Commit Graph

1963 Commits

Author SHA1 Message Date
Jesse Haka d3fac0c1be GCP API health checks 2022-02-03 21:02:21 +02:00
Ole Markus With af4d69cab3 Use etcd-manager pre-release until final release has been cut 2022-02-02 13:10:32 +01:00
Ole Markus With 994588c0fd Bump etcd-manager to v3.0.20220128 2022-01-30 07:13:32 +01:00
Kubernetes Prow Robot 3b8727de06
Merge pull request #13143 from olemarkus/ccm-bump-123
Bump CCM images
2022-01-21 07:45:59 -08:00
Kubernetes Prow Robot c9ad543dea
Merge pull request #13096 from zetaab/poolmonitor
OpenStack - Add loadbalancer pool monitor to API LB
2022-01-21 04:49:58 -08:00
Ole Markus With 71a144136e Bump CCM images 2022-01-21 13:24:40 +01:00
Kubernetes Prow Robot ba837c0680
Merge pull request #13135 from olemarkus/metrics-server-bump-123
Bump metrics-server to 0.6.0 and enable HA mode
2022-01-21 01:27:59 -08:00
Ole Markus With 59dc424eae Bump metrics-server to 0.6.0 and enable HA mode 2022-01-21 09:28:50 +01:00
Kubernetes Prow Robot fd242709f3
Merge pull request #12911 from olemarkus/tag-on-create
Tag on create for remaining CCM privileges
2022-01-21 00:11:59 -08:00
Ole Markus With 9d476c0e9c Add CreateSecurityGroup permission for vpcs 2022-01-20 17:49:36 +01:00
Ole Markus With 666cf710a2 Push partition into the policy struct 2022-01-20 17:49:36 +01:00
Ole Markus With 0a082fed12 Require tag on create for external AWS CCM 2022-01-20 15:32:46 +01:00
Jesse Haka 0beb036d83 expose external ccm metrics for OpenStack 2022-01-20 15:22:30 +02:00
Ciprian Hacman 68b4611066 Clean up kubelet networking flags for dockershim
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 17:36:18 +02:00
Ciprian Hacman bf82a8f260 Update pause image to v3.6
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 13:00:36 +02:00
Kubernetes Prow Robot 4eb54f2260
Merge pull request #13114 from olemarkus/nodeup-describe-regions
Add DescribeRegions to nodeup privs
2022-01-18 22:14:05 -08:00
Kubernetes Prow Robot fda6210e29
Merge pull request #13104 from olemarkus/tag-on-create-func
Create helper function for ec2 create/tag-on-create IAM permissions
2022-01-18 19:30:06 -08:00
Ole Markus With 3f265a43bb Remove networking flags as of k8s 1.24 2022-01-18 22:15:16 +01:00
Kubernetes Prow Robot 85732b4c4d
Merge pull request #13030 from johngmyers/v6-topology
Use IPv6-only subnets for worker nodes in private IPv6 topology
2022-01-18 10:58:40 -08:00
Jesse Haka 6b32f79c18 OpenStack - Add loadbalancer pool monitor to API LB 2022-01-18 12:10:47 +02:00
Ole Markus With b80488906f Add DescribeRegions to nodeup privs 2022-01-17 09:34:29 +01:00
Kubernetes Prow Robot 7e645187bc
Merge pull request #13110 from olemarkus/no-dns-irsa-on-gossip
Do not create an IAM role for dns-controller on gossip clusters
2022-01-16 11:29:28 -08:00
Kubernetes Prow Robot b82a5d917e
Merge pull request #13093 from zetaab/fixmaster
fix ipv4+ipv6 sec groups/listeners in OpenStack
2022-01-16 03:37:27 -08:00
Ole Markus With 0ef596dd49 Do not create an IAM role for dns-controller on gossip clusters 2022-01-16 10:31:11 +01:00
Ole Markus With f4e538508f Create helper function for ec2 create/tag-on-create IAM permissions 2022-01-14 18:41:28 +01:00
Ciprian Hacman 678366b916 Update containerd to v1.6.0-rc.0
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-13 07:39:37 +02:00
Jesse Haka fbb8b1ff08 make gazelle 2022-01-12 15:13:08 +02:00
Jesse Haka acdca486e7 fix ipv4+ipv6 sec groups/listeners in OpenStack 2022-01-12 15:11:51 +02:00
Ciprian Hacman 3f6db14e89 Update containerd to v1.6.0-beta.5
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-07 10:18:10 +02:00
John Gardiner Myers 5385381633 Use IPv6-only subnets for worker nodes in private IPv6 topology 2022-01-06 21:00:00 -08:00
Kubernetes Prow Robot af7e6a4aeb
Merge pull request #12983 from zetaab/feature/drainos
Drain OpenStack loadbalancers
2022-01-03 02:23:00 -08:00
John Gardiner Myers d5ac8862d5 Release 1.24.0-alpha.2 2022-01-01 10:35:11 -08:00
John Gardiner Myers 4d4a4a9e01 Use latest GCP CCM for k8s 1.24 2021-12-31 17:31:12 -08:00
justinsb 45ad8b50ae Enhance AddHostPathMapping to support a fluent style
This allows for the helper to be used in more places.
2021-12-31 13:26:12 -05:00
Jesse Haka b88d110f58 Drain OpenStack loadbalancers 2021-12-31 13:16:02 +02:00
Ole Markus With ea9d0de847 Handle default in templating instead of ig population 2021-12-30 09:01:43 +01:00
Ole Markus With dd06cd337f Bump Cluster Autoscaler and update manifest 2021-12-29 18:06:27 +01:00
John Gardiner Myers dae281d30e Migrate to GCE CCM in k8s 1.24 2021-12-28 19:33:07 -08:00
Jiahui Feng f3ca669141 generated: ./hack/update-bazel.sh 2021-12-20 17:19:34 -08:00
Jiahui Feng 733f4d524f external CCM for GCE 2021-12-20 17:15:17 -08:00
justinsb 93a6871e9b gce: don't set per-IG permissions when using shared account
If we're using a cluster-level service-account, we shouldn't try to
set bucket permissions on a per-IG level.

For compatibility with the existing behavior, we simply don't set any
permissions in this case.
2021-12-28 10:10:16 -05:00
Ole Markus With b09241122f Support specifying instance requirements per IG
Update docs/instance_groups.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-12-24 21:19:58 +01:00
John Gardiner Myers f9071dd0d5 Allow IPv6-only subnets 2021-12-23 19:50:46 -08:00
Kubernetes Prow Robot 2f31054e19
Merge pull request #13007 from hakman/skip_non-masquerade-cidr
Use kubelet --non-masquerade-cidr only for Docker with kubenet
2021-12-21 18:49:36 -08:00
justinsb 994ac19b42 Use fi.Keyset instead of passing tasks around
Using a task leads to layering complexity.  We could introduce a new
type, but fi.Keyset is the type we seem to want.

(We could move Keyset out of fi, but we don't need to yet)

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-12-20 23:24:32 -05:00
justinsb e8ddfa4328 Update test data for bash return change 2021-12-20 10:12:07 -05:00
justinsb fdf412cdf5 nodeup bash script: use explicit return code
In bash, `return` returns the exit code of the last statement.  Being
explicit here is safer, and I believe in the first case (the cached
download) the value was actually incorrect.
2021-12-20 10:08:06 -05:00
Ole Markus With 00f8808ab1 Log the specific yaml segment that fails. Also remove redundant full manifest logging 2021-12-20 15:04:52 +01:00
Ciprian Hacman cb6d424675 Use kubelet --non-masquerade-cidr only for Docker with kubenet 2021-12-20 08:47:02 +02:00
John Gardiner Myers 3314c18e89 Support creating dualstack internal NLBs 2021-12-19 21:52:56 -08:00