Commit Graph

15426 Commits

Author SHA1 Message Date
Kubernetes Prow Robot e1929d05a8
Merge pull request #12421 from justinsb/update_gcp_apis
Update google.golang.org/api to 0.57.0
2021-09-26 08:10:22 -07:00
justinsb 464879a405 Update google.golang.org/api to 0.57.0
In particular, we want the vTPM (shielded VM) support.
2021-09-26 09:39:10 -04:00
Kubernetes Prow Robot c742621468
Merge pull request #12386 from justaugustus/promo-tools-rename
release-process.md: Update references to artifact promotion
2021-09-25 18:26:21 -07:00
Kubernetes Prow Robot 93dc3b907c
Merge pull request #12412 from olemarkus/nlb-add-subnet
Allow adding more subnets to an NLB
2021-09-25 17:32:21 -07:00
Kubernetes Prow Robot ef22270b3f
Merge pull request #12394 from ReillyBrogan/reilly/ciliumBidirectionalMount
Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
2021-09-25 09:42:21 -07:00
Kubernetes Prow Robot 8225c78eb8
Merge pull request #12415 from olemarkus/revert-sysctl
Revert "Remove unneeded network related sysctls"
2021-09-25 04:54:21 -07:00
Ole Markus With fed0c16085 Revert "Remove unneeded network related sysctls"
This reverts commit ce08ec68df.
2021-09-25 08:24:47 +02:00
Kubernetes Prow Robot 92ea7d58cb
Merge pull request #12398 from rifelpet/scheduler-critical
Remove critical-pod scheduler annotation.
2021-09-24 08:07:23 -07:00
Kubernetes Prow Robot 1774e6cae3
Merge pull request #12321 from dezmodue/private_bastion
Add option to create an internal load balancer for the bastion
2021-09-24 07:23:24 -07:00
Kubernetes Prow Robot b5369a5441
Merge pull request #12411 from hakman/cnf-lint-0.54.2
Upgrade cnf-lint to 0.54.2
2021-09-24 06:31:23 -07:00
Ole Markus With fc9c86e778 Allow adding more subnets to an NLB 2021-09-24 14:21:45 +02:00
Ciprian Hacman 895ac428e2 Upgrade cnf-lint to 0.54.2 2021-09-24 15:11:10 +03:00
Kubernetes Prow Robot 128b556369
Merge pull request #12410 from rifelpet/tf107
Run verify-cloudformation in host network
2021-09-24 04:57:24 -07:00
Peter Rifel d3f657bdc4
Run verify-cloudformation in host network 2021-09-24 06:20:31 -05:00
Kubernetes Prow Robot 3e1a6bfba5
Merge pull request #12407 from anthonyhaussman/feat/cilium_Cilium_chainingMode
Add support to configure Cilium CNI chaining
2021-09-24 03:01:25 -07:00
Kubernetes Prow Robot 97ecb437dd
Merge pull request #12403 from rifelpet/tf107
Upgrade terraform to 1.0.7
2021-09-24 01:57:24 -07:00
Anthony Hausman 8465290a4e
FIX: Correct documentation 2021-09-24 10:57:05 +02:00
Anthony Hausman 5e814f465d
Add support to configure Cilium CNI chaining
CNI chaining allows to use Cilium in combination with other CNI plugins.

With Cilium CNI chaining, the base network connectivity and IP address management is managed by the non-Cilium CNI plugin, but Cilium attaches eBPF programs to the network devices created by the non-Cilium plugin to provide L3/L4 network visibility, policy enforcement and other advanced features.

https://docs.cilium.io/en/v1.9/gettingstarted/cni-chaining/#cni-chaining

In our case, to be able to use the `HostPort` feature in our cluster, we need to enable the `portmap` plugin.
2021-09-24 10:39:22 +02:00
Ciprian Hacman b1be79800b Use host network when running docker 2021-09-24 11:15:13 +03:00
Peter Rifel db5a1251c9
Upgrade terraform to 1.0.7 2021-09-23 22:49:25 -05:00
Kubernetes Prow Robot fbff2a14d9
Merge pull request #12402 from johngmyers/remove-addons-link
Fix link to addons documentation
2021-09-23 19:07:23 -07:00
John Gardiner Myers dacccdef40 Fix link to addons documentation 2021-09-23 14:47:02 -07:00
Reilly Brogan 9c6bf83c93 Update Cilium to 1.10.4
- Release notes available [here](https://github.com/cilium/cilium/releases/tag/v1.10.4)
2021-09-23 13:08:57 -05:00
Reilly Brogan bce435da1c Add bidirectional BPF mount for Cilium >= 1.9.10 or >= 1.10.4
- Cilium versions 1.10.4 and 1.9.10 now auto-mount the bpf file-system automatically
- Also remove redundant capabilities (these are already automatically granted by virtue of this being a privileged container)
2021-09-23 13:01:58 -05:00
Kubernetes Prow Robot 51afc01e08
Merge pull request #12396 from rifelpet/cloud-docs
Fix list of supported cloud providers in CLI docs
2021-09-22 23:29:10 -07:00
Kubernetes Prow Robot 693f997f3c
Merge pull request #12397 from rifelpet/dump-timeout
Decrease connection timeout when dumping logs from instances
2021-09-22 22:37:11 -07:00
Peter Rifel ca044455a3
Remove critical-pod scheduler annotation.
This is no longer recognized in all supported k8s versions (1.16+)

ea07644522/CHANGELOG/CHANGELOG-1.16.md (deprecations-and-removals)
2021-09-22 21:14:50 -05:00
Peter Rifel a6d47b6002
Decrease connection timeout when dumping logs from instances
This is currently over 2 minutes. This change should speed up the end of tests when SSH isn't available.
2021-09-22 21:09:13 -05:00
Peter Rifel 4e96f68497
Fix list of supported cloud providers in CLI docs 2021-09-22 20:49:28 -05:00
Kubernetes Prow Robot defcdedb68
Merge pull request #12366 from justinsb/zone_autocompletion
Support zone autocompletion
2021-09-22 17:45:10 -07:00
Ciprian Hacman 9b65facbea make gen-cli-docs 2021-09-23 03:02:55 +03:00
Kubernetes Prow Robot 74f9a8e2fb
Merge pull request #12342 from eddycharly/irsa-wildcard
feat: add support for wildcard in roles generated for IRSA
2021-09-22 16:09:10 -07:00
Charles-Edouard Brétéché 5f523366d6 feat: add support for wildcard in roles generated for IRSA 2021-09-23 00:24:45 +02:00
Kubernetes Prow Robot f7d1527502
Merge pull request #12392 from olemarkus/fix-channels-target
Make channels target phony
2021-09-22 14:38:34 -07:00
Ole Markus With 343e48d3a2 Make channels target phony 2021-09-22 22:52:51 +02:00
Kubernetes Prow Robot d60469ff09
Merge pull request #12391 from olemarkus/sleep-test
Add sleep to upgrade-ab scenario
2021-09-22 11:30:33 -07:00
Ole Markus With 5cdcff163c Add sleep to upgrade-ab scenario 2021-09-22 19:51:30 +02:00
Kubernetes Prow Robot 2f1c8133d5
Merge pull request #12389 from olemarkus/specific-taints
Add specific taints to dns-controller.
2021-09-22 08:38:02 -07:00
Ole Markus With f06fcc5af2 Add specific taints to dns-controller.
Also set kops-controller as cluster critical, not node critical
2021-09-22 16:40:08 +02:00
Kubernetes Prow Robot c410a6b41f
Merge pull request #12385 from hakman/remove_unneeded_sysctls
Remove unneeded network related sysctls
2021-09-22 00:34:02 -07:00
Stephen Augustus 44bd816911
release-process.md: Update references to artifact promotion
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-09-22 00:57:36 -04:00
Ciprian Hacman ce08ec68df Remove unneeded network related sysctls 2021-09-22 06:51:10 +03:00
Kubernetes Prow Robot 55f8b3ac3d
Merge pull request #12384 from justinsb/gce_open_ipip_for_calico
GCE: When using calico, need to open up ipip protocol
2021-09-21 19:30:01 -07:00
justinsb e2f7895700 GCE: When using calico, need to open up ipip protocol
We need to open up the ipip protocol, which wasn't previously enabled.

Future work could construct the firewall rules in a common library,
and then adapt them to the various clouds.
2021-09-21 21:20:24 -04:00
Kubernetes Prow Robot 6be5fa97d3
Merge pull request #12375 from hakman/go-1.17.1
Update Go to v1.17.1
2021-09-21 09:20:24 -07:00
Kubernetes Prow Robot bb81c744f0
Merge pull request #12379 from rifelpet/dump-k8s-ssh
kubetest2 - fix parsing output from toolbox dump
2021-09-21 07:34:24 -07:00
Peter Rifel e423650857
Fix parsing output of kops toolbox dump 2021-09-21 08:54:52 -05:00
Kubernetes Prow Robot 6de7bce8b6
Merge pull request #12371 from justinsb/gce_source_tags_not_on_additional_ips
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
2021-09-21 06:00:24 -07:00
justinsb 3e83b771d6 GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
Kubernetes Prow Robot be2676076c
Merge pull request #12334 from dntosas/bump-amis
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
2021-09-21 04:52:24 -07:00