Kubernetes Prow Robot
d35bce0ff8
Merge pull request #11764 from olemarkus/cilium-etcd-fix
...
Don't try to build etcd-manager secrets for cilium twice
2021-06-17 00:14:20 -07:00
Kubernetes Prow Robot
84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
...
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
dntosas
7bf65ff7ef
[cni/cilium] Add support for additional config options
...
In this commit, we enable users define their setup with following
additional fields:
- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy
Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.
Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Ole Markus With
f80b550c7a
Use internal name for cilium etcd if we do not enable api server nodes
2021-06-16 08:27:26 +02:00
Kubernetes Prow Robot
847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig
...
Set containerd config on nodeup.Config instead of clusterspec
2021-06-15 15:13:43 -07:00
Ole Markus With
e7fa3fa82c
Set containerd config on nodeup.Config instead of clusterspec
...
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)
Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
2021-06-15 11:08:22 +02:00
John Gardiner Myers
2f71fb2cf4
Default the NodeCIDRMaskSize appropriately for IPv6
2021-06-14 20:43:09 -07:00
Kubernetes Prow Robot
392b517fda
Merge pull request #11756 from johngmyers/pod-cidr
...
Set default ClusterCIDR through the PodCIDR
2021-06-14 02:37:04 -07:00
John Gardiner Myers
51d0697dc3
Set default ClusterCIDR through the PodCIDR
2021-06-13 22:46:32 -07:00
John Gardiner Myers
0b7f6e3082
Remove dead code
2021-06-13 21:37:01 -07:00
John Gardiner Myers
3cf8234d01
Cilium: disable masquerade by default when in ENI IPAM mode
2021-06-13 21:36:56 -07:00
John Gardiner Myers
fc9ec13bb7
Set BindAddress appropriately when in IPv6-only mode
2021-06-13 09:41:19 -07:00
Ole Markus With
6582235312
Make AWS EBS CSI Driver default as of k8s 1.22
2021-06-08 22:29:16 +02:00
Ciprian Hacman
47bb825061
Generate AWSEBSCSIDriver model only when using AWS
2021-06-08 08:20:21 +03:00
John Gardiner Myers
e0915887ed
Move asset copying out of apply_cluster
2021-06-05 21:17:50 -07:00
John Gardiner Myers
fc4f0888ac
hack/update-expected.sh
2021-06-02 23:02:17 -07:00
John Gardiner Myers
7c9e7e9286
Make Lifecycle field non-pointer
2021-06-02 23:02:16 -07:00
Ole Markus With
553fdd5840
Bump default cilium to 1.10
2021-06-01 08:12:20 +02:00
Ole Markus With
2d643fff11
Don't set the master address for aws ccm
...
Use the kubernetes.default service for now. Ideally we would not rely on this as this in turn relies on CNI. But fixing this means also fixing PKI, so we have to revisit this later
2021-05-23 22:24:31 +02:00
Ole Markus With
3d90769e1c
Set flags on AWS CCM mimicking KCM
2021-05-22 14:15:53 +02:00
Ole Markus With
5869d4e6d4
Bump default cilium to 1.9.7
2021-05-21 18:54:03 +02:00
Ole Markus With
46e13c0009
Bump snapshot-controller version
...
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
Update upup/models/cloudup/resources/addons/storage-aws.addons.k8s.io/v1.15.0.yaml.template
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2021-05-21 15:40:40 +02:00
Alexander Block
bb52334222
Make the events etcd cluster optional
2021-05-20 08:05:42 +02:00
Ciprian Hacman
6e6a224f9d
Update containerd to v1.4.6
2021-05-19 20:27:28 +03:00
Ole Markus With
103e3f3b7e
Add support for CAS 1.21.0
2021-05-12 08:10:36 +02:00
Kubernetes Prow Robot
7db45cb5fa
Merge pull request #11418 from dntosas/aws-csi-ga-release
...
[addons/awscsidriver] Bump to GA release
2021-05-08 02:46:47 -07:00
dntosas
f8ece50a96
[addons/awscsidriver] Bump to GA release
...
Bump version and manifests of AWS EBS CSI Driver to the first GA
release.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-05-08 11:47:43 +03:00
John Gardiner Myers
36f93d0069
hack/update-expected.sh
2021-05-07 23:40:03 -07:00
John Gardiner Myers
d3469d6ec2
Remove code for no-longer-supported k8s versions
2021-05-07 23:40:03 -07:00
Ciprian Hacman
305e4bbe99
Use etcd-backup built from etcdadm repo
2021-05-08 07:11:21 +03:00
Justin SB
c1dd7e7698
Use etcd-manager built from etcdadm repo
...
We can now use etcd-manager as built from the kubernetes-sigs/etcdadm
repo.
2021-05-08 07:11:21 +03:00
John Gardiner Myers
3aa8d40052
Release 1.22.0-alpha.1
2021-05-07 13:45:35 -07:00
John Gardiner Myers
8823f30ad7
Recognize the ServiceAccountIssuerDiscovery featue gate
2021-05-06 08:57:37 -07:00
Kubernetes Prow Robot
a04d787d81
Merge pull request #11392 from olemarkus/guard-sa-remap
...
Don't add IRSA env vars if feature flag is not enabled
2021-05-06 03:57:16 -07:00
Ole Markus With
5d4f6e6dee
Don't add IRSA env vars if feature flag is not enabled
2021-05-06 11:18:07 +02:00
John Gardiner Myers
d21cb0f306
Use consistent ServiceAccountJWKSURI default for PublicJWKS
2021-05-06 00:15:15 -07:00
Ole Markus With
aadcd9d448
Add more support for cilium 1.10
2021-05-03 16:10:56 +02:00
Ciprian Hacman
689b76d0ff
Mark control-plane node for update when etcd manager config changes
2021-05-02 08:50:42 +03:00
dntosas
7e20f87822
[addons/nth] Add capability to define resources
...
Node termination handler as all daemonSets may play a critical role in
capacity planning, define resource policy for chosing instanceType etc.
In this commit, we enable users to define resources themselves to meet
their needs and also removed limits to convey with the chosen strategy
to avoid limits on such components.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-04-30 14:13:11 +03:00
Ciprian Hacman
75047c6513
Mount /run inside etcd-manager pods for systemd mounts
2021-04-29 10:15:58 +03:00
Ole Markus With
01ccf4590f
Bump cilium to 1.9.6
2021-04-28 10:06:13 +02:00
dntosas
af6d4d585f
[csi/aws] Bump templates to latest stable version …
...
- Update manifests
- Bump components version
- Add API capability of setting Version + VolumeLimit
- Remove snapshot-controller resources as it should be independent from
any CSI driver
Signed-off-by: dntosas <ntosas@gmail.com>
2021-04-25 16:45:15 +03:00
Jason Haugen
36722afb0f
change casing Asg->ASG
2021-04-22 13:07:01 -05:00
Jason Haugen
7e48dad4d2
add ManagedAsgTag, merge templates, improve docs
2021-04-19 16:51:08 -05:00
Jason Haugen
10df4a9a14
integ tests
2021-04-19 15:43:05 -05:00
Jason Haugen
d07b067249
Add NTH queue-processor mode
2021-04-19 15:43:05 -05:00
Kubernetes Prow Robot
146f9b4cbb
Merge pull request #11248 from dntosas/cilium-resources
...
[cilium] Add support for choosing resources
2021-04-19 10:23:45 -07:00
dntosas
55524935d7
[cilium] Add support for choosing resources
...
Cilium as a CNI is a critical component for the cluster so it would be safe
to have some guaranteed resources as well as allowing the users to
define them based on their needs.
In this commit, we init default requested resources and add the
capability of user-defined values.
Signed-off-by: dntosas <ntosas@gmail.com>
2021-04-19 11:30:02 +03:00
Ciprian Hacman
f3c6558fd0
Release 1.21.0-alpha.3
2021-04-14 09:13:04 +03:00
Barry Melbourne
1a60629d38
Update Docker to v20.10.5
2021-04-11 19:26:46 +01:00