Commit Graph

21045 Commits

Author SHA1 Message Date
Kubernetes Prow Robot dc22ce9c03
Merge pull request #16379 from justinsb/gce_internal_none_with_rich_addresses
GCE: Use internal load balancer for node to control-plane traffic
2024-02-24 19:08:09 -08:00
justinsb 50c72e79fa gce: use internal IP address for node -> control-plane communication
As we do on other clouds, we can pick out the internal IP address with
our knowledge of the network topology.
2024-02-24 15:58:07 -05:00
Kubernetes Prow Robot 241fb45c88
Merge pull request #16372 from justinsb/expand_goget
chore: update dependencies in submodules
2024-02-24 12:16:19 -08:00
Kubernetes Prow Robot c5551a005d
Merge pull request #16380 from justinsb/gce_better_ip_address_lookup
gce: match IP addresses including subnet where relevant
2024-02-24 11:06:21 -08:00
justinsb a41590eb77 gce: match IP addresses including subnet where relevant
We can have the same internal IP address on different subnets, so when
trying to find the cloud resource by IP address, we need to match
considering the subnet when matching internal IP addresses.
2024-02-24 13:08:03 -05:00
justinsb da233efe11 gce: Prune old forwarding rules
Now that we create an new forwarding rule for kops-controller, we want
to remove the old one after the rolling-update.
2024-02-24 12:20:20 -05:00
justinsb ba7facff41 gce: Always create an internal load balancer
When we create a external load balancer on GCE, we now also create an
internal load balancer.  The internal load balancer is used for
node/pod -> control-plane traffic, the external load balancer is used
for other traffic (e.g. "user" traffic to kube-apiserver).

This means that we can apply more granular firewall rules, and
generally avoid complex logic around discovery of the internal control
plane addresses for GCE.
2024-02-24 12:20:19 -05:00
justinsb 7cc3147e17 chore: update dependencies in submodules
Our submodules should also get auto-updated and auto-tidied by the
Makefile targets; this should then be done automatically by our github
action scheduled task.
2024-02-24 12:08:07 -05:00
Kubernetes Prow Robot 00e1746524
Merge pull request #16375 from kubernetes/dependencies/update-1708668272
Update dependencies
2024-02-23 04:08:38 -08:00
github-actions f9c077b346 Update dependencies 2024-02-23 06:04:32 +00:00
Kubernetes Prow Robot c7de51a336
Merge pull request #16374 from rifelpet/skipregex
Migrate many-addons e2e template to dns=none
2024-02-22 20:04:26 -08:00
Peter Rifel 2c15e6b338
Migrate many-addons e2e template to dns=none
These prow jobs have been migrated to the new cluster and need to use dns=none since the dns zones are in the old cluster's account
2024-02-22 21:00:49 -06:00
Kubernetes Prow Robot 2900d27213
Merge pull request #16373 from rifelpet/skipregex
Skip hostname test for all aws jobs by default
2024-02-22 07:08:46 -08:00
Peter Rifel fba4c1cc50
Skip hostname test for all aws jobs 2024-02-22 07:34:56 -06:00
Kubernetes Prow Robot f21109e94f
Merge pull request #16370 from tungbq/docs_getting_started_aws_patch
doc/aws: Add space before the k8s slack url
2024-02-22 00:00:00 -08:00
Tung Leo f6b9b059a3
doc/aws: Add space before the slack url 2024-02-20 22:22:13 +07:00
Kubernetes Prow Robot 2601522cad
Merge pull request #16369 from hakman/aws-ebs-csi-1.28.0
aws: Update EBS CSI driver to v1.28.0
2024-02-19 20:15:53 -08:00
Ciprian Hacman 10a6c17b7e hack/update-expected.sh 2024-02-20 05:14:26 +02:00
Kubernetes Prow Robot 94e21e2acd
Merge pull request #16368 from rifelpet/skipregex
Skip known-failing test on most e2e jobs
2024-02-19 19:10:24 -08:00
Ciprian Hacman 5a4778f77c aws: Update EBS CSI driver to v1.28.0 2024-02-20 04:48:34 +02:00
Peter Rifel e86d40db45
Skip known-failing test on most e2e jobs 2024-02-19 20:17:36 -06:00
Peter Rifel d7c454a879
Remove skip regex from untested k8s versions 2024-02-19 20:11:12 -06:00
Kubernetes Prow Robot 3c3188edfb
Merge pull request #16365 from justinsb/devcontainer_updates
devcontainer: update go version, use features
2024-02-18 20:58:38 -08:00
justinsb dac4fd91b0 devcontainer: update go version, use features
From what I've read, we want the base image to be smaller, with more
of the added functionality in features.  We can build a bigger image
with the features, but that should be an image for devcontainers.

Also it seems that devcontainer tooling will cache the image with the
features - maybe giving similar results to if we had built a more
complete image.
2024-02-18 12:13:29 -05:00
Kubernetes Prow Robot 907a9a7203
Merge pull request #16364 from rifelpet/upgrade-dnsnone
Fix bash conditional pattern matching in upgrade script
2024-02-18 06:35:27 -08:00
Peter Rifel ac1413f1d2
Fix bash conditional pattern matching 2024-02-18 06:43:34 -06:00
Kubernetes Prow Robot 91353cbff9
Merge pull request #16362 from hakman/cilium-1.15.1
Update Cilium to v1.15.1
2024-02-18 03:53:27 -08:00
Ciprian Hacman 01ea66eed7 hack/update-expected.sh 2024-02-18 10:28:36 +02:00
Ciprian Hacman 83c88db90a Update Cilium to v1.15.1 2024-02-18 10:28:26 +02:00
Kubernetes Prow Robot 83c13bc8ea
Merge pull request #16361 from kubernetes/dependabot/github_actions/actions/dependency-review-action-4.1.0
build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.0
2024-02-17 23:18:07 -08:00
dependabot[bot] 7a7048d9e9
build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.0
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](4901385134...80f10bf419)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-18 06:23:08 +00:00
Kubernetes Prow Robot 43f6798b1c
Merge pull request #16360 from rifelpet/upgrade-dnsnone
Set --dns=none on upgrade tests from older kops versions
2024-02-17 21:55:33 -08:00
Kubernetes Prow Robot b6e9eccbd3
Merge pull request #16359 from justinsb/mark_tasks_implementing_hasaddress
azure: Mark a few tasks as implementing HasAddress
2024-02-17 20:40:06 -08:00
Kubernetes Prow Robot 0ded30c1c3
Merge pull request #16186 from remyleone/devcontainer
add support for devcontainer
2024-02-17 19:44:32 -08:00
Kubernetes Prow Robot 97328165f0
Merge pull request #16355 from sl1pm4t/fix-gcs-client-scope
gce: Update GCE storage service scope to DevstorageFullControlScope to resolve permission error.
2024-02-17 18:02:31 -08:00
Peter Rifel b40a912a68
Set --dns=none on upgrade tests from older kops versions
This should fix some "missing zone" errors on these upgrade tests
2024-02-17 19:48:34 -06:00
justinsb 06e82bffd4 refactor: Mark a few tasks as implementing HasAddress
This will ensure I don't mistakenly break the contract again.
2024-02-17 19:24:19 -05:00
Kubernetes Prow Robot 24ab206acc
Merge pull request #16356 from justinsb/revisions_and_pruning
Generate revisions of NLB objects, and introduce cleanup phase
2024-02-17 11:17:18 -08:00
Kubernetes Prow Robot 5607c6689c
Merge pull request #16358 from hakman/azure-subnet-vnet
azure: Avoid spurious changes in VirtualNetwork
2024-02-17 10:03:03 -08:00
justinsb 2a9343a168 Generate revisions of NLB objects, and introduce cleanup phase
This lets us safely make changes to otherwise immutable fields, in
particular for adding security groups to NLBs created without them.

We detect the older versions, and create deletion tasks to remove
them.  These tasks can be deferred, and we expect them to be
deferred to a "prune" phase that runs after cluster apply.

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2024-02-17 11:41:15 -05:00
Ciprian Hacman 4ae8f3c28e azure: Fix subnet name 2024-02-17 15:57:19 +02:00
Ciprian Hacman 94b713ec1a azure: Avoid spurious changes in VirtualNetwork 2024-02-17 15:56:53 +02:00
Kubernetes Prow Robot 1cbd622605
Merge pull request #16357 from kubernetes/dependencies/update-1708063443
Update dependencies
2024-02-16 05:14:39 -08:00
github-actions c7c2b422d3 Update dependencies 2024-02-16 06:04:02 +00:00
Kubernetes Prow Robot 69dc1818a4
Merge pull request #16346 from hakman/go-1.22.0
Update Go to v1.22.0
2024-02-15 08:03:04 -08:00
Kubernetes Prow Robot 2e0115171d
Merge pull request #16293 from justinsb/deletion_processing_mode
refactor: Introduce DeletionProcessingMode
2024-02-15 07:07:11 -08:00
justinsb ffd52cac40 refactor: Introduce DeletionProcessingMode
Deletion processing is not entirely a factor of the target, it is more
a factor of our mode of execution (dry-run vs pre-rolling-update vs
post-rolling-update).  We want to introduce that post-rolling-update
phase, so introduce the DeletionProcessingMode enum and move it from
the target to the context.
2024-02-15 08:12:19 -05:00
Kubernetes Prow Robot 51fb2cf158
Merge pull request #16353 from rifelpet/iam-policy-refactor
Use IAM Policy Builder for SQS Queue Policy
2024-02-14 20:04:16 -08:00
Matt Morrison 1944176ac1
Update GCE storage service scope to FullControl 2024-02-15 16:26:05 +13:00
Peter Rifel 4edcc95c99
./hack/update-expected.sh 2024-02-14 17:39:46 -06:00