dc48ca6905
Update etcd-manager to 20201209
...
Highlights:
* Fix arm64 images, which were built with an incorrect base image.
* Initial (experimental) Azure support
Full change list:
* Update Kops dependency for Azure Blob Storage support [#372 ](https://github.com/kopeio/etcd-manager/pull/372 )
* Exclude gazelle from tools/deb-tools [#373 ](https://github.com/kopeio/etcd-manager/pull/373 )
* Regenerate bazel in tools/deb-tools [#374 ](https://github.com/kopeio/etcd-manager/pull/374 )
* Release notes for 3.0.20201202 [#375 ](https://github.com/kopeio/etcd-manager/pull/375 )
* Remove travis CI [#377 ](https://github.com/kopeio/etcd-manager/pull/377 )
* Fix vendor generation for tools/deb-tools subproject [#376 ](https://github.com/kopeio/etcd-manager/pull/376 )
* Add script to verify image hashes [#380 ](https://github.com/kopeio/etcd-manager/pull/380 )
* Fix some incorrect base image hashes for arm64 [#379 ](https://github.com/kopeio/etcd-manager/pull/379 )
* Support Azure [#378 ](https://github.com/kopeio/etcd-manager/pull/378 )
* Add more descriptions to wait loops [#383 ](https://github.com/kopeio/etcd-manager/pull/383 )
* Rename fields in the azure client struct [#382 ](https://github.com/kopeio/etcd-manager/pull/382 )
* Fix small typo in code comment [#381 ](https://github.com/kopeio/etcd-manager/pull/381 )
2020-12-09 09:30:44 -05:00
0fecffbfe0
Merge pull request #10284 from johngmyers/service-account-issuer
...
Set --service-account-issuer for k8s 1.20+
2020-12-04 08:07:59 -08:00
4f5def8610
Address review comment
2020-12-03 23:24:43 -08:00
443567426e
Merge pull request #9704 from nckturner/aws-cloud-controller
...
Add aws-cloud-controller-manager config to addons
2020-12-02 12:17:00 -08:00
0ea98a1e87
Update etcd-manager to 3.0.20201202
...
The important PR we want to pick up is 369, fixing a bug when
ListenMetricsURLS is set as an env var.
Full changelist:
* Release notes for 3.0.20201117 [#364 ](https://github.com/kopeio/etcd-manager/pull/364 )
* Fix gofmt [#365 ](https://github.com/kopeio/etcd-manager/pull/365 )
* Add gofmt check to github actions [#366 ](https://github.com/kopeio/etcd-manager/pull/366 )
* Add boilerplate to tools/deb-tools/main.go [#367 ](https://github.com/kopeio/etcd-manager/pull/367 )
* Do not set ListenMetricsURLS [#369 ](https://github.com/kopeio/etcd-manager/pull/369 )
* Fix bazel formatting [#370 ](https://github.com/kopeio/etcd-manager/pull/370 )
2020-12-02 12:08:37 -05:00
e11156135b
Update Docker to v19.03.14
2020-12-02 10:11:27 +02:00
2b6d730354
Update containerd to v1.4.3
2020-12-02 09:53:57 +02:00
c9feb36f3f
Add aws-cloud-controller-manager config to addons
...
- Config at aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml.template
- AWSCCMTag function for CCM image tag
2020-11-30 01:35:07 -08:00
338fb43f8b
Update kOps version after 1.19.0-beta.2 release
2020-11-22 08:10:50 +02:00
9607b9955c
Set --service-account-issuer for k8s 1.20+
2020-11-20 22:20:39 -08:00
4853bf982a
Use etcd v3.4.13 for k8s v1.19+
2020-11-20 14:25:22 +02:00
d516fb7d9c
Update etcd-manager to 3.0.20201117
...
Release notes for 3.0.20201117:
* Release notes for 3.0.20200531
* Adds support for using OS application credentials
* Fixes usage of OpenStack Swift reauthentication
* Move from debian-hyperkube-base to debian-base
* Add license headers to each file
* Fix some typos picked up by verify-spelling
* Fix some problems with trailing spaces
* Add support for etcd 3.4.13
* Switch to gcr.io/cloud-marketplace-containers/google/debian10 - Fix
for #340 option 1
* Support for ARM64
* BUG: OpenStack ignore AvailabilityZone in discovery
* Added full cinder ID to candidateDeviceNodes
* feat(etcd-manager-ctl): use backupname to delete backup instead of timestamp
* Update kops to pick up AllowAuth Openstack
* Build base image by raw expansion of deb packages
* Switch the cloudbuild docker image, locking to 2.2.0
* Fix build on case-insensitive file systems (MacOS)
* Set AltNames on server certificates
* govet: Fix a log message
2020-11-17 22:03:30 -05:00
1165fd381e
Remove more code specific to unsupported etcd v2
2020-11-15 22:21:24 -08:00
db473a11cd
Merge pull request #10194 from elblivion/etcdmanager-logverbosity
...
Make etcd-manager log verbosity configurable
2020-11-12 10:39:07 -08:00
c117d8d924
feat: Make etcd-manager log verbosity configurable
2020-11-12 09:58:09 +01:00
3e8770f763
Update kOps version after 1.19.0-beta.1 release
2020-11-11 10:15:39 +02:00
91d9c061dd
Simplify etcd options builder
2020-10-30 09:11:00 +02:00
2ac17bee69
Remove code for no-longer-supported k8s releases
2020-10-29 16:45:53 -07:00
c2684bcf7b
Add nodeLocalDNSCache.kubeDnsOnly option
2020-10-27 10:46:25 +01:00
c9aa53895a
Merge pull request #10048 from hakman/container-runtime-assets
...
Install container runtime packages as assets
2020-10-25 21:03:01 -07:00
29a1cb2a9f
If we use node local dns, always use the nld local ip as cluster dns
2020-10-16 12:46:17 +02:00
23e73a5b8e
Release 1.19.0-alpha.5
2020-10-15 07:09:46 +03:00
852bebe165
Install container runtime packages as assets - Misc
2020-10-14 15:41:51 +03:00
95f9228e54
Update Docker version defaults for older k8s versions
2020-10-09 17:12:37 +03:00
7eb1489945
Bump cilium to 1.8.4
2020-10-01 10:21:10 +02:00
13cbd84886
Merge pull request #9967 from olemarkus/cilium-hubble-pointer
...
Cilium hubble pointer
2020-09-30 12:36:54 -07:00
bca601d1da
Merge pull request #9969 from hakman/docker-19.03.13
...
Update Docker to v19.03.13
2020-09-18 10:46:46 -07:00
e7bfedd1ac
Merge pull request #9921 from olemarkus/nth
...
Add addon for aws node termination handler
2020-09-18 03:10:45 -07:00
96e3fefd85
Update Docker to v19.03.13
2020-09-18 12:14:43 +03:00
b9111c78e7
Make hubbleSpec into a pointer
2020-09-18 09:23:52 +02:00
fcc486d250
Update containerd to v1.4.1
2020-09-18 10:01:30 +03:00
b9212f85ad
Add addon for aws node termination handler
2020-09-17 21:09:28 +02:00
0eb626fcdd
Release 1.19.0-alpha.4
2020-09-16 11:37:38 +03:00
b8bc6d35b8
Force external cloud controller manager on OS
2020-09-15 18:49:51 +02:00
58092b5666
Merge pull request #9925 from olemarkus/cas-fixes
...
Add missing flags to cluster autoscaler template
2020-09-13 00:58:57 -07:00
2b5950c24c
Add missing flags to template
2020-09-12 08:24:29 +02:00
036ea69525
Merge pull request #9352 from justinsb/irsa_with_public
...
Simplified form of IAM Roles for ServiceAccounts
2020-09-09 22:23:44 -07:00
65610dbcee
Update NodeLocalDNSConfig with Mem/CPU requests
...
Add NodeLocalDNS.CPURequest and NodeLocalDNS.MemoryRequest to
configure resource requests.
If not explicitly set, fall back to 25m and 5Mi
2020-09-09 18:40:14 +03:00
a61ecf4c58
Refactor to use interface for iam Subjects
...
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
8498ac9dbb
Create PublicJWKS feature flag
...
This should be much easier to start and to get under testing; it only
works with a load balancer, it sets the apiserver into anonymous-auth
allowed, it grants the anonymous auth user permission to read our jwks
tokens. But it shouldn't need a second bucket or anything of that
nature.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:06 -04:00
886b4c97cb
Don't explicitly set insecure-bind-address on newer k8s
2020-09-09 11:41:51 +02:00
bac4afa3e5
Merge pull request #9871 from olemarkus/cilium-upgrades-sept-2
...
Bump cilium to 1.8.3
2020-09-05 09:15:41 -07:00
3ac61c7ea9
Bump cilium to 1.8.3
2020-09-05 10:47:48 +02:00
a0e9fab104
Implement cluster autoscaler as bootstrap addon
...
Use provider-agnostic node definition for cas instead of aws auto-discovery
Validate clusterAutoscalerSpec
Add spec documentation
Add cas docs
Make CRDs
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
Add enabled flag to cas config
Apply suggestions from code review
Co-authored-by: Guy Templeton <guyjtempleton@googlemail.com>
Add support for custom cas image
Support more k8s versions
Use full image names
2020-09-03 09:52:13 +02:00
715e46d58e
Upgrade cilium versions
2020-08-31 12:01:03 +02:00
786423f617
Expose JWKS via a feature-flag
...
When the PublicJWKS feature-flag is set, we expose the apiserver JWKS
document publicly (including enabling anonymous access). This is a
stepping stone to a more hardened configuration where we copy the JWKS
document to S3/GCS/etc.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 10:15:11 -04:00
b00f8049b6
Merge pull request #9808 from hakman/kope-to-k8s.gcr.io
...
Pull images from k8s.gcr.io/kops instead of docker.io/kope
2020-08-26 07:18:05 -07:00
b158ffab04
Refactor: KopsModelContext embeds IAMModelContext
...
go syntax makes this an annoying change, unfortunately.
2020-08-25 11:22:34 -04:00
a4ff90205a
Pull images from k8s.gcr.io/kops instead of docker.io/kope
2020-08-25 08:04:36 +03:00
dd75c1ed91
make apimachinery crds gomod, update-expected.sh
2020-08-24 10:58:09 -05:00
Justin SB
Kubernetes Prow Robot
John Gardiner Myers
Ciprian Hacman
Nick Turner
Anthony Stanton
Javi Polo
Ole Markus With
Chris Loukas
Peter Rifel