Commit Graph

690 Commits

Author SHA1 Message Date
Kubernetes Prow Robot cd8681ccd0
Merge pull request #9282 from johngmyers/create-issuecert
Create nodetasks.IssueCert()
2020-06-08 07:57:47 -07:00
Justin Santa Barbara 64273a661b More nodeup golden tests
kube-controller-manager, kube-proxy, kube-scheduler
2020-06-07 10:39:14 -04:00
Justin Santa Barbara ce577b0518 Richer mocking of keystore in nodeup tests 2020-06-07 10:39:11 -04:00
John Gardiner Myers 8b9145f6c4 Create nodetasks.IssueCert() 2020-06-05 08:00:38 -07:00
Kubernetes Prow Robot d18e97140e
Merge pull request #9130 from johngmyers/pki-refactor
Refactor cert issuance code
2020-06-05 01:43:43 -07:00
Kubernetes Prow Robot 9e4bf1699a
Merge pull request #9216 from hakman/prepare-multi-arch
Prepare Kops for multi-architecture support
2020-06-04 21:35:43 -07:00
John Gardiner Myers f9b0415093 Update generated files 2020-06-04 12:13:49 -07:00
John Gardiner Myers e88e0cf7ec Remove code supporting dropped k8s versions 2020-06-04 12:11:51 -07:00
John Gardiner Myers d64e760d5b Use pki.IssueCert() for nodeup client certs 2020-06-04 10:26:45 -07:00
John Gardiner Myers a96f7963a6 Pull cert issuance code up into fitasks.Keypair 2020-06-04 10:26:41 -07:00
Ole Markus With a9d19ca80b Adapt to various changes happening in master 2020-06-04 17:32:45 +02:00
Ole Markus With f53787b92f Small nit 2020-06-04 17:32:45 +02:00
Ole Markus With 43f4e0a6db Fix copy/paste mistakes 2020-06-04 17:32:45 +02:00
Ole Markus With eb06f2787e EtcdTLSBuilder moved to networking and renamed to CalicoBuilder
EtcdTLSBuilder is now only used in legacy configurations of calico so renaming appropriatly
2020-06-04 17:32:45 +02:00
Ole Markus With 0a5a317385 Fix necessary plugins for kubenet-based networking
* remove portmap as it is not used by kubenet
* use generalised function for checking whether a provider uses kubenet
2020-06-04 17:32:45 +02:00
Ole Markus With b62f6aa894 Move networking in nodeup to dedicated subpackage 2020-06-04 17:32:41 +02:00
Kubernetes Prow Robot 4fe5ad03f8
Merge pull request #9255 from olemarkus/romana-remove
Remove romana support
2020-06-03 13:24:59 -07:00
Kubernetes Prow Robot 11928bf327
Merge pull request #9213 from johngmyers/refactor-update
Refactor Debian automatic upgrades to Go code
2020-06-03 13:24:46 -07:00
Ciprian Hacman 654a0d2d8a Detect supported architecture during node setup 2020-06-03 17:23:59 +03:00
Ciprian Hacman a7c9ef9ff0 Use Docker 19.03.11 for Kubernetes 1.18+ 2020-06-03 12:03:56 +03:00
Ole Markus With 991549a5f4 Remove support for Romana 2020-06-03 08:23:53 +02:00
John Gardiner Myers a3e7ca2469 Disable static tokens by default as of Kubernetes 1.18 2020-06-01 15:12:09 -07:00
Kubernetes Prow Robot 7b067983df
Merge pull request #9177 from olemarkus/remove-vsphere
Remove vsphere cloud provider
2020-06-01 06:19:54 -07:00
John Gardiner Myers 0ed8afb904 Refactor Debian automatic upgrades to Go code 2020-05-30 15:10:52 -07:00
Ole Markus With 7342525872 Remove vsphere from kops files 2020-05-30 13:36:55 +02:00
Ole Markus With 89fba09caa Remove vsphere vendor stuff and related build files 2020-05-30 13:34:39 +02:00
John Gardiner Myers 2c02f0812c Upgrade docker/containerd/containeros hashes to SHA256 2020-05-29 21:12:36 -07:00
John Gardiner Myers ea1a62b97e Refactor UpdateServiceBuilder 2020-05-29 19:04:38 -07:00
Kubernetes Prow Robot f44d0dd01d
Merge pull request #9208 from johngmyers/update-feature-doc
Update adding_a_feature.md with more modern example
2020-05-29 18:33:53 -07:00
John Gardiner Myers c1562291d7 Update adding_a_feature.md with more modern example 2020-05-28 23:19:14 -07:00
Ciprian Hacman cb6542488a Use kubescheduler.config.k8s.io/v1beta1 for Kubernetes 1.19 2020-05-29 08:43:54 +03:00
Kubernetes Prow Robot 6830cf6d44
Merge pull request #9065 from johngmyers/remove-distro
Remove support for CoreOS and Jessie
2020-05-27 23:22:01 -07:00
John Gardiner Myers 2d98e5609c Remove/fix more CoreOS references 2020-05-22 20:54:41 -07:00
Ole Markus With fc0f7f237c Fix UsesKubenet call in containerd.go 2020-05-22 09:14:36 +02:00
Ole Markus With d1ff25bb4e Remove some rather long networking nil checks 2020-05-22 08:08:58 +02:00
Kubernetes Prow Robot 2c899d859a
Merge pull request #9104 from hakman/containerd-kubenet
Add support for Kubenet with containerd
2020-05-21 22:20:38 -07:00
John Gardiner Myers 8a6d29cd40 Remove support for reading legacy-format keypairs 2020-05-20 13:28:13 -07:00
Ciprian Hacman 9d666c73bc Use components.UsesKubenet to check if Kubenet is required 2020-05-19 20:43:33 +03:00
Justin Santa Barbara 35c6056fb2 Create golden image test for nodeup kube-apiserver
The building of the manifests for nodeup tasks can be a little opaque;
create a test to verify and expose what is happening.
2020-05-18 06:42:16 -04:00
John Gardiner Myers 91e1f4c79d Remove code for unsupported Kubernetes version 2020-05-16 22:04:12 -07:00
Ciprian Hacman e608cd5265 Add support for Kubenet with containerd 2020-05-12 17:20:59 +03:00
John Gardiner Myers 649062a4c1 Remove deprecated CertificatePool method 2020-05-09 22:47:45 -07:00
Ciprian Hacman 7114c475ff Fix containerd image side-loading 2020-05-08 23:47:09 +03:00
Kubernetes Prow Robot de7cc70c3d
Merge pull request #9008 from jacksontj/issue_9006
Include secondary protocol flag always
2020-05-07 18:33:43 -07:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Kubernetes Prow Robot dc91edafce
Merge pull request #9074 from hakman/flannel-vxlan-disable-checksum-offload
Disable TX checksum offload for Flannel VXLAN
2020-05-06 09:43:08 -07:00
Ciprian Hacman 3f8632322f Disable TX checksum offload for Flannel VXLAN 2020-05-06 15:48:38 +03:00
John Gardiner Myers 06c6ac1bee Remove support for CoreOS and Jessie 2020-05-04 23:09:52 -07:00
Kubernetes Prow Robot e54559b39c
Merge pull request #8978 from hakman/flatcar-remove-static-utils
Don't install static utils for Flatcar
2020-05-04 10:10:26 -07:00
Justin SB 06c20ea223 Ubuntu focal: Use generic docker & container packages
download.docker.com doesn't have packages for ubuntu 20.04 (focal),
use the generic tar.gz versions instead.
2020-05-02 11:23:38 -04:00