kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
21,242 Commits 31 Branches 256 Tags 544 MiB
Commit Graph

232 Commits

Author SHA1 Message Date
Ole Markus With 01590c03b0 Add a create cluster integration test for openstack 
Fix various openstack nprs. Also add create cluster integration test
 2022-11-23 10:25:29 +01:00
Ole Markus With f75bc66732 Make --networking=cilium-eni configure cilium to use eni ipam 2022-11-23 09:10:20 +01:00
Ole Markus With 7a1f0f4bda Add bare networking flag option for cilium in eni mode 2022-11-23 09:10:16 +01:00
John Gardiner Myers 939fc1184a hack/update-expected.sh 2022-11-22 22:11:24 -08:00
John Gardiner Myers 6c0603991b Create new clusters with updated control plane IG names 2022-11-22 22:09:08 -08:00
Ciprian Hacman 0207d94201 Add integration test 2022-11-20 07:09:45 +02:00
John Gardiner Myers 0af0ff27f9 hack/update-expected.sh 2022-11-18 22:47:28 -08:00
Ole Markus With 035fa79077 Set IMDS max hop limit to 1 for control plane nodes 
Update docs/releases/1.26-NOTES.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
 2022-11-17 19:26:48 +01:00
Ole Markus With 2f59911458 Add create cluster test with irsa 2022-11-17 19:25:19 +01:00
Ciprian Hacman 44c36763af Run hack/update-expected.sh 2022-11-12 10:45:01 +02:00
Moshe Shitrit 42e7c48c9a hack/update-expected 2022-11-10 12:55:17 -05:00
Ciprian Hacman 810151fc31 hetzner: Update integration tests 2022-10-27 11:32:25 +03:00
Ciprian Hacman c725b6480d Run hack/update-expected.sh 2022-10-12 11:18:30 +03:00
Ole Markus With 3cdfb0181b Nil clouds use amd64 2022-09-28 12:16:03 +02:00
Ole Markus With 8c12d5b035 When using kops create, set the provided machinetype in the written IG spec 2022-09-28 12:16:03 +02:00
Ole Markus With 466a7e6989 Add create cluster test for arm64 2022-09-28 12:16:03 +02:00
Ciprian Hacman c3ea0d37b0 Run hack/update-expected.sh 2022-09-28 11:32:19 +03:00
Ciprian Hacman 4cb6623941 Run hack/update-expected.sh 2022-09-28 08:46:23 +03:00
Ciprian Hacman 9700d4d934 Run hack/update-expected.sh 2022-09-06 08:34:23 +03:00
Moshe Shitrit 2184a0659e hack/update-expected 2022-08-28 20:38:49 -04:00
Ciprian Hacman 272ded0187 Add integration tests for Hetzner 2022-08-25 08:14:39 +03:00
Ole Markus With 20ececb2e6 Update expected 2022-08-20 07:15:10 +02:00
Ole Markus With fdb72f2c34 Add create cluster test that includes apiserver 2022-08-19 18:57:43 +02:00
Ole Markus With 29a7268442 Add more create_cluster integration tests 2022-08-19 18:57:17 +02:00
Moshe Shitrit d6c7e8421f update-expected 2022-06-25 01:21:19 -04:00
Ole Markus With 4f5ef4f684 Remove 1.19 create cluster integration test 2022-06-07 15:53:51 +02:00
Ole Markus With 5c2f33d148 Promote May AMIs in channels 
Already been running for some time in e2e
 2022-05-17 07:46:30 +02:00
Kubernetes Prow Robot 6d264080ed
Merge pull request #13484 from olemarkus/no-bazel-targets 
Remove bazel targets and tools
 2022-04-17 23:16:41 -07:00
Ole Markus With ce2e877aeb Remove bazel files from vendor 2022-04-12 13:29:03 +02:00
Ole Markus With 8d4a6c35a9 Bump Ubuntu AMIs in alpha and stable 2022-04-12 08:12:25 +02:00
Ciprian Hacman d4bfb10c46 Run hack/update-expected.sh 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2022-03-11 07:41:53 +02:00
Moshe Shitrit 120f4647f9 Update expected 2022-02-08 22:05:09 -05:00
Jesse Haka d591ee9c80 update GCE default images 2022-02-02 13:57:50 +02:00
Eric Bailey 4033d83adc Promote alpha AMIs to stable 
https://ubuntu.com/security/CVE-2022-0185
 2022-01-26 00:23:03 -06:00
Ole Markus With ea9d0de847 Handle default in templating instead of ig population 2021-12-30 09:01:43 +01:00
Ole Markus With 655d63cec1 Use instance requirements to get a wider set of instance types by default 2021-12-29 20:14:58 +01:00
Ole Markus With 8e59f5bc23 Create create_cluster test for karpenter 2021-12-24 09:20:06 +01:00
justinsb 7270fd9165 Update expected test output 2021-12-17 12:57:14 -05:00
Ole Markus With b785965c50 Rename InstanceManager to Manager 2021-12-13 09:14:24 +01:00
Ole Markus With d4ec7cc7e0 Make kops get instances work with karpenter 2021-12-12 19:33:41 +01:00
Ciprian Hacman 7357245d65 Run hack/update-expected.sh 2021-11-21 06:12:18 +02:00
Ciprian Hacman 6b33db3312 Run hack/update-expected.sh 2021-11-01 13:27:03 +02:00
John Gardiner Myers 9f99d41323 IPv6 requires external CCM 2021-10-31 12:26:30 -07:00
Kubernetes Prow Robot b2a2e4e775
Merge pull request #12617 from johngmyers/ipv6-defaultss 
Improve default CIDR assignments for IPv6
 2021-10-26 23:37:32 -07:00
John Gardiner Myers 07d9114fc2 Set NonMasqueradeCIDR to ::/0 for new IPv6 clusters 2021-10-26 19:22:00 -07:00
justinsb d363bf3dad GCE: improve network & subnet terraform support 
We should use the subnet spec in the Cluster, and default to creating
a new subnet/network, but allow an existing one to be specified.
 2021-10-24 17:41:14 -04:00
Ciprian Hacman 7ad3138cd1 Run hack/update-expected.sh 2021-10-21 10:14:01 +03:00
Ciprian Hacman 4cf87b9200 Run hack/update-expected.sh 2021-10-10 13:10:14 +03:00
Kubernetes Prow Robot be2676076c
Merge pull request #12334 from dntosas/bump-amis 
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
 2021-09-21 04:52:24 -07:00
justinsb 16fc5e8cec GCE: Don't create utility subnets in private topology 
We don't need them on GCE, and in fact we don't support them with IP Alias.
 2021-09-20 09:31:33 -04:00
dntosas dc5926520d
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest 
Signed-off-by: dntosas <ntosas@gmail.com>
 2021-09-19 10:03:52 +03:00
John Gardiner Myers f041bdafdc More kops 1.23 updates 2021-08-28 11:54:39 -07:00
Ciprian Hacman 5d67753eeb Run ./hack/update-expected.sh 2021-07-31 04:46:57 +03:00
John Gardiner Myers 56acf1cf22 hack/update-expected.sh 2021-07-26 22:05:01 -07:00
Moshe Shitrit 47ef8e32cc update-expected 2021-06-25 13:02:40 +03:00
Kubernetes Prow Robot 4cd3b58e37
Merge pull request #11763 from johngmyers/ipv6-access 
Make the AdminAccess default inclusive of IPv6
 2021-06-14 23:30:01 -07:00
John Gardiner Myers 9d531edb85 hack/update-expected.sh 2021-06-14 21:51:40 -07:00
John Gardiner Myers cab389f2f5 Rename --override to --set 2021-06-14 14:01:18 -07:00
Ciprian Hacman 2a11fa7dde Add --ipv6 experimental cli flag 2021-06-13 21:48:46 +02:00
Ciprian Hacman fcfba36b14 Pre-add integration test for creating an IPv6 cluster 2021-06-13 13:09:40 +02:00
Ole Markus With 6582235312 Make AWS EBS CSI Driver default as of k8s 1.22 2021-06-08 22:29:16 +02:00
Ole Markus With b3a60d3bc2 Set IMDSv2 on by default for nodes 
Bastion, nodes, and api servers get limit of 1
API servers tend to run pods requiring metadata access. The hop limit
depends on CNI, but all should work with a limit of 3.
 2021-06-05 08:17:12 +02:00
Ole Markus With 04b15e404e Enable AWS EBS CSI driver by default 2021-05-26 08:47:14 +02:00
Ciprian Hacman 54961e4ae5 Create new clusters without forcing a container runtime 
Decide which container runtime to use later in model, based on Kubernetes version and other settings.
 2021-05-09 21:43:58 +03:00
John Gardiner Myers 36f93d0069 hack/update-expected.sh 2021-05-07 23:40:03 -07:00
John Gardiner Myers d3469d6ec2 Remove code for no-longer-supported k8s versions 2021-05-07 23:40:03 -07:00
Ciprian Hacman 55e154a526 Update Ubuntu images to latest version 2021-04-25 09:24:20 +03:00
Ciprian Hacman d33508d51f Update kOps recommended versions and images 2021-04-17 08:52:50 +03:00
Barry Melbourne 1a60629d38 Update Docker to v20.10.5 2021-04-11 19:26:46 +01:00
Barry Melbourne 6575b6113d Update integration tests to k8s v1.21.0 2021-04-11 17:07:17 +01:00
Ciprian Hacman fa72535f95 Release 1.21.0-alpha.2 2021-03-22 08:38:47 +02:00
Barry Melbourne d13b7407a0 Update Ubuntu 20.04 to latest AMI 2021-03-20 10:52:28 +00:00
Peter Rifel 08b263b8f6
Fix GCE channels version constraints 
Previously k8s 1.17+ would always match with COS rather than Ubuntu 20.04 because of the unbound version range.
This updates 1.18+ clusters to use Ubuntu 20.04 to match AWS.

This should fix the failure to download logs via SSH here: https://prow.k8s.io/view/gs/kubernetes-jenkins/logs/e2e-kops-gce-kubetest2/1373013584195358720
The instance groups confirm the use of COS rather than u2004: https://storage.googleapis.com/kubernetes-jenkins/logs/e2e-kops-gce-kubetest2/1373013584195358720/artifacts/instancegroups.yaml
 2021-03-19 22:34:31 -05:00
MoShitrit 6f85895ac1 Update expected 2021-02-17 19:41:14 -05:00
Ole Markus With 364b0ce9bf Fix additional tests 2021-02-04 18:22:40 +01:00
Ole Markus With dd035fa2bc Revert "Set IMDSv2 to "required" only for new clusters" 
This reverts commit 12cb288df1.
 2021-02-04 17:57:35 +01:00
Ole Markus With a4c36af9de Revert "Increse imdv2 hop limit on control plane nodes" 
This reverts commit 4e00e29fc3.
 2021-02-04 17:57:23 +01:00
Ole Markus With 4e00e29fc3 Increse imdv2 hop limit on control plane nodes 
Non-hostNetworking fails to talk to the instance metadata otherwise. Breaking e.g CSI controller
 2021-01-31 19:35:07 +01:00
Ciprian Hacman 46aa146b31 Add integration tests for older Kubernetes versions 2021-01-29 14:33:36 +02:00
Ciprian Hacman 12cb288df1 Set IMDSv2 to "required" only for new clusters 2021-01-29 14:07:52 +02:00
Kubernetes Prow Robot 3d39be7721
Merge pull request #10661 from hakman/etcd-manager-defaults 
Update AWS etcd-manager volumes defaults
 2021-01-28 22:01:41 -08:00
Ciprian Hacman bcc3c98cfb Bump Ubuntu images for AWS and GCE 2021-01-28 08:31:59 +02:00
Ciprian Hacman fcea4f5b08 Set default volume encryption to "true" for etcd-manager volumes in AWS 2021-01-26 11:29:27 +02:00
Barry Melbourne 337c9c4c66 Set default container runtime to containerd 2021-01-16 14:55:35 +00:00
Ciprian Hacman 19514f431c Update integration tests for "create cluster" 2021-01-15 15:40:33 +02:00
Ciprian Hacman 82eee758e0 Update expected outputs of integration tests 2020-12-05 05:16:55 +02:00
Ciprian Hacman afbb6475fe Add integration test for creating an HA cluster in shared zone 2020-12-04 20:16:38 +02:00
MoShitrit c8b2d7b9cd update-expected.sh 2020-12-01 22:12:18 -05:00
Christian Joun e91ed11449
Implement API load balancer class with NLB and ELB support on AWS (#9011) 
* refactor TargetLoadBalancer to use DNSTarget interface instead of LoadBalancer

* add LoadBalancerClass fields into api

* make api machinery

* WIP: Implemented API loadbalancer class, allowing NLB and ELB support on AWS for new clusters.

* perform vendoring related tasks and apply fixes identified from hack/

dissallow spotinst + nlb
remove reflection in status_discovery.go
Add precreated additional security groups to the Master nodes in case of NLB
Remove support for attaching individual instances to NLB; only rely on ASG attachments
Don't specify Classic loadbalancer in GCE integration test

* add utility function to the kops model context to make LoadBalancer comparisons simpler

* use DNSTarget interface when locating DNSName of API ELB

* wip: create target group task

* Consolidate TargetGroup tasks

* Use context helper for determining api load balancer type to avoid nil pointers

* Update NLB creation to use target group ARN from separate task rather than creating a TG in-line

* Address staticcheck and bazel failures

* Removing NLB Attachment tasks because they're not used since we switched to defining them as a part of the ASGs

* Address PR review feedback

* Only set LB Class field for AWS clusters, fix nil pointer

* Move target group attributes from NLB task to TG task, removing unused attributes

* Add terraform and cloudformation support for NLBs, listeners, and target groups

* Update integration test for NLB support

* Fix NLB name format to pass terraform validation

* Preserve security group rule names when switching ELB to NLB to reduce destructive terraform changes

* Use elbv2 enums and address some TODOs

* Set healthcheck values in target group

* Find TG tags, fix NLB name detection

* Fix more spurious changes reported by lifecycle integration test

* Fix spotinst validation, more code cleanup

* Address more PR feedback

* ReconcileTargetGroups unit test + more code simplification

* Addressing PR feedback Renaming task 1. awstasks.LoadBalancer -> awstasks.ClassicLoadBalancer

* Addressing PR feedback Renaming task: ELBName() -> CLBName() / LinkToELB() -> LinkToCLB()

* Addressing PR feedback: Various text changes

* fix export of kubecfg

* address TargetGroup should have the same name as the NLB

* should address error when fetching tags due to missing ARN

* Update expected and crds

* Add feature table to NLB docs

* Address more feedback and remove some TODOs that arent applicable anymore

* Update spotinst validation error message

Co-authored-by: Peter Rifel <pgrifel@gmail.com>
 2020-11-02 05:28:52 -08:00
Ciprian Hacman a999ac2d94 Deprecate field calico.majorVersion 2020-10-30 08:37:21 +02:00
Justin SB c63ce4b5ab Implement setter by reflection 
This means we no longer have to individually hard-code the `kops set`
fields, however we use the "language" we're now demonstrated.

We add tests to ensure we have parity with our existing (hard-coded)
setter logic.
 2020-08-30 09:59:52 -04:00
Peter Rifel 55f33c68b3
Cleanup old v1alpha1 test outputs 2020-08-27 14:30:10 -05:00
Peter Rifel 64f6f5e2cb
Add integration test for GCE private topology with bastion 2020-08-27 14:28:26 -05:00
John Gardiner Myers d434733254 update-expected.sh 2020-07-30 19:42:07 -07:00
John Gardiner Myers d0b30cf771 update-expected.sh 2020-07-17 11:26:09 -07:00
John Gardiner Myers 56e5adc67e Move VPC setup into NewCluster() 2020-06-30 12:37:46 -07:00
John Gardiner Myers fe66b0011b Move CloudProvider determination into NewCluster() 2020-06-30 12:37:11 -07:00
John Gardiner Myers ec4fe1e7e8 Don't put bastions in the utility subnets 2020-05-12 22:06:34 -07:00
John Gardiner Myers 843e5b9b16 Move GCEServiceAccount into CloudConfig 2020-05-03 20:35:32 -07:00
eric-hole c59314a799 Adds some initial tests. Fixes some logic 
Need to fix service account implementation first

Fixing tests and iterating on the serviceaccount logic

Run the gce_byo_sa test
 2020-04-04 21:20:31 -07:00