Commit Graph

4381 Commits

Author SHA1 Message Date
Kubernetes Prow Robot 8d91f868b1
Merge pull request #11780 from olemarkus/bump-cas-addon-version
Bump the cas addon version.
2021-06-16 04:13:58 -07:00
Ole Markus With 03ee36832d Bump the cas addon version.
Between kOps 1.19 and 1.20, the version went from 1.19.1 to 1.19.0, which prevents any further changes from being applied to the cluster. Bumping to 1.19.2 so that channels can apply again
2021-06-16 12:32:39 +02:00
Kubernetes Prow Robot 84a730c9d6
Merge pull request #11678 from dntosas/safe-cilium
[cni/cilium] Add support for additional config options
2021-06-16 02:47:58 -07:00
dntosas 7bf65ff7ef
[cni/cilium] Add support for additional config options
In this commit, we enable users define their setup with following
additional fields:

- DisableEndpointCRD
- EnableEndpointHealthChecking
- IdentityAllocationMode
- IdentityChangeGracePeriod
- BPFLBAlgorithm
- BPFLBMaglevTableSize
- BPFNATGlobalMax
- BPFNeighGlobalMax
- BPFPolicyMapMax
- EnableBPFMasquerade
- EnableL7Proxy

Added also validation tests to prevent conflicting value combinations to
reach actual cluster state.

Signed-off-by: dntosas <ntosas@gmail.com>
Co-authored-by: hwoarang <markos@chandras.me>
Signed-off-by: dntosas <ntosas@gmail.com>
2021-06-16 09:35:42 +03:00
Kubernetes Prow Robot caf41e899f
Merge pull request #11772 from johngmyers/smaller-podcidr
Allocate smaller IPv6 PodCIDRs by default
2021-06-15 22:29:59 -07:00
Kubernetes Prow Robot 847040de53
Merge pull request #11750 from olemarkus/containerd-per-ig
Set containerd config on nodeup.Config instead of clusterspec
2021-06-15 15:13:43 -07:00
Kubernetes Prow Robot b0b1ae1ea7
Merge pull request #11771 from olemarkus/fix-default-sc
fix enable default SC when EBS driver is not installed
2021-06-15 14:29:43 -07:00
John Gardiner Myers e9317551f3 Allocate smaller IPv6 PodCIDRs by default 2021-06-15 13:31:49 -07:00
Ole Markus With 0798553565 fix enable default SC when EBS driver is not installed 2021-06-15 22:08:59 +02:00
Eric Bailey f58482c584
Update populate_instancegroup_spec.go
fix typo: APIServrNodes -> APIServerNodes
2021-06-15 13:59:35 -05:00
Ole Markus With e7fa3fa82c Set containerd config on nodeup.Config instead of clusterspec
This allows us to set a default containerd config per IG (e.g add a different config for GPU IGs)

Can also be considered a cleanup as we no longer use containerd.overrideConfig as a mechanism for bringing the default containerd config from cloudup to nodeup.
2021-06-15 11:08:22 +02:00
Kubernetes Prow Robot 7a017af159
Merge pull request #11725 from johngmyers/is-ipv6
Simplify Calico IPv6 configuration
2021-06-15 01:46:00 -07:00
John Gardiner Myers 1356818d83 Make the AdminAccess default inclusive of IPv6 2021-06-14 21:51:17 -07:00
John Gardiner Myers 07ee0c2206 Simplify Calico IPv6 configuration 2021-06-14 08:06:10 -07:00
Kubernetes Prow Robot 0347d79a14
Merge pull request #11754 from johngmyers/ipv6-cilium
Enable IPv6 support for Cilium
2021-06-14 07:27:04 -07:00
Kubernetes Prow Robot 392b517fda
Merge pull request #11756 from johngmyers/pod-cidr
Set default ClusterCIDR through the PodCIDR
2021-06-14 02:37:04 -07:00
John Gardiner Myers 51d0697dc3 Set default ClusterCIDR through the PodCIDR 2021-06-13 22:46:32 -07:00
John Gardiner Myers 3cf8234d01 Cilium: disable masquerade by default when in ENI IPAM mode 2021-06-13 21:36:56 -07:00
John Gardiner Myers c0b54d980d Enable IPv6 support for Cilium 2021-06-13 20:47:44 -07:00
Kubernetes Prow Robot b29c612b9c
Merge pull request #11629 from hakman/ipv6_experimental_flag
Add --ipv6 experimental cli flag
2021-06-13 13:29:02 -07:00
Ciprian Hacman 2a11fa7dde Add --ipv6 experimental cli flag 2021-06-13 21:48:46 +02:00
Kubernetes Prow Robot 6c4dec4f1f
Merge pull request #11741 from ederst/os-fix-security-group-sorting
Compare OpenStack security groups deterministically
2021-06-13 04:59:02 -07:00
Kubernetes Prow Robot b71ba1d566
Merge pull request #11219 from johngmyers/refactor-keypair
Refactor keypair code in preparation for secret rotation
2021-06-12 14:25:00 -07:00
Kubernetes Prow Robot cfc93e5178
Merge pull request #9294 from johngmyers/refactor-nodeup-context
Remove InstanceGroup from NodeupModelContext
2021-06-12 13:43:01 -07:00
ederst 7f787decd8 Make forwardToKubeDNS work in the NodeLocal DNSCache template
This fixes the rendering of the Corefile of the NodeLocal DNSCache
template when setting forwardToKubeDNS to false (or not setting it).

Previously, due to not dereferencing the bool pointer, the Corefile was
always rendered with the true clause, due to checking the address
instead of the actual value of the variable.

With this fix, the templating mechanism will actually respect the value
of forwardToKubeDNS and render it accordingly.
2021-06-11 21:58:07 +02:00
ederst 233145ff59 Compare OpenStack security groups deterministically
This sorts the security groups of the port model and when querying the
cloud, which will result in tasks comparing those slices
deterministically.
2021-06-11 15:03:40 +02:00
Kubernetes Prow Robot 92af7b88f4
Merge pull request #11523 from hakman/ipv6_cidr_subnet
Calculate IPv6 subnet CIDR based on cluster CIDR
2021-06-10 21:40:13 -07:00
Kubernetes Prow Robot 84cecd531b
Merge pull request #11630 from johngmyers/deprecate-cloudformation
Deprecate CloudFormation support
2021-06-10 08:49:27 -07:00
John Gardiner Myers f19bc57eb4 Print deprecation warning when using CloudFormation target 2021-06-10 07:11:23 -07:00
Kubernetes Prow Robot 4005c209ff
Merge pull request #11604 from spotinst/feat-aws-nlb
Spotinst: Support for API Load Balancer with AWS/NLB
2021-06-10 04:29:28 -07:00
Kubernetes Prow Robot 84d4c05479
Merge pull request #11724 from johngmyers/populate-subnets
Perform ClusterCIDR and ServiceClusterIPRange assignments for IPv6
2021-06-10 01:55:27 -07:00
Ciprian Hacman eca04918ad Calculate expected IPv6 CIDR if possible and in the "/64#N" format 2021-06-10 07:41:01 +03:00
Ciprian Hacman 9cf7039e2e Rename ParseCidrSubnet() to ParseCIDRNotation() 2021-06-10 07:15:03 +03:00
Ciprian Hacman 4fc11dba94 Check that VPC IPv6 CIDR exist before calculating the subnet CIDR 2021-06-10 07:06:22 +03:00
Kubernetes Prow Robot 0d63479723
Merge pull request #11722 from olemarkus/cilium-quay
Use quay images for cilium
2021-06-09 10:05:27 -07:00
John Gardiner Myers 074137864e Perform ClusterCIDR and ServiceClusterIPRange assignments for IPv6 2021-06-09 08:50:30 -07:00
Ciprian Hacman 99268697c0 Add Subnet dependency on VPCAmazonIPv6CIDRBlock 2021-06-09 09:57:53 +03:00
Ciprian Hacman 13104ec6ea Calculate IPv6 subnet CIDR based on cluster CIDR 2021-06-09 09:57:53 +03:00
John Gardiner Myers 64656bb911 Add test for assigning ClusterCIDR and ClusterIPRange 2021-06-08 20:41:30 -07:00
Ole Markus With c162013a3c Use quay images for cilium 2021-06-08 23:01:08 +02:00
Ole Markus With 6582235312 Make AWS EBS CSI Driver default as of k8s 1.22 2021-06-08 22:29:16 +02:00
Dmytro Oboznyi feed3b26ae
Add proxy envs to calico to make possible usage of AWS source destination check
Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
2021-06-07 16:56:35 +03:00
Kubernetes Prow Robot 16dca9e844
Merge pull request #11124 from hakman/kube-router-1.2.0
Update kube-router to v1.2.3
2021-06-06 21:52:39 -07:00
Ciprian Hacman 91d681622c Update kube-router to v1.2.3 2021-06-07 05:25:00 +03:00
Kubernetes Prow Robot 2d86a85b36
Merge pull request #11700 from johngmyers/copy-assets
Move asset copying out of apply_cluster
2021-06-06 16:38:38 -07:00
Kubernetes Prow Robot 673961cb0f
Merge pull request #11703 from olemarkus/lbc-use-v1-cert
Use v1 certificate for LB controller
2021-06-06 12:06:39 -07:00
Kubernetes Prow Robot 9984ba079c
Merge pull request #11701 from olemarkus/fix-ebs-csi-role-crb
Fix the CSI EBS DS CRB.
2021-06-06 11:08:38 -07:00
Ole Markus With 0e1a0538b3 Use v1 certificate 2021-06-06 19:28:19 +02:00
Ole Markus With 8f8d6deb17 Fix the CSI EBS DS CRB. 2021-06-06 19:23:22 +02:00
Kubernetes Prow Robot 9f53dc1b06
Merge pull request #11656 from johngmyers/docker-io
Fix copying of images from docker.io
2021-06-06 09:00:39 -07:00