Commit Graph

334 Commits

Author SHA1 Message Date
Ole Markus With 7342525872 Remove vsphere from kops files 2020-05-30 13:36:55 +02:00
Ole Markus With 6e04586361 Docs fixes 2020-05-22 08:08:58 +02:00
Ole Markus With e3055a6906 Inline supportsPrivateTopology 2020-05-22 08:08:58 +02:00
Ole Markus With d1ff25bb4e Remove some rather long networking nil checks 2020-05-22 08:08:58 +02:00
Ole Markus With 95d2170fa6 Update networking in kops create
* Remove classic from cli docs. Add missing providers
* Use cilium instead of weave in example since we don't consider weave stable
2020-05-22 08:08:58 +02:00
Jesse Haka b242c44dd2 use v3 api in kubernetes also 2020-05-11 08:17:47 +03:00
John Gardiner Myers 843e5b9b16 Move GCEServiceAccount into CloudConfig 2020-05-03 20:35:32 -07:00
Justin Santa Barbara 31bb16d4d1 Add context.Context to most signatures
The client-go signature for most methods adds a context.Context
object, and also makes Options mandatory.  Feed through a
context.Context through many of our methods (but use context.TODO to
stop it getting totally out of hand!)
2020-04-11 14:44:17 -04:00
eric-hole c59314a799 Adds some initial tests. Fixes some logic
Need to fix service account implementation first

Fixing tests and iterating on the serviceaccount logic

Run the gce_byo_sa test
2020-04-04 21:20:31 -07:00
eric-hole b3d65ffce0 Adds a gce-service-account flag so you BYO service-account
Generated code and some cleanup

Not sure where that code went

Tests for service account

fixes case on gceserviceaccount
2020-04-04 21:15:56 -07:00
eric-hole b52e322159 Adds metadata concealment addon for GCE node 2020-03-14 12:18:05 -07:00
Justin Santa Barbara 1e69835693
Don't try to configure a bastion DNS name in gossip mode
It can't be done anyway; instead we make it work (as far as we can),
and we document the workaround (which is to access it via the ELB DNS
name).

In future we could make it easier to discover this DNS name!

Issue #2881
2020-02-22 15:29:02 -05:00
John Gardiner Myers 8844b97fe3 Fix field names in api validation 2020-02-15 14:52:27 -08:00
Justin Santa Barbara a8831b5df0
Move kubectl dependency to k8s.io/kubectl
Helps pare down our dependency on kubernetes/kubernetes
2020-01-17 06:24:24 -05:00
Kubernetes Prow Robot 8664fa69c4
Merge pull request #8172 from hakman/container-runtime-cli-flag
containerd: Add --container-runtime cli flag
2019-12-27 09:29:59 -08:00
Kubernetes Prow Robot dd608e879b
Merge pull request #7770 from mitch000001/external-cloud-controller-feature-flag
Guard External cloud controller manager with its feature flag
2019-12-26 14:03:38 -08:00
Ciprian Hacman 70f5b276f5 Fix --networking to use the value from InitDefaults() 2019-12-22 22:16:08 +02:00
Ciprian Hacman 8b15e5b03a Add --container-runtime cli flag 2019-12-22 22:16:04 +02:00
eric-hole d3e7448236 Cleans up the create cluster CLI docs
They were missing `\`'s and could use a refresh.
2019-12-15 23:26:20 -08:00
Srikanth 9542b20bea Fix formatting 2019-11-26 00:04:16 +05:30
Srikanth 143bebc2eb Minor fix to have proper indexing for digital ocean regions that end with numbers other than one like sfo2 2019-11-25 08:23:14 +05:30
Jesse Haka 5e3b94ae17 use existing network and subnet 2019-10-27 08:21:25 +02:00
Michael Wagner 92ffa79f06 chore(external-ccm): warn user about missing feature flag 2019-10-10 21:38:50 +02:00
Pascal Bourdier 0102567457 add cilium in error message
add cilium in error message like other networks
2019-09-16 14:27:17 +02:00
mikesplain 9e55b8230a Update copyright notices
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Jesse Haka 59b0dd5aa5 move OpenStack from alpha to beta 2019-08-29 22:55:36 +03:00
Justin SB 62f7c26f98
Support "gce" networking mode, which uses ip aliases 2019-07-19 07:54:13 -04:00
Jesse Haka ddaa0dd502 Possibility to use openstack without lbaas 2019-06-24 08:56:34 +03:00
Justin SB 3e33ac7682
Change code from glog to klog
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog.  That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Justin SB 78ebe93f9f
Update kubernetes dependencies to 1.13.5
Notable changes:

* openapi-gen moved to k8s.io/kube-openapi/cmd/openapi-gen
* templates moved to k8s.io/kubernetes/pkg/kubectl/util/templates
2019-05-06 09:58:37 -04:00
Jesse Haka ae3ad36a28 add router subnet specify option 2019-02-27 14:29:30 +02:00
Jesse Haka ded99c8ab1 specify subnet for lb 2019-02-27 14:24:56 +02:00
Kubernetes Prow Robot 423fe84913
Merge pull request #6530 from zetaab/dnsserver
specify dns servers to openstack subnet
2019-02-27 04:10:33 -08:00
Jesse Haka 71452d0ddd specify dns servers to openstack subnet 2019-02-25 22:54:07 +02:00
Eric Greer 31a4c40131 merge conflict resolution 2019-02-21 15:20:05 -08:00
Eric Greer 8362b1260e etcd memory requests can now be specified 2019-02-21 15:14:51 -08:00
Jesse Haka 3482a34ef5 support both octavia and old lbaasv2 api 2019-02-05 16:45:44 +02:00
Sergiu Marsavela (smarsave) 8d2c8fc3d8 Correct error message and fix typo 2019-01-20 00:46:53 +01:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 3a87b1e015 Setting volume type for etcd volumes iff it was specified via command line 2019-01-19 14:07:35 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) a4503cf3a8 Openstack arguement to allow ingore-az in kubelet cloud config 2019-01-18 13:00:24 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 292b3a8589 Storage config for openstack cloud config 2019-01-18 11:39:39 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) fc740dbba3 Adding ability to specify to create_cluster openstack external network by name 2019-01-17 11:43:08 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 0f7768b2fa Adding etcd storage type required for master volumes. Updating readme 2019-01-16 09:29:02 -07:00
Justin SB 26bd75aecb
Bulk spelling fixes
Experimenting with my own spelling checker, these are the typos it caught.
2018-12-20 17:43:56 -05:00
Josh Branham 85bfa15b36 Simplify 2018-12-13 21:46:46 -08:00
Josh Branham bff260d920 Print --name if env NAME unset 2018-12-13 21:34:28 -08:00
Kenjiro Nakayama 4489d86aff Add cni to usage network option for kops create cluster 2018-12-01 11:53:48 +09:00
Jared Allard 034bda589e
fix(cmd/kops/create_cluster) default to anonymousAuth false for >=1.11, warn >=1.10 2018-11-26 09:26:24 -08:00
Jared Allard 19811d9759
chore(tests): fix them up 2018-11-24 17:03:50 -08:00
Jared Allard beb78dd7e3
feat: set anonymousAuth to false on clusters >1.10, and recommend it on upgrade 2018-11-24 15:55:22 -08:00
Jared Allard 2182b879d9
fix(cmd/kops/create_cluster): set anonymousAuth to false not true, whoops 2018-11-24 11:08:09 -08:00
Jared Allard c15ab52cd4
Merge remote-tracking branch 'upstream/master' 2018-11-24 10:52:32 -08:00
k8s-ci-robot f4012407f8
Merge pull request #4762 from locationlabs/cni-ipvlan-vpc-k8s
Cni ipvlan vpc k8s support
2018-11-21 13:43:19 -08:00
Jared Allard 769995d92a
chore(cmd/kops/create_cluster): better comment 2018-11-17 00:41:52 -08:00
Jared Allard 19f9d2f4d1
Merge branch 'master' into master 2018-11-16 23:03:38 -08:00
Jared Allard 6e6329db05
feat(cmd/kops/create_cluster): default to kubelet anonymousAuth true 2018-11-16 22:15:20 -08:00
k8s-ci-robot bac89b8de5
Merge pull request #5102 from tmjd/calico-v3-upgrade
Calico v3 upgrade
2018-11-13 12:55:18 -08:00
k8s-ci-robot b1296990b3
Merge pull request #6053 from xichengliudui/fix181107
Remove unnecessary code
2018-11-09 13:56:57 -08:00
k8s-ci-robot 5dce6b1e6f
Merge pull request #5875 from seanson/5700_add_flag_for_no_subnet_tags
#5700: Add command line flag for disabling Subnet ELB tags
2018-11-09 13:05:48 -08:00
Erik Stidham 3da3b415e0 Adding Calico V3
- Add Calico configuration field to specify MajorVersion
- Add Calico V3 manifest
- Default new installations to Calico V3
  - Set etcd to V3 when calico is specified for networking
- Validate that etcd is V3 when Calico MajorVersion is v3
- Using Calico v3.2.1
2018-11-07 14:00:54 -06:00
Chris Phillips af7377d530 fix use of --networking in create cluster 2018-11-07 08:08:44 -08:00
Chris Phillips 2b9a56f8e6 rename to LyftVPC. Removes all the settings from the NetworkingSpec 2018-11-07 08:08:44 -08:00
Chris Phillips 3a8078763a Adds support for Lyft's cni-ipvlan-vpc-k8s
https://github.com/lyft/cni-ipvlan-vpc-k8s

This cni solution is slightly different in that it doesn't require running a daemonset

It requires:
  * a config file in /etc/cni/net.d
  * the binaries in /opt/cni/bin
  * adding the --node-ip param to the kubelet

This code is modeled after the AmazonVPC cni bits.

I've left the setup of the required subnets as an exercise to the reader.
2018-11-07 08:08:13 -08:00
xichengliudui 5826e4f361 Remove unnecessary code 2018-11-07 00:57:10 -05:00
Raffaele Di Fazio 455d6e850b
Fixed issue when specifying ACM cert and no load balancer is defined 2018-10-19 10:29:13 +02:00
Liran Polak 4ecc03ad99 fix: add product descriptions to the help output 2018-10-14 11:37:31 +03:00
Liran Polak 9f94c06e67 fix: rename spotinst's feature flag 2018-10-14 11:37:31 +03:00
Liran Polak 7654a923f1 feature: new integration: spotinst 2018-10-14 11:37:31 +03:00
Sean Johnson 737a7a2cb8 5700: Add command line flag for disabling Subnet ELB tags 2018-10-10 12:48:06 +11:00
Justin Santa Barbara 01d188af38 Sync up CLI args help
Follow on to #5425; another flag and we need to update the source code
as well as the output.

Follow on also to #5721 and #4687
2018-10-08 17:03:00 -07:00
k8s-ci-robot 54cbe492cb
Merge pull request #5414 from Raffo/master
[WIP] Initial implementation of ACM certificate for API server ELB
2018-07-19 08:34:54 -07:00
Raffaele Di Fazio f820deb2e7 clarify message for cli argument 2018-07-06 10:06:43 +02:00
Raffaele Di Fazio d477e96c38 Added initial implementation of ACM cert for Kubernetes API ELB 2018-07-06 09:29:54 +02:00
Justin Santa Barbara 1549b6e961 Don't autoload SSH key on GCE
This lets us merge #5056
2018-06-17 09:11:06 -04:00
k8s-ci-robot f7243a933b
Merge pull request #5123 from justinsb/harmonize_override_and_set_cluster
Unify create-create overrides and set-cluster fields
2018-05-19 12:56:50 -07:00
k8s-ci-robot 2644e6c0eb
Merge pull request #4991 from AliyunContainerService/network
Implement network task for AlibabaCloud
2018-05-11 10:09:28 -07:00
Justin Santa Barbara 81d5f06a58 Unify create-create overrides and set-cluster fields
Supports e2e upgrade tests
2018-05-09 11:55:44 -04:00
AdamDang d8bf642e0d
Update create_cluster.go 2018-05-03 20:20:46 +08:00
LilyFaFa ad9cf7d3e2 init ALICloud and add network Model 2018-04-19 20:48:40 +08:00
sunlintong dc388698a0 Ouput --> Output 2018-04-03 16:07:52 +08:00
Maciej Kwiek bca52dede9 Add Cilium as CNI plugin
Signed-off-by: Maciej Kwiek <maciej@covalent.io>
2018-03-20 13:07:26 +01:00
Justin Santa Barbara 85b972bc28 Fill out cloudmock to do a basic lifecycle test 2018-03-11 17:04:30 -04:00
Justin Santa Barbara c121e7f14e Create lifecycle test against AWS mocks
We create a cluster, run kops update, then run kops update again.  We
expect no changes on the second update.
2018-03-11 17:04:30 -04:00
Justin Santa Barbara b68f58d746 Change NewAssetBuilder to take a kops.Cluseter 2018-02-22 21:42:40 -08:00
chrislovecnm 71c8fa4b3a Updating variables to use Camel Case
I am fixing the work where I used snake case variables instead of camel
case.  Go likes camel case much better.  This commit is only a refactor
of names.
2018-02-19 20:57:58 -07:00
k8s-ci-robot b02a73fa2c
Merge pull request #4184 from chrislovecnm/rbac-default
Switching the default for kops to create a cluster with RBAC enabled.
2018-01-26 10:52:33 -08:00
k8s-ci-robot 9ddc915e8e
Merge pull request #4332 from justinsb/default_gcp_project
GCE: Get default project from gcloud CLI
2018-01-25 10:53:16 -08:00
Justin Santa Barbara d3082167c6 Add UX hint when project not set 2018-01-25 13:14:40 -05:00
Justin Santa Barbara e2109c42f4 GCE: Don't require SSH public key
We also pull a bit of logic out of the mega-function.

Fix #4210
2018-01-24 10:48:31 -05:00
Justin Santa Barbara 5e49b6f831 GCE: Get default project from gcloud CLI
This means we don't have to specify a project for the common use case,
when gcloud is already configured with a project.
2018-01-24 09:43:05 -05:00
Maciej Kwiek 47590720ce Move net mode log after it is known in create
Signed-off-by: Maciej Kwiek <maciej@covalent.io>
2018-01-18 14:29:56 +01:00
Peter Rifel 9b3f0c17ea Fix typo in --target description 2018-01-08 12:10:03 -08:00
chrislovecnm b5bb3f983f Adding overide for setting etcd version
Added new overide capability to set all etcd version dynamically.  This
is needed for HA testing. For example following flag can now be used with
create cluster.

--override "cluster.spec.etcdClusters*.version=3.0.17"
2018-01-04 08:59:04 -07:00
chrislovecnm 120cd93c26 Switching the default for kops to create a cluster with RBAC enabled.
When kops creates a cluster RBAC is enabled by default.
2018-01-03 00:31:05 -07:00
Kubernetes Submit Queue e88496a248
Merge pull request #4061 from meringu/create-subnets
Automatic merge from submit-queue.

Add --subnets and --utility-subnets to kops create cluster

This change adds two new options to `kops create cluster`

When specifying `--vpc`, `--subnets` can be specified as an unordered array of subnet ids. Kops will then look up the zones of the subnets to find which zone to add the subnet id to.

If `--topology private` is also specified, `--utility-subnets` can similarly be specified.

~If a zone was specified but a subnet wasn't given that matches the zone, then the subnet will be allocated a CIDR with the current behaviour.~ This case fails validation here 7bd0a6a703/pkg/apis/kops/validation/validation.go (L151)

I can add unit tests and docs changes if required, but I am keen to get feedback before I proceed much further.

I have only added support for AWS.

I have tested this by running a command similar to this:

```bash
kops create cluster \
  --zones=us-east-1a,us-east-1b,us-east-1c \
  --topology private \
  --master-zones=us-east-1a,us-east-1b,us-east-1c  \
  --vpc $vpc_id \
  --subnets subnet-111111,subnet-222222,subnet-333333 \
  --utility-subnets subnet-444444,subnet-555555,subnet-666666 \
  $cluster_hosted_zone_name
```

And the cluster spec was as expected.
2017-12-18 21:12:59 -08:00
Kubernetes Submit Queue 15c7d61dfb
Merge pull request #3997 from aledbf/amazon-vpc-cni
Automatic merge from submit-queue.

Add support for Amazon VPC CNI plugin

TODO:
- [x] IAM perms so that the CNI provider only has perms for the nodes in the cluster
- [x] Cleanup of security groups
- [ ] Replace image aledbf/k8s-ec2-srcdst:v0.1.0-5 with the official after https://github.com/ottoyiu/k8s-ec2-srcdst/pull/5 and https://github.com/ottoyiu/k8s-ec2-srcdst/pull/6
2017-12-17 21:41:13 -08:00
Kubernetes Submit Queue dd49d69399
Merge pull request #3254 from chrislovecnm/file-assets
Automatic merge from submit-queue.

work on using files assets

Basic MVP for file assests.

- using file assest builder
- able to upload files
- using URL structs instead of strings everywhere
2017-12-17 16:10:23 -08:00
chrislovecnm 7057aaf1bb Enabling the file assets
File assets and the SHA files are uploaded to the new location. Files
when are users uses s3 are upload public read only. The copyfile task
uses only the existing SHA value.

This PR include major refactoring of the use of URLs.  Strings are no
longer categnated, but converted into a URL struct and path.Join is
utlilized.

A new values.go file is included so that we can start refactoring more
code out of the "fi" package.

A
2017-12-17 15:26:57 -07:00
Henry Muru Paenga 0491530b6e Lookup vpc if not given to create cluster 2017-12-18 11:12:57 +13:00
Manuel de Brito Fontes 2e05dd17aa Add support for Amazon VPC CNI plugin 2017-12-17 18:08:24 -03:00