 21:04:21 -07:00
John Gardiner Myers
2e1629c610
Introduce nodeup.AuxConfig
2021-06-03 20:37:22 -07:00
Ciprian Hacman
689b76d0ff
Mark control-plane node for update when etcd manager config changes
2021-05-02 08:50:42 +03:00
Ciprian Hacman
d64cfba365
Mark control-plane node for update when etcd volume size changes
...
etcd-manager expands the data volume on restart to the max available.
2021-05-01 12:06:22 +03:00
Kubernetes Prow Robot
4507be8e13
Merge pull request #10469 from justinsb/boot_nodes_from_kops_controller
...
Boot nodes without state store access
2021-02-08 11:28:19 -08:00
Justin SB
1d76a15f69
Set the tcp_rmem sysctl in bootstrap script
...
This ensures that we're using our settings for downloading nodeup
itself and any assets that nodeup downloads. This is a workaround for
reported problems with the initial download on some kernels otherwise.
Issue #10206
2021-01-24 21:50:45 -05:00
Ole Markus With
4d2eca199f
Remove node-authorization
2021-01-11 18:59:45 +01:00
Justin SB
4ac9d5c17b
Boot nodes without state store access
...
kops-controller can now serve the instance group & cluster config to
nodes, as part of the bootstrap process.
This enables nodes to boot without access to the state
store (i.e. without S3 / GCS / etc permissions)
Feature-flagged behind the KopsControllerStateStore feature-flag.
2021-01-09 13:08:48 -05:00
Ciprian Hacman
c02434269f
Fix cluster setup when KOPS_ARCH is set
2020-12-23 17:08:20 +02:00
Kenji Kaneda
a61caea8d2
Add Azure support
...
This commit contains all changes required to support Azure
(https://github.com/kubernetes/kops/issues/3957 ).
2020-12-21 08:27:54 -08:00
Justin SB
7d9ff3ba96
Refactor MirroredAsset into mirrors package
...
This means we can use MirroredAsset for nodeup without circular
dependencies. Also removes a duplicate constant that was declared
twice.
2020-12-19 18:39:09 -05:00
Justin SB
45d11ba12c
Replace (some) deprecated ResourceHolder with Resource
...
This removes more of the deprecated type, but it also simplifies
refactoring the GCE InstanceTemplate.
2020-12-19 09:51:43 -05:00
Ole Markus With
4fa6f56ecd
Use the kubernetes-sigs version of yaml
2020-12-15 10:38:01 +01:00
Rodrigo Menezes
3fb12c66ae
gzip and base64 encode the heredocs in the nodeup.sh portion of user-data
2020-12-04 10:46:18 -08:00
Ole Markus With
6efb91a15b
Don't write application credentials to cloud config unless external CCM is enabled
2020-09-15 09:45:09 +02:00
Ole Markus With
94833faca5
Only add OS variables if they are needed
2020-08-18 20:58:54 +02:00
Peter Rifel
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
Ole Markus With
a708a96c05
Adds support for using OS application credentials
...
Application credentials allows you to export a purpose-specific set of
credentials for a user instead of exposing user login credentials.
Especially useful when using LDAP or similar for Openstack users.
Also lets you rotate credentials more easily since multiple application
credentials can be provisioned per user.
Update pkg/model/bootstrapscript.go
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-08-07 14:26:47 +02:00
Kubernetes Prow Robot
0c62641dad
Merge pull request #9354 from johngmyers/refactor-certs-2
...
Continue refactoring certs into nodeup
2020-07-06 17:13:57 -07:00
John Gardiner Myers
f4f4763dc2
Refactor more certs to be issued by nodeup
2020-06-28 23:12:13 -07:00
John Gardiner Myers
44fb283e3f
Move NodeLabels into the NodeupConfig
2020-06-28 18:52:03 -07:00
John Gardiner Myers
1ba0f0d463
Move Taints into the NodeupConfig
2020-06-28 18:51:42 -07:00
John Gardiner Myers
5e5f25703d
Move KubeletConfig into the NodeupConfig
2020-06-28 18:51:16 -07:00
John Gardiner Myers
013f9bf914
Create bootstrap script in a Task
2020-06-26 19:11:40 -07:00
John Gardiner Myers
cef5b175c7
Rename BootstrapScript to BootstrapScriptBuilder
2020-06-26 10:57:36 -07:00
John Gardiner Myers
304476cebf
Refactor BootstrapScript
2020-06-18 22:17:39 -07:00
Ciprian Hacman
602cb825e7
ARM64 support - Update bootstrap script for multi-arch
2020-06-19 04:42:11 +03:00
John Gardiner Myers
2d98e5609c
Remove/fix more CoreOS references
2020-05-22 20:54:41 -07:00
Nicolas Vanheuverzwijn
7041a43982
issue-8330: return empty nodeup template when calculating bastion userdata without additionaluserdata
2020-01-13 14:50:50 -05:00
Kubernetes Prow Robot
2711ed3f11
Merge pull request #8247 from bittopaz/fix-env-vars
...
Stabilize sequence of "export xx=xxx" statements
2020-01-11 07:29:37 -08:00