Commit Graph

3198 Commits

Author SHA1 Message Date
Jason Valdron eef68ba192 Add support for Gateway API within Cilium
Squashed commit of the following:
Update documentation and CRDs
Update pkg/model/components/cilium.go
Remove gateway API managed addon
Update CRDs
Fix RBAC and update docs
Fix up files that shouldn't of been touched
Remove namespace from cluster RBAC resources
2025-04-30 07:55:52 -03:00
Kubernetes Prow Robot f5f48d3771
Merge pull request #17378 from justinsb/need_value_labels_for_terraform
gce: set values for role labels
2025-04-28 08:13:54 -07:00
justinsb 65aba4e300 gce: use typed ServiceAccount in IAM tasks
This gives us an automatic dependency in our evaluation,
and lets us write out a dependency to terraform also.
2025-04-28 08:15:02 -04:00
justinsb 8478ba3e5c autogen: update golden output for gce role labels 2025-04-28 07:24:13 -04:00
Kubernetes Prow Robot 78d4757c18
Merge pull request #17354 from ameukam/admission-controllers
Enable more admission controllers
2025-04-26 22:51:24 -07:00
Kubernetes Prow Robot 92cb98b976
Merge pull request #17229 from flopib/gce-tf-regional-backend-service
Make GCE backend service regional for the Terraform target
2025-04-26 19:37:24 -07:00
Ciprian Hacman ec0f8c9c4e Bump skip.regex for failing tests to 1.34 2025-04-25 17:36:51 +03:00
Ciprian Hacman 9a1c88c767 hack/update-expected.sh 2025-04-25 13:57:18 +03:00
runitmisra ca9d983591 feat: Added cni-exclusive setting for cilium 2025-04-18 15:27:21 +05:30
Arnaud Meukam 4576e214e5
./hack/update_expected.sh executed
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2025-04-14 15:51:01 +02:00
Peter Rifel 150c3e7c20
./hack/update-expected.sh 2025-04-08 18:57:16 -05:00
Kubernetes Prow Robot fa120b35e9
Merge pull request #17319 from admun/cilium-config-path
Remove cilium-config-path mount in cilium-agent container
2025-04-04 15:58:37 -07:00
Edmond Hui f1d81cbfc3 hack/update-expected.sh results 2025-04-04 12:15:43 -07:00
Peter Rifel 298e771e29
Update dependencies (#17333)
* Update dependencies

* make gomod

* make crds

* Bump RSA private key size to meet new minimum

* Fix scaleway type change

* Bump k8s.io/kops in tests/e2e module

* Bump containerd

* Bump golang-jwt/jwt

* Bump golang.org/x/net
2025-03-29 23:30:56 +00:00
Moshe Vayner 3b490dfcff test: hack/update-expected 2025-03-21 15:08:22 -04:00
Davanum Srinivas 5752000d4d
ServiceTrafficDistribution cannot be switched off
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-03-19 09:10:56 -07:00
Arnaud Meukam f3191bd8a0 Bump to Go 1.24
https://tip.golang.org/doc/go1.24

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2025-03-10 13:55:35 +01:00
Kubernetes Prow Robot 408a94024c
Merge pull request #17312 from hakman/cilium-1.16.7
Update Cilium to v1.16.7
2025-03-10 02:07:46 -07:00
Kubernetes Prow Robot b8648324ae
Merge pull request #17313 from hakman/metrics-server-0.7.2
Update metrics-server to v0.7.2
2025-03-09 07:13:45 -07:00
Ciprian Hacman e62966dad2 hack/update-expected.sh 2025-03-09 07:00:10 +02:00
Ciprian Hacman 8611a9008d hack/update-expected.sh 2025-03-09 06:55:15 +02:00
Ciprian Hacman 72b946eac1 hack/update-expected.sh 2025-03-09 06:52:17 +02:00
Arnaud M. 06250623d6
Use ephemeral S3 buckets for E2E tests (#17157)
* Use ephemeral S3 buckets for E2E tests

Use S3 buckets created during the lifecycle of a test instead of a
static one and provide the capability to make them read-only public.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>

* Improve ephemeral S3 buckets implementation for tests

Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>

* Base S3 bucket name on ProwJob ID

Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>

---------

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
Co-authored-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2025-03-06 08:45:45 -08:00
Peter Rifel 57661e41ce
Bump golang.org/x/crypto 2025-03-05 07:51:31 -06:00
Björn Harrtell badb662f0b Change to cx22 as default instance for Hetzner as cx21 is no longer available 2025-03-02 16:24:47 +01:00
Kubernetes Prow Robot 2d5240338c
Merge pull request #17237 from HealthengineAU/rm-cpu-limits
Remove default CPU limits for aws-iam-authentication and node-problem-detector
2025-02-28 22:34:55 -08:00
Peter Rifel bb14406b51
Skip hostnetwork + hostname tests through 1.33 2025-02-27 21:18:54 -06:00
Jim Barber bdc25ad0cc
Remove some default CPU limits
Remove the default CPU limits defined for the aws-iam-authentication and
node-problem-detector DaemonSets.

This makes them behave the same as the other `cpuLimit` parameters for
the cluster that also do not have defaults.

As it was previously set up, if an administrator does not want CPU
limits defined for these DaemonSets, there was no way to define that via
the cluster spec.
2025-02-28 08:09:06 +08:00
Arnaud Meukam 553ce3d532
Update k8s.io dependencies
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2025-02-25 14:55:45 +01:00
Moshe Vayner 11b3400492 test: hack/update-expected 2025-02-21 21:35:23 -05:00
Moshe Vayner fbd0ba0c77 test: hack/update-expected 2025-02-20 17:33:31 -05:00
Peter Rifel 1de38d50e3
Fix conditional for reconcile command in upgrade tests 2025-02-18 21:53:13 -06:00
justinsb a60890bef0 bare-metal: add some go tests to start to verify functionality 2025-02-09 16:09:46 -05:00
Ciprian Hacman d1b61812ac Skip failing test in pull-kops-kubernetes-e2e-ubuntu-gce-build 2025-02-09 18:28:12 +02:00
Ciprian Hacman 6069b33551 Skip failing test 2025-02-08 19:50:50 +02:00
Ciprian Hacman 09719378ef Update flannel to v0.26.4 2025-02-08 18:25:29 +02:00
justinsb ad14179db2 chore: avoid replacing client-go version in tests/e2e
I think this should be unnecessary, and it causes problems for updates.
2025-01-31 12:31:16 -05:00
Justin Santa Barbara 0789af746b
Release 1.32.0-beta.1 (#17241) 2025-01-30 06:25:58 +02:00
Harish Kuna c8010fb4e6 Change volume type to io2 from gp3 2025-01-24 19:28:35 +00:00
Tessia Piboubès d7ee48863e Fix copy-paste error in balancing mode field name 2025-01-24 10:48:06 +01:00
Tessia Piboubès 13e1224770 Make GCE backend service regional for the Terraform target, align with cloudup target 2025-01-24 10:43:47 +01:00
Harish Kuna a8ea013a38 add more IOPS to help disk latencies
Update tests/e2e/scenarios/scalability/run-test.sh
2025-01-23 17:39:15 +00:00
Moshe Vayner 9e53b31ef8 test: hack/update-expected 2025-01-22 16:43:25 -05:00
justinsb 8538891a19 e2e: add `kops validate` step to metal test
The cluster should be considered healthy by kOps at this point.
2025-01-19 17:17:02 -05:00
Kubernetes Prow Robot 975767858f
Merge pull request #17217 from hakman/go-1.23.5
Update Go to v1.23.5
2025-01-19 10:08:41 -08:00
Ciprian Hacman 53e4e3144a Update Go to v1.23.5 2025-01-19 17:16:49 +02:00
justinsb d02ba27882 tests: use reconcile command for kOps 1.31+
We expect people to start using the reconcile command
particularly for upgrades.
2025-01-19 09:31:23 -05:00
Antonio Ojea f84bf6101c Revert "toolbox dump: include full instance details on GCE"
This reverts commit ecadd7a5b4.

gce.UsesIPAliases(o) is assumed to be called after validating that cloud
provider is GCP, with this commit the if statement applies to all cloud providers.
2025-01-16 09:58:33 +00:00
Kubernetes Prow Robot e9921c92f8
Merge pull request #17209 from hakman/fix-gce-scale
gce: Update scale test scenario
2025-01-15 08:54:35 -08:00
Kubernetes Prow Robot 944a2c4508
Merge pull request #17206 from justinsb/kindnet_with_ipalias_on_gce
kindnet: Support IP aliases with kindnet on gce
2025-01-15 07:18:33 -08:00
justinsb c9d4e2888d kindnet: Support IP aliases with kindnet on gce 2025-01-15 06:21:43 -05:00
Antonio Ojea 32854ff319 fix kindnet permissions
Change-Id: Ib910093371ea69892033b469b723b0a5daf00892
2025-01-15 11:15:39 +00:00
Antonio Ojea 76c8000c55 bump kindnet default version to 1.8.1
Change-Id: I216c463db29ae73d15ca6bfa00cc96a3c07a53fa
2025-01-15 09:55:35 +00:00
Ciprian Hacman 86862c1164 gce: Update scale test scenario 2025-01-14 12:08:35 +02:00
Antonio Ojea 35e7a25c71 kindnet: use commands instead of args for the container image
Change-Id: I9c704ba310d0dd253147a9a93211e820117af0b6
2025-01-13 07:17:00 +00:00
Ciprian Hacman 66d6756fd4 hack/update-expected.sh 2025-01-12 11:43:36 +02:00
Ciprian Hacman c60f78c29e hack/update-expected.sh 2025-01-10 22:18:46 +02:00
Kubernetes Prow Robot 0486349b89
Merge pull request #17177 from kforsthoevel/fix-hubble-metrics-port
Use the same port for hubble-metrics that is used by cilium
2025-01-10 00:56:32 -08:00
Ciprian Hacman 438a1ee0a4 hack/update-expected.sh 2025-01-09 17:50:06 +02:00
Ciprian Hacman eac132daae Add IPv6 support for kindnet 2025-01-09 17:50:06 +02:00
Ciprian Hacman 187ec2d040 hack/update-expected.sh 2025-01-09 08:56:01 +02:00
Kubernetes Prow Robot 2db9dbcd7e
Merge pull request #17158 from aojea/kindnet
Add kindnet network plugin
2025-01-08 08:40:31 -08:00
Ciprian Hacman 595f103bf9 Update Go to v1.23.4 2025-01-08 13:39:25 +02:00
Antonio Ojea f2c239dd81 add kindnet network plugin
add kindnet as an experimental network addon

containerd adds the requirement to use the loopback cni plugin,
kindnet provides that capability and containerd does not require it
since containerd/containerd/pull/10238

Change-Id: I1397a90186885b02e98b5ffa444fe629c1046757
2025-01-08 01:09:37 +00:00
Kai Forsthövel 84ff74c0cf
Update manifestHash after running hack/update-expected.sh 2025-01-07 11:31:24 +01:00
Ciprian Hacman f105298548 hack/update-expected.sh 2025-01-07 11:18:25 +02:00
Kai Forsthövel 4a586b0dfc
Use the same port for hubble-metrics that is used by cilium
Cilium uses port 9965 for hubble-metrics. See
https://docs.cilium.io/en/stable/observability/metrics/#hubble-metrics
2025-01-07 09:27:31 +01:00
Peter Rifel d9ebf18dbe
Ensure only one slash in hetzner server labels 2025-01-06 14:11:17 -06:00
Peter Rifel e4fdb20797
./hack/update-expected.sh 2025-01-06 14:11:16 -06:00
Kubernetes Prow Robot 84948bb6c2
Merge pull request #17172 from hakman/skip-cilium-test
Skip test `Services should implement NodePort and HealthCheckNodePort…
2025-01-06 13:24:17 +01:00
Ciprian Hacman c4a3f0b33d Skip test `Services should implement NodePort and HealthCheckNodePort correctly when ExternalTrafficPolicy changes` 2025-01-06 13:00:16 +02:00
Ciprian Hacman 25cc96c489 hack/update-expected.sh 2025-01-06 09:58:11 +02:00
Ciprian Hacman 1f69da94b6 hack/update-expected.sh 2025-01-04 15:01:42 +02:00
Ciprian Hacman eaf796c3c0 Remove support for K8s 1.26 in kOps 1.32 2025-01-04 15:01:41 +02:00
Kubernetes Prow Robot 6b0d029366
Merge pull request #17162 from hakman/cni-updates
Install CNI network plugins only for specific CNIs
2025-01-03 21:40:15 +01:00
Ciprian Hacman 579fb6b2b0 hack/update-expected.sh 2025-01-03 21:43:20 +02:00
Ciprian Hacman 284e0f7451 hack/update-expected.sh 2025-01-02 20:08:14 +02:00
Moshe Vayner 63b4f4f490 test: hack/update-expected 2025-01-02 12:12:34 -05:00
Ciprian Hacman c3a748f65a hack/update-expected.sh 2025-01-02 11:49:17 +02:00
Moshe Vayner f58c770e62 test: hack/update-expected 2024-12-26 21:33:06 -05:00
Peter Rifel 96c255d398
./hack/update-expected.sh 2024-12-22 05:48:43 -06:00
Kubernetes Prow Robot 011ab0f1b6
Merge pull request #17141 from rifelpet/nth-asg-tag
Only set NTH ManagedASGTag label if it doesn't already exist
2024-12-17 07:26:52 +01:00
Kubernetes Prow Robot d7fd342db9
Merge pull request #17140 from rifelpet/skip-cilium-externaltrafficpolicy
Temporarily skip failing cilium test to unblock PRs
2024-12-17 06:18:52 +01:00
Peter Rifel 4c5ee60579
./hack/update-expected.sh 2024-12-16 21:50:38 -06:00
Peter Rifel c6334caeb0
Add problematic test case for NTH's ManagedASGTag 2024-12-16 21:48:52 -06:00
Peter Rifel b4e55237b1
Temporarily skip failing cilium test to unblock PRs 2024-12-16 20:01:11 -06:00
justinsb 4ec6c5b73b Release 1.31.0-beta.1 2024-12-14 14:15:16 -05:00
Moshe Vayner 0c71cbd3f6 test: hack/update-expected 2024-12-13 15:40:41 -05:00
Moshe Vayner 0c8f904982 test: hack/update-expected 2024-12-03 18:11:13 -05:00
Peter Rifel 88eded9ae9
./hack/update-expected.sh 2024-11-29 21:01:14 -06:00
Moshe Vayner 5ed5cbde9f test: hack/update-expected 2024-11-20 20:57:39 -05:00
Moshe Vayner c7a6ff4083 test: hack/update-expected 2024-11-18 22:48:43 -05:00
justinsb b124625c62 toolbox dump: support dumping only k8s resources
Because metal does not support cloud-resource discovery, we need to
skip this in our metal tests.
2024-11-12 13:11:34 -05:00
justinsb 6c421cc6e7 tests: run kops toolbox dump in bare-metal e2e
This lets us share the diagnostic-dumping code.

We don't want to recreate the dumping apparatus
2024-11-12 13:11:34 -05:00
justinsb 311c4115cf e2e tests: dump ip information for each VM
Add this to the data we dump.
2024-11-10 19:06:55 -05:00
Peter Rifel cf33c0efd7
Reduce number of nodes in manyaddons tests 2024-11-05 19:19:48 -06:00
ana.aguilar 7b2f02fc60 feat(cilium): adding EnableLocalRedirectPolicy parameter 2024-10-29 16:59:59 -03:00
Kubernetes Prow Robot d3554048b8
Merge pull request #16911 from shiftstack/g2
openstack: Upgrade to Gophercloud v2
2024-10-28 10:06:54 +00:00
Kubernetes Prow Robot 93efa5fa07
Merge pull request #16919 from hakman/metal-apt-update
metal: Run apt-get update before install
2024-10-25 14:30:53 +01:00
Kubernetes Prow Robot d633cde44a
Merge pull request #16915 from ataut-pai/update_coredns_image
dns: Update coredns to v1.11.3
2024-10-25 10:22:52 +01:00